last executing test programs: 13m8.290906857s ago: executing program 1 (id=3358): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0xffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{@in=@rand_addr=0xffffffff}, @in6=@empty}}, 0x40}}, 0x20000880) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000041, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)="f1", 0x1}], 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x3c9341, 0x0) 13m5.186256898s ago: executing program 1 (id=3361): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x80000, 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f81b8b549eace336af6d0ca93917b1b57f263f401abd3f48dfb88b09d8297572be101a04d7fb07f5e16856a2e708221411f4809cf3475a9a8f2ca55e392c3adfdc81446d22ffb59e2fb9fec977dc278d284465ba5ee424b389c33aedc572a187edbff76b697456e25917d6e530e133cd4dbf5c36b37bdc514b77ace3b907415cfe266332cde04f9c7d12fa8217fb9dfdecf8634287bb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) brk(0x400000ffc000) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x8, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e24, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000300)='\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(r3, 0x0, 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13m0.722137221s ago: executing program 1 (id=3370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) userfaultfd(0x1) 12m58.615339341s ago: executing program 1 (id=3372): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x80000, 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f81b8b549eace336af6d0ca93917b1b57f263f401abd3f48dfb88b09d8297572be101a04d7fb07f5e16856a2e708221411f4809cf3475a9a8f2ca55e392c3adfdc81446d22ffb59e2fb9fec977dc278d284465ba5ee424b389c33aedc572a187edbff76b697456e25917d6e530e133cd4dbf5c36b37bdc514b77ace3b907415cfe266332cde04f9c7d12fa8217fb9dfdecf8634287bb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) brk(0x400000ffc000) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x8, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e24, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, &(0x7f0000000340)='?', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(r3, 0x0, 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12m53.088778233s ago: executing program 1 (id=3377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b46, &(0x7f00000000c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c0007800800122f000000000c000300686173683a697000050005000a0000000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) 12m47.678366912s ago: executing program 1 (id=3385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x1) close_range(r5, 0xffffffffffffffff, 0x0) 12m31.738935477s ago: executing program 32 (id=3385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x1) close_range(r5, 0xffffffffffffffff, 0x0) 12m20.619836502s ago: executing program 3 (id=3417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x482480, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={r4, 0x5, 0x4, 0x10, 0x28c55b44, 0xf21, 0x9}) r5 = getpid() syz_pidfd_open(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) 12m17.072993879s ago: executing program 3 (id=3420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) userfaultfd(0x1) close_range(r4, 0xffffffffffffffff, 0x0) 12m15.481160498s ago: executing program 3 (id=3421): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="000000000000008d03000000000000850000001b000000b700000000000000950000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000100)={0xffffff31, 0xffffffffffffffda}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x4, &(0x7f0000000380)=ANY=[]) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB='\x00'/20], 0x48) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r7, 0x1) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r7) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fc020000000000000000000000000000fe8000000000000000000000000000089078"], 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f00000000c0)=""/71}, 0x20) 12m14.064374254s ago: executing program 3 (id=3423): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) userfaultfd(0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000003c0)={&(0x7f0000000080)=[{0xd0, 0xc201, 0x0, 0x0}], 0x1}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0xb, 0x85, {0x85, 0x24, "cd8c592b769b630f08bc2054963bbcfcba574b31846bee2e5770cc88256411d1c673cdc8ec18e12d645a50c95c8cb4dfeeb750a477a12841e53e2f44bad7c2f5c9924078e4e7217d7e067cf07d00c96f1efb8d6cee2dda4dfe81f9bafd9112de445a058af237171ac6a48ec4c790401637c1d1576f50735d7a2e012bb5fe71b3bbd204"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x8, 0x6d, "018764257546d4b771f0b4cc2f5a4c1d9caac7033863632374f965e1952cc7caa346faf2abff4f7d43715e89f1a4d4ce7fe3e006ff8693cde879ebd8ec17b1cf8f7eda329e6331a09c05dcc2515767447b36bae7e9968d8d53349462fb925ac597c6285f6231fc2b35d0cf153b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x3, "04f73e"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "a1bf"}, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000440)={0x20, 0x84, 0x3, "9fb45a"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "5878eb"}}) 12m12.01911464s ago: executing program 3 (id=3426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b46, &(0x7f00000000c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c0007800800122f000000000c000300686173683a697000050005000a0000000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 12m7.875665033s ago: executing program 3 (id=3433): socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) socket(0x2, 0x80805, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) close(r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x1, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 11m52.74136423s ago: executing program 33 (id=3433): socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) socket(0x2, 0x80805, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) close(r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x1, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 9.483250314s ago: executing program 5 (id=4912): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 9.276206638s ago: executing program 6 (id=4915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="bbfebbbbbbbb000000000000000201907864010101ac1414bbc1910000000000004beb"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.982832091s ago: executing program 6 (id=4917): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054) 8.3839057s ago: executing program 5 (id=4920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) timer_create(0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) bind$packet(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r8, r7, 0x0, 0x20000023893) 7.044690264s ago: executing program 2 (id=4923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.711078354s ago: executing program 2 (id=4925): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@sha1={0x1, "b822cfdca80434727eb535c73932be24b02ae0cf"}, 0x15, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0xa0042, 0x4d) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 6.695625752s ago: executing program 4 (id=4926): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000600)={0x0, 0xbd63, 0x5}) syz_clone3(&(0x7f0000000540)={0x2000, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000300), {}, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/188, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x308}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x108000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) 6.636638336s ago: executing program 5 (id=4927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000a2651e42d8ec6c8911848f8a16492e2df0a0ba348a40b5dd909876c1e3a8b21e0b45c25c3f336cde8843e2c1cff81ee446e321453830e1d3a4c00f9a93e457993d9d3b5ce670eb9e09882c717f437817095a5e7d599ae3f1a5898e89fe30f3768a7f99ec9faa13ff69e1be6a9e0a133a0f0fb4428221c80d8e03708664d5ef8b117f570ecd2e20a4a9801451df55eb06b3dfdb41e2122910a8af2e6e017a4df953b443b57b18cbb805d7d0d4eb0de242c61254c8662bdabf4bd18ef77f3d5f19fa8e0f1be4cdb968374e3b14035f429a4891d6ec355b104b2b951d65056f65844f749b3bc85817be23308ba17b9cf7293aa030b7f4b9b0b96ab6e98ed9fbd89dc40fa2e4e02857ac0e7f2f3ce1a762b9a1967c02b0d4fc82dc274b4f528fdaa60724663485dc95521e6c2144e0d5005fa7248e5477b03087b16e85fea8f29e2f051730cb719c6a91abd7340561b0b6a3b50b33d7c654cf7e5620aa0ff0e2fb7e1dbfbd33c3868525afc794dfaf060c5311a31b6350b04ab4", @ANYBLOB="ff27070200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1000}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000580)={'U-', 0x25297a43}, 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) 6.599270459s ago: executing program 4 (id=4928): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x37) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 6.357700567s ago: executing program 6 (id=4929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket$inet6(0xa, 0x3, 0x7b) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) 5.568448842s ago: executing program 4 (id=4931): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.986787667s ago: executing program 2 (id=4933): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}], 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905780b7f0000100109050b96dd16ae7c30b2b9c9"], 0x0) 3.653966322s ago: executing program 0 (id=4936): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000600)={0x0, 0xbd63, 0x5}) syz_clone3(&(0x7f0000000540)={0x2000, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000300), {}, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/188, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x308}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x108000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) 3.552614844s ago: executing program 5 (id=4937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) timer_create(0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) bind$packet(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r8, r7, 0x0, 0x20000023893) 3.516315951s ago: executing program 0 (id=4938): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.439279977s ago: executing program 2 (id=4939): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) uname(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 3.427247675s ago: executing program 0 (id=4940): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x496, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8002, 0x18c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3d, 0x2004, @fd_index=0x9, 0x8, 0x0, 0x0, 0x3}) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x49e, 0x0, &(0x7f0000000140), &(0x7f00000006c0)) r3 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x4, 0xfcc0, 0x41, 0x0, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.268538561s ago: executing program 2 (id=4941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.191992209s ago: executing program 6 (id=4942): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) lsetxattr$security_evm(0x0, &(0x7f00000001c0), &(0x7f0000000240)=@sha1={0x1, "b822cfdca80434727eb535c73932be24b02ae0cf"}, 0x15, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0xa0042, 0x4d) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 2.94680309s ago: executing program 2 (id=4943): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@sha1={0x1, "b822cfdca80434727eb535c73932be24b02ae0cf"}, 0x15, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0xa0042, 0x4d) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 2.486990252s ago: executing program 0 (id=4944): epoll_create1(0x0) r0 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.078998621s ago: executing program 6 (id=4945): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054) 1.346460523s ago: executing program 4 (id=4946): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905780b7f0000100109050b96dd16ae7c30b2b9c9"], 0x0) 1.328420068s ago: executing program 0 (id=4947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="ff270702000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1000}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000580)={'U-', 0x25297a43}, 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) 1.188948427s ago: executing program 6 (id=4948): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 484.79556ms ago: executing program 4 (id=4949): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 305.148965ms ago: executing program 5 (id=4950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 250.767553ms ago: executing program 0 (id=4951): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000000) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 50.034336ms ago: executing program 4 (id=4952): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=4953): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000200)=""/38, 0xffffff8c}, {&(0x7f0000000840)=""/6, 0x6}, {&(0x7f0000000880)=""/133, 0x4}, {&(0x7f0000000940)=""/59, 0x3d}], 0x6, &(0x7f0000000a80)=""/197, 0xc5}, 0xeb87}], 0x1, 0x10122, 0x0) kernel console output (not intermixed with test programs): fig 0 has no interface number 0 [ 1494.299406][T10607] usb 4-1: config 0 interface 110 altsetting 2 bulk endpoint 0xB has invalid maxpacket 8 [ 1494.374081][T10607] usb 4-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1494.457576][T10607] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1494.468889][T10607] usb 4-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1494.480876][T10607] usb 4-1: config 0 interface 110 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 1494.512960][T10607] usb 4-1: config 0 interface 110 has no altsetting 0 [ 1494.549848][T17759] bridge_slave_1: left allmulticast mode [ 1494.586509][T17759] bridge_slave_1: left promiscuous mode [ 1494.694472][T17759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.932351][T17759] bridge_slave_0: left allmulticast mode [ 1495.938012][T17759] bridge_slave_0: left promiscuous mode [ 1495.961516][T17759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.574952][T10607] usb 4-1: string descriptor 0 read error: -71 [ 1496.581170][T10607] usb 4-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=75.54 [ 1496.676706][T10607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.636346][T10607] usb 4-1: config 0 descriptor?? [ 1497.721701][T10607] usb 4-1: can't set config #0, error -71 [ 1497.996415][T10607] usb 4-1: USB disconnect, device number 52 [ 1498.696774][T17759] erspan0 (unregistering): left promiscuous mode [ 1500.251443][T20623] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1500.849083][T17759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.546955][T17759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.562000][T17759] bond0 (unregistering): Released all slaves [ 1501.635429][T20599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.643933][T20599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.662160][T20599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.082252][T20634] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1502.102145][T17759] tipc: Disabling bearer [ 1502.107664][T17759] tipc: Left network mode [ 1502.275993][T20637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.284062][T20637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.499191][T20637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1503.730758][T20650] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1505.900865][T20654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.908476][T20654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.407314][T20654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.468100][T20654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.810289][T20685] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1507.821662][T20685] PKCS7: Only support pkcs7_signedData type [ 1509.828613][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.842919][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.891622][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.967377][T20706] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1509.988635][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.368945][T20716] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1511.513671][T20722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1511.588960][T17759] batadv_slave_1: left promiscuous mode [ 1511.598447][T17759] hsr_slave_0: left promiscuous mode [ 1515.742263][T20759] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1517.138580][T20772] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1520.186044][T20785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.194156][T20785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.206694][T20785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1520.598540][T20805] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1521.101642][T20797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1521.193624][T20803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1525.161410][T18437] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1525.455553][T18437] usb 3-1: config 0 has no interfaces? [ 1525.461062][T18437] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1526.049219][T18437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.065163][T18437] usb 3-1: config 0 