last executing test programs: 1m23.437655507s ago: executing program 1 (id=5051): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x6a, 0x0, &(0x7f0000000400)="7cf38877832fbe5ea0724842b00d8dc2ba637d8dae8bc6050c6bb7f7b3624af7c4b7bea86df59fdf627b6c5f3cb627614f72a6c470d33710473a60ff80ca8d078caa5c46812576cee7d985e614387a04225beca8cca823676ff5216b8027f4f28f651ad90142343d7fa1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffa}, 0x4c) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000003c0)={0x401000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8}) close_range(r3, r8, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb2f8bf3", 0xca}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0"], 0x5c}, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_xfrm(0x10, 0x3, 0x6) 1m21.382396776s ago: executing program 1 (id=5055): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc904a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e1", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 1m16.351157522s ago: executing program 1 (id=5063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r8, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 1m13.37825355s ago: executing program 1 (id=5069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 1m10.873820979s ago: executing program 1 (id=5074): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6fea84014f874e746d6f64653d30303030303030303030303030303030303130303030302c7573", @ANYBLOB=',group_id=', @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) lseek(r2, 0x6, 0x4) 1m8.25442663s ago: executing program 1 (id=5079): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r4}, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000104) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8911, &(0x7f0000000140)={0xa, 0xfffc, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 1m0.176718203s ago: executing program 3 (id=5097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6fea84014f874e746d6f64653d30303030303030303030303030303030303130303030302c7573", @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) lseek(r2, 0x6, 0x4) 58.858711109s ago: executing program 3 (id=5098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) lseek(r2, 0x6, 0x4) 57.229304971s ago: executing program 3 (id=5102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 54.294344996s ago: executing program 3 (id=5107): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc904a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400", @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e198", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 53.080404667s ago: executing program 32 (id=5079): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r4}, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000104) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8911, &(0x7f0000000140)={0xa, 0xfffc, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 49.850285684s ago: executing program 3 (id=5114): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc904a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400", @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e198", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 45.780692115s ago: executing program 3 (id=5120): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) splice(r1, &(0x7f00000003c0)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x5, 0x80, 0x3fffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000004cf139803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006007fffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffd, 0xcb}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x0, {0xffffffff, 0xbde, 0xb, 0xfffffffc}}) 31.417824164s ago: executing program 4 (id=5138): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc904a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e198", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 29.906646553s ago: executing program 33 (id=5120): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) splice(r1, &(0x7f00000003c0)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x5, 0x80, 0x3fffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000004cf139803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006007fffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffd, 0xcb}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x0, {0xffffffff, 0xbde, 0xb, 0xfffffffc}}) 26.300054252s ago: executing program 4 (id=5143): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) lseek(r2, 0x6, 0x4) 24.725780573s ago: executing program 4 (id=5146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6fea84014f874e746d6f64653d30303030303030303030303030303030303130303030302c7573", @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',\x00']) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r4, 0x0, 0x0) 21.730957414s ago: executing program 4 (id=5150): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 20.356931428s ago: executing program 4 (id=5152): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc904a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e198", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 18.206035736s ago: executing program 5 (id=5154): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 17.28810148s ago: executing program 5 (id=5155): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 16.674617993s ago: executing program 6 (id=5140): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 15.762481051s ago: executing program 4 (id=5156): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev2(r7, &(0x7f0000000400), 0x0, 0x5, 0x80, 0x3fffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000004cf139803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006007fffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffd, 0xcb}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x0, {0xffffffff, 0xbde, 0xb, 0xfffffffc}}) 15.133431203s ago: executing program 5 (id=5157): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc904a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e198", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 14.76042018s ago: executing program 6 (id=5158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6fea84014f874e746d6f64653d3030303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) lseek(r2, 0x6, 0x4) 13.135421849s ago: executing program 2 (id=5160): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 12.824704865s ago: executing program 6 (id=5161): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc904a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYBLOB="4c95f733c5d33b4e84a071925bc880bc3e8f6cbdb74077c5d16334a448fa47e198", @ANYBLOB="000826bd7000bedbdf253a00000076e1c91cadbc15527c95c83ca817cd369e03adefed0cb899149e6d6128"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 11.767342313s ago: executing program 0 (id=5162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 11.680529603s ago: executing program 2 (id=5163): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 10.125174003s ago: executing program 2 (id=5164): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 9.815829576s ago: executing program 0 (id=5165): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r0, @ANYBLOB='\b\x002\x00\x00\x00'], 0x2c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 8.72974268s ago: executing program 2 (id=5166): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 7.318841113s ago: executing program 5 (id=5167): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 6.941203326s ago: executing program 6 (id=5168): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYRES32=r0, @ANYBLOB='\b\x002\x00\x00\x00'], 0x2c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 6.568340661s ago: executing program 0 (id=5169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 6.208395711s ago: executing program 2 (id=5170): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, 0x0, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 4.618806251s ago: executing program 5 (id=5171): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYRES32=r0, @ANYBLOB='\b\x002\x00\x00\x00'], 0x2c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 3.868572775s ago: executing program 2 (id=5172): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) splice(r1, &(0x7f00000003c0)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev2(r6, &(0x7f0000000400), 0x0, 0x5, 0x80, 0x3fffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000170000004cf139803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006007fffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffd, 0xcb}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x0, {0xffffffff, 0xbde, 0xb, 0xfffffffc}}) 3.827989418s ago: executing program 0 (id=5173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6fea84014f874e746d6f64653d3030303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) lseek(r2, 0x6, 0x4) 2.248195873s ago: executing program 0 (id=5174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x80}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0xff, 0xb4, 0x8, 0x9}}, @void, @void, @void, @void}, 0x40) 1.435199167s ago: executing program 6 (id=5175): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 841.061078ms ago: executing program 5 (id=5176): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYRES32=r0, @ANYBLOB='\b\x002\x00\x00\x00'], 0x2c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 155.206312ms ago: executing program 0 (id=5177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r2}, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000104) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8911, &(0x7f0000000140)={0xa, 0xfffc, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 144.232618ms ago: executing program 34 (id=5156): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev2(r7, &(0x7f0000000400), 0x0, 0x5, 0x80, 0x3fffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000004cf139803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006007fffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffd, 0xcb}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x0, {0xffffffff, 0xbde, 0xb, 0xfffffffc}}) 0s ago: executing program 6 (id=5179): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) kernel console output (not intermixed with test programs): 0][ T9] usb 3-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2122.053453][ T9] usb 3-1: config 0 interface 20 has no altsetting 0 [ 2122.062967][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 2122.073512][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.082562][ T9] usb 3-1: Product: syz [ 2122.087274][ T9] usb 3-1: Manufacturer: syz [ 2122.092154][ T9] usb 3-1: SerialNumber: syz [ 2122.105676][ T9] usb 3-1: config 0 descriptor?? [ 2122.129564][T28102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2122.365285][T28099] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4812'. [ 2122.394440][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4812'. [ 2122.898202][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 2122.901328][ T30] audit: type=1326 audit(1760392172.491:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2122.934318][ T30] audit: type=1326 audit(1760392172.491:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2122.969503][ T30] audit: type=1326 audit(1760392172.491:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2122.992464][ T30] audit: type=1326 audit(1760392172.491:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2123.018001][ T30] audit: type=1326 audit(1760392172.491:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2123.094866][ T30] audit: type=1326 audit(1760392172.491:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2123.116872][ C1] vkms_vblank_simulate: vblank timer overrun [ 2123.125423][ T30] audit: type=1326 audit(1760392172.491:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2123.196558][ T30] audit: type=1326 audit(1760392172.491:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2123.218731][ C1] vkms_vblank_simulate: vblank timer overrun [ 2123.353366][ T30] audit: type=1326 audit(1760392172.491:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2123.732752][T28127] bridge52: entered promiscuous mode [ 2124.425974][ T9] keyspan 3-1:0.20: Keyspan 1 port adapter converter detected [ 2124.464858][ T9] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 