last executing test programs: 37m40.168348317s ago: executing program 32 (id=312): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 33m53.465515551s ago: executing program 0 (id=3378): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) 33m51.341953477s ago: executing program 0 (id=3383): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x5}]}, 0x1c}}, 0x0) 33m49.040357404s ago: executing program 0 (id=3387): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000140001002bbd7000ffdbdf25fc010000000000000002000000000000640101000000000000000000000000004e21000d4e2400080a"], 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 33m47.05531631s ago: executing program 0 (id=3392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x9c52) 33m44.15120683s ago: executing program 0 (id=3397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 33m33.114986101s ago: executing program 1 (id=3413): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x28, 0x5, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x44}) 33m32.20553809s ago: executing program 1 (id=3416): syz_open_dev$video4linux(&(0x7f0000001140), 0x92e5, 0x101683) timer_create(0x832936f98ed548f6, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x3, 0x3f, &(0x7f0000002140)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYBLOB="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", @ANYRES32], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FS_IOC_GETVERSION(r0, 0x40025b0c, &(0x7f0000000040)) 33m31.736771761s ago: executing program 0 (id=3419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 33m29.987879531s ago: executing program 1 (id=3422): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)) 33m29.678124565s ago: executing program 1 (id=3424): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6d97be5a06dfd63a63f3ddc16f799d1836bfc45a368fd0d4ed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xffffffffffffff68) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 33m29.112912583s ago: executing program 1 (id=3425): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 33m28.773338686s ago: executing program 1 (id=3427): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 33m23.504872751s ago: executing program 33 (id=3402): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) 33m16.490516984s ago: executing program 34 (id=3419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55710c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba8fd1c024815f140290fb3f659193ae297fdcd50b6dc8d41dff00000000000000e272e53a081168e74d7189f0e655f66e0870e108968d80ea3cac636a830bea16f1e27d5761f66d6e252599ca89adacf4e13a2013988c4222d7cf1ff84820012fd6f16b20de6f1ea6691dcee8e86fa2109aa7898fe15f2c97926d158ee55592221796f273ccf22a8ce8dd3674739087015098b80e9842e82aa484b0247773b358f02338ba5950707984fb201d101bfd1f78b0ea4f397c22d94b5a34491cf3f671af9dacdf409cc1f8d960358d99d51d8f8be0c7f6294bd71f8671a68b43621c9444d8ffe5c0827fbb8725eeeb52f472cbc857d860dccc18268bcc9f25a53578f5d1264ca6618dfbdd5c68790793e9d58c4347be3177a4936d603565c373b97b3aab1f1e5db56c00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 33m13.478093684s ago: executing program 35 (id=3427): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 29m59.217105576s ago: executing program 4 (id=4221): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010129bd70fb979b76e424"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) 29m58.541574647s ago: executing program 4 (id=4226): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29m58.179022582s ago: executing program 4 (id=4228): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a6dc628a600b17cbe584d2e73c68fe1865f3fbcf0e16db6e759d420151c6c5750400000000000008", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}], 0x2, 0x8004) 29m57.359842425s ago: executing program 4 (id=4234): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) 29m56.838947465s ago: executing program 4 (id=4239): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 29m56.557211235s ago: executing program 4 (id=4240): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x56, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @ioapic={0xf000, 0x1, 0x6, 0x4, 0x0, [{0x6, 0xf9, 0x2, '\x00', 0x7}, {0xd, 0x4, 0x6, '\x00', 0x5}, {0x1, 0x8, 0x3, '\x00', 0x8}, {0xfd, 0x4c, 0x80, '\x00', 0x3}, {0x0, 0x80, 0xa8, '\x00', 0x7}, {0x2, 0x5, 0x1, '\x00', 0x4}, {0xc, 0xc, 0xfe, '\x00', 0x9f}, {0x7b, 0x8, 0x10, '\x00', 0xf9}, {0x3, 0x4, 0xe, '\x00', 0xff}, {0x2c, 0xfc, 0xf8}, {0x1a, 0x80, 0x80, '\x00', 0xef}, {0x6, 0x9, 0xfd, '\x00', 0xc}, {0xfd, 0xe, 0x9}, {0x1, 0x8, 0x1, '\x00', 0x3}, {0x7, 0xfc, 0xee, '\x00', 0x1d}, {0x81, 0x5, 0x6, '\x00', 0x1}, {0x0, 0xc, 0x82, '\x00', 0x5}, {0xd6, 0xc, 0x2}, {0x5f, 0x8, 0x4, '\x00', 0x9}, {0x6, 0x6, 0x80, '\x00', 0x1}, {0x14, 0x4, 0x8, '\x00', 0x7}, {0x7f, 0xff, 0x3, '\x00', 0xbc}, {0x1, 0xb7, 0x9, '\x00', 0x9}, {0x9, 0x9, 0xb, '\x00', 0x9}]}}) 29m41.265184683s ago: executing program 36 (id=4240): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x56, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @ioapic={0xf000, 0x1, 0x6, 0x4, 0x0, [{0x6, 0xf9, 0x2, '\x00', 0x7}, {0xd, 0x4, 0x6, '\x00', 0x5}, {0x1, 0x8, 0x3, '\x00', 0x8}, {0xfd, 0x4c, 0x80, '\x00', 0x3}, {0x0, 0x80, 0xa8, '\x00', 0x7}, {0x2, 0x5, 0x1, '\x00', 0x4}, {0xc, 0xc, 0xfe, '\x00', 0x9f}, {0x7b, 0x8, 0x10, '\x00', 0xf9}, {0x3, 0x4, 0xe, '\x00', 0xff}, {0x2c, 0xfc, 0xf8}, {0x1a, 0x80, 0x80, '\x00', 0xef}, {0x6, 0x9, 0xfd, '\x00', 0xc}, {0xfd, 0xe, 0x9}, {0x1, 0x8, 0x1, '\x00', 0x3}, {0x7, 0xfc, 0xee, '\x00', 0x1d}, {0x81, 0x5, 0x6, '\x00', 0x1}, {0x0, 0xc, 0x82, '\x00', 0x5}, {0xd6, 0xc, 0x2}, {0x5f, 0x8, 0x4, '\x00', 0x9}, {0x6, 0x6, 0x80, '\x00', 0x1}, {0x14, 0x4, 0x8, '\x00', 0x7}, {0x7f, 0xff, 0x3, '\x00', 0xbc}, {0x1, 0xb7, 0x9, '\x00', 0x9}, {0x9, 0x9, 0xb, '\x00', 0x9}]}}) 24m52.884807668s ago: executing program 9 (id=6951): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) 24m51.542505894s ago: executing program 9 (id=6973): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 24m51.334137622s ago: executing program 9 (id=6975): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5}) 24m50.319131643s ago: executing program 9 (id=6988): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xd4) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 24m49.325207111s ago: executing program 9 (id=6993): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a8018"], 0x44}}, 0x0) 24m48.186357453s ago: executing program 9 (id=7012): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r3, 0xf0106b2f9946af23, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 24m47.768167671s ago: executing program 37 (id=7012): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r3, 0xf0106b2f9946af23, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 13m59.881166639s ago: executing program 7 (id=13904): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00') 13m59.753519417s ago: executing program 7 (id=13907): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, 0x0, 0xe) 13m59.592443555s ago: executing program 7 (id=13910): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, 0x0, 0x40) 13m59.423375975s ago: executing program 7 (id=13912): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) 13m59.161080532s ago: executing program 7 (id=13916): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x408c0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) capset(&(0x7f0000000100), 0x0) 13m58.442135199s ago: executing program 7 (id=13928): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r4, &(0x7f0000000080)="cc", 0x1, 0x200980) 13m58.074040751s ago: executing program 38 (id=13928): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r4, &(0x7f0000000080)="cc", 0x1, 0x200980) 4.010054709s ago: executing program 2 (id=22748): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 3.779595641s ago: executing program 2 (id=22751): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.373020678s ago: executing program 2 (id=22758): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) 3.120277573s ago: executing program 2 (id=22762): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setns(r5, 0x4000000) 2.886378538s ago: executing program 8 (id=22769): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) 2.868987924s ago: executing program 2 (id=22771): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.70039666s ago: executing program 8 (id=22773): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000062"], 0x38}], 0x1}, 0x0) 2.498379138s ago: executing program 8 (id=22774): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 1.42678529s ago: executing program 3 (id=22776): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x6}, 0x1c) 1.399018088s ago: executing program 8 (id=22777): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003040)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003440)}}], 0x4, 0x14) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 1.307739856s ago: executing program 8 (id=22788): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.159574015s ago: executing program 3 (id=22779): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 1.116895183s ago: executing program 5 (id=22780): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) 1.052840764s ago: executing program 5 (id=22781): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) accept$inet6(0xffffffffffffffff, 0x0, 0x0) 1.009603559s ago: executing program 6 (id=22782): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 960.918965ms ago: executing program 3 (id=22783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) 885.551739ms ago: executing program 3 (id=22784): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000140)={0x5006000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 819.562902ms ago: executing program 5 (id=22785): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000100", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32], 0x54, 0x1) 748.919121ms ago: executing program 6 (id=22786): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) 710.948356ms ago: executing program 2 (id=22787): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 691.811994ms ago: executing program 5 (id=22789): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 629.557191ms ago: executing program 6 (id=22790): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x60000600) 514.687627ms ago: executing program 3 (id=22791): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) 513.403477ms ago: executing program 5 (id=22792): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$igmp(0x2d, 