descriptor?? [ 1526.896870][T18437] usb 3-1: USB disconnect, device number 54 [ 1526.907123][T20857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1526.980727][T20861] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1532.135406][T19748] Bluetooth: hci0: link tx timeout [ 1532.140937][T19748] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1532.642599][T20914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1533.012176][T20922] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1533.417602][T18854] block device autoloading is deprecated and will be removed. [ 1533.989093][T20936] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1534.163960][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1536.496075][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1539.677653][T20977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1540.222510][T20989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3278'. [ 1544.563250][T21022] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1544.826465][T21031] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1544.833251][T21031] PKCS7: Only support pkcs7_signedData type [ 1545.374943][T21032] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1545.385969][T21032] PKCS7: Only support pkcs7_signedData type [ 1545.701834][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.708148][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.023698][T21120] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1555.338045][T21132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.346513][T21132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.386735][T21132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1556.011333][T21134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1560.812911][T21169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1562.815384][T21185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1564.248388][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3318'. [ 1564.257423][T21203] netlink: 'syz.1.3318': attribute type 7 has an invalid length. [ 1564.265720][T21203] netlink: 'syz.1.3318': attribute type 8 has an invalid length. [ 1564.320327][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 1564.356876][T21203] syz_tun: entered promiscuous mode [ 1564.529355][T21203] batadv_slave_1: entered promiscuous mode [ 1564.561498][T21203] erspan0: entered promiscuous mode [ 1564.568898][T21203] debugfs: 'hsr1' already exists in 'hsr' [ 1564.581791][T21203] Cannot create hsr debugfs directory [ 1564.791344][T18435] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1566.648925][T18435] usb 2-1: Using ep0 maxpacket: 16 [ 1566.784960][T15636] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1566.966770][T15636] usb 4-1: config 0 has no interfaces? [ 1566.977468][T15636] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1567.007203][T15636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.069426][T15636] usb 4-1: config 0 descriptor?? [ 1568.642209][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1568.940793][T18435] usb 2-1: device descriptor read/all, error -71 [ 1569.161625][T15636] usb 4-1: USB disconnect, device number 53 [ 1569.175425][T21223] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1569.227105][T18854] block device autoloading is deprecated and will be removed. [ 1570.007265][T21235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1571.153136][T21247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1571.925817][T21257] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1573.113158][T21270] siw: device registration error -23 [ 1573.200639][T21272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1574.718390][T21278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1574.727537][T21278] netlink: 'syz.2.3333': attribute type 7 has an invalid length. [ 1574.735902][T21278] netlink: 'syz.2.3333': attribute type 8 has an invalid length. [ 1574.743752][T21278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1574.760732][T21278] syz_tun: entered promiscuous mode [ 1574.767993][T21278] batadv_slave_1: entered promiscuous mode [ 1574.797026][T21278] erspan0: entered promiscuous mode [ 1574.806276][T21278] debugfs: 'hsr1' already exists in 'hsr' [ 1574.812510][T21278] Cannot create hsr debugfs directory [ 1574.818452][T21278] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 1575.155810][T18435] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1576.893547][T18435] usb 3-1: Using ep0 maxpacket: 16 [ 1577.419076][T21292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1577.419077][T18435] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1577.419104][T18435] usb 3-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 1577.542837][T18435] usb 3-1: config 0 has no interface number 0 [ 1577.632389][T18435] usb 3-1: config 0 interface 110 altsetting 2 bulk endpoint 0xB has invalid maxpacket 8 [ 1577.680740][T18435] usb 3-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1577.694900][T18435] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1577.712480][T18435] usb 3-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1577.736885][T18435] usb 3-1: config 0 interface 110 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 1578.917653][T18435] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1579.994343][T21310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1580.775552][T21308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1581.820484][T18435] usb 3-1: string descriptor 0 read error: -71 [ 1581.831721][T18435] usb 3-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=75.54 [ 1581.850743][T18435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.865258][T18435] usb 3-1: config 0 descriptor?? [ 1581.877893][T18435] usb 3-1: can't set config #0, error -71 [ 1581.894459][T18435] usb 3-1: USB disconnect, device number 55 [ 1582.675523][T21336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1586.958750][T15636] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1587.205672][T15636] usb 3-1: config 0 has no interfaces? [ 1587.211165][T15636] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1587.251537][T15636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.411020][T15636] usb 3-1: config 0 descriptor?? [ 1588.685365][T15636] usb 3-1: can't set config #0, error -71 [ 1588.715457][T15636] usb 3-1: USB disconnect, device number 56 [ 1589.091390][T18435] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1591.036512][T18435] usb 4-1: config 0 has no interfaces? [ 1591.049985][T18435] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1591.073461][T18435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.083636][T18435] usb 4-1: config 0 descriptor?? [ 1591.581325][T10607] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1591.852155][T21396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1591.881925][T18435] usb 4-1: USB disconnect, device number 54 [ 1592.004361][T10607] usb 2-1: config 0 has no interfaces? [ 1592.012333][T10607] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1592.039434][T10607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.252444][T10607] usb 2-1: config 0 descriptor?? [ 1592.781493][T21404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1594.120103][T10607] usb 2-1: USB disconnect, device number 74 [ 1594.173481][T20138] block device autoloading is deprecated and will be removed. [ 1594.334040][T18854] block device autoloading is deprecated and will be removed. [ 1598.141997][T21448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1600.591346][T10607] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1600.767209][T10607] usb 3-1: config 0 has no interfaces? [ 1600.774151][T10607] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1600.790275][T10607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.823657][T10607] usb 3-1: config 0 descriptor?? [ 1606.326490][T18854] block device autoloading is deprecated and will be removed. [ 1606.737689][T18435] usb 3-1: USB disconnect, device number 57 [ 1607.142932][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.149786][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.035947][T21522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3382'. [ 1609.047295][T21522] netem: invalid attributes len -4 [ 1609.056992][T21522] netem: change failed [ 1609.283587][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1613.709334][T21539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1613.732207][T21539] netem: invalid attributes len -4 [ 1613.737341][T21539] netem: change failed [ 1620.332585][T18854] block device autoloading is deprecated and will be removed. [ 1621.859001][T21587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1628.521833][T21617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1630.432922][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1630.443389][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1630.451172][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1630.459894][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1630.469535][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1630.501466][T21626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1631.155379][T21627] lo speed is unknown, defaulting to 1000 [ 1632.369415][T20138] syz_tun (unregistering): left promiscuous mode [ 1632.669641][ T51] Bluetooth: hci1: command tx timeout [ 1634.512030][T21649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1634.760902][ T51] Bluetooth: hci1: command tx timeout [ 1636.446636][T21627] chnl_net:caif_netlink_parms(): no params data found [ 1636.554180][T21660] syzkaller1: entered promiscuous mode [ 1636.587489][T21660] syzkaller1: entered allmulticast mode [ 1636.768058][ T1169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.801592][ T51] Bluetooth: hci1: command tx timeout [ 1638.676011][ T1169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.974458][ T51] Bluetooth: hci1: command tx timeout [ 1640.812752][ T1169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.226369][T21627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.302215][T21627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.309438][T21627] bridge_slave_0: entered allmulticast mode [ 1642.512989][T21627] bridge_slave_0: entered promiscuous mode [ 1645.313880][ T1169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.398810][T21627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.411435][T21627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.419248][T21627] bridge_slave_1: entered allmulticast mode [ 1647.596614][T21729] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1647.613293][T21627] bridge_slave_1: entered promiscuous mode [ 1647.637663][T21729] PKCS7: Only support pkcs7_signedData type [ 1648.635767][T21627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.717387][T21627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.020371][ T1169] bridge_slave_1: left allmulticast mode [ 1649.048451][ T1169] bridge_slave_1: left promiscuous mode [ 1649.054264][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.066045][ T1169] bridge_slave_0: left allmulticast mode [ 1649.395567][ T1169] bridge_slave_0: left promiscuous mode [ 1649.430094][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.569585][ T1169] erspan0 (unregistering): left promiscuous mode [ 1652.408496][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.437221][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.456196][ T1169] bond0 (unregistering): Released all slaves [ 1652.482368][T21627] team0: Port device team_slave_0 added [ 1652.507009][T21759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1652.581491][T19606] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1654.491395][T19606] usb 4-1: Using ep0 maxpacket: 8 [ 1654.508486][T19606] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1654.532960][T19606] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 1654.541147][T19606] usb 4-1: config 8 has no interface number 0 [ 1654.577616][T19606] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 1654.930877][T19606] usb 4-1: config 8 interface 24 has no altsetting 0 [ 1655.113025][T21770] syzkaller1: entered promiscuous mode [ 1655.118973][T21770] syzkaller1: entered allmulticast mode [ 1657.525539][T21627] team0: Port device team_slave_1 added [ 1657.564767][T21784] siw: device registration error -23 [ 1657.813424][T21627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.830780][T21627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.919059][T21627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1659.865989][ T1169] batadv_slave_1: left promiscuous mode [ 1660.129734][ T1169] hsr_slave_0: left promiscuous mode [ 1660.193250][T19606] usb 4-1: string descriptor 0 read error: -32 [ 1660.199490][T19606] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1660.201939][ T1169] hsr_slave_1: left promiscuous mode [ 1660.222374][T19606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.242040][T19606] usb 4-1: can't set config #8, error -32 [ 1660.266206][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.285934][T15636] usb 4-1: USB disconnect, device number 55 [ 1660.321872][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.574562][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.592534][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.709876][ T1169] veth1_macvtap: left promiscuous mode [ 1660.724710][ T1169] veth0_macvtap: left promiscuous mode [ 1660.736898][ T1169] veth1_vlan: left promiscuous mode [ 1660.745216][ T1169] veth0_vlan: left promiscuous mode [ 1661.164783][T21820] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1662.362259][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 1663.594563][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 1663.655377][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 1665.155940][T21627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.185497][T21627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.334198][T21627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.815997][T21823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1665.890309][T21829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1666.489688][T21838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1667.202589][T21627] hsr_slave_0: entered promiscuous mode [ 1667.209185][T21627] hsr_slave_1: entered promiscuous mode [ 1667.241852][T15636] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1667.252222][T21627] debugfs: 'hsr0' already exists in 'hsr' [ 1667.310426][T21627] Cannot create hsr debugfs directory [ 1667.318760][T21856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1667.521366][T15636] usb 3-1: Using ep0 maxpacket: 16 [ 1667.907351][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1667.928680][T19748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1667.943797][T19748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1667.956095][T19748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1667.966508][T19748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1667.974836][T19748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1668.006066][T21852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.022210][T21852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.148055][T12475] syz_tun (unregistering): left promiscuous mode [ 1668.458689][T21858] lo speed is unknown, defaulting to 1000 [ 1668.566134][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.572639][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.436001][T21858] chnl_net:caif_netlink_parms(): no params data found [ 1669.460290][T21627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1669.483562][T21627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1669.738064][T21627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1669.748136][T21627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1669.807788][T15636] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1669.900977][T15636] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1669.916352][T15636] usb 3-1: can't read configurations, error -71 [ 1670.001366][T19748] Bluetooth: hci0: command tx timeout [ 1670.115984][T21858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.124126][T21858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.443308][T21858] bridge_slave_0: entered allmulticast mode [ 1670.474581][T21858] bridge_slave_0: entered promiscuous mode [ 1670.493484][T21858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.505259][T21858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.513052][T21858] bridge_slave_1: entered allmulticast mode [ 1670.602677][T21858] bridge_slave_1: entered promiscuous mode [ 1670.685797][ T1169] bridge_slave_1: left allmulticast mode [ 1670.691641][ T1169] bridge_slave_1: left promiscuous mode [ 1670.697367][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.855889][ T1169] bridge_slave_0: left allmulticast mode [ 1670.934251][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3456'. [ 1670.991939][ T1169] bridge_slave_0: left promiscuous mode [ 1670.997707][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.664648][ T1169] erspan0 (unregistering): left promiscuous mode [ 1672.106550][T19748] Bluetooth: hci0: command tx timeout [ 