87 [ 2124.479292][ T9] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 7 [ 2124.500201][ T9] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 81 [ 2124.519000][ T9] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 1 [ 2124.545280][ T9] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 2 [ 2124.563413][ T9] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 85 [ 2124.589233][ T9] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 5 [ 2124.606947][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2124.727931][ T9] usb 3-1: USB disconnect, device number 64 [ 2124.748867][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2124.770321][ T9] keyspan 3-1:0.20: device disconnected [ 2125.023911][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4818'. [ 2125.032975][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4818'. [ 2125.882649][T28148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4820'. [ 2126.899693][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2126.899711][ T30] audit: type=1326 audit(1760392176.491:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2126.998593][T28167] delete_channel: no stack [ 2127.046536][ T30] audit: type=1326 audit(1760392176.541:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.069220][ T30] audit: type=1326 audit(1760392176.561:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.091478][ T30] audit: type=1326 audit(1760392176.561:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.113912][ T30] audit: type=1326 audit(1760392176.561:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.204635][ T30] audit: type=1326 audit(1760392176.571:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.245104][ T30] audit: type=1326 audit(1760392176.571:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.273428][ T30] audit: type=1326 audit(1760392176.571:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.295914][ T30] audit: type=1326 audit(1760392176.571:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.326040][ T30] audit: type=1326 audit(1760392176.571:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28155 comm="syz.1.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2127.804056][T28166] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2129.011739][T28193] delete_channel: no stack [ 2130.368514][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4830'. [ 2130.942962][T28216] delete_channel: no stack [ 2131.107473][T28215] veth5: entered promiscuous mode [ 2131.112948][T28215] veth5: entered allmulticast mode [ 2132.359928][T28231] delete_channel: no stack [ 2135.162297][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 2135.162314][ T30] audit: type=1326 audit(1760392184.751:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.235394][ T30] audit: type=1326 audit(1760392184.781:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.288418][ T30] audit: type=1326 audit(1760392184.791:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.313591][ T30] audit: type=1326 audit(1760392184.791:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.352030][T28278] delete_channel: no stack [ 2135.551976][ T30] audit: type=1326 audit(1760392184.791:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.713937][ T30] audit: type=1326 audit(1760392184.791:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.819691][ T30] audit: type=1326 audit(1760392184.791:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.884505][ T30] audit: type=1326 audit(1760392184.791:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.906779][ T30] audit: type=1326 audit(1760392184.791:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2135.928833][ C1] vkms_vblank_simulate: vblank timer overrun [ 2135.935003][ T30] audit: type=1326 audit(1760392184.791:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.0.4842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2136.120963][T28259] delete_channel: no stack [ 2139.376267][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4851'. [ 2139.630763][T28334] delete_channel: no stack [ 2139.724016][T28327] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2140.441875][T28336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4852'. [ 2141.058892][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 2141.058910][ T30] audit: type=1326 audit(1760392190.651:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.114460][ T30] audit: type=1326 audit(1760392190.651:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.143017][ T30] audit: type=1326 audit(1760392190.691:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.179233][ T30] audit: type=1326 audit(1760392190.691:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.224529][ T30] audit: type=1326 audit(1760392190.691:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.267431][ T30] audit: type=1326 audit(1760392190.691:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.290460][ T30] audit: type=1326 audit(1760392190.691:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.351019][ T30] audit: type=1326 audit(1760392190.691:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.399144][ T30] audit: type=1326 audit(1760392190.691:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2141.464668][ T30] audit: type=1326 audit(1760392190.691:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.2.4853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2142.439402][T28368] bridge68: entered promiscuous mode [ 2144.274085][T28385] delete_channel: no stack [ 2144.427656][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4860'. [ 2145.523832][T28395] delete_channel: no stack [ 2145.927698][T28406] delete_channel: no stack [ 2146.284474][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2146.289140][ T30] audit: type=1326 audit(1760392195.871:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2146.367030][ T30] audit: type=1326 audit(1760392195.871:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2146.494581][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4866'. [ 2146.573655][ T30] audit: type=1326 audit(1760392195.881:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2146.645285][ T30] audit: type=1326 audit(1760392195.881:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2146.700480][ T30] audit: type=1326 audit(1760392195.881:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2146.763017][T28420] veth5: entered promiscuous mode [ 2146.770980][ T30] audit: type=1326 audit(1760392195.881:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2146.793036][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.806835][T28420] veth5: entered allmulticast mode [ 2146.855193][T28415] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2146.889361][ T30] audit: type=1326 audit(1760392195.881:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2146.911426][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.954955][T28426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4868'. [ 2146.984560][ T30] audit: type=1326 audit(1760392195.881:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2147.006454][ C1] vkms_vblank_simulate: vblank timer overrun [ 2147.104820][ T30] audit: type=1326 audit(1760392195.881:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28409 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2147.126947][ C1] vkms_vblank_simulate: vblank timer overrun [ 2147.238556][ T30] audit: type=1326 audit(1760392196.471:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28421 comm="syz.4.4868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2147.260656][ C1] vkms_vblank_simulate: vblank timer overrun [ 2148.168627][T28440] bridge69: entered promiscuous mode [ 2151.230523][T28456] delete_channel: no stack [ 2153.467472][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2153.467489][ T30] audit: type=1326 audit(1760392203.061:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2153.506881][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4880'. [ 2153.539233][T28497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4878'. [ 2153.574496][ T30] audit: type=1326 audit(1760392203.091:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2153.665017][ T30] audit: type=1326 audit(1760392203.091:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2153.851531][ T30] audit: type=1326 audit(1760392203.091:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2153.931053][ T30] audit: type=1326 audit(1760392203.091:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2153.953279][ T30] audit: type=1326 audit(1760392203.091:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2153.983819][ T30] audit: type=1326 audit(1760392203.091:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2154.013268][T28508] delete_channel: no stack [ 2154.018011][ T30] audit: type=1326 audit(1760392203.091:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2154.080492][ T30] audit: type=1326 audit(1760392203.091:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2154.153308][ T30] audit: type=1326 audit(1760392203.091:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.0.4880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2155.061515][T28519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'. [ 2156.396006][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4885'. [ 2157.535870][T28544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4887'. [ 2157.897505][T28553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4888'. [ 2158.109861][T28559] bridge53: entered promiscuous mode [ 2158.965662][T28549] delete_channel: no stack [ 2159.031665][T28570] veth3: entered promiscuous mode [ 2159.036979][T28570] veth3: entered allmulticast mode [ 2160.219257][T28584] delete_channel: no stack [ 2160.327683][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.334158][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.933742][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 2160.933760][ T30] audit: type=1326 audit(1760392210.521:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2160.982927][ T30] audit: type=1326 audit(1760392210.571:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2161.040912][T28590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 2161.087846][ T30] audit: type=1326 audit(1760392210.611:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2161.110007][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.197217][ T30] audit: type=1326 audit(1760392210.611:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2161.353336][ T30] audit: type=1326 audit(1760392210.611:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2161.375427][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.544461][ T30] audit: type=1326 audit(1760392210.611:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2161.616276][ T30] audit: type=1326 audit(1760392210.611:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2161.673652][T28597] delete_channel: no stack [ 2161.680171][ T30] audit: type=1326 audit(1760392210.611:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2161.841557][T28604] delete_channel: no stack [ 2161.997224][ T30] audit: type=1326 audit(1760392210.611:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2162.107339][ T30] audit: type=1326 audit(1760392210.611:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28587 comm="syz.2.4895" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2162.883933][T28603] delete_channel: no stack [ 2163.194634][T28616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4901'. [ 2163.213784][T28613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4900'. [ 2163.900958][T28633] delete_channel: no stack [ 2163.959839][T28636] bridge70: entered promiscuous mode [ 2164.176326][T28639] delete_channel: no stack [ 2164.489389][T28621] delete_channel: no stack [ 2165.247843][T28645] veth7: entered promiscuous mode [ 2165.252946][T28645] veth7: entered allmulticast mode [ 2165.692026][T28656] bridge52: entered promiscuous mode [ 2166.761461][T28644] delete_channel: no stack [ 2167.572869][T28674] veth9: entered promiscuous mode [ 2167.580820][T28674] veth9: entered allmulticast mode [ 2171.007926][ T5915] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 2171.231133][ T5915] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 2171.247431][ T5915] usb 1-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 