0x3, 0x2) 345.127242ms ago: executing program 8 (id=22793): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 224.016012ms ago: executing program 6 (id=22794): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 175.175966ms ago: executing program 3 (id=22795): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 164.632938ms ago: executing program 5 (id=22796): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 79.288444ms ago: executing program 6 (id=22797): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6(0xa, 0x3, 0x2f) 0s ago: executing program 6 (id=22798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) kernel console output (not intermixed with test programs): d=0 gid=0 ses=4294967295 subj=_ pid=8547 comm="syz.3.15049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f42de1f85 code=0x7ffc0000 [ 1709.304059][ T37] audit: type=1326 audit(1964.831:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8541 comm="syz.3.15049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1709.340183][ T37] audit: type=1326 audit(1964.831:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8541 comm="syz.3.15049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1709.465527][ T37] audit: type=1326 audit(1964.991:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8547 comm="syz.3.15049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1709.842141][ T8559] trusted_key: encrypted_key: insufficient parameters specified [ 1710.012928][ T37] audit: type=1326 audit(1965.541:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.6.15061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1710.013326][ T37] audit: type=1326 audit(1965.541:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.6.15061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1710.013722][ T37] audit: type=1326 audit(1965.541:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.6.15061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1710.371272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1710.417005][ T8572] netlink: 84 bytes leftover after parsing attributes in process `syz.5.15062'. [ 1710.909582][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15067'. [ 1711.899580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1713.073860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1713.813471][ T8637] macvtap0: entered promiscuous mode [ 1713.815753][ T8637] macvtap0: left promiscuous mode [ 1714.309306][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15096'. [ 1715.978102][ T8681] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15109'. [ 1717.420213][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15122'. [ 1717.443535][ T37] audit: type=1326 audit(1972.971:10151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8709 comm="syz.5.15121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1717.443903][ T37] audit: type=1326 audit(1972.971:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8709 comm="syz.5.15121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1717.444199][ T37] audit: type=1326 audit(1972.971:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8709 comm="syz.5.15121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1719.269798][ T37] audit: type=1326 audit(1974.791:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.5.15137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1719.278320][ T37] audit: type=1326 audit(1974.801:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.5.15137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1719.279030][ T37] audit: type=1326 audit(1974.801:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.5.15137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1719.310312][ T37] audit: type=1326 audit(1974.841:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.5.15137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1719.312622][ T37] audit: type=1326 audit(1974.841:10158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.5.15137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 1719.584465][ T37] audit: type=1326 audit(1975.111:10159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.8.15140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x0 [ 1719.610092][ T8755] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15139'. [ 1719.900043][ T37] audit: type=1326 audit(1975.421:10160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.5.15144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x50000 [ 1721.485249][ T8789] macvtap0: entered promiscuous mode [ 1721.506587][ T8789] macvtap0: left promiscuous mode [ 1721.720343][ T8796] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15160'. [ 1721.720373][ T8796] netlink: 51 bytes leftover after parsing attributes in process `syz.3.15160'. [ 1721.720390][ T8796] netlink: 'syz.3.15160': attribute type 4 has an invalid length. [ 1722.361301][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15167'. [ 1722.929271][ T8819] netlink: 'syz.3.15171': attribute type 64 has an invalid length. [ 1722.929297][ T8819] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15171'. [ 1723.207194][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15175'. [ 1723.954147][ T8807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.032631][ T8807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.094796][ T8807] bond0 (unregistering): Released all slaves [ 1724.146218][ T8819] gretap0: entered allmulticast mode [ 1724.146915][ T8819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1725.010606][ T8870] netlink: 188 bytes leftover after parsing attributes in process `syz.8.15192'. [ 1725.635294][ T8896] netlink: 156 bytes leftover after parsing attributes in process `syz.5.15205'. [ 1729.646159][ T8988] ip6gre2: entered promiscuous mode [ 1729.646190][ T8988] ip6gre2: entered allmulticast mode [ 1730.881171][ T9023] netlink: 'syz.5.15259': attribute type 4 has an invalid length. [ 1730.881194][ T9023] netlink: 'syz.5.15259': attribute type 5 has an invalid length. [ 1730.881210][ T9023] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.15259'. [ 1736.035266][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.035371][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.115961][ T9090] tipc: Enabling of bearer rejected, failed to enable media [ 1736.316004][ T9093] netlink: 'syz.5.15289': attribute type 46 has an invalid length. [ 1736.316030][ T9093] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15289'. [ 1738.417481][ T37] kauditd_printk_skb: 109 callbacks suppressed [ 1738.417502][ T37] audit: type=1326 audit(1993.941:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9145 comm="syz.3.15315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 1740.346297][ T9177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15328'. [ 1740.750495][ T9190] 9p: Unknown Cache mode or invalid value m [ 1741.560556][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15345'. [ 1741.560596][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15345'. [ 1741.671499][T25614] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.673859][T25614] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.690125][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15345'. [ 1741.690173][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15345'. [ 1741.717007][T25614] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.741251][T25614] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.137740][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15378'. [ 1746.305275][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15397'. [ 1746.574768][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15399'. [ 1748.291620][ T9392] netlink: 'syz.5.15425': attribute type 4 has an invalid length. [ 1748.291645][ T9392] netlink: 'syz.5.15425': attribute type 5 has an invalid length. [ 1748.291661][ T9392] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.15425'. [ 1748.444055][ T9397] netlink: 388 bytes leftover after parsing attributes in process `syz.5.15428'. [ 1748.468014][ T9395] netlink: 128 bytes leftover after parsing attributes in process `syz.6.15427'. [ 1748.591521][ T9401] batadv_slave_1: entered promiscuous mode [ 1748.605657][ T9400] batadv_slave_1: left promiscuous mode [ 1748.775580][ T9405] 9pnet_fd: Insufficient options for proto=fd [ 1749.326862][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15439'. [ 1749.870767][ T9437] 9pnet_fd: Insufficient options for proto=fd [ 1750.064757][ T9445] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15448'. [ 1750.337436][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15453'. [ 1750.375537][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15453'. [ 1752.040427][ T9490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15470'. [ 1754.342656][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15502'. [ 1759.248062][ T9649] tipc: Started in network mode [ 1759.248097][ T9649] tipc: Node identity ac14142f, cluster identity 4711 [ 1759.264724][ T9649] tipc: New replicast peer: 0.0.0.0 [ 1759.395226][ T9649] tipc: Enabled bearer , priority 10 [ 1760.394695][ T6905] tipc: Node number set to 2886997039 [ 1760.493734][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15558'. [ 1762.476457][ T37] audit: type=1326 audit(2018.001:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9715 comm="syz.3.15569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1763.116558][ T9740] fuse: Bad value for 'fd' [ 1763.614412][ T9761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15590'. [ 1763.614442][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15590'. [ 1763.614461][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15590'. [ 1763.854343][ T37] audit: type=1326 audit(2019.381:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9768 comm="syz.6.15593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x0 [ 1764.280182][ T37] audit: type=1326 audit(2019.801:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9780 comm="syz.6.15601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1764.281085][ T37] audit: type=1326 audit(2019.811:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9780 comm="syz.6.15601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1764.288067][ T37] audit: type=1326 audit(2019.811:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9780 comm="syz.6.15601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1764.288127][ T37] audit: type=1326 audit(2019.811:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9780 