1672.541338][T10607] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1672.591159][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.601065][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.619200][ T1169] bond0 (unregistering): Released all slaves [ 1672.887762][T21858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.931351][T10607] usb 3-1: Using ep0 maxpacket: 16 [ 1672.992055][T21858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.524745][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1673.676713][T21902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.702821][T21902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.193092][T19748] Bluetooth: hci0: command tx timeout [ 1674.244046][T21915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1674.273158][T21858] team0: Port device team_slave_0 added [ 1674.819400][T21858] team0: Port device team_slave_1 added [ 1674.905238][T21858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.922870][T21858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.948822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.964336][T10607] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1675.014933][T21858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.015068][T10607] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1675.047340][T10607] usb 3-1: can't read configurations, error -71 [ 1675.078420][T21627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.087238][T21858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.094675][T21858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.120570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1675.136293][T21858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.625536][T21929] siw: device registration error -23 [ 1675.939945][T21627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.088002][T21720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.095240][T21720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.149023][T21858] hsr_slave_0: entered promiscuous mode [ 1676.189647][T21858] hsr_slave_1: entered promiscuous mode [ 1676.196439][T21858] debugfs: 'hsr0' already exists in 'hsr' [ 1676.203563][T21858] Cannot create hsr debugfs directory [ 1676.241443][T19748] Bluetooth: hci0: command tx timeout [ 1677.179420][T21720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.186583][T21720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.107142][T21944] siw: device registration error -23 [ 1678.165546][T21942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1678.285831][ T1169] batadv_slave_1: left promiscuous mode [ 1678.312944][ T1169] hsr_slave_0: left promiscuous mode [ 1682.780367][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1685.171884][T21977] siw: device registration error -23 [ 1685.856755][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 1686.145167][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 1687.576600][T18435] lo speed is unknown, defaulting to 1000 [ 1687.601800][T18435] syz2: Port: 1 Link DOWN [ 1687.635935][T21627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1689.273105][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1689.274560][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3483'. [ 1689.358675][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1689.385375][T21858] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1689.416366][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1689.427704][T21858] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1689.441641][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1689.594892][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1689.892860][T21858] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1690.036657][T21858] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1691.841360][ T51] Bluetooth: hci1: command tx timeout [ 1693.923008][ T51] Bluetooth: hci1: command tx timeout [ 1694.325497][T22041] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1694.333440][T22041] PKCS7: Only support pkcs7_signedData type [ 1696.011923][ T51] Bluetooth: hci1: command tx timeout [ 1696.227057][T21720] bridge_slave_1: left allmulticast mode [ 1696.251137][T21720] bridge_slave_1: left promiscuous mode [ 1696.269884][T21720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.315964][T21720] bridge_slave_0: left allmulticast mode [ 1696.321972][T21720] bridge_slave_0: left promiscuous mode [ 1696.327646][T21720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.091454][ T51] Bluetooth: hci1: command tx timeout [ 1698.171126][T21720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.186270][T21720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.198195][T21720] bond0 (unregistering): Released all slaves [ 1698.235872][T21858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.248418][T22065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1698.362499][T22070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.370123][T22070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.383845][T22070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1698.443832][T21858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.517369][T21720] hsr_slave_0: left promiscuous mode [ 1698.547251][T21720] hsr_slave_1: left promiscuous mode [ 1698.562432][T21720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.622363][T21720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1699.300179][T22086] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1699.333409][T22086] PKCS7: Only support pkcs7_signedData type [ 1702.062789][T21720] team0 (unregistering): Port device team_slave_1 removed [ 1702.178828][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1702.203616][T21720] team0 (unregistering): Port device team_slave_0 removed [ 1702.571803][T15636] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1702.690822][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.697932][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.729633][T22007] chnl_net:caif_netlink_parms(): no params data found [ 1702.742062][T22106] lo speed is unknown, defaulting to 1000 [ 1702.774573][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.781763][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.794845][T15636] usb 1-1: config 0 has no interfaces? [ 1702.803796][T15636] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1702.814624][T15636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.827369][T15636] usb 1-1: Product: syz [ 1702.835439][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3502'. [ 1702.844461][T15636] usb 1-1: Manufacturer: syz [ 1702.849308][T15636] usb 1-1: SerialNumber: syz [ 1702.856978][T15636] usb 1-1: config 0 descriptor?? [ 1702.866382][T22106] lo speed is unknown, defaulting to 1000 [ 1702.910295][ T30] audit: type=1400 audit(1758857126.324:553): avc: denied { unmount } for pid=22111 comm="syz.2.3502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1702.941951][T22106] lo speed is unknown, defaulting to 1000 [ 1702.953724][T22106] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1703.044792][T22106] lo speed is unknown, defaulting to 1000 [ 1703.109028][T22106] lo speed is unknown, defaulting to 1000 [ 1703.201140][T22106] lo speed is unknown, defaulting to 1000 [ 1703.274748][T22007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.283468][T22007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.291131][T22007] bridge_slave_0: entered allmulticast mode [ 1703.305690][T22007] bridge_slave_0: entered promiscuous mode [ 1703.323432][T22106] lo speed is unknown, defaulting to 1000 [ 1703.330065][T22106] lo speed is unknown, defaulting to 1000 [ 1703.345494][T22007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.356485][T22007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.388800][T22007] bridge_slave_1: entered allmulticast mode [ 1703.400616][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1703.420804][T22007] bridge_slave_1: entered promiscuous mode [ 1703.589430][T22007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.602044][T22007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.143097][T22007] team0: Port device team_slave_0 added [ 1704.156713][T22007] team0: Port device team_slave_1 added [ 1704.186328][T22007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.194842][T22007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.224825][T22007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.246095][ T30] audit: type=1400 audit(1758857127.664:554): avc: denied { module_request } for pid=21858 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1704.246411][T22007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.268227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.354481][T22007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.384394][T22007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.558456][T18202] usb 1-1: USB disconnect, device number 59 [ 1704.587329][T22007] hsr_slave_0: entered promiscuous mode [ 1704.612570][T22007] hsr_slave_1: entered promiscuous mode [ 1705.885075][T22139] bridge0: port 3(team0) entered blocking state [ 1705.891464][T22139] bridge0: port 3(team0) entered disabled state [ 1705.897829][T22139] team0: entered allmulticast mode [ 1705.903033][T22139] team_slave_0: entered allmulticast mode [ 1705.908743][T22139] team_slave_1: entered allmulticast mode [ 1705.915616][T22139] team0: entered promiscuous mode [ 1705.920657][T22139] team_slave_0: entered promiscuous mode [ 1705.926583][T22139] team_slave_1: entered promiscuous mode [ 1706.297927][T21858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.664439][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1706.962269][T22158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1706.978232][T22158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.478175][T22158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1707.772798][T15636] lo speed is unknown, defaulting to 1000 [ 1707.780314][T15636] syz2: Port: 1 Link DOWN [ 1707.962059][T22171] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1708.166888][T21858] veth0_vlan: entered promiscuous mode [ 1708.372295][T21858] veth1_vlan: entered promiscuous mode [ 1710.409347][T21858] veth0_macvtap: entered promiscuous mode [ 1710.418972][T21858] veth1_macvtap: entered promiscuous mode [ 1710.488399][T22007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1710.510461][T22007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1710.533068][T22007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1710.544032][T22007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1710.570405][T21858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.607574][T21858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.633642][T22102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.645735][T22102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.671691][T22102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.799071][T22102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.764652][T22196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.940207][T22007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1712.091430][T18437] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1712.139810][T22102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.174831][T22102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.208438][T22007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.277743][T18437] usb 1-1: config 0 has no interfaces? [ 1712.292704][T18437] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1712.304425][T18437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.313251][T18437] usb 1-1: Product: syz [ 1712.317399][T18437] usb 1-1: Manufacturer: syz [ 1712.341307][T18437] usb 1-1: SerialNumber: syz [ 1712.348230][T18437] usb 1-1: config 0 descriptor?? [ 1712.352731][T21720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.379071][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.386212][T13946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.393792][T21720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.192806][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.199921][T13946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1713.228527][T22212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.236272][T22212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1713.259954][T22212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1713.291401][T15636] lo speed is unknown, defaulting to 1000 [ 1713.297151][T15636] syz2: Port: 1 Link ACTIVE [ 1713.498808][T22007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1714.111547][T18435] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1714.268453][T22235] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1714.275339][T22235] PKCS7: Only support pkcs7_signedData type [ 1714.532143][T10607] usb 1-1: USB disconnect, device number 60 [ 1714.599572][T18435] usb 7-1: config 0 has no interfaces? [ 1714.644016][T18435] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1714.662189][T22007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.668969][T18435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.696726][T18435] usb 7-1: Product: syz [ 1715.030290][T18435] usb 7-1: Manufacturer: syz [ 1715.041510][T18435] usb 7-1: SerialNumber: syz [ 1715.062074][T18435] usb 7-1: config 0 descriptor?? [ 1715.976212][T22007] veth0_vlan: entered promiscuous mode [ 1715.994657][T22007] veth1_vlan: entered promiscuous mode [ 1716.314986][T22261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 1716.604626][T22007] veth0_macvtap: entered promiscuous mode [ 1716.628692][T22007] veth1_macvtap: entered promiscuous mode [ 1716.648003][T22007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.698769][T18202] usb 7-1: USB disconnect, device number 2 [ 1716.724299][T22007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.802333][T13946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.822899][T13946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.847572][T13946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.950989][T13946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.030929][T13946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.044085][T13946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.099884][T13946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.118797][T13946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.771549][T22278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1722.061396][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3531'. [ 1722.812496][T22306] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1722.955795][T22308] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1723.020519][T22310] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1723.184396][T22310] PKCS7: Only support pkcs7_signedData type [ 1723.931478][T22318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1728.161067][T22348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1728.248027][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1728.330724][T22352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1728.341975][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1728.350880][T22352] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1729.604531][T22359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1729.641903][T22364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1730.284306][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.291352][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.965598][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 1731.373792][T22402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1731.405087][T22402] netem: invalid attributes len -4 [ 1731.430515][T22402] netem: change failed [ 1731.854756][T22405] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1733.412034][T22405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1733.426850][T22405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1733.438288][T22405] bond0 (unregistering): Released all slaves [ 1734.133716][T22408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.141076][T22408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.306865][T22408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1734.353043][T22408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1734.685761][T22413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1735.325563][T21720] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.367613][T21720] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.589618][T21720] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.601406][T21720] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.954297][T22457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1737.963514][T22457] netlink: 'syz.0.3565': attribute type 7 has an invalid length. [ 1737.971381][T22457] netlink: 'syz.0.3565': attribute type 8 has an invalid length. [ 1737.979215][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1738.004958][T18202] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1738.143799][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1738.232866][T18202] usb 6-1: config 0 has no interfaces? [ 1738.281370][T18202] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1738.290411][T18202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.336720][T18202] usb 6-1: Product: syz [ 1738.346439][T18202] usb 6-1: Manufacturer: syz [ 1738.358282][T18202] usb 6-1: SerialNumber: syz [ 1738.379859][T18202] usb 6-1: config 0 descriptor?? [ 1739.828365][T19606] usb 6-1: USB disconnect, device number 2 [ 1742.081962][T22488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1742.523739][T22494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1742.535684][T22494] netem: invalid attributes len -4 [ 1743.052105][T22494] netem: change failed [ 1743.086663][T22495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1743.373301][T22502] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1743.461957][T22499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.469519][T22499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.828591][T22508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.063137][T22511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3576'. [ 1745.282786][T22499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.299662][T22499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.989306][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3578'. [ 1746.045022][T22502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1746.097741][T22502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1746.420649][T22502] bond0 (unregistering): Released all slaves [ 1746.441831][T22102] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.497485][T22102] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.578241][T22102] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.613857][T22528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3580'. [ 1746.641208][T22528] netem: invalid attributes len -4 [ 1746.659485][T22528] netem: change failed [ 1746.870078][T22102] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.011447][ T30] audit: type=1400 audit(1758857170.404:555): avc: denied { create } for pid=22533 comm="syz.5.