2171.270715][ T5915] usb 1-1: config 0 has no interface number 0 [ 2171.279690][ T5915] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2171.312275][ T5915] usb 1-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 2171.324489][ T5915] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 2171.335780][ T5915] usb 1-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2171.349887][ T5915] usb 1-1: config 0 interface 20 has no altsetting 0 [ 2171.358975][ T5915] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 2171.368193][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.376513][ T5915] usb 1-1: Product: syz [ 2171.380784][ T5915] usb 1-1: Manufacturer: syz [ 2171.386681][ T5915] usb 1-1: SerialNumber: syz [ 2171.393177][ T5915] usb 1-1: config 0 descriptor?? [ 2171.402206][T28705] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2171.553762][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 2171.553780][ T30] audit: type=1326 audit(1760392221.141:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2171.621217][ T30] audit: type=1326 audit(1760392221.171:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2171.646998][T28700] netlink: 41 bytes leftover after parsing attributes in process `syz.0.4915'. [ 2171.664597][T28700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4915'. [ 2171.699635][ T30] audit: type=1326 audit(1760392221.181:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2171.721773][ C1] vkms_vblank_simulate: vblank timer overrun [ 2171.728526][T26047] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2171.745019][T28717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4917'. [ 2171.783690][ T30] audit: type=1326 audit(1760392221.181:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2171.805847][ C1] vkms_vblank_simulate: vblank timer overrun [ 2171.848492][ T30] audit: type=1326 audit(1760392221.181:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2171.904681][T26047] usb 4-1: Using ep0 maxpacket: 32 [ 2171.920950][T26047] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 2171.945486][T26047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.023701][T26047] usb 4-1: Product: syz [ 2172.041297][ T30] audit: type=1326 audit(1760392221.191:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2172.079028][T26047] usb 4-1: Manufacturer: syz [ 2172.090658][T26047] usb 4-1: SerialNumber: syz [ 2172.107107][T26047] usb 4-1: config 0 descriptor?? [ 2172.168543][T26047] snd-usb-6fire 4-1:0.0: too many cards registered. [ 2172.217216][ T30] audit: type=1326 audit(1760392221.191:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2172.239458][ C1] vkms_vblank_simulate: vblank timer overrun [ 2172.373466][ T30] audit: type=1326 audit(1760392221.191:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2172.521931][ T30] audit: type=1326 audit(1760392221.191:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2172.617296][ T30] audit: type=1326 audit(1760392221.191:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28711 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2172.640648][ C1] vkms_vblank_simulate: vblank timer overrun [ 2172.871055][T28732] syzkaller0: entered promiscuous mode [ 2172.881661][T28732] syzkaller0: entered allmulticast mode [ 2173.726342][ T5915] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 2173.739498][ T5915] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 2173.747422][ T5915] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 7 [ 2173.799235][ T5915] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 2173.834761][ T5915] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 2173.872553][ T5915] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 2173.880414][ T5915] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 2173.906049][ T5915] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 2173.996694][ T5915] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2174.108925][ T5915] usb 1-1: USB disconnect, device number 62 [ 2174.238270][ T5915] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2174.258710][T28746] bridge53: entered promiscuous mode [ 2174.265435][ T5915] keyspan 1-1:0.20: device disconnected [ 2174.548441][T20338] usb 4-1: USB disconnect, device number 54 [ 2177.499284][T28772] bridge54: entered promiscuous mode [ 2177.636566][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2177.636584][ T30] audit: type=1326 audit(1760392227.231:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.717211][ T30] audit: type=1326 audit(1760392227.231:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.739658][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.750648][ T30] audit: type=1326 audit(1760392227.261:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.772742][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.780672][ T30] audit: type=1326 audit(1760392227.261:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.806487][ T30] audit: type=1326 audit(1760392227.261:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.829351][ T30] audit: type=1326 audit(1760392227.391:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.853839][ T30] audit: type=1326 audit(1760392227.391:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.875898][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.885315][ T30] audit: type=1326 audit(1760392227.391:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2177.907397][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.974012][T28776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4927'. [ 2177.983639][ T30] audit: type=1326 audit(1760392227.561:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2178.005750][ C1] vkms_vblank_simulate: vblank timer overrun [ 2178.028021][ T30] audit: type=1326 audit(1760392227.561:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28770 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2178.830902][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4928'. [ 2178.974895][T28787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4929'. [ 2180.398146][T28793] delete_channel: no stack [ 2180.894637][T20338] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 2181.165494][T20338] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2181.204836][T20338] usb 4-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 2181.273999][T20338] usb 4-1: config 0 has no interface number 0 [ 2181.293930][T20338] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2181.324270][T20338] usb 4-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 2181.372232][T20338] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 2181.403090][T20338] usb 4-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2181.452094][T20338] usb 4-1: config 0 interface 20 has no altsetting 0 [ 2181.469933][T20338] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 2181.480730][T20338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.506424][T20338] usb 4-1: Product: syz [ 2181.564968][T20338] usb 4-1: Manufacturer: syz [ 2181.596236][T20338] usb 4-1: SerialNumber: syz [ 2181.654735][T20338] usb 4-1: config 0 descriptor?? [ 2181.662332][T28804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2181.687334][T28811] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2181.886924][T28802] netlink: 41 bytes leftover after parsing attributes in process `syz.3.4932'. [ 2181.898512][T28802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 2183.547521][T20338] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 2183.555301][T20338] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 2183.575203][T20338] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 7 [ 2183.584785][T20338] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 2183.592727][T20338] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 2183.601446][T20338] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 2183.610434][T20338] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 2183.623174][T20338] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 2183.634762][T20338] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2183.648625][T20338] usb 4-1: USB disconnect, device number 55 [ 2183.657594][T20338] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2183.683008][T20338] keyspan 4-1:0.20: device disconnected [ 2184.230031][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 2184.230049][ T30] audit: type=1326 audit(1760392233.821:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.290231][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4942'. [ 2184.348180][ T30] audit: type=1326 audit(1760392233.851:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.429593][ T30] audit: type=1326 audit(1760392233.851:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.514114][ T30] audit: type=1326 audit(1760392233.851:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.605420][ T30] audit: type=1326 audit(1760392233.861:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.739970][T28838] delete_channel: no stack [ 2184.754697][ T30] audit: type=1326 audit(1760392233.861:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.777753][ T30] audit: type=1326 audit(1760392233.861:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.801098][ T30] audit: type=1326 audit(1760392233.861:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.823188][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.831716][ T30] audit: type=1326 audit(1760392233.871:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.854052][ T30] audit: type=1326 audit(1760392233.871:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28847 comm="syz.2.4942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2184.876116][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.999394][T28841] delete_channel: no stack [ 2187.126627][T28865] veth3: entered promiscuous mode [ 2187.132804][T28865] veth3: entered allmulticast mode [ 2187.243616][T28881] bridge71: entered promiscuous mode [ 2187.499742][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4949'. [ 2187.624715][T28897] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2189.508950][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2189.508967][ T30] audit: type=1326 audit(1760392239.101:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2189.642747][ T30] audit: type=1326 audit(1760392239.141:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2189.738467][ T30] audit: type=1326 audit(1760392239.141:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2189.761232][ T30] audit: type=1326 audit(1760392239.141:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2189.784006][ T30] audit: type=1326 audit(1760392239.141:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2189.806283][ C1] vkms_vblank_simulate: vblank timer overrun [ 2189.864720][ T30] audit: type=1326 audit(1760392239.151:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2189.912727][T28912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4952'. [ 2189.984583][ T30] audit: type=1326 audit(1760392239.151:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2190.006717][ C1] vkms_vblank_simulate: vblank timer overrun [ 2190.092375][ T30] audit: type=1326 audit(1760392239.151:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2190.224498][ T30] audit: type=1326 audit(1760392239.151:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2190.347416][ T30] audit: type=1326 audit(1760392239.151:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28908 comm="syz.3.