comm="syz.6.15601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1764.706285][ T9803] netlink: 100 bytes leftover after parsing attributes in process `syz.5.15606'. [ 1765.411073][ T9824] 9pnet_fd: Insufficient options for proto=fd [ 1768.856256][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15651'. [ 1769.158852][ T37] audit: type=1107 audit(2024.661:10277): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1770.089883][ T6265] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1771.025254][ T6265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.025301][ T6265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1771.025345][ T6265] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1771.025370][ T6265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.067104][ T6265] usb 3-1: config 0 descriptor?? [ 1771.505991][ T9969] netlink: 'syz.5.15678': attribute type 4 has an invalid length. [ 1772.100303][ T6265] usbhid 3-1:0.0: can't add hid device: -71 [ 1772.100451][ T6265] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1772.164404][ T6265] usb 3-1: USB disconnect, device number 5 [ 1773.237977][T10010] lo: Caught tx_queue_len zero misconfig [ 1774.600543][T10028] fuse: Bad value for 'fd' [ 1776.219443][T10083] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1778.076848][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15743'. [ 1778.137429][T10113] IPv6: sit2: Disabled Multicast RS [ 1778.139049][T10113] sit2: entered allmulticast mode [ 1778.592077][T10130] netlink: 160 bytes leftover after parsing attributes in process `syz.8.15753'. [ 1778.592105][T10130] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1778.670769][T10134] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15755'. [ 1779.107886][T10151] netlink: 84 bytes leftover after parsing attributes in process `syz.6.15763'. [ 1779.107922][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15763'. [ 1782.059127][T10219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1784.237675][T10259] Process accounting resumed [ 1785.286106][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15831'. [ 1787.827919][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15851'. [ 1787.827950][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15851'. [ 1787.970126][T10356] netlink: 212 bytes leftover after parsing attributes in process `syz.6.15852'. [ 1788.173365][T10338] fuse: Bad value for 'fd' [ 1789.476402][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15873'. [ 1793.343331][T10472] 9pnet_fd: p9_fd_create_tcp (10472): problem connecting socket to 127.0.0.1 [ 1794.892163][ T37] audit: type=1326 audit(2050.421:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10498 comm="syz.2.15916" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee81a4f6c9 code=0x0 [ 1795.044706][T10507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15920'. [ 1796.785116][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15940'. [ 1797.259139][T10564] fuse: Bad value for 'user_id' [ 1797.259155][T10564] fuse: Bad value for 'user_id' [ 1797.485737][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.485817][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.813853][T10569] tmpfs: Bad value for 'mpol' [ 1799.670324][T10599] netlink: 272 bytes leftover after parsing attributes in process `syz.2.15958'. [ 1802.291219][T10633] fuse: Bad value for 'group_id' [ 1802.291246][T10633] fuse: Bad value for 'group_id' [ 1802.444590][T10642] netlink: 156 bytes leftover after parsing attributes in process `syz.6.15975'. [ 1802.444620][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15975'. [ 1802.444639][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15975'. [ 1803.959952][T10666] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1805.360216][T10724] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16013'. [ 1811.764018][ T37] audit: type=1326 audit(2067.271:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10850 comm="syz.5.16070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 1813.823965][T10879] netlink: 277 bytes leftover after parsing attributes in process `syz.5.16080'. [ 1815.865749][T10926] netlink: 80 bytes leftover after parsing attributes in process `syz.2.16103'. [ 1817.736545][T10957] overlayfs: missing 'lowerdir' [ 1820.283959][T11037] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16151'. [ 1822.178485][T11095] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16178'. [ 1822.178514][T11095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16178'. [ 1823.171305][T11133] netlink: 44 bytes leftover after parsing attributes in process `syz.8.16196'. [ 1824.585852][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16214'. [ 1829.659160][T11273] cgroup: fork rejected by pids controller in /syz5 [ 1829.946672][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16260'. [ 1830.423431][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.8.16262'. [ 1831.558222][T11495] tipc: Enabling of bearer rejected, failed to enable media [ 1833.834730][T11530] dummy0: entered allmulticast mode [ 1833.838973][T11528] dummy0: left allmulticast mode [ 1836.581771][T11585] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16310'. [ 1836.701674][T11588] overlayfs: failed to clone lowerpath [ 1837.155377][T11603] netlink: 68 bytes leftover after parsing attributes in process `syz.8.16316'. [ 1844.033257][T11717] netlink: 'syz.6.16368': attribute type 11 has an invalid length. [ 1844.033281][T11717] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16368'. [ 1845.270888][T11756] IPv6: sit4: Disabled Multicast RS [ 1845.272372][T11756] sit4: entered allmulticast mode [ 1846.867980][T11805] overlayfs: missing 'workdir' [ 1846.957774][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16408'. [ 1846.957815][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16408'. [ 1847.198318][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16412'. [ 1847.428366][T11820] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16417'. [ 1847.547336][T11824] netlink: 84 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1847.547377][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1849.394394][T11851] overlayfs: failed to clone lowerpath [ 1849.506504][T11845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1851.238647][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16457'. [ 1851.953312][ T37] audit: type=1326 audit(2107.481:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.2.16470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee81a4f6c9 code=0x0 [ 1852.382803][T11960] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16480'. [ 1854.164799][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16492'. [ 1854.296280][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16494'. [ 1854.296309][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16494'. [ 1855.088874][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16501'. [ 1856.548764][T12051] netlink: 72 bytes leftover after parsing attributes in process `syz.5.16519'. [ 1856.569854][ T6905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1856.722468][ T6905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.722498][ T6905] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1856.722540][ T6905] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1856.722566][ T6905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.752657][ T6905] usb 3-1: config 0 descriptor?? [ 1856.967403][ T6905] usb 3-1: string descriptor 0 read error: -71 [ 1856.980123][ T6905] usb 3-1: USB disconnect, device number 6 [ 1858.385498][T12100] netlink: 36 bytes leftover after parsing attributes in process `syz.6.16542'. [ 1858.412685][T12103] atomic_op ffff8880288d1a18 conn xmit_atomic 0000000000000000 [ 1858.576370][T12109] overlayfs: failed to resolve './file0': -2 [ 1858.920714][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.920823][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.993898][T12155] tmpfs: Unknown parameter 'n' [ 1861.390109][ T5748] Bluetooth: hci0: command 0x0406 tx timeout [ 1863.119977][T12221] netlink: get zone limit has 4 unknown bytes [ 1864.204596][T12246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16605'. [ 1864.204629][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16605'. [ 1864.204656][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16605'. [ 1864.748747][T12261] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16613'. [ 1864.818005][T12261] gretap0: entered promiscuous mode [ 1864.818035][T12261] gretap0: left allmulticast mode [ 1866.660372][T12336] trusted_key: encrypted_key: master key parameter is missing [ 1866.761957][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16652'. [ 1868.395139][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16658'. [ 1868.395240][T12363] bridge_slave_1: left promiscuous mode [ 1868.409282][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.522732][T12363] bridge_slave_0: left allmulticast mode [ 1868.522768][T12363] bridge_slave_0: left promiscuous mode [ 1868.523068][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.888716][T12389] bond0: Caught tx_queue_len zero misconfig [ 1871.997505][T12441] netlink: 'syz.5.16695': attribute type 16 has an invalid length. [ 1871.997529][T12441] netlink: 64122 bytes leftover after parsing attributes in process `syz.5.16695'. [ 1872.208049][T12445] 9pnet_fd: Insufficient options for proto=fd [ 1872.981603][T12472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16710'. [ 1872.985879][T12472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16710'. [ 1873.390604][T12489] netlink: 128 bytes leftover after parsing attributes in process `syz.6.16718'. [ 1873.390630][T12489] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16718'. [ 1873.863009][T12492] overlayfs: missing 'lowerdir' [ 1874.423228][T12499] sit0: left promiscuous mode [ 1874.777824][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.787462][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.155660][T12514] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16729'. [ 1875.586235][T12499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1876.080101][T12499] geneve1: left allmulticast mode [ 1876.340409][T12499] veth3: left promiscuous mode [ 1876.550072][T12499] bond2: left allmulticast mode [ 1876.993624][T12499] pim6reg1: left promiscuous mode [ 1876.993655][T12499] pim6reg1: left allmulticast mode [ 1877.094354][T12499] ip6gre2: left promiscuous mode [ 1877.094385][T12499] ip6gre2: left allmulticast mode [ 