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1747.086317][T22528] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3580'. [ 1747.096349][T22542] siw: device registration error -23 [ 1749.434347][T22569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1752.374791][T22600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1752.464934][T22600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1752.554105][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1752.982779][T22604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1754.048999][T22616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.096770][T22616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.451636][T22616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1754.991400][T22618] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1755.404105][T22632] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3599'. [ 1755.413429][T22632] netlink: 'syz.6.3599': attribute type 7 has an invalid length. [ 1755.421167][T22632] netlink: 'syz.6.3599': attribute type 8 has an invalid length. [ 1755.429021][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3599'. [ 1756.118210][T22635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1756.127395][T22635] netem: invalid attributes len -4 [ 1756.134786][T22635] netem: change failed [ 1757.001833][T22643] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1757.114177][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1757.675247][T22655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.691032][T22655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1757.918176][T22655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1757.944546][T22657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1758.014119][T22657] netem: invalid attributes len -4 [ 1758.224278][T22657] netem: change failed [ 1758.443744][T22663] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1759.265289][T22670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1760.993095][T22663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.032077][T22663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.049838][T22663] bond0 (unregistering): Released all slaves [ 1761.080866][T22668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1761.164953][T22674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1761.293518][T22683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3609'. [ 1761.357676][T22683] netem: invalid attributes len -4 [ 1761.366409][T22683] netem: change failed [ 1761.425699][T22687] netlink: 'syz.6.3610': attribute type 13 has an invalid length. [ 1761.945282][T22694] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3609'. [ 1763.052872][T22710] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1764.106788][T22694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1764.136226][T22694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1764.185054][T22694] bond0 (unregistering): Released all slaves [ 1764.249493][T22703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1764.339050][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3616'. [ 1765.260338][T22732] bridge0: port 3(team0) entered blocking state [ 1765.267147][T22732] bridge0: port 3(team0) entered disabled state [ 1765.273606][T22732] team0: entered allmulticast mode [ 1765.278714][T22732] team_slave_0: entered allmulticast mode [ 1765.284473][T22732] team_slave_1: entered allmulticast mode [ 1765.292217][T22732] team0: entered promiscuous mode [ 1765.297248][T22732] team_slave_0: entered promiscuous mode [ 1765.303116][T22732] team_slave_1: entered promiscuous mode [ 1765.508114][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3620'. [ 1765.765240][T22743] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3621'. [ 1765.940817][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1766.190361][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880323aec00: rx timeout, send abort [ 1766.630223][ T30] audit: type=1400 audit(1758857190.034:556): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1766.690424][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880323ac000: rx timeout, send abort [ 1766.699948][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880323aec00: abort rx timeout. Force session deactivation [ 1766.741853][ T30] audit: type=1400 audit(1758857190.034:557): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.820417][ T30] audit: type=1400 audit(1758857190.034:558): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.858395][ T30] audit: type=1400 audit(1758857190.034:559): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.939529][T22760] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1767.198674][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880323ac000: abort rx timeout. Force session deactivation [ 1767.427105][ T30] audit: type=1400 audit(1758857190.034:560): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1767.479546][ T30] audit: type=1400 audit(1758857190.044:561): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1767.553616][ T30] audit: type=1400 audit(1758857190.044:562): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1769.463044][T22775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1773.438990][T22816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1775.464419][T22833] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3641'. [ 1775.477484][T22833] netem: invalid attributes len -4 [ 1775.483751][T22833] netem: change failed [ 1775.826437][T22836] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3641'. [ 1775.903224][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1777.503030][T22836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.691182][T22836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1778.226684][T22836] bond0 (unregistering): Released all slaves [ 1778.283200][T22853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1779.285786][T22876] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1779.540626][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3651'. [ 1784.921813][T22915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1791.482018][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.488468][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.482231][T22976] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3670'. [ 1793.492402][T22974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1793.683115][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1801.256919][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1802.534292][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3682'. [ 1803.739908][T23034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1804.035707][T23040] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1807.033999][T23064] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3689'. [ 1807.425108][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1809.790037][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'. [ 1810.081175][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1810.364992][T23077] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1816.112820][T23120] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1818.248788][T23142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3709'. [ 1820.340057][T23168] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1820.525866][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3711'. [ 1823.325748][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3716'. [ 1824.241752][T23193] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1824.248541][T23193] PKCS7: Only support pkcs7_signedData type [ 1828.791510][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3725'. [ 1829.084262][T23218] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1829.569131][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3727'. [ 1832.610103][T23249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1834.541797][T23260] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1834.773228][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 1834.933167][T23274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1835.063151][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1835.072114][T23274] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1838.554805][T23287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1838.696186][T23292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1838.872371][T23297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1838.883295][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3742'. [ 1839.375519][T23297] netem: invalid attributes len -4 [ 1839.391389][T23297] netem: change failed [ 1839.633929][T23308] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1841.570641][T23332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3750'. [ 1841.587952][T23332] netem: invalid attributes len -4 [ 1841.594390][T23332] netem: change failed [ 1841.900730][T23335] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3750'. [ 1842.568902][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3751'. [ 1846.080233][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 1846.101020][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1848.201603][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3761'. [ 1848.436455][T23396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1848.521232][T23396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1850.070167][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3763'. [ 1850.585857][T23419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3766'. [ 1850.852199][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1853.304114][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.312623][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.400934][T23430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1856.175826][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1858.263443][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1859.090155][T23479] bridge0: port 3(team0) entered blocking state [ 1859.096840][T23479] bridge0: port 3(team0) entered disabled state [ 1859.103485][T23479] team0: entered allmulticast mode [ 1859.108630][T23479] team_slave_0: entered allmulticast mode [ 1859.114422][T23479] team_slave_1: entered allmulticast mode [ 1859.126555][T23479] team0: entered promiscuous mode [ 1859.131883][T23479] team_slave_0: entered promiscuous mode [ 1859.139319][T23479] team_slave_1: entered promiscuous mode [ 1859.374430][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3780'. [ 1862.882988][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3786'. [ 1862.919053][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'. [ 1863.130161][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1865.212654][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3791'. [ 1865.251422][T19748] Bluetooth: hci1: command 0x0406 tx timeout [ 1866.701182][T23554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3793'. [ 1868.738717][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1868.959940][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1870.229185][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1871.120152][T23603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1872.031980][T23607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1872.393917][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1872.837360][T23618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3806'. [ 1875.735206][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3810'. [ 1876.659607][T23643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1877.177212][T23652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3812'. [ 1878.618048][T23664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3815'. [ 1878.628978][T23664] netlink: 'syz.2.3815': attribute type 7 has an invalid length. [ 1878.650387][T23664] netlink: 'syz.2.3815': attribute type 8 has an invalid length. [ 1878.661508][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'. [ 1880.172400][T23677] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1883.461562][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3821'. [ 1887.672775][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1888.067310][T23732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3827'. [ 1888.076572][T23732] netem: invalid attributes len -4 [ 1888.083602][T23732] netem: change failed [ 1888.323710][T23735] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3827'. [ 1891.091161][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1891.106088][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3834'. [ 1892.556131][T23764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1892.574157][T23764] netem: invalid attributes len -4 [ 1892.579424][T23764] netem: change failed [ 1892.805157][T23769] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1894.055458][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3838'. [ 1894.514897][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3840'. [ 1898.508362][T23812] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1898.515314][T23812] PKCS7: Only support pkcs7_signedData type [ 1898.733028][T23817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3844'. [ 1898.926841][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1900.887277][T23831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3849'. [ 1904.475686][T23873] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1904.482455][T23873] PKCS7: Only support pkcs7_signedData type [ 1905.182290][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 1906.522038][T23892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3862'. [ 1909.845671][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1912.144726][T10607] lo speed is unknown, defaulting to 1000 [ 1912.150555][T10607] syz2: Port: 1 Link DOWN [ 1913.045136][T23941] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1913.052080][T23941] PKCS7: Only support pkcs7_signedData type [ 1914.922817][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.929134][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.580007][T23973] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1917.150935][T23979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1917.181467][T23979] netem: invalid attributes len -4 [ 1917.186719][T23979] netem: change failed [ 1917.699497][T23988] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1918.461730][T23992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1918.475658][T23992] netem: invalid attributes len -4 [ 1918.623102][T23992] netem: change failed [ 1920.558659][T24001] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1920.900524][T24003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1920.915182][T24003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1920.931026][ T5845] lo speed is unknown, defaulting to 1000 [ 1920.941315][ T5845] syz2: Port: 1 Link ACTIVE [ 1921.745536][T24021] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1921.820046][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3889'. [ 1925.763033][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1932.978457][T24092] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1932.989439][T24092] PKCS7: Only support pkcs7_signedData type [ 1934.879622][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3911'. [ 