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2190.400737][T28899] delete_channel: no stack [ 2191.055396][T28915] delete_channel: no stack [ 2191.238376][T28929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4957'. [ 2191.411856][T28929] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2191.478624][T28948] bridge59: entered promiscuous mode [ 2192.447395][T28930] delete_channel: no stack [ 2193.022263][T28955] veth5: entered promiscuous mode [ 2193.027492][T28955] veth5: entered allmulticast mode [ 2193.589368][T28970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 2195.385815][T28987] bridge55: entered promiscuous mode [ 2196.211249][T28975] delete_channel: no stack [ 2196.624319][T28999] veth5: entered promiscuous mode [ 2196.633096][T28999] veth5: entered allmulticast mode [ 2196.831492][T28990] delete_channel: no stack [ 2198.581361][T29023] veth7: entered promiscuous mode [ 2198.586709][T29023] veth7: entered allmulticast mode [ 2200.095335][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 2200.095581][ T30] audit: type=1326 audit(1760392249.691:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2200.107088][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4976'. [ 2200.123818][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.813778][ T30] audit: type=1326 audit(1760392249.691:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2200.994493][ T30] audit: type=1326 audit(1760392249.691:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.091372][ T30] audit: type=1326 audit(1760392249.691:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.150617][ T30] audit: type=1326 audit(1760392249.691:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.183695][ T30] audit: type=1326 audit(1760392249.691:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.265443][ T30] audit: type=1326 audit(1760392249.691:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.340565][ T30] audit: type=1326 audit(1760392249.691:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.383389][ T30] audit: type=1326 audit(1760392249.691:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.405362][ C1] vkms_vblank_simulate: vblank timer overrun [ 2201.534390][ T30] audit: type=1326 audit(1760392249.691:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.4976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2201.556487][ C1] vkms_vblank_simulate: vblank timer overrun [ 2203.415629][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4982'. [ 2203.591765][T29088] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2203.632659][T29093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4983'. [ 2204.980738][T29101] veth7: entered promiscuous mode [ 2205.013499][T29101] veth7: entered allmulticast mode [ 2206.470897][T29121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4987'. [ 2207.903845][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2207.903863][ T30] audit: type=1326 audit(1760392257.491:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2207.964887][ T30] audit: type=1326 audit(1760392257.531:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2207.987297][ C1] vkms_vblank_simulate: vblank timer overrun [ 2208.029498][ T30] audit: type=1326 audit(1760392257.531:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2208.051616][ C1] vkms_vblank_simulate: vblank timer overrun [ 2208.090320][ T30] audit: type=1326 audit(1760392257.531:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2208.159145][ T30] audit: type=1326 audit(1760392257.531:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2208.235399][ T30] audit: type=1326 audit(1760392257.531:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2208.292065][ T30] audit: type=1326 audit(1760392257.531:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2208.357564][ T30] audit: type=1326 audit(1760392257.531:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2208.402957][ T30] audit: type=1326 audit(1760392257.541:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2208.449603][ T30] audit: type=1326 audit(1760392257.541:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29131 comm="syz.3.4990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2209.614444][ T5887] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 2209.797649][ T5887] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 2209.819706][ T5887] usb 1-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 2209.839706][ T5887] usb 1-1: config 0 has no interface number 0 [ 2209.854519][ T5887] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2209.879686][ T5887] usb 1-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 2209.905234][ T5887] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 2209.935077][ T5887] usb 1-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2209.960745][ T5887] usb 1-1: config 0 interface 20 has no altsetting 0 [ 2210.001273][ T5887] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 2210.019340][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.039689][ T5887] usb 1-1: Product: syz [ 2210.043873][ T5887] usb 1-1: Manufacturer: syz [ 2210.054890][ T5887] usb 1-1: SerialNumber: syz [ 2210.061227][ T5887] usb 1-1: config 0 descriptor?? [ 2210.067722][T29152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2210.305909][T29146] netlink: 41 bytes leftover after parsing attributes in process `syz.0.4993'. [ 2210.319729][T29146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4993'. [ 2211.252620][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4997'. [ 2212.262837][ T5887] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 2212.274595][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 2212.299147][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 7 [ 2212.315404][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 2212.327128][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 2212.335776][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 2212.354659][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 2212.371375][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 2212.430727][ T5887] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2212.535020][ T5887] usb 1-1: USB disconnect, device number 63 [ 2212.595229][ T5887] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2212.687079][ T5887] keyspan 1-1:0.20: device disconnected [ 2213.170828][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'. [ 2213.291369][T29195] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2213.848754][T29209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5004'. [ 2214.853482][T29219] bridge54: entered promiscuous mode [ 2214.910028][T29218] bridge53: entered promiscuous mode [ 2216.338080][T29233] veth7: entered promiscuous mode [ 2216.343173][T29233] veth7: entered allmulticast mode [ 2217.889489][T29247] veth11: entered promiscuous mode [ 2217.895379][T29247] veth11: entered allmulticast mode [ 2218.113459][T29256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5011'. [ 2218.701086][T29267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5013'. [ 2218.850636][T29268] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2219.448998][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2219.449013][ T30] audit: type=1326 audit(1760392269.031:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29273 comm="syz.0.5015" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x0 [ 2219.498979][T29275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5014'. [ 2219.531688][ T30] audit: type=1326 audit(1760392269.071:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.564282][ T30] audit: type=1326 audit(1760392269.071:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.587030][ T30] audit: type=1326 audit(1760392269.071:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.610062][ T30] audit: type=1326 audit(1760392269.071:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.642433][ T30] audit: type=1326 audit(1760392269.071:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.665342][ T30] audit: type=1326 audit(1760392269.081:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.688920][ T30] audit: type=1326 audit(1760392269.081:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.731806][ T30] audit: type=1326 audit(1760392269.081:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.756935][ T30] audit: type=1326 audit(1760392269.081:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29270 comm="syz.4.5014" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2219.976393][ T5887] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 2220.178934][ T5887] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 2220.189927][ T5887] usb 1-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 2220.223733][ T5887] usb 1-1: config 0 has no interface number 0 [ 2220.240824][ T5887] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2220.282735][ T5887] usb 1-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 2220.318049][ T5887] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 2220.362518][ T5887] usb 1-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2220.400443][ T5887] usb 1-1: config 0 interface 20 has no altsetting 0 [ 2220.534207][ T5887] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 2220.544275][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.568108][ T5887] usb 1-1: Product: syz [ 2220.572298][ T5887] usb 1-1: Manufacturer: syz [ 2220.595556][ T5887] usb 1-1: SerialNumber: syz [ 2220.617007][ T5887] usb 1-1: config 0 descriptor?? [ 2220.672845][T29281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2220.926731][T29277] netlink: 41 bytes leftover after parsing attributes in process `syz.0.5015'. [ 2220.935960][T29277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5015'. [ 2221.309475][T29293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2221.642227][T29300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5018'. [ 2221.724207][T29301] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 2221.771762][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.779648][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.847285][T29304] bridge72: entered promiscuous mode [ 2222.553584][ T5887] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 2222.570750][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 2222.579018][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 7 [ 2222.592313][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 2222.600426][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 2222.608556][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 2222.621994][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 2222.641568][ T5887] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 2222.659472][ T5887] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2222.671975][ T5887] usb 1-1: USB disconnect, device number 64 [ 2222.682967][ T5887] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2222.699543][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5020'. [ 2222.714541][ T5887] keyspan 1-1:0.20: device disconnected [ 2224.133216][T29319] veth9: entered promiscuous mode [ 2224.139419][T29319] veth9: entered allmulticast mode [ 2224.512943][T29328] bridge56: entered promiscuous mode [ 2226.309019][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2226.309034][ T30] audit: type=1326 audit(1760392275.901:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.484592][ T30] audit: type=1326 audit(1760392275.911:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.533284][ T30] audit: type=1326 audit(1760392275.911:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.577536][ T30] audit: type=1326 audit(1760392275.911:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.600399][ T30] audit: type=1326 audit(1760392275.931:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.622906][ T30] audit: type=1326 audit(1760392275.931:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.646258][ T30] audit: type=1326 audit(1760392275.931:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.669225][ T30] audit: type=1326 audit(1760392275.931:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.729077][ T30] audit: type=1326 audit(1760392275.931:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2226.782695][ T30] audit: type=1326 audit(1760392275.931:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2228.242136][T29365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2229.342154][T29376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 2230.206999][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5033'. [ 2231.948217][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2231.983920][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5038'. [ 2233.790957][T29436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2234.189805][T29434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2234.225717][T29438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2234.512690][T29445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2234.679713][T29444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2236.485614][T29466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2236.603426][T29467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2238.146773][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2238.146789][ T30] audit: type=1326 audit(1760392287.741:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.174964][ C0] vkms_vblank_simulate: vblank timer overrun [ 2238.199188][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5048'. [ 2238.208773][ T30] audit: type=1326 audit(1760392287.781:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.231189][ T30] audit: type=1326 audit(1760392287.781:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.274792][ T30] audit: type=1326 audit(1760392287.781:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.409730][ T30] audit: type=1326 audit(1760392287.781:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.498575][ T30] audit: type=1326 audit(1760392287.781:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.595703][ T30] audit: type=1326 audit(1760392287.781:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.652451][T29493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2238.679465][ T30] audit: type=1326 audit(1760392287.781:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2238.718234][T29492] veth9: entered promiscuous mode [ 2238.723922][T29492] veth9: entered allmulticast mode [ 2238.848781][ T30] audit: type=1326 audit(1760392287.781:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2239.015007][ T30] audit: type=1326 audit(1760392287.781:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.5048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2241.170725][T29509] veth7: entered promiscuous mode [ 2241.178420][T29509] veth7: entered allmulticast mode [ 2241.356748][T29527] bridge54: entered promiscuous mode [ 2242.371403][T29538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 2242.941059][T29544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5058'. [ 2244.280867][T29552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2246.017697][T29572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5062'. [ 2246.098677][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2246.098696][ T30] audit: type=1326 audit(1760392295.691:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.141333][T29576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5064'. [ 2246.153697][ T30] audit: type=1326 audit(1760392295.721:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.177342][ T30] audit: type=1326 audit(1760392295.721:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.211669][ T30] audit: type=1326 audit(1760392295.721:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.236555][ T30] audit: type=1326 audit(1760392295.731:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.263753][ T30] audit: type=1326 audit(1760392295.731:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.291541][ T30] audit: type=1326 audit(1760392295.731:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.317075][ T30] audit: type=1326 audit(1760392295.731:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.340371][ T30] audit: type=1326 audit(1760392295.731:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.365753][ T30] audit: type=1326 audit(1760392295.731:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2246.486986][T29586] bridge73: entered promiscuous mode [ 2247.093191][T29594] bridge60: entered promiscuous mode [ 2247.201699][T29589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2249.324035][T29616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2249.428902][T29616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2250.309671][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5071'. [ 2251.209617][T29637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2251.395401][T29636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2254.327689][T29683] bridge74: entered promiscuous mode [ 2255.797901][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 2255.797920][ T30] audit: type=1326 audit(1760392305.391:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2255.979355][ T30] audit: type=1326 audit(1760392305.391:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.115875][ T30] audit: type=1326 audit(1760392305.451:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.217068][ T30] audit: type=1326 audit(1760392305.461:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.241622][ T30] audit: type=1326 audit(1760392305.461:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.266667][ T30] audit: type=1326 audit(1760392305.461:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.290513][ T30] audit: type=1326 audit(1760392305.461:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.385049][ T30] audit: type=1326 audit(1760392305.461:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.513370][ T30] audit: type=1326 audit(1760392305.461:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.587991][ T30] audit: type=1326 audit(1760392305.461:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29692 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.656892][T29706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2256.694179][T29706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2257.154750][T29708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2257.460440][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5085'. [ 2258.630509][T29728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2258.780207][T29733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5088'. [ 2260.273337][T29745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2260.289346][T29745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2260.812515][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 2260.812529][ T30] audit: type=1326 audit(1760392310.391:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2260.880729][ T30] audit: type=1326 audit(1760392310.391:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2260.935031][ T30] audit: type=1326 audit(1760392310.441:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2260.960053][ T30] audit: type=1326 audit(1760392310.441:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2261.010048][ T30] audit: type=1326 audit(1760392310.441:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2261.063248][ T30] audit: type=1326 audit(1760392310.441:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2261.111766][ T30] audit: type=1326 audit(1760392310.441:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2261.165148][ T30] audit: type=1326 audit(1760392310.441:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2261.221673][ T30] audit: type=1326 audit(1760392310.441:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2261.296929][ T30] audit: type=1326 audit(1760392310.441:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.0.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2264.525208][T29805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2264.559398][T29805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2265.610201][T29809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2265.623085][T29809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2265.820901][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2265.820919][ T30] audit: type=1326 audit(1760392315.411:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29814 comm="syz.4.5103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2265.976196][ T30] audit: type=1326 audit(1760392315.571:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29814 comm="syz.4.5103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2265.998828][ C1] vkms_vblank_simulate: vblank timer overrun [ 2266.071091][ T30] audit: type=1326 audit(1760392315.571:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29814 comm="syz.4.5103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2266.845143][T29830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2266.883669][T29830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2267.481990][ T30] audit: type=1326 audit(1760392317.071:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2267.506054][ T30] audit: type=1326 audit(1760392317.101:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2267.530203][ T30] audit: type=1326 audit(1760392317.121:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2267.562354][ T30] audit: type=1326 audit(1760392317.141:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2267.686418][ T30] audit: type=1326 audit(1760392317.141:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2267.712613][ T30] audit: type=1326 audit(1760392317.151:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2267.738114][ T30] audit: type=1326 audit(1760392317.151:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2268.506074][T29848] bridge61: entered promiscuous mode [ 2268.541240][T29847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5108'. [ 2270.468408][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2270.490687][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2270.509586][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2270.539928][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2270.565161][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2271.091206][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 2271.091224][ T30] audit: type=1326 audit(1760392320.681:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.144174][ T30] audit: type=1326 audit(1760392320.711:7057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.172697][ T30] audit: type=1326 audit(1760392320.711:7058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.196119][ T30] audit: type=1326 audit(1760392320.721:7059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.218866][ T30] audit: type=1326 audit(1760392320.721:7060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.242467][ T30] audit: type=1326 audit(1760392320.721:7061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.265724][ T30] audit: type=1326 audit(1760392320.721:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.290352][ T30] audit: type=1326 audit(1760392320.721:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.314233][ T30] audit: type=1326 audit(1760392320.721:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.337673][ T30] audit: type=1326 audit(1760392320.721:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.4.5112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2271.999523][ T1154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.469149][ T1154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.502305][T29863] chnl_net:caif_netlink_parms(): no params data found [ 2272.620405][ T1154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.645340][ T5837] Bluetooth: hci5: command tx timeout [ 2272.858664][ T1154] team0: Port device netdevsim0 removed [ 2272.871658][ T1154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.123592][T29887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2273.137966][T29887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2273.198407][T29889] bridge62: entered promiscuous mode [ 2273.554065][T29863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.575961][T29863] bridge0: port 1(bridge_slave_0) entered disabled state [ 2273.600040][T29863] bridge_slave_0: entered allmulticast mode [ 2273.692282][T29863] bridge_slave_0: entered promiscuous mode [ 2273.746495][T29863] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.780093][T29863] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.834163][T29863] bridge_slave_1: entered allmulticast mode [ 2273.880560][T29863] bridge_slave_1: entered promiscuous mode [ 2274.131794][T29863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2274.279520][T29863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2274.611097][T29863] team0: Port device team_slave_0 added [ 2274.634103][ T1154] bridge_slave_1: left allmulticast mode [ 2274.642141][ T1154] bridge_slave_1: left promiscuous mode [ 2274.649547][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2274.697172][ T1154] bridge_slave_0: left allmulticast mode [ 2274.713775][ T1154] bridge_slave_0: left promiscuous mode [ 2274.726707][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2274.809182][ T5837] Bluetooth: hci5: command tx timeout [ 2275.733381][T29928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5119'. [ 2276.115622][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 2276.115642][ T30] audit: type=1326 