1877.097963][T12499] sit2: left allmulticast mode [ 1877.134386][T12505] sit0: left promiscuous mode [ 1877.134826][T12505] netlink: 148 bytes leftover after parsing attributes in process `syz.8.16725'. [ 1877.134850][T12505] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1877.174623][T25645] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.186169][T25645] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.186238][T25645] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.186285][T25645] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.851475][T12546] netlink: 'syz.8.16743': attribute type 11 has an invalid length. [ 1881.403531][T12594] netlink: 268 bytes leftover after parsing attributes in process `syz.2.16762'. [ 1881.603873][T12604] overlayfs: failed to resolve './file0': -2 [ 1881.815576][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16771'. [ 1882.715932][T12631] netlink: 368 bytes leftover after parsing attributes in process `syz.5.16778'. [ 1888.896643][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16837'. [ 1888.968354][T12752] overlayfs: failed to clone lowerpath [ 1891.233934][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16869'. [ 1891.626241][T12857] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1891.626264][T12857] overlayfs: missing 'lowerdir' [ 1892.161978][T12874] netlink: 388 bytes leftover after parsing attributes in process `syz.5.16883'. [ 1895.177876][T12928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16908'. [ 1896.699247][T12948] netlink: 'syz.5.16915': attribute type 4 has an invalid length. [ 1897.117428][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16920'. [ 1897.388229][T12973] fuse: Bad value for 'fd' [ 1898.053958][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16937'. [ 1899.396946][T13037] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16956'. [ 1902.255924][ T37] audit: type=1326 audit(2157.781:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13057 comm="syz.8.16967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1902.256554][ T37] audit: type=1326 audit(2157.781:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13057 comm="syz.8.16967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1902.885107][ T37] audit: type=1326 audit(2158.401:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13057 comm="syz.8.16967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1902.887780][ T37] audit: type=1326 audit(2158.411:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13057 comm="syz.8.16967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1904.062831][T13135] netlink: 236 bytes leftover after parsing attributes in process `syz.6.16995'. [ 1904.455298][T13153] netlink: 92 bytes leftover after parsing attributes in process `syz.3.17001'. [ 1904.536131][T13159] netlink: 'syz.5.17003': attribute type 1 has an invalid length. [ 1904.536156][T13159] netlink: 'syz.5.17003': attribute type 2 has an invalid length. [ 1904.536171][T13159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17003'. [ 1905.398872][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17014'. [ 1905.398946][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17014'. [ 1905.563282][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17014'. [ 1905.563349][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17014'. [ 1905.956925][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17014'. [ 1905.956994][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17014'. [ 1906.724351][T13226] netlink: 'syz.8.17029': attribute type 10 has an invalid length. [ 1906.724373][T13226] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17029'. [ 1909.828434][T13297] __nla_validate_parse: 2 callbacks suppressed [ 1909.828456][T13297] netlink: 756 bytes leftover after parsing attributes in process `syz.5.17059'. [ 1910.122218][T13302] netlink: 92 bytes leftover after parsing attributes in process `syz.8.17061'. [ 1910.188170][T13309] fuse: Bad value for 'user_id' [ 1910.188191][T13309] fuse: Bad value for 'user_id' [ 1910.453522][T13322] overlayfs: failed to clone upperpath [ 1910.958662][T13337] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17078'. [ 1915.427582][T13405] 9pnet_fd: Insufficient options for proto=fd [ 1915.486937][ T37] audit: type=1326 audit(2171.001:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13409 comm="syz.8.17109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1915.487517][ T37] audit: type=1326 audit(2171.011:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13409 comm="syz.8.17109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1915.488217][ T37] audit: type=1326 audit(2171.011:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13409 comm="syz.8.17109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1915.488778][ T37] audit: type=1326 audit(2171.011:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13409 comm="syz.8.17109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1915.489068][ T37] audit: type=1326 audit(2171.011:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13409 comm="syz.8.17109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1915.599198][ T37] audit: type=1326 audit(2171.011:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13409 comm="syz.8.17109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1915.599258][ T37] audit: type=1326 audit(2171.041:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.6.17108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1915.599535][ T37] audit: type=1326 audit(2171.121:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.6.17108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1915.605268][ T37] audit: type=1326 audit(2171.121:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.6.17108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 1915.620632][ T37] audit: type=1326 audit(2171.121:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13409 comm="syz.8.17109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 1915.957453][T13426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1916.894711][T13445] overlayfs: failed to clone upperpath [ 1919.664842][T13498] futex_wake_op: syz.2.17145 tries to shift op by 32; fix this program [ 1919.745416][T13504] netlink: 'syz.3.17148': attribute type 4 has an invalid length. [ 1920.355266][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.355372][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.296880][T13575] netlink: 'syz.8.17182': attribute type 4 has an invalid length. [ 1923.874515][T13673] netlink: 'syz.6.17231': attribute type 1 has an invalid length. [ 1923.874604][T13673] netlink: 'syz.6.17231': attribute type 2 has an invalid length. [ 1923.912471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1924.236060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1925.005590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1925.309854][ C1] vkms_vblank_simulate: vblank timer overrun [ 1929.033447][T13794] netlink: 96 bytes leftover after parsing attributes in process `syz.8.17279'. [ 1929.624083][T13820] netlink: 'syz.8.17288': attribute type 4 has an invalid length. [ 1930.192701][T13835] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17295'. [ 1930.292340][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1930.292359][ T37] audit: type=1326 audit(2185.821:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292412][ T37] audit: type=1326 audit(2185.821:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292463][ T37] audit: type=1326 audit(2185.821:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292510][ T37] audit: type=1326 audit(2185.821:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292557][ T37] audit: type=1326 audit(2185.821:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292608][ T37] audit: type=1326 audit(2185.821:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292657][ T37] audit: type=1326 audit(2185.821:10303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292706][ T37] audit: type=1326 audit(2185.821:10304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292754][ T37] audit: type=1326 audit(2185.821:10305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.292805][ T37] audit: type=1326 audit(2185.821:10306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13840 comm="syz.8.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7fc00000 [ 1930.660240][T13848] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17301'. [ 1930.970093][T13853] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1931.748499][T13886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17318'. [ 1934.176894][T13901] overlay: Bad value for 'verity' [ 1936.277898][T13932] 9pnet: Could not find request transport: 0x0000000000000004 [ 1936.594244][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17343'. [ 1938.638892][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17359'. [ 1938.946649][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17363'. [ 1938.946678][T13990] openvswitch: netlink: Flow key attr not present in new flow. [ 1939.721894][T14016] 9pnet: Could not find request transport: 0x0000000000000004 [ 1940.324742][ T5116] Bluetooth: hci4: unexpected event 0x09 length: 4 > 3 [ 1941.390138][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17408'. [ 1944.074197][T14162] netlink: 'syz.3.17439': attribute type 1 has an invalid length. [ 1944.303477][T14162] veth7: entered promiscuous mode [ 1944.347994][T14162] bond2: (slave veth7): Enslaving as an active interface with a down link [ 1944.364755][T14177] netlink: 'syz.2.17445': attribute type 1 has an invalid length. [ 1944.563297][T14170] bond2: (slave veth9): Enslaving as an active interface with a down link [ 1944.588389][T14172] bond2: entered promiscuous mode [ 1944.588427][T14172] bond2: entered allmulticast mode [ 1944.588983][T14172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1945.145078][T14201] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17456'. [ 1949.580669][T14274] 9pnet_fd: Insufficient options for proto=fd [ 1950.093843][T14272] lo: entered promiscuous mode [ 1950.093874][T14272] lo: entered allmulticast mode [ 1950.100008][T14272] tunl0: entered promiscuous mode [ 1950.100039][T14272] tunl0: entered allmulticast mode [ 1950.125599][T14272] gre0: entered promiscuous mode [ 1950.125631][T14272] gre0: entered allmulticast mode [ 1950.976904][T14272] gretap0: entered promiscuous mode [ 1950.976932][T14272] gretap0: entered allmulticast mode [ 1951.065799][T14272] erspan0: entered