1935.178400][T24120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1935.254433][T24120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1939.165298][T24137] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1939.191383][T24137] PKCS7: Only support pkcs7_signedData type [ 1943.461323][T24166] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1943.468116][T24166] PKCS7: Only support pkcs7_signedData type [ 1943.821911][T24170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1944.054956][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1948.449769][T24197] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.3929'. [ 1948.638988][T24201] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3930'. [ 1949.478101][T24213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1951.960037][T24237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1954.655433][T24244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1954.708310][T24244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1954.724393][T24244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1954.733357][T24244] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1956.804019][T24271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'. [ 1958.801897][T24281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1960.721348][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3948'. [ 1961.843332][T24299] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1962.876724][T24309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1964.303194][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'. [ 1973.352872][T24377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3966'. [ 1975.338036][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1975.366946][T24414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1975.459932][T24414] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1975.765326][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.771683][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.761150][T24436] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.3980'. [ 1979.607384][T24454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1982.013468][T24480] siw: device registration error -23 [ 1982.310786][T24488] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1983.708674][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1983.730716][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1984.039816][T24519] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1985.179029][T24525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4001'. [ 1989.501565][T24551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1991.031194][T24551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1993.688844][T24564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4012'. [ 1993.741496][T24564] netem: invalid attributes len -4 [ 1993.757261][T24564] netem: change failed [ 1994.673077][T24580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 1994.695821][T24585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4015'. [ 1995.670536][T24596] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.4017'. [ 1996.013891][T24601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4018'. [ 1996.677809][T24607] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.4019'. [ 2002.385166][T24639] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2002.392079][T24639] PKCS7: Only support pkcs7_signedData type [ 2005.307726][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4030'. [ 2013.517982][T24690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'. [ 2020.439959][T24734] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2020.446803][T24734] PKCS7: Only support pkcs7_signedData type [ 2023.514927][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4051'. [ 2023.536360][T24757] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.4052'. [ 2026.381150][T24778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2027.102305][T24780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2029.030013][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4059'. [ 2032.236566][T24816] bridge0: port 3(team0) entered blocking state [ 2032.243501][T24816] bridge0: port 3(team0) entered disabled state [ 2032.250905][T24816] team0: entered allmulticast mode [ 2032.256173][T24816] team_slave_0: entered allmulticast mode [ 2032.262011][T24816] team_slave_1: entered allmulticast mode [ 2032.280164][T24816] team0: entered promiscuous mode [ 2032.285350][T24816] team_slave_0: entered promiscuous mode [ 2032.292330][T24816] team_slave_1: entered promiscuous mode [ 2032.859574][T24819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4067'. [ 2033.042990][T24819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2034.218147][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4067'. [ 2034.227090][T24819] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 2034.437770][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4071'. [ 2035.556345][T24852] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.4072'. [ 2038.493233][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.499540][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.780435][T24867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2040.973336][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4079'. [ 2041.083246][T24876] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.4078'. [ 2041.098638][T24876] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 2041.262104][T24884] netlink: 65536 bytes leftover after parsing attributes in process `syz.4.4080'. [ 2044.067952][T24905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2052.991055][T24971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 2053.502646][T24980] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.4101'. [ 2061.088748][T25036] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.4113'. [ 2061.140228][T25036] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!)\' [ 2061.150446][T25036] CPU: 0 UID: 0 PID: 25036 Comm: syz.2.4113 Not tainted syzkaller #0 PREEMPT(full) [ 2061.150484][T25036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2061.150499][T25036] Call Trace: [ 2061.150507][T25036] [ 2061.150515][T25036] dump_stack_lvl+0x16c/0x1f0 [ 2061.150551][T25036] sysfs_warn_dup+0x7f/0xa0 [ 2061.150577][T25036] sysfs_do_create_link_sd+0x124/0x140 [ 2061.150603][T25036] sysfs_create_link+0x61/0xc0 [ 2061.150626][T25036] device_add+0x62c/0x1aa0 [ 2061.150654][T25036] ? __pfx_device_add+0x10/0x10 [ 2061.150675][T25036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2061.150695][T25036] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2061.150720][T25036] wiphy_register+0x1df4/0x29f0 [ 2061.150741][T25036] ? netdev_run_todo+0x864/0x1320 [ 2061.150762][T25036] ? __dev_printk+0x230/0x270 [ 2061.150784][T25036] ? __pfx_wiphy_register+0x10/0x10 [ 2061.150812][T25036] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2061.150836][T25036] ieee80211_register_hw+0x2546/0x4120 [ 2061.150867][T25036] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2061.150894][T25036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2061.150913][T25036] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2061.150931][T25036] ? __hrtimer_setup+0x176/0x280 [ 2061.150951][T25036] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2061.150987][T25036] ? trace_kmalloc+0x2b/0xd0 [ 2061.151005][T25036] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2061.151024][T25036] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2061.151046][T25036] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2061.151070][T25036] ? __asan_memcpy+0x3c/0x60 [ 2061.151096][T25036] hwsim_new_radio_nl+0xb51/0x12c0 [ 2061.151122][T25036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2061.151153][T25036] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2061.151177][T25036] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2061.151205][T25036] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2061.151233][T25036] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2061.151271][T25036] ? bpf_lsm_capable+0x9/0x10 [ 2061.151296][T25036] ? security_capable+0x7e/0x260 [ 2061.151317][T25036] ? ns_capable+0xd7/0x110 [ 2061.151338][T25036] genl_rcv_msg+0x55c/0x800 [ 2061.151363][T25036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2061.151385][T25036] ? irqentry_exit+0x3b/0x90 [ 2061.151405][T25036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2061.151437][T25036] netlink_rcv_skb+0x155/0x420 [ 2061.151457][T25036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2061.151489][T25036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2061.151528][T25036] genl_rcv+0x28/0x40 [ 2061.151551][T25036] netlink_unicast+0x5aa/0x870 [ 2061.151579][T25036] ? __pfx_netlink_unicast+0x10/0x10 [ 2061.151611][T25036] netlink_sendmsg+0x8d1/0xdd0 [ 2061.151638][T25036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2061.151669][T25036] ____sys_sendmsg+0xa98/0xc70 [ 2061.151693][T25036] ? copy_msghdr_from_user+0x10a/0x160 [ 2061.151713][T25036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2061.151735][T25036] ? trace_sched_exit_tp+0xd1/0x120 [ 2061.151763][T25036] ___sys_sendmsg+0x134/0x1d0 [ 2061.151784][T25036] ? __pfx____sys_sendmsg+0x10/0x10 [ 2061.151833][T25036] __sys_sendmsg+0x16d/0x220 [ 2061.151853][T25036] ? __pfx___sys_sendmsg+0x10/0x10 [ 2061.151882][T25036] ? __secure_computing+0x28e/0x3b0 [ 2061.151909][T25036] do_syscall_64+0xcd/0x4e0 [ 2061.151932][T25036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.151949][T25036] RIP: 0033:0x7f00f3d8eec9 [ 2061.151963][T25036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2061.151981][T25036] RSP: 002b:00007f00f4c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2061.151999][T25036] RAX: ffffffffffffffda RBX: 00007f00f3fe6090 RCX: 00007f00f3d8eec9 [ 2061.152009][T25036] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 2061.152020][T25036] RBP: 00007f00f3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2061.152031][T25036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2061.152042][T25036] R13: 00007f00f3fe6128 R14: 00007f00f3fe6090 R15: 00007ffe6f918ca8 [ 2061.152066][T25036] [ 2061.868179][T25043] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2061.876254][T25043] PKCS7: Only support pkcs7_signedData type [ 2066.858954][T25078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4123'. [ 2067.827930][T25091] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.4125'. [ 2068.048282][T25091] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 2072.272042][T25122] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.4130'. [ 2072.303458][T25122] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 2072.677218][T25127] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.4132'. [ 2072.689168][T25127] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 2076.604170][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4141'. [ 2078.091488][T25176] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.4143'. [ 2078.385419][T25178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4144'. [ 2080.228008][T25194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2082.971046][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 2090.402708][T25283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 2091.825091][T25304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2096.669408][T25340] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.4174'. [ 2096.938775][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4177'. [ 2098.654207][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.660548][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.860119][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4180'. [ 2099.338207][T25366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4179'. [ 2105.330272][T25408] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.4189'. [ 2110.424222][T25451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2112.562153][T25470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2113.576333][T25480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2115.194309][ T5845] lo speed is unknown, defaulting to 1000 [ 2115.200110][ T5845] syz2: Port: 1 Link DOWN [ 2116.866881][T25510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4211'. [ 2117.908248][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4213'. [ 2119.193934][T25529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2119.621935][T25538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4216'. [ 2122.553663][T25560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4220'. [ 2122.622579][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4221'. [ 2123.356962][T25572] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2123.412388][T25572] PKCS7: Only support pkcs7_signedData type [ 2124.786761][T25585] 8021q: adding VLAN 0 to HW filter on device team0 [ 2125.040192][T25585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2125.131583][T25587] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.4225'. [ 2125.181874][T25587] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!)\' [ 2125.192592][T25587] CPU: 0 UID: 0 PID: 25587 Comm: syz.0.4225 Not tainted syzkaller #0 PREEMPT(full) [ 2125.192624][T25587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2125.192636][T25587] Call Trace: [ 2125.192645][T25587] [ 2125.192655][T25587] dump_stack_lvl+0x16c/0x1f0 [ 2125.192691][T25587] sysfs_warn_dup+0x7f/0xa0 [ 2125.192720][T25587] sysfs_do_create_link_sd+0x124/0x140 [ 2125.192750][T25587] sysfs_create_link+0x61/0xc0 [ 2125.192779][T25587] device_add+0x62c/0x1aa0 [ 2125.192812][T25587] ? __pfx_device_add+0x10/0x10 [ 2125.192839][T25587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2125.192866][T25587] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2125.192895][T25587] wiphy_register+0x1df4/0x29f0 [ 2125.192917][T25587] ? netdev_run_todo+0x864/0x1320 [ 2125.192943][T25587] ? __dev_printk+0x230/0x270 [ 2125.192966][T25587] ? __pfx_wiphy_register+0x10/0x10 [ 2125.192994][T25587] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2125.193056][T25587] ieee80211_register_hw+0x2546/0x4120 [ 2125.193092][T25587] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2125.193120][T25587] ? find_held_lock+0x2b/0x80 [ 2125.193141][T25587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2125.193160][T25587] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2125.193178][T25587] ? __hrtimer_setup+0x176/0x280 [ 2125.193197][T25587] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2125.193235][T25587] ? trace_kmalloc+0x2b/0xd0 [ 2125.193253][T25587] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2125.193272][T25587] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2125.193295][T25587] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2125.193318][T25587] ? __asan_memcpy+0x3c/0x60 [ 2125.193349][T25587] hwsim_new_radio_nl+0xb51/0x12c0 [ 2125.193376][T25587] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2125.193407][T25587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2125.193432][T25587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2125.193469][T25587] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2125.193498][T25587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2125.193532][T25587] ? bpf_lsm_capable+0x9/0x10 [ 2125.193557][T25587] ? security_capable+0x7e/0x260 [ 2125.193577][T25587] ? ns_capable+0xd7/0x110 [ 2125.193598][T25587] genl_rcv_msg+0x55c/0x800 [ 2125.193623][T25587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2125.193646][T25587] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2125.193681][T25587] netlink_rcv_skb+0x155/0x420 [ 2125.193703][T25587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2125.193726][T25587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2125.193763][T25587] genl_rcv+0x28/0x40 [ 2125.193783][T25587] netlink_unicast+0x5aa/0x870 [ 2125.193807][T25587] ? __pfx_netlink_unicast+0x10/0x10 [ 2125.193825][T25587] ? __asan_memset+0x23/0x50 [ 2125.193848][T25587] ? __build_skb_around+0x278/0x3b0 [ 2125.193878][T25587] netlink_sendmsg+0x8d1/0xdd0 [ 2125.193902][T25587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2125.193931][T25587] ____sys_sendmsg+0xa98/0xc70 [ 2125.193955][T25587] ? copy_msghdr_from_user+0x10a/0x160 [ 2125.193974][T25587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2125.193995][T25587] ? rcu_is_watching+0x12/0xc0 [ 2125.194020][T25587] ? __lock_acquire+0xb97/0x1ce0 [ 2125.194049][T25587] ___sys_sendmsg+0x134/0x1d0 [ 2125.194072][T25587] ? __pfx____sys_sendmsg+0x10/0x10 [ 2125.194121][T25587] __sys_sendmsg+0x16d/0x220 [ 2125.194141][T25587] ? __pfx___sys_sendmsg+0x10/0x10 [ 2125.194171][T25587] ? __secure_computing+0x28e/0x3b0 [ 2125.194198][T25587] do_syscall_64+0xcd/0x4e0 [ 2125.194221][T25587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2125.194238][T25587] RIP: 0033:0x7f965ab8eec9 [ 2125.194253][T25587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2125.194270][T25587] RSP: 002b:00007f96589b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2125.194286][T25587] RAX: ffffffffffffffda RBX: 00007f965ade6270 RCX: 00007f965ab8eec9 [ 2125.194298][T25587] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 