audit(1760392325.701:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29923 comm="syz.2.5119" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2276.235566][ T30] audit: type=1326 audit(1760392325.701:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29923 comm="syz.2.5119" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2276.885896][ T5837] Bluetooth: hci5: command tx timeout [ 2277.923609][T29951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2277.942772][T29951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2278.965464][ T5837] Bluetooth: hci5: command tx timeout [ 2279.878077][ T30] audit: type=1326 audit(1760392329.451:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2279.912212][ T30] audit: type=1326 audit(1760392329.451:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2279.934442][ C0] vkms_vblank_simulate: vblank timer overrun [ 2279.945451][ T30] audit: type=1326 audit(1760392329.451:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2279.967654][ C0] vkms_vblank_simulate: vblank timer overrun [ 2279.976257][ T30] audit: type=1326 audit(1760392329.451:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2280.006033][ T30] audit: type=1326 audit(1760392329.451:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2280.029181][ T30] audit: type=1326 audit(1760392329.451:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2280.051268][ C0] vkms_vblank_simulate: vblank timer overrun [ 2280.058530][ T30] audit: type=1326 audit(1760392329.451:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2280.081993][ T30] audit: type=1326 audit(1760392329.451:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29965 comm="syz.4.5124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2280.104196][ C0] vkms_vblank_simulate: vblank timer overrun [ 2281.353286][T29975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2281.501358][T29974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2282.722023][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2282.737347][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2282.747727][ T1154] bond0 (unregistering): Released all slaves [ 2282.769035][ T1154] bond1 (unregistering): Released all slaves [ 2282.826544][T29863] team0: Port device team_slave_1 added [ 2282.906890][T29938] veth13: entered promiscuous mode [ 2282.926139][T29938] veth13: entered allmulticast mode [ 2282.948654][T29950] bridge75: entered promiscuous mode [ 2282.977614][T29961] bridge55: entered promiscuous mode [ 2283.092049][ T1154] tipc: Left network mode [ 2283.156475][ T1154] IPVS: stopping master sync thread 9538 ... [ 2283.180958][T29863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2283.220113][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.226948][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.260428][T29863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2283.302520][T29863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2283.568109][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2283.568126][ T30] audit: type=1326 audit(1760392333.151:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2283.651254][ T30] audit: type=1326 audit(1760392333.151:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2283.755904][ T30] audit: type=1326 audit(1760392333.151:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2283.828242][ T30] audit: type=1326 audit(1760392333.151:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2283.934405][ T30] audit: type=1326 audit(1760392333.151:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2283.998605][ T30] audit: type=1326 audit(1760392333.151:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2284.083565][ T30] audit: type=1326 audit(1760392333.151:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2284.134394][ T30] audit: type=1326 audit(1760392333.151:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2284.184423][ T30] audit: type=1326 audit(1760392333.151:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2284.223068][ T30] audit: type=1326 audit(1760392333.151:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29987 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2284.270696][T29863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2284.279125][T29863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.306143][T29863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2284.399531][T29863] hsr_slave_0: entered promiscuous mode [ 2284.414005][T29863] hsr_slave_1: entered promiscuous mode [ 2284.435129][T29863] debugfs: 'hsr0' already exists in 'hsr' [ 2284.440866][T29863] Cannot create hsr debugfs directory [ 2284.682890][ T1154] hsr_slave_0: left promiscuous mode [ 2284.698056][ T1154] hsr_slave_1: left promiscuous mode [ 2284.724150][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2284.735760][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.796025][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2284.830341][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.159777][ T1154] veth1_macvtap: left promiscuous mode [ 2285.186612][ T1154] veth0_macvtap: left promiscuous mode [ 2286.023155][ T1154] pim6reg (unregistering): left allmulticast mode [ 2286.201837][ T1154] pimreg (unregistering): left allmulticast mode [ 2286.631926][T30025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2286.675563][T30025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2287.050527][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 2287.108016][T30033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2287.246277][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 2287.255423][T30034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2288.830034][T30046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2289.218654][T30045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2290.976543][T29863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2291.010081][T29863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2291.085349][T30071] bridge56: entered promiscuous mode [ 2291.096138][T29863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2291.421215][T30077] bridge57: entered promiscuous mode [ 2291.461214][T29863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2291.590794][ T1154] IPVS: stop unused estimator thread 0... [ 2292.215839][T29863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2292.330579][T29863] 8021q: adding VLAN 0 to HW filter on device team0 [ 2292.506966][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.514093][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2292.738263][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.745478][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2292.980546][T29863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2293.178203][T29863] veth0_vlan: entered promiscuous mode [ 2293.259456][T29863] veth1_vlan: entered promiscuous mode [ 2293.458300][T29863] veth0_macvtap: entered promiscuous mode [ 2293.562079][T29863] veth1_macvtap: entered promiscuous mode [ 2293.603992][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2293.627019][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2293.633864][T29863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2293.644851][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2293.667678][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2293.693303][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2293.879936][T29863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2294.071569][ T3561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.083866][ T3561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.267183][ T3561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.276593][ T3561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.725758][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2294.756104][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2294.896481][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2294.896494][ T30] audit: type=1326 audit(1760392344.471:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2295.024999][ T30] audit: type=1326 audit(1760392344.471:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2295.083626][ T30] audit: type=1326 audit(1760392344.481:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2295.193124][T30120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2295.216249][T30120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2295.236746][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2295.254963][ T30] audit: type=1326 audit(1760392344.481:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2295.294679][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.430220][ T30] audit: type=1326 audit(1760392344.481:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2295.657983][ T30] audit: type=1326 audit(1760392344.481:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2295.769501][ T5834] Bluetooth: hci1: command tx timeout [ 2295.799973][ T30] audit: type=1326 audit(1760392344.481:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2295.925281][T30109] chnl_net:caif_netlink_parms(): no params data found [ 2295.973525][ T30] audit: type=1326 audit(1760392344.481:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2296.087255][ T30] audit: type=1326 audit(1760392344.481:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2296.189203][ T30] audit: type=1326 audit(1760392344.481:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2297.846627][ T5834] Bluetooth: hci1: command tx timeout [ 2299.925340][ T5834] Bluetooth: hci1: command tx timeout [ 2300.067164][T30109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2300.075405][T30109] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.082676][T30109] bridge_slave_0: entered allmulticast mode [ 2300.092261][T30109] bridge_slave_0: entered promiscuous mode [ 2300.101988][T30109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2300.109940][T30109] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.119563][T30109] bridge_slave_1: entered allmulticast mode [ 2300.127445][T30109] bridge_slave_1: entered promiscuous mode [ 2300.146757][T30178] veth3: entered promiscuous mode [ 2300.151916][T30178] veth3: entered allmulticast mode [ 2300.237258][T30109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2300.282936][T30109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2300.316185][T30109] team0: Port device team_slave_0 added [ 2300.336581][T30109] team0: Port device team_slave_1 added [ 2300.679864][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2300.679880][ T30] audit: type=1326 audit(1760392350.251:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2300.710018][ T30] audit: type=1326 audit(1760392350.251:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2300.732249][ C1] vkms_vblank_simulate: vblank timer overrun [ 2300.747589][ T30] audit: type=1326 audit(1760392350.251:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2300.769679][ C1] vkms_vblank_simulate: vblank timer overrun [ 2300.895516][ T30] audit: type=1326 audit(1760392350.251:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2300.896232][T30109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2300.917616][ C1] vkms_vblank_simulate: vblank timer overrun [ 2300.935030][T30109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2300.967274][T30109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2300.991923][ T30] audit: type=1326 audit(1760392350.251:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2301.018988][T25983] team0: Port device netdevsim0 removed [ 2301.038614][T30109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2301.046993][T30109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2301.074175][T30109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2301.132887][T30109] hsr_slave_0: entered promiscuous mode [ 2301.140093][T30109] hsr_slave_1: entered promiscuous mode [ 2301.205445][ T30] audit: type=1326 audit(1760392350.251:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2301.256488][ T30] audit: type=1326 audit(1760392350.251:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2301.333214][ T30] audit: type=1326 audit(1760392350.251:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2301.424783][ T30] audit: type=1326 audit(1760392350.251:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2301.488208][ T30] audit: type=1326 