promiscuous mode [ 1951.065832][T14272] erspan0: entered allmulticast mode [ 1951.085954][T14272] ip_vti0: entered promiscuous mode [ 1951.085987][T14272] ip_vti0: entered allmulticast mode [ 1951.090943][T14272] ip6_vti0: entered promiscuous mode [ 1951.090972][T14272] ip6_vti0: entered allmulticast mode [ 1951.104245][T14272] sit0: entered promiscuous mode [ 1951.104274][T14272] sit0: entered allmulticast mode [ 1951.135280][T14272] ip6tnl0: entered promiscuous mode [ 1951.135308][T14272] ip6tnl0: entered allmulticast mode [ 1951.140717][T14272] ip6gre0: entered promiscuous mode [ 1951.140745][T14272] ip6gre0: entered allmulticast mode [ 1951.187932][T14272] syz_tun: entered promiscuous mode [ 1951.187962][T14272] syz_tun: entered allmulticast mode [ 1951.193806][T14272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.194669][T14272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.195874][T14272] bridge0: entered promiscuous mode [ 1951.195898][T14272] bridge0: entered allmulticast mode [ 1951.203082][T14272] vcan0: entered promiscuous mode [ 1951.203113][T14272] vcan0: entered allmulticast mode [ 1951.215604][T14272] team0: entered promiscuous mode [ 1951.215634][T14272] team_slave_0: entered promiscuous mode [ 1951.215926][T14272] team_slave_1: entered promiscuous mode [ 1951.216183][T14272] team0: entered allmulticast mode [ 1951.216201][T14272] team_slave_0: entered allmulticast mode [ 1951.216219][T14272] team_slave_1: entered allmulticast mode [ 1951.222823][T14272] dummy0: entered promiscuous mode [ 1951.222855][T14272] dummy0: entered allmulticast mode [ 1951.310896][T14272] nlmon0: entered promiscuous mode [ 1951.310930][T14272] nlmon0: entered allmulticast mode [ 1951.314377][T14272] caif0: entered promiscuous mode [ 1951.314403][T14272] caif0: entered allmulticast mode [ 1951.315337][T14272] batadv0: entered promiscuous mode [ 1951.315361][T14272] batadv0: entered allmulticast mode [ 1951.321299][T14272] vxcan0: entered promiscuous mode [ 1951.321327][T14272] vxcan0: entered allmulticast mode [ 1951.325469][T14272] vxcan1: entered promiscuous mode [ 1951.325511][T14272] vxcan1: entered allmulticast mode [ 1951.329972][T14272] veth0: entered promiscuous mode [ 1951.330003][T14272] veth0: entered allmulticast mode [ 1951.336892][T14272] veth1: entered promiscuous mode [ 1951.336926][T14272] veth1: entered allmulticast mode [ 1951.410206][T14272] wg0: entered promiscuous mode [ 1951.410239][T14272] wg0: entered allmulticast mode [ 1951.493107][T14272] wg1: entered promiscuous mode [ 1951.493138][T14272] wg1: entered allmulticast mode [ 1951.550721][T14272] wg2: entered promiscuous mode [ 1951.550751][T14272] wg2: entered allmulticast mode [ 1951.561121][T14272] veth0_to_bridge: entered promiscuous mode [ 1951.561151][T14272] veth0_to_bridge: entered allmulticast mode [ 1951.574227][T14272] veth1_to_bridge: entered promiscuous mode [ 1951.574262][T14272] veth1_to_bridge: entered allmulticast mode [ 1951.610504][T14272] veth0_to_bond: entered promiscuous mode [ 1951.610536][T14272] veth0_to_bond: entered allmulticast mode [ 1951.615391][T14272] bond_slave_0: entered promiscuous mode [ 1951.615418][T14272] bond_slave_0: entered allmulticast mode [ 1951.673432][T14272] veth1_to_bond: entered promiscuous mode [ 1951.673464][T14272] veth1_to_bond: entered allmulticast mode [ 1951.678368][T14272] bond_slave_1: entered promiscuous mode [ 1951.678395][T14272] bond_slave_1: entered allmulticast mode [ 1951.679869][T14272] veth0_to_team: entered promiscuous mode [ 1951.679894][T14272] veth0_to_team: entered allmulticast mode [ 1951.692408][T14272] veth1_to_team: entered promiscuous mode [ 1951.692442][T14272] veth1_to_team: entered allmulticast mode [ 1951.705485][T14272] veth0_to_batadv: entered promiscuous mode [ 1951.705526][T14272] veth0_to_batadv: entered allmulticast mode [ 1951.711283][T14272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1951.712376][T14272] batadv_slave_0: entered promiscuous mode [ 1951.712404][T14272] batadv_slave_0: entered allmulticast mode [ 1951.727841][T14272] veth1_to_batadv: entered promiscuous mode [ 1951.727874][T14272] veth1_to_batadv: entered allmulticast mode [ 1951.733680][T14272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1951.734908][T14272] batadv_slave_1: entered promiscuous mode [ 1951.734940][T14272] batadv_slave_1: entered allmulticast mode [ 1951.741456][T14272] xfrm0: entered promiscuous mode [ 1951.741486][T14272] xfrm0: entered allmulticast mode [ 1951.747829][T14272] veth0_to_hsr: entered promiscuous mode [ 1951.747862][T14272] veth0_to_hsr: entered allmulticast mode [ 1951.754547][T14272] hsr_slave_0: entered allmulticast mode [ 1951.759802][T14272] veth1_to_hsr: entered promiscuous mode [ 1951.759833][T14272] veth1_to_hsr: entered allmulticast mode [ 1951.775946][T14272] hsr_slave_1: entered allmulticast mode [ 1951.782217][T14272] hsr0: entered promiscuous mode [ 1951.782249][T14272] hsr0: entered allmulticast mode [ 1951.789094][T14272] veth1_virt_wifi: entered promiscuous mode [ 1951.789130][T14272] veth1_virt_wifi: entered allmulticast mode [ 1951.796054][T14272] veth0_virt_wifi: entered promiscuous mode [ 1951.796087][T14272] veth0_virt_wifi: entered allmulticast mode [ 1951.801644][T14272] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1951.801678][T14272] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1951.803219][T14272] veth1_vlan: entered allmulticast mode [ 1951.810770][T14272] veth0_vlan: entered allmulticast mode [ 1951.844539][T14272] vlan0: entered promiscuous mode [ 1951.844809][T14272] vlan0: entered allmulticast mode [ 1951.845038][T14272] vlan1: entered promiscuous mode [ 1951.845283][T14272] vlan1: entered allmulticast mode [ 1951.891013][T14272] macvlan0: entered promiscuous mode [ 1951.891048][T14272] macvlan0: entered allmulticast mode [ 1951.940031][T14272] macvlan1: entered promiscuous mode [ 1951.940070][T14272] macvlan1: entered allmulticast mode [ 1951.944850][T14272] ipvlan0: entered promiscuous mode [ 1951.944879][T14272] ipvlan0: entered allmulticast mode [ 1951.945092][T14272] ipvlan1: entered promiscuous mode [ 1951.945113][T14272] ipvlan1: entered allmulticast mode [ 1951.946572][T14272] veth1_macvtap: entered allmulticast mode [ 1951.952544][T14272] veth0_macvtap: entered allmulticast mode [ 1952.022471][T14272] macvtap0: entered promiscuous mode [ 1952.022502][T14272] macvtap0: entered allmulticast mode [ 1952.032767][T14272] macsec0: entered promiscuous mode [ 1952.032796][T14272] macsec0: entered allmulticast mode [ 1952.136911][T14272] geneve0: entered promiscuous mode [ 1952.136944][T14272] geneve0: entered allmulticast mode [ 1952.189180][T14272] geneve1: entered promiscuous mode [ 1952.189211][T14272] geneve1: entered allmulticast mode [ 1952.241668][T14272] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1952.241704][T14272] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1952.309895][T14272] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1952.309932][T14272] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1952.409921][T14272] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1952.409960][T14272] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1952.488705][T14272] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1952.488744][T14272] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1952.595342][T14272] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 1952.595378][T14272] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 1952.633031][T14334] overlayfs: missing 'lowerdir' [ 1952.705616][T14272] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 1952.705654][T14272] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 1952.710262][T14272] vlan2: entered promiscuous mode [ 1952.714814][T14272] geneve2: entered promiscuous mode [ 1952.714844][T14272] geneve2: entered allmulticast mode [ 1952.715075][T14272] ip6erspan0: entered promiscuous mode [ 1952.715097][T14272] ip6erspan0: entered allmulticast mode [ 1952.715313][T14272] D: entered promiscuous mode [ 1952.715334][T14272] D: entered allmulticast mode [ 1952.770857][T14272] gretap1: entered promiscuous mode [ 1952.770887][T14272] gretap1: entered allmulticast mode [ 1952.774459][T14272] syztnl2: entered promiscuous mode [ 1952.774485][T14272] syztnl2: entered allmulticast mode [ 1952.774657][T14272] sit1: entered promiscuous mode [ 1952.774678][T14272] sit1: entered allmulticast mode [ 1952.906911][T25634] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.930905][T25634] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.931043][T25634] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.931089][T25634] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.356395][T14382] netlink: 84 bytes leftover after parsing attributes in process `syz.3.17530'. [ 1955.356432][T14382] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17530'. [ 1958.097757][T14432] vlan2: entered promiscuous mode [ 1958.097782][T14432] bridge0: entered promiscuous mode [ 1958.309305][T14437] 9p: Unknown uid 00000000004294967295 [ 1958.643237][T14447] netlink: 'syz.3.17556': attribute type 17 has an invalid length. [ 1959.065335][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.6.17564'. [ 1959.825147][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17575'. [ 1962.313217][T14532] netlink: 'syz.5.17592': attribute type 11 has an invalid length. [ 1962.313245][T14532] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.17592'. [ 1962.597002][T14547] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1962.675237][T14547] bond3 (unregistering): Released all slaves [ 1962.957382][T14559] overlayfs: failed to resolve './file1': -2 [ 1963.443505][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17611'. [ 1964.089734][ T6938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1964.661335][T14600] netlink: 'syz.5.17621': attribute type 16 has an invalid length. [ 1964.661363][T14600] netlink: 64130 bytes leftover after parsing attributes in process `syz.5.17621'. [ 1964.722042][ T6938] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 1964.722076][ T6938] usb 3-1: config 0 has no interface number 0 [ 1964.789182][ T6938] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1964.789206][ T6938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.789222][ T6938] usb 3-1: Product: syz [ 1964.789233][ T6938] usb 3-1: Manufacturer: syz [ 1964.789244][ T6938] usb 3-1: SerialNumber: syz [ 1964.823906][ T6938] usb 3-1: config 0 descriptor?? [ 1964.838462][ T6938] peak_usb 3-1:0.99: probe