2125.194309][T25587] RBP: 00007f965ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2125.194320][T25587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2125.194331][T25587] R13: 00007f965ade6308 R14: 00007f965ade6270 R15: 00007ffc0967a978 [ 2125.194355][T25587] [ 2125.740431][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4222'. [ 2127.532484][T25603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4229'. [ 2128.573640][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4234'. [ 2129.062023][T25627] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2129.068949][T25627] PKCS7: Only support pkcs7_signedData type [ 2129.263911][T25614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2129.615886][T25631] siw: device registration error -23 [ 2130.558463][T25635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2131.157007][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'. [ 2135.109861][T25677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4245'. [ 2135.662771][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4247'. [ 2136.035625][T25691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4249'. [ 2137.009509][T25696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4250'. [ 2138.174500][T25703] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2138.190071][T25703] PKCS7: Only support pkcs7_signedData type [ 2138.441087][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4253'. [ 2139.860809][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4255'. [ 2141.696639][T25736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4259'. [ 2143.736570][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4261'. [ 2144.008777][T25752] overlayfs: failed to clone lowerpath [ 2144.272221][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4264'. [ 2144.493438][T25762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4265'. [ 2145.218052][T25769] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2145.225150][T25769] PKCS7: Only support pkcs7_signedData type [ 2146.748237][T25781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2147.683491][T25790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4271'. [ 2150.343960][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4276'. [ 2151.223388][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4277'. [ 2151.813299][T25837] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2151.826770][T25837] PKCS7: Only support pkcs7_signedData type [ 2152.628732][T25838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4280'. [ 2154.289010][T25858] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.4283'. [ 2154.316480][T25858] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!)\' [ 2154.327036][T25858] CPU: 1 UID: 0 PID: 25858 Comm: syz.6.4283 Not tainted syzkaller #0 PREEMPT(full) [ 2154.327069][T25858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2154.327084][T25858] Call Trace: [ 2154.327093][T25858] [ 2154.327103][T25858] dump_stack_lvl+0x16c/0x1f0 [ 2154.327138][T25858] sysfs_warn_dup+0x7f/0xa0 [ 2154.327168][T25858] sysfs_do_create_link_sd+0x124/0x140 [ 2154.327199][T25858] sysfs_create_link+0x61/0xc0 [ 2154.327228][T25858] device_add+0x62c/0x1aa0 [ 2154.327261][T25858] ? __pfx_device_add+0x10/0x10 [ 2154.327288][T25858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2154.327315][T25858] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2154.327344][T25858] wiphy_register+0x1df4/0x29f0 [ 2154.327368][T25858] ? netdev_run_todo+0x864/0x1320 [ 2154.327391][T25858] ? __dev_printk+0x230/0x270 [ 2154.327413][T25858] ? __pfx_wiphy_register+0x10/0x10 [ 2154.327442][T25858] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2154.327466][T25858] ieee80211_register_hw+0x2546/0x4120 [ 2154.327497][T25858] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2154.327521][T25858] ? find_held_lock+0x2b/0x80 [ 2154.327543][T25858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2154.327561][T25858] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2154.327580][T25858] ? __hrtimer_setup+0x176/0x280 [ 2154.327599][T25858] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2154.327635][T25858] ? trace_kmalloc+0x2b/0xd0 [ 2154.327654][T25858] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2154.327673][T25858] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2154.327695][T25858] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2154.327719][T25858] ? __asan_memcpy+0x3c/0x60 [ 2154.327746][T25858] hwsim_new_radio_nl+0xb51/0x12c0 [ 2154.327772][T25858] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2154.327813][T25858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2154.327843][T25858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2154.327876][T25858] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2154.327903][T25858] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2154.327938][T25858] ? bpf_lsm_capable+0x9/0x10 [ 2154.327960][T25858] ? security_capable+0x7e/0x260 [ 2154.327984][T25858] ? ns_capable+0xd7/0x110 [ 2154.328007][T25858] genl_rcv_msg+0x55c/0x800 [ 2154.328034][T25858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2154.328057][T25858] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2154.328084][T25858] ? netlink_rcv_skb+0xb5/0x420 [ 2154.328107][T25858] netlink_rcv_skb+0x155/0x420 [ 2154.328127][T25858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2154.328151][T25858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2154.328181][T25858] ? netlink_deliver_tap+0x1ae/0xd30 [ 2154.328199][T25858] ? selinux_netlink_send+0x578/0x830 [ 2154.328219][T25858] ? is_vmalloc_addr+0x86/0xa0 [ 2154.328237][T25858] genl_rcv+0x28/0x40 [ 2154.328257][T25858] netlink_unicast+0x5aa/0x870 [ 2154.328281][T25858] ? __pfx_netlink_unicast+0x10/0x10 [ 2154.328304][T25858] ? security_netlink_send+0x1d8/0x210 [ 2154.328328][T25858] netlink_sendmsg+0x8d1/0xdd0 [ 2154.328353][T25858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2154.328383][T25858] ____sys_sendmsg+0xa98/0xc70 [ 2154.328407][T25858] ? copy_msghdr_from_user+0x10a/0x160 [ 2154.328426][T25858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2154.328460][T25858] ___sys_sendmsg+0x134/0x1d0 [ 2154.328481][T25858] ? __pfx____sys_sendmsg+0x10/0x10 [ 2154.328530][T25858] __sys_sendmsg+0x16d/0x220 [ 2154.328551][T25858] ? __pfx___sys_sendmsg+0x10/0x10 [ 2154.328580][T25858] ? __secure_computing+0x28e/0x3b0 [ 2154.328607][T25858] do_syscall_64+0xcd/0x4e0 [ 2154.328630][T25858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.328647][T25858] RIP: 0033:0x7f56a618eec9 [ 2154.328661][T25858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2154.328679][T25858] RSP: 002b:00007f56a7006038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2154.328697][T25858] RAX: ffffffffffffffda RBX: 00007f56a63e6270 RCX: 00007f56a618eec9 [ 2154.328709][T25858] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 2154.328721][T25858] RBP: 00007f56a6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 2154.328732][T25858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2154.328742][T25858] R13: 00007f56a63e6308 R14: 00007f56a63e6270 R15: 00007ffd122dfe48 [ 2154.328767][T25858] [ 2157.113015][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4289'. [ 2159.856256][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4293'. [ 2160.087698][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.094101][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.112753][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4294'. [ 2161.504608][T25917] siw: device registration error -23 [ 2164.270965][T25929] overlayfs: failed to clone lowerpath [ 2164.280555][T25931] overlayfs: failed to clone lowerpath [ 2164.443078][T25935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4298'. [ 2164.622383][T25941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 2164.648531][T25937] overlayfs: failed to clone lowerpath [ 2164.760645][T25946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4304'. [ 2165.604378][T25954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4305'. [ 2166.864212][ T30] audit: type=1107 audit(1758857589.674:563): pid=25958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2166.864212][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2168.067989][T25972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4308'. [ 2170.556516][T25981] netlink: 'syz.4.4310': attribute type 11 has an invalid length. [ 2171.126054][T25986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4311'. [ 2173.912723][T26018] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2173.951741][T26018] PKCS7: Only support pkcs7_signedData type [ 2174.485271][T26020] overlayfs: failed to clone lowerpath [ 2174.938105][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4320'. [ 2177.702908][T26046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4322'. [ 2179.335092][T26057] netlink: 'syz.2.4326': attribute type 11 has an invalid length. [ 2180.360021][T26061] netlink: 'syz.2.4327': attribute type 11 has an invalid length. [ 2186.095354][T26088] netlink: 'syz.4.4333': attribute type 11 has an invalid length. [ 2186.931069][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4332'. [ 2187.244511][ T30] audit: type=1107 audit(1758857610.624:564): pid=26091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2187.244511][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2188.863849][T26108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4337'. [ 2189.203084][T26115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2190.039480][T26119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4339'. [ 2191.329302][T26126] netlink: 'syz.0.4340': attribute type 11 has an invalid length. [ 2192.131391][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4342'. [ 2192.465278][T26137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4343'. [ 2192.970352][T26145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4344'. [ 2194.377374][T26152] overlayfs: failed to clone lowerpath [ 2196.069395][T26170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4350'. [ 2197.858512][T26190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4355'. [ 2198.001986][T26193] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2198.008942][T26193] PKCS7: Only support pkcs7_signedData type [ 2198.042221][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4353'. [ 2198.351354][T26196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.824604][T26204] netlink: 'syz.5.4357': attribute type 11 has an invalid length. [ 2200.342102][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4358'. [ 2200.780281][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'. [ 2201.035806][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4360'. [ 2201.801558][ T30] audit: type=1107 audit(1758857625.124:565): pid=26221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2201.801558][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2204.687090][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 2205.171619][T26252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4367'. [ 2205.258924][T26254] overlayfs: failed to clone lowerpath [ 2205.951389][T26264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4370'. [ 2206.350265][T26268] overlayfs: failed to clone lowerpath [ 2206.582639][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4371'. [ 2210.354969][T26301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.701990][T26307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4381'. [ 2211.685096][T26319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4383'. [ 2211.723240][T26319] netlink: 'syz.5.4383': attribute type 7 has an invalid length. [ 2211.731145][T26319] netlink: 'syz.5.4383': attribute type 8 has an invalid length. [ 2211.743801][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4383'. [ 2212.638027][T26325] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2212.673064][T26325] PKCS7: Only support pkcs7_signedData type [ 2213.101718][ T30] audit: type=1107 audit(1758857636.454:566): pid=26326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2213.101718][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2214.358075][T26335] overlayfs: failed to clone lowerpath [ 2214.636414][T26342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2214.667713][T19748] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2215.063890][T26352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4391'. [ 2217.351758][T26365] 8021q: adding VLAN 0 to HW filter on device team0 [ 2217.645107][T26365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2219.165384][T26381] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2219.172312][T26381] PKCS7: Only support pkcs7_signedData type [ 2219.501346][T26386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4397'. [ 2219.510905][T26386] netlink: 'syz.6.4397': attribute type 7 has an invalid length. [ 2219.519667][T26386] netlink: 'syz.6.4397': attribute type 8 has an invalid length. [ 2219.567975][T26386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4397'. [ 2221.043649][T26399] netlink: 'syz.0.4399': attribute type 11 has an invalid length. [ 2221.338352][T26404] siw: device registration error -23 [ 2221.524934][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.541653][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.891732][T26408] netlink: 'syz.5.4402': attribute type 11 has an invalid length. [ 2223.831747][T26424] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.152426][T26424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2224.168094][T10607] lo speed is unknown, defaulting to 1000 [ 2224.175291][T10607] syz2: Port: 1 Link ACTIVE [ 2225.155049][T26439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4409'. [ 2226.297015][T26447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4410'. [ 2227.522858][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4412'. [ 2229.655157][T26474] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2231.765353][T26493] netlink: 'syz.4.4419': attribute type 11 has an invalid length. [ 2232.559999][T26502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4422'. [ 2234.758150][T26511] virtio-fs: tag not found [ 2234.792702][T26511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4421'. [ 2235.310861][T26527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4426'. [ 2238.120818][T26559] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2239.726301][T26564] netlink: 'syz.0.4434': attribute type 11 has an invalid length. [ 2241.380890][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4439'. [ 2244.471940][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4445'. [ 2244.790996][T26617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4446'. [ 2246.134388][T26631] overlayfs: missing 'lowerdir' [ 2248.626698][T26661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2250.642880][ T30] audit: type=1107 audit(1758857673.754:567): pid=26667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2250.642880][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2252.225249][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 2253.256207][T26690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4461'. [ 2256.662653][T26705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2256.715934][ T30] audit: type=1107 audit(1758857680.134:568): pid=26702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2256.715934][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2257.741338][ T30] audit: type=1107 audit(1758857681.124:569): pid=26718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2257.741338][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2259.962416][ T30] audit: type=1107 audit(1758857683.264:570): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~܃z,PDu˷~v_3Fֹ7N2Ѹ%ݻYr/4!a<pQ,!AkOh8{Xf^*~h-u:.ՆPtFޭ] 숥ʥMI\M" o>*o( [ 2259.962416][ T30] faÎy{%Dui=cky()DKAN;/[G-o' [ 2261.192813][T26753] virtio-fs: tag not found [ 2261.199041][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4475'. [ 2261.727836][T26757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2262.270535][T26764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2262.373960][T26766] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2262.380791][T26766] PKCS7: Only support pkcs7_signedData type [ 2264.179492][T26784] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2265.385970][T26792] overlayfs: failed to clone upperpath [ 2266.363706][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4487'. [ 2266.613374][T26806] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4490'. [ 2267.367695][T26823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4496'. [ 2267.445275][ T30] audit: type=1400 audit(1758857690.814:571): avc: denied { create } for pid=26820 comm="syz.5.4496" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2267.795266][ T30] audit: type=1400 audit(1758857690.824:572): avc: denied { mounton } for pid=26820 comm="syz.5.4496" path="/207/file0" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2268.076709][ T30] audit: type=1326 audit(1758857690.844:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2268.289129][ T30] audit: type=1326 audit(1758857690.844:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2268.852921][ T30] audit: type=1326 audit(1758857690.854:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2268.931374][ T30] audit: type=1326 audit(1758857690.854:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2269.056557][ T30] audit: type=1326 audit(1758857690.854:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2269.353043][ T30] audit: type=1326 audit(1758857690.854:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2269.516141][ T30] audit: type=1326 audit(1758857690.854:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2269.540336][ T30] audit: type=1326 audit(1758857690.864:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26820 comm="syz.5.