audit(1760392350.251:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.4.5150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2301.774176][T30109] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2301.800515][T30109] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2301.838203][T30109] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2301.948025][T30109] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2302.005657][ T5834] Bluetooth: hci1: command tx timeout [ 2302.274000][T30211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2302.302183][T30211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2303.977192][T30212] bridge58: entered promiscuous mode [ 2304.193356][T30109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2304.235945][T30109] 8021q: adding VLAN 0 to HW filter on device team0 [ 2304.318447][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 2304.325614][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2304.349867][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 2304.357067][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2304.419655][T30109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2304.495006][T30109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2304.571885][T30109] veth0_vlan: entered promiscuous mode [ 2304.601374][T30109] veth1_vlan: entered promiscuous mode [ 2304.656840][T30109] veth0_macvtap: entered promiscuous mode [ 2304.678653][T30109] veth1_macvtap: entered promiscuous mode [ 2304.728723][T30109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2304.753456][T30109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2304.778551][T14507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.797337][T17947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.017650][T17947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.143053][T17947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.330487][T17947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.350910][T17947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2305.382323][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.391964][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2305.774034][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 2305.774051][ T30] audit: type=1326 audit(1760392355.361:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2305.870962][ T30] audit: type=1326 audit(1760392355.361:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2305.931523][ T30] audit: type=1326 audit(1760392355.361:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2306.000279][ T30] audit: type=1326 audit(1760392355.361:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2306.097728][ T30] audit: type=1326 audit(1760392355.361:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2306.221265][ T30] audit: type=1326 audit(1760392355.361:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2306.338121][ T30] audit: type=1326 audit(1760392355.361:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2306.367360][ T30] audit: type=1326 audit(1760392355.361:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2306.393547][ T30] audit: type=1326 audit(1760392355.361:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2306.458201][ T30] audit: type=1326 audit(1760392355.431:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.6.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2310.785122][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 2310.785140][ T30] audit: type=1326 audit(1760392360.381:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2310.926959][T30313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2310.988858][ T30] audit: type=1326 audit(1760392360.411:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.027272][ T30] audit: type=1326 audit(1760392360.411:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.055987][ T30] audit: type=1326 audit(1760392360.411:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.085809][ T30] audit: type=1326 audit(1760392360.411:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.108781][ T30] audit: type=1326 audit(1760392360.411:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.136626][ T30] audit: type=1326 audit(1760392360.411:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.159883][ T30] audit: type=1326 audit(1760392360.411:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.208591][ T30] audit: type=1326 audit(1760392360.411:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.243994][ T30] audit: type=1326 audit(1760392360.411:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2311.304009][T30312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2314.047973][T30333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2314.080746][T30333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2314.273260][T25983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2314.285510][T25983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2314.301093][T25983] bond0 (unregistering): Released all slaves [ 2314.548850][T25983] bond1 (unregistering): Released all slaves [ 2314.588486][T30265] veth11: entered promiscuous mode [ 2314.593622][T30265] veth11: entered allmulticast mode [ 2314.628710][T30276] bridge1: entered promiscuous mode [ 2314.680876][T30300] bridge1: entered promiscuous mode [ 2315.225170][T25983] tipc: Left network mode [ 2315.640582][T30345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2315.838104][T30342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2316.356940][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 2316.356953][ T30] audit: type=1326 audit(1760392365.921:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2316.390096][T25983] hsr_slave_0: left promiscuous mode [ 2316.418624][T25983] hsr_slave_1: left promiscuous mode [ 2316.425720][T25983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2316.443439][ T30] audit: type=1326 audit(1760392365.921:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2316.443932][T25983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2316.519806][T30366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 2316.530893][T30353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2316.546101][ T30] audit: type=1326 audit(1760392365.921:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2316.764549][ T30] audit: type=1326 audit(1760392365.921:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2316.832094][ T30] audit: type=1326 audit(1760392365.921:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2316.936043][T25983] hsr0: left allmulticast mode [ 2316.941041][T25983] hsr0: left promiscuous mode [ 2316.952606][ T30] audit: type=1326 audit(1760392365.921:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2317.134951][ T30] audit: type=1326 audit(1760392365.921:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2317.253137][ T30] audit: type=1326 audit(1760392365.931:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2317.344648][ T30] audit: type=1326 audit(1760392365.931:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2317.472467][ T30] audit: type=1326 audit(1760392365.931:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30358 comm="syz.2.5170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2317.702780][T25983] pim6reg (unregistering): left allmulticast mode [ 2318.946427][T25983] team0 (unregistering): Port device team_slave_1 removed [ 2319.166940][T25983] team0 (unregistering): Port device team_slave_0 removed [ 2320.382568][T30401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2320.419068][T30401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2321.301256][T30391] veth9: entered promiscuous mode [ 2321.342995][T30391] veth9: entered allmulticast mode [ 2322.496833][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2322.507747][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2322.520080][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2322.528512][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2322.537352][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2322.584939][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 2322.584966][ T30] audit: type=1326 audit(1760392372.171:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2322.619332][ T30] audit: type=1326 audit(1760392372.171:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2322.682543][ T30] audit: type=1326 audit(1760392372.181:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2322.707848][ T30] audit: type=1326 audit(1760392372.181:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2322.742806][ T30] audit: type=1326 audit(1760392372.181:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2322.876355][ T30] audit: type=1326 audit(1760392372.181:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2322.927072][ T30] audit: type=1326 audit(1760392372.181:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2323.119331][ T30] audit: type=1326 audit(1760392372.181:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2323.221971][ T30] audit: type=1326 audit(1760392372.181:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2323.279659][ T30] audit: type=1326 audit(1760392372.181:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2324.576173][ T5834] Bluetooth: hci2: command tx timeout [ 2324.588582][T30469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2324.616561][T30469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2326.645094][ T5834] Bluetooth: hci2: command tx timeout [ 2327.098994][T30437] chnl_net:caif_netlink_parms(): no params data found [ 2328.497721][T30437] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.517209][T30437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.545257][T30437] bridge_slave_0: entered allmulticast mode [ 2328.553601][T30437] bridge_slave_0: entered promiscuous mode [ 2328.582455][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 2328.582473][ T30] audit: type=1326 audit(1760392378.171:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.612790][T30437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2328.620571][T30437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2328.628834][T30437] bridge_slave_1: entered allmulticast mode [ 2328.639432][T30437] bridge_slave_1: entered promiscuous mode [ 2328.650251][ T30] audit: type=1326 audit(1760392378.171:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.684816][ T30] audit: type=1326 audit(1760392378.171:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.713351][ T30] audit: type=1326 audit(1760392378.171:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.743440][ T5834] Bluetooth: hci2: command tx timeout [ 2328.759893][ T30] audit: type=1326 audit(1760392378.171:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.781995][ C0] vkms_vblank_simulate: vblank timer overrun [ 2328.789776][ T30] audit: type=1326 audit(1760392378.171:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.811872][ C0] vkms_vblank_simulate: vblank timer overrun [ 2328.819187][ T30] audit: type=1326 audit(1760392378.171:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.841905][ T30] audit: type=1326 audit(1760392378.171:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.864008][ C0] vkms_vblank_simulate: vblank timer overrun [ 2328.871799][ T30] audit: type=1326 audit(1760392378.171:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2328.895268][ T30] audit: type=1326 audit(1760392378.241:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2329.204155][T30542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2329.239376][T30542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2329.988248][T30437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2330.007796][T30437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2330.058205][T30437] team0: Port device team_slave_0 added [ 2330.079572][T30437] team0: Port device team_slave_1 added [ 2330.140489][T30437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2330.154346][T30437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2330.183929][T30437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2330.201783][T30437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2330.209705][T30437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2330.239001][T30437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2330.376101][T30437] hsr_slave_0: entered promiscuous mode [ 2330.382519][T30437] hsr_slave_1: entered promiscuous mode [ 2330.402531][T30437] debugfs: 'hsr0' already exists in 'hsr' [ 2330.422509][T30437] Cannot create hsr debugfs directory [ 2330.804996][ T5834] Bluetooth: hci2: command tx timeout [ 2330.817252][T30564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2331.440211][T30437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2331.765639][T30437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2331.822080][T30437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2331.833130][T30437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2331.940078][T30437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.962199][T30437] 8021q: adding VLAN 0 to HW filter on device team0 [ 2331.973822][T25983] bridge0: port 1(bridge_slave_0) entered blocking state [ 2331.981032][T25983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2332.009350][T25983] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.016894][T25983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2332.101977][T30437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2332.139387][T30437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2332.205453][T30437] veth0_vlan: entered promiscuous mode [ 2332.234060][T30437] veth1_vlan: entered promiscuous mode [ 2332.256337][T30437] veth0_macvtap: entered promiscuous mode [ 2332.279374][T30437] veth1_macvtap: entered promiscuous mode [ 2332.297503][T30437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2332.309392][T30437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2332.345519][T25983] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.355181][T25983] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.367077][T25983] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.380163][T25983] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.466386][T25983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2332.486582][T25983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2332.515380][T25983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2332.523266][T25983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2332.818267][T30589] veth3: entered promiscuous mode [ 2332.823713][T30589] veth3: entered allmulticast mode [ 2332.953414][T14507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.157328][T14507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.247359][T14507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.373844][T14507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.591063][T14507] bridge_slave_1: left allmulticast mode [ 2333.605368][T14507] bridge_slave_1: left promiscuous mode [ 2333.622605][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2333.652715][T14507] bridge_slave_0: left allmulticast mode [ 2333.660486][T14507] bridge_slave_0: left promiscuous mode [ 2333.675274][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2334.269781][T14507] team0: Port device geneve0 removed [ 2338.008108][T14507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2338.019099][T14507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2338.029232][T14507] bond0 (unregistering): Released all slaves [ 2338.042292][T14507] bond1 (unregistering): Released all slaves [ 2339.809676][T14507] tipc: Left network mode [ 2340.094191][T14507] hsr_slave_0: left promiscuous mode [ 2340.101494][T14507] hsr_slave_1: left promiscuous mode [ 2340.110297][T14507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2340.119174][T14507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2340.128554][T14507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2340.136463][T14507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2340.154628][T14507] veth1_macvtap: left promiscuous mode [ 2340.160855][T14507] veth0_macvtap: left promiscuous mode [ 2340.166946][T14507] veth1_vlan: left promiscuous mode [ 2340.172558][T14507] veth0_vlan: left promiscuous mode [ 2340.756563][T14507] team0 (unregistering): Port device team_slave_1 removed [ 2340.802251][T14507] team0 (unregistering): Port device team_slave_0 removed [ 2341.486640][T14507] IPVS: stop unused estimator thread 0... [ 2344.646881][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.653219][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2379.845875][ T31] INFO: task kworker/1:8:6099 blocked for more than 143 seconds. [ 2379.853708][ T31] Not tainted syzkaller #0 [ 2379.859817][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2379.869880][ T31] task:kworker/1:8 state:D stack:21976 pid:6099 tgid:6099 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2379.882234][ T31] Workqueue: usb_hub_wq hub_event [ 2379.887710][ T31] Call Trace: [ 2379.890999][ T31] [ 2379.893938][ T31] __schedule+0x1798/0x4cc0 [ 2379.898690][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2379.904157][ T31] ? __pfx___schedule+0x10/0x10 [ 2379.909127][ T31] ? schedule+0x91/0x360 [ 2379.913392][ T31] schedule+0x165/0x360 [ 2379.917625][ T31] usb_kill_urb+0x1be/0x2d0 [ 2379.922184][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2379.927407][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2379.933528][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2379.938630][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2379.944197][ T31] ? usb_alloc_urb+0x46/0x150 [ 2379.949094][ T31] usb_control_msg+0x232/0x3e0 [ 2379.953886][ T31] hub_port_init+0xbf9/0x2800 [ 2379.958634][ T31] hub_event+0x2532/0x4a20 [ 2379.963086][ T31] ? __pfx_hub_event+0x10/0x10 [ 2379.968039][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2379.973928][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2379.979218][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2379.985031][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2379.990843][ T31] process_scheduled_works+0xae1/0x17b0 [ 2379.996515][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2380.002531][ T31] worker_thread+0x8a0/0xda0 [ 2380.007459][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2380.013817][ T31] ? __kthread_parkme+0x7b/0x200 [ 2380.018843][ T31] kthread+0x711/0x8a0 [ 2380.022929][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2380.028094][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.032694][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2380.037961][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.043169][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.047887][ T31] ret_from_fork+0x4bc/0x870 [ 2380.052524][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2380.057697][ T31] ? __switch_to_asm+0x39/0x70 [ 2380.062513][ T31] ? __switch_to_asm+0x33/0x70 [ 2380.067317][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.071915][ T31] ret_from_fork_asm+0x1a/0x30 [ 2380.076861][ T31] [ 2380.079953][ T31] [ 2380.079953][ T31] Showing all locks held in the system: [ 2380.087783][ T31] 1 lock held by khungtaskd/31: [ 2380.092640][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2380.102604][ T31] 1 lock held by klogd/5190: [ 2380.107301][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2380.117294][ T31] 2 locks held by getty/5592: [ 2380.121983][ T31] #0: ffff88814d7db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2380.132017][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2380.142270][ T31] 5 locks held by kworker/1:8/6099: [ 2380.147512][ T31] #0: ffff88802029ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2380.158904][ T31] #1: ffffc9000b93fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2380.170929][ T31] #2: ffff888146798198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2380.180003][ T31] #3: ffff88814679c518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2380.190008][ T31] #4: ffff888146383268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2380.199765][ T31] [ 2380.202096][ T31] ============================================= [ 2380.202096][ T31] [ 2380.210605][ T31] NMI backtrace for cpu 0 [ 2380.210631][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2380.210648][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2380.210658][ T31] Call Trace: [ 2380.210666][ T31] [ 2380.210673][ T31] dump_stack_lvl+0x189/0x250 [ 2380.210699][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2380.210717][ T31] ? __pfx__printk+0x10/0x10 [ 2380.210744][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2380.210838][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2380.210862][ T31] ? __pfx__printk+0x10/0x10 [ 2380.210884][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2380.210925][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2380.210951][ T31] watchdog+0xf60/0xfa0 [ 2380.210997][ T31] ? watchdog+0x1e2/0xfa0 [ 2380.211023][ T31] kthread+0x711/0x8a0 [ 2380.211045][ T31] ? __pfx_watchdog+0x10/0x10 [ 2380.211066][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.211085][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2380.211110][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.211126][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.211145][ T31] ret_from_fork+0x4bc/0x870 [ 2380.211170][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2380.211199][ T31] ? __switch_to_asm+0x39/0x70 [ 2380.211218][ T31] ? __switch_to_asm+0x33/0x70 [ 2380.211236][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.211256][ T31] ret_from_fork_asm+0x1a/0x30 [ 2380.211291][ T31] [ 2380.211299][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2380.356694][ C1] NMI backtrace for cpu 1 [ 2380.356712][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2380.356729][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2380.356750][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2380.356772][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2380.356786][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2380.356802][ C1] RAX: 4ca40cb84f5a7900 RBX: ffffffff8196bc07 RCX: 4ca40cb84f5a7900 [ 2380.356815][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e835a RDI: ffffffff8bc076e0 [ 2380.356827][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 2380.356839][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e1170 [ 2380.356851][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d0b58 [ 2380.356862][ C1] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 2380.356876][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2380.356887][ C1] CR2: 00007f247155b4c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 2380.356902][ C1] Call Trace: [ 2380.356916][ C1] [ 2380.356923][ C1] default_idle+0x13/0x20 [ 2380.356941][ C1] default_idle_call+0x73/0xb0 [ 2380.356959][ C1] do_idle+0x1e7/0x510 [ 2380.356983][ C1] ? __pfx_do_idle+0x10/0x10 [ 2380.357010][ C1] cpu_startup_entry+0x44/0x60 [ 2380.357030][ C1] start_secondary+0x101/0x110 [ 2380.357048][ C1] common_startup_64+0x13e/0x147 [ 2380.357073][ C1] [ 2380.357793][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2380.523845][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2380.532952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2380.543009][ T31] Call Trace: [ 2380.546290][ T31] [ 2380.549226][ T31] dump_stack_lvl+0x99/0x250 [ 2380.554105][ T31] ? __asan_memcpy+0x40/0x70 [ 2380.558790][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2380.563985][ T31] ? __pfx__printk+0x10/0x10 [ 2380.568580][ T31] vpanic+0x237/0x6d0 [ 2380.572565][ T31] ? __pfx_vpanic+0x10/0x10 [ 2380.577065][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2380.582531][ T31] panic+0xb9/0xc0 [ 2380.586250][ T31] ? __pfx_panic+0x10/0x10 [ 2380.590773][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2380.596151][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2380.602306][ T31] watchdog+0xf9f/0xfa0 [ 2380.606465][ T31] ? watchdog+0x1e2/0xfa0 [ 2380.610824][ T31] kthread+0x711/0x8a0 [ 2380.614893][ T31] ? __pfx_watchdog+0x10/0x10 [ 2380.619582][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.624172][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2380.629370][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.634578][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.639196][ T31] ret_from_fork+0x4bc/0x870 [ 2380.643822][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2380.648944][ T31] ? __switch_to_asm+0x39/0x70 [ 2380.653712][ T31] ? __switch_to_asm+0x33/0x70 [ 2380.658469][ T31] ? __pfx_kthread+0x10/0x10 [ 2380.663058][ T31] ret_from_fork_asm+0x1a/0x30 [ 2380.667832][ T31] [ 2380.671152][ T31] Kernel Offset: disabled [ 2380.675472][ T31] Rebooting in 86400 seconds..