with driver peak_usb failed with error 99 [ 1968.284228][T14639] tmpfs: Unknown parameter 'no' [ 1968.612094][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1968.612115][ T37] audit: type=1326 audit(2224.141:10310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14648 comm="syz.8.17643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x0 [ 1969.058920][T14659] fuse: Unknown parameter '%' [ 1969.414861][ T6938] usb 3-1: USB disconnect, device number 7 [ 1969.994438][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17657'. [ 1970.414550][T14698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.800778][T14711] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.17668'. [ 1972.040510][T14752] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17687'. [ 1975.106749][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17707'. [ 1975.225738][T14804] fuse: Bad value for 'fd' [ 1976.856907][T14856] netlink: 44 bytes leftover after parsing attributes in process `syz.8.17733'. [ 1976.990619][T14860] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1977.343658][T14877] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1977.343683][T14877] overlayfs: missing 'lowerdir' [ 1977.730735][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17750'. [ 1978.067281][T14906] overlayfs: failed to clone lowerpath [ 1978.962226][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17764'. [ 1978.962415][T14928] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17764'. [ 1980.484815][T14964] netlink: 84 bytes leftover after parsing attributes in process `syz.5.17783'. [ 1981.466354][T14993] atomic_op ffff88803494ba18 conn xmit_atomic 0000000000000000 [ 1981.918313][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.918405][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.346889][T15004] netlink: 'syz.2.17798': attribute type 13 has an invalid length. [ 1982.598706][T15016] fuse: Bad value for 'fd' [ 1982.668544][ T37] audit: type=1326 audit(2238.191:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.669187][ T37] audit: type=1326 audit(2238.191:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.694332][ T37] audit: type=1326 audit(2238.191:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.694393][ T37] audit: type=1326 audit(2238.221:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.694440][ T37] audit: type=1326 audit(2238.221:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.694493][ T37] audit: type=1326 audit(2238.221:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.695694][ T37] audit: type=1326 audit(2238.221:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.695750][ T37] audit: type=1326 audit(2238.221:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.696952][ T37] audit: type=1326 audit(2238.221:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1982.697013][ T37] audit: type=1326 audit(2238.221:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.3.17807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 1984.156202][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17818'. [ 1984.156245][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17818'. [ 1984.156274][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17818'. [ 1986.024798][T15120] tipc: Enabling of bearer rejected, already enabled [ 1987.406386][T15153] netlink: 60 bytes leftover after parsing attributes in process `syz.6.17863'. [ 1990.301030][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17887'. [ 1990.699510][T15236] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1991.230373][T15260] netlink: 64 bytes leftover after parsing attributes in process `syz.8.17908'. [ 1991.903432][T15288] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.17920'. [ 1992.105442][T15294] 9pnet_fd: Insufficient options for proto=fd [ 1992.574287][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17932'. [ 1992.574660][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.642124][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.672965][T15319] netlink: 'syz.6.17934': attribute type 10 has an invalid length. [ 1992.672994][T15319] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17934'. [ 1993.364456][T15341] overlayfs: missing 'lowerdir' [ 1998.742216][T15420] veth11: entered promiscuous mode [ 1999.959885][T15444] overlayfs: failed to resolve './file1': -2 [ 2000.972800][T15478] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18003'. [ 2000.972831][T15478] netlink: 59 bytes leftover after parsing attributes in process `syz.2.18003'. [ 2000.972849][T15478] netlink: 59 bytes leftover after parsing attributes in process `syz.2.18003'. [ 2001.211864][T15487] overlayfs: failed to resolve './file1': -2 [ 2002.095616][T15520] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18022'. [ 2002.252249][T15522] netlink: 'syz.2.18023': attribute type 28 has an invalid length. [ 2002.298127][T15524] netlink: 'syz.3.18024': attribute type 4 has an invalid length. [ 2002.298152][T15524] netlink: 'syz.3.18024': attribute type 5 has an invalid length. [ 2002.298167][T15524] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.18024'. [ 2004.018448][T15579] veth0_virt_wifi: entered allmulticast mode [ 2004.019032][T15578] veth0_virt_wifi: left allmulticast mode [ 2009.220694][T15675] tipc: Failed to remove unknown binding: 66,1,1/4:1142010249/1142010251 [ 2009.220729][T15675] tipc: Failed to remove unknown binding: 66,1,1/4:1142010249/1142010251 [ 2010.482303][T15712] fuse: Bad value for 'user_id' [ 2010.482325][T15712] fuse: Bad value for 'user_id' [ 2014.107465][T15765] netlink: 172 bytes leftover after parsing attributes in process `syz.8.18124'. [ 2014.107494][T15765] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18124'. [ 2014.584281][T15774] fuse: Bad value for 'rootmode' [ 2017.181740][T15822] sch_tbf: burst 0 is lower than device veth0_to_bond mtu (1514) ! [ 2017.871526][T15842] netlink: 20 bytes leftover after parsing attributes in process `syz.8.18161'. [ 2018.247077][T15860] netlink: 368 bytes leftover after parsing attributes in process `syz.3.18167'. [ 2018.704560][T15875] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18176'. [ 2019.678489][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 2019.678510][ T37] audit: type=1326 audit(2275.201:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15909 comm="syz.2.18193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee81a4f6c9 code=0x0 [ 2021.665533][T15955] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 2022.004260][ T37] audit: type=1326 audit(2277.531:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15970 comm="syz.3.18219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2022.004664][ T37] audit: type=1326 audit(2277.531:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15970 comm="syz.3.18219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2022.005211][ T37] audit: type=1326 audit(2277.531:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15970 comm="syz.3.18219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2022.005696][ T37] audit: type=1326 audit(2277.531:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15970 comm="syz.3.18219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2022.005749][ T37] audit: type=1326 audit(2277.531:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15970 comm="syz.3.18219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2022.409146][T15986] netlink: 'syz.6.18226': attribute type 4 has an invalid length. [ 2022.409174][T15986] netlink: 'syz.6.18226': attribute type 5 has an invalid length. [ 2022.409190][T15986] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.18226'. [ 2022.849083][ T37] audit: type=1326 audit(2278.371:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16000 comm="syz.2.18233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee81a4f6c9 code=0x0 [ 2022.872443][T16005] trusted_key: encrypted_key: master key parameter is missing [ 2025.086676][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18253'. [ 2026.501193][ T37] audit: type=1326 audit(2282.021:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16095 comm="syz.2.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2026.501252][ T37] audit: type=1326 audit(2282.031:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16095 comm="syz.2.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2026.501290][ T37] audit: type=1326 audit(2282.031:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16095 comm="syz.2.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2026.502823][ T37] audit: type=1326 audit(2282.031:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16095 comm="syz.2.18276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2026.956722][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18284'. [ 2027.374108][T16128] loop2: detected capacity change from 0 to 7 [ 2027.387352][T16128] loop2: [ 2027.387388][T16128] loop2: partition table partially beyond EOD, truncated [ 2027.901958][T16142] netlink: 'syz.2.18296': attribute type 4 has an invalid length. [ 2030.579478][T16190] netlink: 'syz.8.18319': attribute type 1 has an invalid length. [ 2030.692068][T16190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2031.134730][T16207] netlink: 68 bytes leftover after parsing attributes in process `syz.5.18327'. [ 2031.744130][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18328'. [ 2033.072828][T16226] netlink: 'syz.8.18336': attribute type 64 has an invalid length. [ 2033.072856][T16226] netlink: 5 bytes leftover after parsing attributes in process `syz.8.18336'. [ 2033.072892][T16226] gretap0: entered allmulticast mode [ 2036.010684][T16282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18360'. [ 2039.920400][T16344] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18387'. [ 2040.608183][T16369] netlink: 'syz.2.18399': attribute type 64 has an invalid length. [ 2040.608213][T16369] netlink: 5 bytes leftover after parsing attributes in process `syz.2.18399'. [ 2040.608416][T16369] gretap0: left promiscuous mode [ 2040.622520][T16369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2040.982858][T16378] netlink: 120 bytes leftover after parsing attributes in process `syz.2.18403'. [ 2040.982896][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18403'. [ 2040.982915][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18403'. [ 2040.985283][T16381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18405'. [ 2042.313489][T16429] overlayfs: failed to clone upperpath [ 