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02138eec9 code=0x7ffc0000 [ 2269.661925][T26850] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4499'. [ 2270.153288][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4504'. [ 2270.302341][T26851] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2271.544692][T26870] wireguard0: entered promiscuous mode [ 2271.560461][T26870] wireguard0: entered allmulticast mode [ 2272.466633][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2272.466650][ T30] audit: type=1400 audit(1758857695.884:590): avc: denied { watch } for pid=26881 comm="syz.4.4513" path="/333" dev="tmpfs" ino=1855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2272.498376][T26882] overlayfs: failed to resolve './file1': -2 [ 2272.883310][T26887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.995573][T26889] wireguard0: entered promiscuous mode [ 2273.009812][T26889] wireguard0: entered allmulticast mode [ 2273.081423][T26892] wireguard0: entered promiscuous mode [ 2273.087234][T26892] wireguard0: entered allmulticast mode [ 2274.367609][T26905] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2274.468809][T26905] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2276.513689][T26946] wireguard0: entered promiscuous mode [ 2276.519274][T26946] wireguard0: entered allmulticast mode [ 2277.673100][T26973] wireguard0: entered promiscuous mode [ 2277.678681][T26973] wireguard0: entered allmulticast mode [ 2278.091833][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4546'. [ 2278.612628][T26988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2282.246887][ T30] audit: type=1400 audit(1758857705.664:591): avc: denied { bind } for pid=27021 comm="syz.2.4557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2282.740793][T27031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4558'. [ 2282.976198][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.982715][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.382951][T27038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4561'. [ 2283.392050][T27038] netlink: 'syz.5.4561': attribute type 7 has an invalid length. [ 2283.399799][T27038] netlink: 'syz.5.4561': attribute type 8 has an invalid length. [ 2283.407612][T27038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4561'. [ 2285.182584][T27066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4569'. [ 2286.996881][T27082] wireguard0: entered promiscuous mode [ 2287.008283][T27082] wireguard0: entered allmulticast mode [ 2287.225008][T27090] overlayfs: failed to clone upperpath [ 2287.464475][T27094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4578'. [ 2292.686478][T27136] tipc: Enabling of bearer rejected, failed to enable media [ 2292.771011][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4587'. [ 2294.007740][T27160] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4596'. [ 2295.018260][T27172] wireguard0: entered promiscuous mode [ 2295.024852][T27172] wireguard0: entered allmulticast mode [ 2296.579094][T27186] wireguard0: entered promiscuous mode [ 2296.593691][T27186] wireguard0: entered allmulticast mode [ 2297.516027][T27191] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2299.547965][T27216] wireguard0: entered promiscuous mode [ 2299.556731][T27216] wireguard0: entered allmulticast mode [ 2302.530655][T27270] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2302.715723][ T30] audit: type=1400 audit(1758857726.134:592): avc: denied { ioctl } for pid=27272 comm="syz.0.4634" path="socket:[77952]" dev="sockfs" ino=77952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2302.753498][T27273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4634'. [ 2302.927233][T27273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2304.453648][T27300] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2304.460426][T27300] PKCS7: Only support pkcs7_signedData type [ 2306.291729][T27334] rdma_op ffff888028c571f0 conn xmit_rdma 0000000000000000 [ 2308.338304][T27376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2308.784176][T27382] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2308.791002][T27382] PKCS7: Only support pkcs7_signedData type [ 2310.071725][T27400] fuse: Bad value for 'fd' [ 2310.843064][T27402] tipc: Started in network mode [ 2310.848050][T27402] tipc: Node identity 7f000001, cluster identity 4711 [ 2310.859942][T27402] tipc: Enabled bearer , priority 10 [ 2310.873993][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4679'. [ 2310.879676][T27402] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2310.895168][T27402] tipc: Enabled bearer , priority 10 [ 2310.982381][T27408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2311.271222][T27414] wireguard0: entered promiscuous mode [ 2311.280067][T27414] wireguard0: entered allmulticast mode [ 2312.483888][T25093] tipc: Node number set to 2130706433 [ 2314.266423][T27442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4689'. [ 2314.362797][T27449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4692'. [ 2316.967158][T27497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4708'. [ 2318.004646][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4716'. [ 2321.010368][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'. [ 2322.891129][T15061] IPVS: starting estimator thread 0... [ 2322.951662][T27584] IPVS: sed: FWM 3 0x00000003 - no destination available [ 2322.959030][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 2323.081459][T27585] IPVS: using max 44 ests per chain, 105600 per kthread [ 2325.410326][T27603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2326.478682][T27622] tipc: Enabling of bearer rejected, failed to enable media [ 2326.836837][ T30] audit: type=1400 audit(1758857750.254:593): avc: denied { bind } for pid=27637 comm="syz.4.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2327.313200][ T30] audit: type=1400 audit(1758857750.254:594): avc: denied { listen } for pid=27637 comm="syz.4.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2327.333354][ T30] audit: type=1400 audit(1758857750.254:595): avc: denied { accept } for pid=27637 comm="syz.4.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2327.594837][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4753'. [ 2327.733536][T27645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2329.490718][T27664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4758'. [ 2330.972817][T27691] tipc: Started in network mode [ 2330.993556][T27691] tipc: Node identity 7f000001, cluster identity 4711 [ 2331.031754][T27691] tipc: Enabled bearer , priority 10 [ 2331.102729][T27691] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2331.155457][T27691] tipc: Enabled bearer , priority 10 [ 2332.171497][T18202] tipc: Node number set to 2130706433 [ 2333.075859][ T30] audit: type=1400 audit(1758857756.384:596): avc: denied { read } for pid=27712 comm="syz.4.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2333.249508][T27723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27723 comm=syz.6.4775 [ 2333.276040][ T30] audit: type=1107 audit(1758857756.684:597): pid=27714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2335.663297][T27759] netlink: 'syz.5.4791': attribute type 4 has an invalid length. [ 2338.505354][T27805] netlink: 65536 bytes leftover after parsing attributes in process `syz.5.4797'. [ 2340.649674][T19748] Bluetooth: Unexpected start frame (len 16) [ 2341.016993][T27873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27873 comm=syz.2.4808 [ 2341.082002][ T30] audit: type=1107 audit(1758857764.454:598): pid=27869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2341.157518][T27875] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 2341.164417][T27875] PKCS7: Only support pkcs7_signedData type [ 2341.775740][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 2343.247077][T27905] tipc: Enabling of bearer rejected, failed to enable media [ 2343.745285][T27900] IPVS: sed: FWM 3 0x00000003 - no destination available [ 2343.776521][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 2345.058127][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.068025][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.551145][T27961] tipc: Started in network mode [ 2347.571418][T27961] tipc: Node identity 7f000001, cluster identity 4711 [ 2347.582289][T27961] tipc: Enabled bearer , priority 10 [ 2347.655976][T27961] tipc: Enabling of bearer rejected, failed to enable media [ 2347.698601][T27968] 9pnet_fd: Insufficient options for proto=fd [ 2348.915790][T18202] tipc: Node number set to 2130706433 [ 2352.301465][T27989] tipc: Enabling of bearer rejected, failed to enable media [ 2352.582091][ T30] audit: type=1400 audit(1758857776.004:599): avc: denied { getopt } for pid=27992 comm="syz.0.4844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2357.227416][T28075] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 2357.287115][T28073] siw: device registration error -23 [ 2358.480248][T28104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4873'. [ 2358.489386][T28104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4873'. [ 2359.309496][T28116] siw: device registration error -23 [ 2360.360483][T28126] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4882'. [ 2361.389456][T28147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4887'. [ 2362.103813][T28155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4890'. [ 2366.764655][T28200] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4899'. [ 2366.774495][T28200] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4899'. [ 2367.858670][T28226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4901'. [ 2368.292131][T28230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4906'. [ 2369.845422][ T30] audit: type=1400 audit(1758857793.264:600): avc: denied { write } for pid=28243 comm="syz.2.4910" name="file0" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2369.936772][ T30] audit: type=1400 audit(1758857793.264:601): avc: denied { open } for pid=28243 comm="syz.2.4910" path="/380/file0" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2369.977304][ T30] audit: type=1400 audit(1758857793.294:602): avc: denied { ioctl } for pid=28243 comm="syz.2.4910" path="/380/file0" dev="tmpfs" ino=2088 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2370.333944][T28259] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28259 comm=syz.5.4912 [ 2370.431575][ T30] audit: type=1107 audit(1758857793.764:603): pid=28248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2371.719323][T28276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28276 comm=syz.0.4921 [ 2372.110903][ T30] audit: type=1107 audit(1758857795.154:604): pid=28271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2405.911798][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.918114][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2484.291272][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2484.298253][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28359/1:b..l P28382/1:b..l P22007/1:b..l [ 2484.309256][ C1] rcu: (detected by 1, t=10502 jiffies, g=140629, q=136 ncpus=2) [ 2484.317072][ C1] task:syz-executor state:R running task stack:23512 pid:22007 tgid:22007 ppid:21994 task_flags:0x400140 flags:0x00004000 [ 2484.331748][ C1] Call Trace: [ 2484.335042][ C1] [ 2484.337975][ C1] __schedule+0x1190/0x5de0 [ 2484.342500][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2484.347459][ C1] ? __pfx___schedule+0x10/0x10 [ 2484.352325][ C1] ? page_table_check_set+0x627/0x750 [ 2484.357709][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2484.362744][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2484.368129][ C1] preempt_schedule_common+0x44/0xc0 [ 2484.373419][ C1] preempt_schedule_thunk+0x16/0x30 [ 2484.378641][ C1] _raw_spin_unlock+0x3e/0x50 [ 2484.383335][ C1] copy_page_range+0x1f7d/0x5c80 [ 2484.388348][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 2484.393669][ C1] ? __pfx___might_resched+0x10/0x10 [ 2484.398977][ C1] ? __pfx_mas_store+0x10/0x10 [ 2484.403757][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 2484.408975][ C1] ? dup_mmap+0xe38/0x21d0 [ 2484.413400][ C1] ? down_write+0x14d/0x200 [ 2484.417911][ C1] ? up_write+0x1b2/0x520 [ 2484.422245][ C1] dup_mmap+0xe88/0x21d0 [ 2484.426508][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 2484.431210][ C1] copy_process+0x4081/0x7690 [ 2484.435907][ C1] ? __pfx_copy_process+0x10/0x10 [ 2484.440942][ C1] ? trace_sched_exit_tp+0xd1/0x120 [ 2484.446154][ C1] kernel_clone+0xfc/0x930 [ 2484.450579][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 2484.455619][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 2484.461095][ C1] __do_sys_clone+0xce/0x120 [ 2484.465694][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 2484.470917][ C1] ? do_user_addr_fault+0x829/0x1370 [ 2484.476198][ C1] ? xfd_validate_state+0x61/0x180 [ 2484.481314][ C1] ? do_user_addr_fault+0x843/0x1370 [ 2484.486605][ C1] do_syscall_64+0xcd/0x4e0 [ 2484.491114][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.497006][ C1] RIP: 0033:0x7fd021385613 [ 2484.501414][ C1] RSP: 002b:00007fff87d1d6f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2484.509824][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd021385613 [ 2484.517792][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2484.525757][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2484.533720][ C1] R10: 000055556a9bd7d0 R11: 0000000000000246 R12: 0000000000000000 [ 2484.541683][ C1] R13: 00000000000927c0 R14: 0000000000244dbd R15: 00007fff87d1d890 [ 2484.550373][ C1] [ 2484.553388][ C1] task:syz.0.4951 state:R running task stack:27768 pid:28382 tgid:28382 ppid:18854 task_flags:0x40004c flags:0x00004000 [ 2484.566883][ C1] Call Trace: [ 2484.570153][ C1] [ 2484.573081][ C1] __schedule+0x1190/0x5de0 [ 2484.577609][ C1] ? __pfx___schedule+0x10/0x10 [ 2484.582490][ C1] ? mark_held_locks+0x49/0x80 [ 2484.587270][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2484.592296][ C1] ? find_held_lock+0x2b/0x80 [ 2484.596972][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2484.602352][ C1] preempt_schedule_common+0x44/0xc0 [ 2484.607642][ C1] preempt_schedule_thunk+0x16/0x30 [ 2484.612861][ C1] _raw_spin_unlock+0x3e/0x50 [ 2484.617550][ C1] unmap_page_range+0xf77/0x42c0 [ 2484.622520][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 2484.627893][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 2484.632846][ C1] ? uprobe_munmap+0x20/0x5c0 [ 2484.637531][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 2484.643431][ C1] unmap_vmas+0x218/0x470 [ 2484.647767][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2484.652742][ C1] exit_mmap+0x1b9/0xb90 [ 2484.656996][ C1] ? trace_contention_end+0xdd/0x130 [ 2484.662287][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2484.667063][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2484.672034][ C1] __mmput+0x12a/0x410 [ 2484.676113][ C1] mmput+0x62/0x70 [ 2484.679844][ C1] do_exit+0x7c7/0x2bf0 [ 2484.684016][ C1] ? __pfx_do_exit+0x10/0x10 [ 2484.688611][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2484.693994][ C1] do_group_exit+0xd3/0x2a0 [ 2484.698595][ C1] __x64_sys_exit_group+0x3e/0x50 [ 2484.703632][ C1] x64_sys_call+0x14fa/0x1720 [ 2484.708318][ C1] do_syscall_64+0xcd/0x4e0 [ 2484.712832][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.718723][ C1] RIP: 0033:0x7f965ab8eec9 [ 2484.723127][ C1] RSP: 002b:00007ffc0967acd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2484.731537][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f965ab8eec9 [ 2484.739543][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2484.747510][ C1] RBP: 00007ffc0967ad3c R08: 0000000f0967adcf R09: 00000000000927c0 [ 2484.755474][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001a5 [ 2484.763488][ C1] R13: 00000000000927c0 R14: 0000000000244c31 R15: 00007ffc0967ad90 [ 2484.772080][ C1] [ 2484.775126][ C1] task:syz.2.4943 state:R running task stack:26344 pid:28359 tgid:28354 ppid:19742 task_flags:0x40044c flags:0x00004002 [ 2484.788626][ C1] Call Trace: [ 2484.791900][ C1] [ 2484.794830][ C1] __schedule+0x1190/0x5de0 [ 2484.799336][ C1] ? rcu_is_watching+0x12/0xc0 [ 2484.804122][ C1] ? __pfx___schedule+0x10/0x10 [ 2484.808987][ C1] ? mark_held_locks+0x49/0x80 [ 2484.813776][ C1] preempt_schedule_irq+0x51/0x90 [ 2484.818808][ C1] irqentry_exit+0x36/0x90 [ 2484.823229][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2484.828692][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 2484.833989][ C1] Code: 0f c1 05 b8 4c 3f 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 