2042.962030][T16449] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18435'. [ 2043.186722][T16455] overlayfs: failed to clone upperpath [ 2043.240577][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.240659][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.906284][T16481] netlink: 100 bytes leftover after parsing attributes in process `syz.5.18450'. [ 2044.039025][T16484] netlink: 188 bytes leftover after parsing attributes in process `syz.8.18452'. [ 2044.105687][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18453'. [ 2046.219384][T16521] 9p: Unknown Cache mode or invalid value m [ 2046.804588][T16534] __nla_validate_parse: 1 callbacks suppressed [ 2046.804613][T16534] netlink: 756 bytes leftover after parsing attributes in process `syz.8.18474'. [ 2047.753658][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18486'. [ 2048.479788][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18495'. [ 2048.479819][T16581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2049.410080][T16602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18505'. [ 2049.466890][T16605] netlink: 100 bytes leftover after parsing attributes in process `syz.3.18507'. [ 2051.056929][T16657] bpf: Bad value for 'uid' [ 2051.322009][T16665] overlayfs: failed to clone lowerpath [ 2053.788944][T16708] batadv_slave_1: entered promiscuous mode [ 2053.794263][T16707] batadv_slave_1: left promiscuous mode [ 2054.331998][ T37] audit: type=1326 audit(2309.861:10337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16722 comm="syz.2.18563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2054.332364][ T37] audit: type=1326 audit(2309.861:10338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16722 comm="syz.2.18563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2054.333675][ T37] audit: type=1326 audit(2309.861:10339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16722 comm="syz.2.18563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2054.335618][ T37] audit: type=1326 audit(2309.861:10340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16722 comm="syz.2.18563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2054.853805][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18569'. [ 2054.853836][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18569'. [ 2054.853855][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18569'. [ 2054.879658][ T37] audit: type=1326 audit(2310.401:10341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16740 comm="syz.3.18570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x50000 [ 2054.879722][ T37] audit: type=1326 audit(2310.401:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16740 comm="syz.3.18570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x50000 [ 2054.879772][ T37] audit: type=1326 audit(2310.401:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16740 comm="syz.3.18570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x50000 [ 2054.879819][ T37] audit: type=1326 audit(2310.401:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16740 comm="syz.3.18570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x50000 [ 2054.879866][ T37] audit: type=1326 audit(2310.401:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16740 comm="syz.3.18570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x50000 [ 2054.879914][ T37] audit: type=1326 audit(2310.401:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16740 comm="syz.3.18570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x50000 [ 2055.380465][T16754] netlink: 'syz.5.18576': attribute type 13 has an invalid length. [ 2057.872869][T16789] netlink: 56 bytes leftover after parsing attributes in process `syz.6.18589'. [ 2059.202490][T16832] overlayfs: failed to clone lowerpath [ 2059.344616][T16840] fuse: Bad value for 'fd' [ 2061.671106][T16916] pim6reg1: entered promiscuous mode [ 2061.671139][T16916] pim6reg1: entered allmulticast mode [ 2068.842342][T17063] 9pnet_fd: Insufficient options for proto=fd [ 2070.582846][T17124] batadv_slave_1: entered promiscuous mode [ 2070.583669][T17120] batadv_slave_1: left promiscuous mode [ 2070.621948][T17126] cgroup: Invalid name [ 2072.524503][T17176] atomic_op ffff8880609ba218 conn xmit_atomic 0000000000000000 [ 2072.705763][T17182] tipc: Failed to remove unknown binding: 66,1,1/4:4268967856/4268967858 [ 2073.782476][T17227] 9pnet_fd: Insufficient options for proto=fd [ 2073.838040][T17231] netlink: 268 bytes leftover after parsing attributes in process `syz.8.18786'. [ 2074.604564][T17267] netlink: 40 bytes leftover after parsing attributes in process `syz.6.18800'. [ 2074.604596][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18800'. [ 2076.192718][T17336] netlink: 'syz.3.18833': attribute type 4 has an invalid length. [ 2077.249787][ T1879] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2077.401794][ T1879] usb 3-1: config 0 has no interfaces? [ 2077.407020][ T1879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2077.407054][ T1879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.407078][ T1879] usb 3-1: Product: syz [ 2077.407095][ T1879] usb 3-1: Manufacturer: syz [ 2077.407111][ T1879] usb 3-1: SerialNumber: syz [ 2077.472910][ T1879] usb 3-1: config 0 descriptor?? [ 2077.715530][T14222] usb 3-1: USB disconnect, device number 8 [ 2080.506744][T17490] netlink: 536 bytes leftover after parsing attributes in process `syz.8.18904'. [ 2080.506779][T17490] netlink: 52 bytes leftover after parsing attributes in process `syz.8.18904'. [ 2081.031536][T17514] overlayfs: missing 'lowerdir' [ 2081.344742][T17527] netlink: 'syz.8.18922': attribute type 4 has an invalid length. [ 2081.581698][T17534] netlink: 'syz.6.18926': attribute type 13 has an invalid length. [ 2082.348459][T17564] IPv6: A: Disabled Multicast RS [ 2084.184766][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18958'. [ 2085.165670][T17651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2085.564363][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18985'. [ 2087.513846][T17713] overlay: Unknown parameter '/' [ 2087.617480][T17716] netlink: 268 bytes leftover after parsing attributes in process `syz.6.19010'. [ 2089.873728][T17741] __vm_enough_memory: pid: 17741, comm: syz.5.19015, bytes: 21199707246592 not enough memory for the allocation [ 2090.766539][T17745] overlayfs: missing 'lowerdir' [ 2091.203700][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19028'. [ 2091.203741][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19028'. [ 2092.295953][T17778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19034'. [ 2092.295986][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19034'. [ 2092.296008][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19034'. [ 2093.010779][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19042'. [ 2095.531831][T17904] tipc: Failed to remove unknown binding: 66,1,1/4:3454688301/3454688303 [ 2095.531879][T17904] tipc: Failed to remove unknown binding: 66,1,1/4:3454688301/3454688303 [ 2095.572332][T17902] overlayfs: missing 'lowerdir' [ 2095.626867][T17908] netlink: 'syz.2.19093': attribute type 4 has an invalid length. [ 2096.148694][T17928] overlayfs: failed to resolve './bus': -2 [ 2096.556712][T17944] 9pnet: Unknown protocol version 9 [ 2097.642671][T17958] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19116'. [ 2100.717603][T18045] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19155'. [ 2102.383543][T18091] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19176'. [ 2103.606233][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 2103.606254][ T37] audit: type=1326 audit(2359.131:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.219975][ T37] audit: type=1326 audit(2359.751:10388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.220140][ T37] audit: type=1326 audit(2359.751:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.220281][ T37] audit: type=1326 audit(2359.751:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.220445][ T37] audit: type=1326 audit(2359.751:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.220605][ T37] audit: type=1326 audit(2359.751:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.220762][ T37] audit: type=1326 audit(2359.751:10393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.220916][ T37] audit: type=1326 audit(2359.751:10394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.221076][ T37] audit: type=1326 audit(2359.751:10395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.221244][ T37] audit: type=1326 audit(2359.751:10396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.3.19191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7fc00000 [ 2104.676104][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.676201][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.106327][T18193] netlink: 104 bytes leftover after parsing attributes in process `syz.6.19222'. [ 2107.419746][T18204] fuse: Bad value for 'fd' [ 2107.420866][T18206] netlink: 'syz.8.19227': attribute type 16 has an invalid length. [ 2107.420890][T18206] netlink: 64130 bytes leftover after parsing attributes in process `syz.8.19227'. [ 2107.585016][T25655] tipc: Subscription rejected, illegal request [ 2107.609755][T18212] 9pnet_fd: Insufficient options for proto=fd [ 2110.852056][T18298] tmpfs: Bad value for 'nr_blocks' [ 2112.690637][T18314] overlayfs: missing 'lowerdir' [ 2115.361733][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 2115.361755][ T37] audit: type=1326 audit(2370.891:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.362192][ T37] audit: type=1326 audit(2370.891:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.362593][ T37] audit: type=1326 audit(2370.891:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.363135][ T37] audit: type=1326 audit(2370.891:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.363362][ T37] audit: type=1326 audit(2370.891:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.363653][ T37] audit: type=1326 audit(2370.891:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.363987][ T37] audit: type=1326 audit(2370.891:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.364400][ T37] audit: type=1326 audit(2370.891:10430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.364792][ T37] audit: type=1326 audit(2370.891:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2115.365310][ T37] audit: type=1326 audit(2370.891:10432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18361 comm="syz.8.