cd 0a 3f 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 2484.853596][ C1] RSP: 0018:ffffc900045e6e10 EFLAGS: 00000206 [ 2484.859692][ C1] RAX: f4b16319eb1da300 RBX: ffffffff8e5c15a0 RCX: ffffc900045e6e1c [ 2484.868181][ C1] RDX: 0000000000000001 RSI: ffffffff8de2d8f8 RDI: ffffffff8c163400 [ 2484.876151][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2484.884117][ C1] R10: 0000000000000001 R11: 0000000000007bb3 R12: ffffffff816af8a4 [ 2484.892088][ C1] R13: 0000000000000202 R14: ffff88802a2a4880 R15: 0000000000000002 [ 2484.900058][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 2484.905456][ C1] unwind_next_frame+0x3f9/0x20a0 [ 2484.910485][ C1] ? do_exit+0x7c7/0x2bf0 [ 2484.914827][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2484.920989][ C1] arch_stack_walk+0x94/0x100 [ 2484.925687][ C1] ? do_group_exit+0xd3/0x2a0 [ 2484.930376][ C1] stack_trace_save+0x8e/0xc0 [ 2484.935055][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2484.940443][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2484.945398][ C1] save_stack+0x160/0x1f0 [ 2484.949725][ C1] ? __pfx_save_stack+0x10/0x10 [ 2484.954571][ C1] ? free_unref_folios+0xa61/0x16b0 [ 2484.959768][ C1] ? folios_put_refs+0x56f/0x740 [ 2484.964710][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 2484.970522][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 2484.976688][ C1] ? tlb_flush_mmu+0xe9/0x5a0 [ 2484.981371][ C1] ? unmap_page_range+0x1f43/0x42c0 [ 2484.986575][ C1] ? unmap_single_vma.constprop.0+0x153/0x240 [ 2484.992648][ C1] ? unmap_vmas+0x218/0x470 [ 2484.997159][ C1] ? exit_mmap+0x1b9/0xb90 [ 2485.001576][ C1] ? __mmput+0x12a/0x410 [ 2485.005816][ C1] ? mmput+0x62/0x70 [ 2485.009714][ C1] ? do_exit+0x7c7/0x2bf0 [ 2485.014054][ C1] ? page_ext_put+0x3e/0xd0 [ 2485.018561][ C1] __reset_page_owner+0x84/0x1a0 [ 2485.023499][ C1] free_unref_folios+0xa61/0x16b0 [ 2485.028533][ C1] ? mark_held_locks+0x49/0x80 [ 2485.033304][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2485.039115][ C1] folios_put_refs+0x56f/0x740 [ 2485.043888][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 2485.049178][ C1] ? rcu_is_watching+0x12/0xc0 [ 2485.053945][ C1] ? trace_mm_page_alloc+0x11f/0x1a0 [ 2485.059245][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 2485.064893][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 2485.071094][ C1] ? __folio_rmap_sanity_checks+0x2cc/0x770 [ 2485.076999][ C1] ? __pfx___might_resched+0x10/0x10 [ 2485.082291][ C1] ? folio_remove_rmap_ptes+0x138/0x970 [ 2485.087850][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 2485.093847][ C1] ? find_held_lock+0x2b/0x80 [ 2485.098533][ C1] tlb_flush_mmu+0xe9/0x5a0 [ 2485.103050][ C1] unmap_page_range+0x1f43/0x42c0 [ 2485.108112][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 2485.113487][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 2485.118438][ C1] ? uprobe_munmap+0x20/0x5c0 [ 2485.123120][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 2485.129025][ C1] unmap_vmas+0x218/0x470 [ 2485.133366][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2485.138240][ C1] exit_mmap+0x1b9/0xb90 [ 2485.142497][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2485.147274][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2485.152260][ C1] __mmput+0x12a/0x410 [ 2485.156348][ C1] mmput+0x62/0x70 [ 2485.160081][ C1] do_exit+0x7c7/0x2bf0 [ 2485.164258][ C1] ? __pfx___might_resched+0x10/0x10 [ 2485.169561][ C1] ? __pfx_do_exit+0x10/0x10 [ 2485.174171][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2485.179200][ C1] ? find_held_lock+0x2b/0x80 [ 2485.183891][ C1] do_group_exit+0xd3/0x2a0 [ 2485.188406][ C1] get_signal+0x2673/0x26d0 [ 2485.192928][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 2485.197877][ C1] ? __pfx_get_signal+0x10/0x10 [ 2485.202748][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 2485.208308][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2485.214489][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2485.220051][ C1] exit_to_user_mode_loop+0x84/0x110 [ 2485.225342][ C1] do_syscall_64+0x41c/0x4e0 [ 2485.229915][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.235787][ C1] RIP: 0033:0x7f00f3d8eec9 [ 2485.240175][ C1] RSP: 002b:00007f00f4c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2485.248560][ C1] RAX: 0000000000010106 RBX: 00007f00f3fe6090 RCX: 00007f00f3d8eec9 [ 2485.256513][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2485.264465][ C1] RBP: 00007f00f3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2485.272417][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2485.280360][ C1] R13: 00007f00f3fe6128 R14: 00007f00f3fe6090 R15: 00007ffe6f918ca8 [ 2485.288312][ C1] [ 2485.291310][ C1] rcu: rcu_preempt kthread starved for 10598 jiffies! g140629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2485.302586][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2485.312559][ C1] rcu: RCU grace-period kthread stack dump: [ 2485.318438][ C1] task:rcu_preempt state:R running task stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2485.331942][ C1] Call Trace: [ 2485.335218][ C1] [ 2485.338147][ C1] __schedule+0x1190/0x5de0 [ 2485.342666][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2485.347624][ C1] ? __pfx___schedule+0x10/0x10 [ 2485.352483][ C1] ? find_held_lock+0x2b/0x80 [ 2485.357166][ C1] ? schedule+0x2d7/0x3a0 [ 2485.361499][ C1] schedule+0xe7/0x3a0 [ 2485.365573][ C1] schedule_timeout+0x123/0x290 [ 2485.370422][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2485.375795][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2485.381090][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2485.386900][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 2485.392370][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 2485.397137][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2485.402423][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2485.407635][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2485.412580][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2485.417462][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2485.423284][ C1] rcu_gp_kthread+0x270/0x380 [ 2485.427976][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2485.433172][ C1] ? rcu_is_watching+0x12/0xc0 [ 2485.437956][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2485.443162][ C1] ? __kthread_parkme+0x19e/0x250 [ 2485.448196][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2485.453404][ C1] kthread+0x3c2/0x780 [ 2485.457480][ C1] ? __pfx_kthread+0x10/0x10 [ 2485.462071][ C1] ? rcu_is_watching+0x12/0xc0 [ 2485.466840][ C1] ? __pfx_kthread+0x10/0x10 [ 2485.471429][ C1] ret_from_fork+0x56a/0x730 [ 2485.476029][ C1] ? __pfx_kthread+0x10/0x10 [ 2485.480617][ C1] ret_from_fork_asm+0x1a/0x30 [ 2485.485413][ C1] [ 2485.488437][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2485.494757][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2485.499961][ C0] NMI backtrace for cpu 0 [ 2485.499979][ C0] CPU: 0 UID: 0 PID: 28386 Comm: syz.4.4952 Not tainted syzkaller #0 PREEMPT(full) [ 2485.500002][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2485.500014][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 2485.500040][ C0] Code: b6 d7 55 00 48 89 df 5b e9 3d 5f 5b 00 be 03 00 00 00 5b e9 c2 5f 28 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 48 41 1b 12 65 8b 05 59 41 1b [ 2485.500059][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000097 [ 2485.500075][ C0] RAX: 0000000080010003 RBX: 0000000000000000 RCX: ffffffff817e141c [ 2485.500088][ C0] RDX: ffff8880783e4880 RSI: 0000000000000007 RDI: 0000000000000005 [ 2485.500100][ C0] RBP: ffff88807abfe4d8 R08: 0000000000000005 R09: 0000000000000007 [ 2485.500112][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880783e4880 [ 2485.500125][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2485.500137][ C0] FS: 00007f43238ba6c0(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 2485.500155][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2485.500168][ C0] CR2: 00007fdb47c5e38a CR3: 0000000050548000 CR4: 00000000003526f0 [ 2485.500180][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2485.500191][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2485.500203][ C0] Call Trace: [ 2485.500211][ C0] [ 2485.500218][ C0] trace_signal_generate+0x4a/0x200 [ 2485.500250][ C0] posixtimer_send_sigqueue+0x468/0x1060 [ 2485.500273][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2485.500295][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 2485.500321][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 2485.500339][ C0] posix_timer_queue_signal+0x106/0x170 [ 2485.500359][ C0] posix_timer_fn+0x3a/0x80 [ 2485.500377][ C0] __hrtimer_run_queues+0x202/0xad0 [ 2485.500404][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2485.500426][ C0] ? read_tsc+0x9/0x20 [ 2485.500454][ C0] hrtimer_interrupt+0x397/0x8e0 [ 2485.500483][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 2485.500506][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2485.500531][ C0] [ 2485.500537][ C0] [ 2485.500544][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2485.500566][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 2485.500589][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 aa 30 00 f6 48 89 df e8 92 84 00 f6 e8 8d e2 2b f6 fb bf 01 00 00 00 72 81 f0 f5 65 8b 05 0b 3d 3f 08 85 c0 74 06 5b c3 cc cc cc cc [ 2485.500607][ C0] RSP: 0018:ffffc900045a7cd8 EFLAGS: 00000206 [ 2485.500621][ C0] RAX: 000000000ac83627 RBX: ffff8880281e1280 RCX: ffffffff81c3849f [ 2485.500634][ C0] RDX: 0000000000000000 RSI: ffffffff8de52e89 RDI: 0000000000000001 [ 2485.500646][ C0] RBP: ffff8880281e1680 R08: 0000000000000001 R09: 0000000000000001 [ 2485.500658][ C0] R10: ffffffff90ab7797 R11: 0000000000000000 R12: 0000000000000000 [ 2485.500670][ C0] R13: 0000000000000021 R14: 0000000000000400 R15: ffff8880281e1280 [ 2485.500693][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2485.500719][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2485.500739][ C0] get_signal+0x1e6c/0x26d0 [ 2485.500769][ C0] ? __pfx_get_signal+0x10/0x10 [ 2485.500797][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 2485.500821][ C0] ? __pfx_restore_altstack+0x10/0x10 [ 2485.500850][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2485.500874][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2485.500898][ C0] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 2485.500923][ C0] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 2485.500952][ C0] exit_to_user_mode_loop+0x84/0x110 [ 2485.500973][ C0] do_syscall_64+0x41c/0x4e0 [ 2485.500998][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.501018][ C0] RIP: 0033:0x7f432298eec9 [ 2485.501032][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2485.501050][ C0] RSP: 002b:00007f43238ba038 EFLAGS: 00000246 [ 2485.501064][ C0] RAX: 0000000000000000 RBX: 00007f4322be5fa0 RCX: 00007f432298eec9 [ 2485.501077][ C0] RDX: 000020000006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2485.501089][ C0] RBP: 00007f4322a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2485.501101][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2485.501112][ C0] R13: 00007f4322be6038 R14: 00007f4322be5fa0 R15: 00007ffd5745f898 [ 2485.501132][ C0] [ 2486.070954][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2486.077408][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=2224 sent=0 n=-1 (errno 32: Broken pipe) [ 2487.257765][T28359] syz_tun (unregistering): left promiscuous mode [ 2487.503992][T24891] team0: left allmulticast mode [ 2487.508944][T24891] team_slave_0: left allmulticast mode [ 2487.514573][T24891] team_slave_1: left allmulticast mode [ 2487.520097][T24891] team0: left promiscuous mode [ 2487.524908][T24891] team_slave_0: left promiscuous mode [ 2487.530439][T24891] team_slave_1: left promiscuous mode [ 2487.536329][T24891] bridge0: port 3(team0) entered disabled state [ 2487.543965][T24891] bridge_slave_1: left allmulticast mode [ 2487.549595][T24891] bridge_slave_1: left promiscuous mode [ 2487.555730][T24891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2487.564203][T24891] bridge_slave_0: left allmulticast mode [ 2487.569838][T24891] bridge_slave_0: left promiscuous mode [ 2487.575936][T24891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2488.206554][T24891] hsr_slave_0: left promiscuous mode [ 2488.212382][T24891] hsr_slave_1: left promiscuous mode [ 2488.218072][T24891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2488.225859][T24891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2488.582577][T24891] team0 (unregistering): Port device team_slave_1 removed [ 2488.623911][T24891] team0 (unregistering): Port device team_slave_0 removed [ 2489.045938][T18202] lo speed is unknown, defaulting to 1000 [ 2489.054315][T18202] infiniband syz2: ib_query_port failed (-19) [ 2490.427642][T24891] team0: left allmulticast mode [ 2490.432641][T24891] team_slave_0: left allmulticast mode [ 2490.438104][T24891] team_slave_1: left allmulticast mode [ 2490.443918][T24891] team0: left promiscuous mode [ 2490.448682][T24891] team_slave_0: left promiscuous mode [ 2490.454331][T24891] team_slave_1: left promiscuous mode [ 2490.459961][T24891] bridge0: port 3(team0) entered disabled state [ 2490.467667][T24891] bridge_slave_1: left allmulticast mode [ 2490.473424][T24891] bridge_slave_1: left promiscuous mode [ 2490.479096][T24891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.488400][T24891] bridge_slave_0: left allmulticast mode [ 2490.494207][T24891] bridge_slave_0: left promiscuous mode [ 2490.499861][T24891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.510209][T24891] team0: left allmulticast mode [ 2490.515304][T24891] team_slave_0: left allmulticast mode [ 2490.520763][T24891] team_slave_1: left allmulticast mode [ 2490.526716][T24891] team0: left promiscuous mode [ 2490.531650][T24891] team_slave_0: left promiscuous mode [ 2490.537132][T24891] team_slave_1: left promiscuous mode [ 2490.543843][T24891] bridge0: port 3(team0) entered disabled state [ 2490.551426][T24891] bridge_slave_1: left allmulticast mode [ 2490.557072][T24891] bridge_slave_1: left promiscuous mode [ 2490.563461][T24891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.571828][T24891] bridge_slave_0: left allmulticast mode [ 2490.577460][T24891] bridge_slave_0: left promiscuous mode [ 2490.583986][T24891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.593445][T24891] team0: left allmulticast mode [ 2490.598291][T24891] team_slave_0: left allmulticast mode [ 2490.604099][T24891] team_slave_1: left allmulticast mode [ 2490.609594][T24891] team0: left promiscuous mode [ 2490.614538][T24891] team_slave_0: left promiscuous mode [ 2490.620014][T24891] team_slave_1: left promiscuous mode [ 2490.625750][T24891] bridge0: port 3(team0) entered disabled state [ 2490.633290][T24891] bridge_slave_1: left allmulticast mode [ 2490.638937][T24891] bridge_slave_1: left promiscuous mode [ 2490.644684][T24891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.652979][T24891] bridge_slave_0: left allmulticast mode [ 2490.658605][T24891] bridge_slave_0: left promiscuous mode [ 2490.664364][T24891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.675564][T24891] bridge_slave_1: left allmulticast mode [ 2490.681223][T24891] bridge_slave_1: left promiscuous mode [ 2490.686950][T24891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.695332][T24891] bridge_slave_0: left allmulticast mode [ 2490.700986][T24891] bridge_slave_0: left promiscuous mode [ 2490.706734][T24891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.840608][T24891] erspan0 (unregistering): left promiscuous mode [ 2491.614358][T24891] tipc: Disabling bearer [ 2491.619756][T24891] tipc: Disabling bearer [ 2491.634886][T24891] tipc: Left network mode [ 2491.665212][T24891] tipc: Disabling bearer [ 2491.676708][T24891] tipc: Disabling bearer [ 2491.683058][T24891] tipc: Left network mode [ 2491.707991][T24891] tipc: Disabling bearer [ 2491.714252][T24891] tipc: Left network mode [ 2492.885470][T24891] batadv_slave_1: left promiscuous mode [ 2492.894103][T24891] hsr_slave_0: left promiscuous mode [ 2492.899847][T24891] hsr_slave_1: left promiscuous mode [ 2492.907209][T24891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2492.914900][T24891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2492.925469][T24891] hsr_slave_0: left promiscuous mode [ 2492.931397][T24891] hsr_slave_1: left promiscuous mode [ 2492.937108][T24891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2492.946581][T24891] hsr_slave_0: left promiscuous mode [ 2492.952347][T24891] hsr_slave_1: left promiscuous mode [ 2492.958040][T24891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2492.968533][T24891] hsr_slave_0: left promiscuous mode [ 2492.974497][T24891] hsr_slave_1: left promiscuous mode [ 2492.980238][T24891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2493.364807][T24891] team0 (unregistering): Port device team_slave_1 removed [ 2493.411140][T24891] team0 (unregistering): Port device team_slave_0 removed [ 2494.137883][T24891] team0 (unregistering): Port device team_slave_1 removed [ 2494.179960][T24891] team0 (unregistering): Port device team_slave_0 removed