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2116.383119][T18387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19307'. [ 2117.537063][T18410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19318'. [ 2118.176602][T18432] netlink: 268 bytes leftover after parsing attributes in process `syz.3.19328'. [ 2120.148526][T18461] netlink: 536 bytes leftover after parsing attributes in process `syz.6.19338'. [ 2120.148570][T18461] netlink: 124 bytes leftover after parsing attributes in process `syz.6.19338'. [ 2125.852145][T18574] 9pnet_fd: Insufficient options for proto=fd [ 2126.009812][T18582] overlayfs: failed to clone lowerpath [ 2126.060312][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19396'. [ 2126.113319][T18588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19397'. [ 2127.618176][T18613] 9pnet_fd: Insufficient options for proto=fd [ 2127.622501][T18618] netlink: 96 bytes leftover after parsing attributes in process `syz.6.19410'. [ 2127.636018][T18617] 9pnet_fd: Insufficient options for proto=fd [ 2130.001385][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19451'. [ 2131.981238][T18777] netlink: 72 bytes leftover after parsing attributes in process `syz.5.19486'. [ 2137.253372][T18925] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19552'. [ 2137.253399][T18925] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19552'. [ 2139.196116][T18945] netlink: 'syz.2.19556': attribute type 4 has an invalid length. [ 2139.196144][T18945] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19556'. [ 2141.023168][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19576'. [ 2141.096648][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 2141.096694][ T37] audit: type=1326 audit(2396.621:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.112627][ T37] audit: type=1326 audit(2396.641:10435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.112699][ T37] audit: type=1326 audit(2396.641:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.112756][ T37] audit: type=1326 audit(2396.641:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.112810][ T37] audit: type=1326 audit(2396.641:10438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.112874][ T37] audit: type=1326 audit(2396.641:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.112929][ T37] audit: type=1326 audit(2396.641:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.142460][ T37] audit: type=1326 audit(2396.671:10441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.142531][ T37] audit: type=1326 audit(2396.671:10442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2141.142588][ T37] audit: type=1326 audit(2396.671:10443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.8.19577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2142.609852][T19029] netlink: 72 bytes leftover after parsing attributes in process `syz.6.19595'. [ 2143.785492][T19047] netlink: 104 bytes leftover after parsing attributes in process `syz.8.19607'. [ 2146.889193][T19119] netlink: 'syz.2.19637': attribute type 4 has an invalid length. [ 2147.763511][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 2147.763532][ T37] audit: type=1326 audit(2403.291:10476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.764053][ T37] audit: type=1326 audit(2403.291:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.766470][ T37] audit: type=1326 audit(2403.291:10478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.767149][ T37] audit: type=1326 audit(2403.291:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.768365][ T37] audit: type=1326 audit(2403.291:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.768425][ T37] audit: type=1326 audit(2403.291:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.768480][ T37] audit: type=1326 audit(2403.291:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.768536][ T37] audit: type=1326 audit(2403.291:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.768727][ T37] audit: type=1326 audit(2403.291:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2147.771239][ T37] audit: type=1326 audit(2403.301:10485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19151 comm="syz.2.19653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2151.114540][T19257] tmpfs: Unknown parameter 'm' [ 2151.236384][T19259] 9p: Unknown access argument 18446744073709551615: -34 [ 2151.928911][T19282] netlink: 72 bytes leftover after parsing attributes in process `syz.8.19715'. [ 2155.479983][T19350] netlink: 'syz.6.19743': attribute type 4 has an invalid length. [ 2157.767781][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19781'. [ 2157.767806][T19428] netlink: 36 bytes leftover after parsing attributes in process `syz.6.19781'. [ 2158.067811][T19439] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19783'. [ 2158.183148][T19444] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2158.183215][T19444] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2158.815723][ T37] audit: type=1326 audit(2414.341:10486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19472 comm="syz.2.19804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2158.816166][ T37] audit: type=1326 audit(2414.341:10487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19472 comm="syz.2.19804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2158.870746][ T37] audit: type=1326 audit(2414.391:10488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19472 comm="syz.2.19804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2158.872291][ T37] audit: type=1326 audit(2414.401:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19478 comm="syz.2.19804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee81a81f85 code=0x7ffc0000 [ 2158.874091][ T37] audit: type=1326 audit(2414.401:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19472 comm="syz.2.19804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2159.029594][ T37] audit: type=1326 audit(2414.551:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19478 comm="syz.2.19804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2159.522748][T19493] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1242024501/1242024503 [ 2159.522796][T19493] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1242024501/1242024503 [ 2161.451225][T19548] overlayfs: overlapping lowerdir path [ 2161.686495][T19552] @0Ù: renamed from bond_slave_1 (while UP) [ 2161.913022][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19840'. [ 2164.097661][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19856'. [ 2166.129997][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2166.130080][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.368820][T19642] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2166.368850][T19642] Error validating options; rc = [-22] [ 2166.720998][T19654] netlink: 244 bytes leftover after parsing attributes in process `syz.6.19884'. [ 2167.023119][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19889'. [ 2167.059039][T19665] netlink: 388 bytes leftover after parsing attributes in process `syz.2.19888'. [ 2167.969586][ T37] audit: type=1326 audit(2423.491:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.969652][ T37] audit: type=1326 audit(2423.491:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.969706][ T37] audit: type=1326 audit(2423.491:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.969759][ T37] audit: type=1326 audit(2423.491:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.969811][ T37] audit: type=1326 audit(2423.491:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.969863][ T37] audit: type=1326 audit(2423.491:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.969923][ T37] audit: type=1326 audit(2423.491:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.969975][ T37] audit: type=1326 audit(2423.491:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.970026][ T37] audit: type=1326 audit(2423.491:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2167.970090][ T37] audit: type=1326 audit(2423.491:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.5.19891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7fc00000 [ 2173.072408][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 2173.072430][ T37] audit: type=1326 audit(2428.601:10508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19800 comm="syz.8.19946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2175.446318][T19871] overlayfs: failed to clone upperpath [ 2181.144690][T19969] netlink: 268 bytes leftover after parsing attributes in process `syz.2.20020'. [ 2183.772867][T20032] fuse: Bad value for 'fd' [ 2185.148330][T20053] netlink: 56 bytes leftover after parsing attributes in process `syz.8.20054'. [ 2187.011289][ T37] audit: type=1326 audit(2442.541:10509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20109 comm="syz.5.20082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2187.029694][ T37] audit: type=1326 audit(2442.551:10510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20109 comm="syz.5.20082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2188.330516][T20131] netlink: 48 bytes leftover after parsing attributes in process `syz.5.20090'. [ 2188.711483][T20144] trusted_key: encrypted_key: master key parameter is missing [ 2188.817517][T20148] netlink: 72 bytes leftover after parsing attributes in process `syz.5.20098'. [ 2189.265900][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20102'. [ 2189.265928][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20102'. [ 2189.680682][ T37] audit: type=1326 audit(2445.201:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.5.20109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2189.681044][ T37] audit: type=1326 audit(2445.211:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.5.20109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2189.681326][ T37] audit: type=1326 audit(2445.211:10513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.5.20109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2193.377172][T20279] 9pnet_fd: Insufficient options for proto=fd [ 2195.230174][T20323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20176'. [ 2198.115579][T20392] netlink: 'syz.3.20205': attribute type 13 has an invalid length. [ 2199.109976][T20415] tmpfs: Bad value for 'mpol' [ 2202.422471][T20516] netlink: 40 bytes leftover after parsing attributes in process `syz.6.20261'. [ 2205.145122][T20575] netlink: 388 bytes leftover after parsing attributes in process `syz.2.20289'. [ 2209.001297][ T37] audit: type=1326 audit(2464.531:10514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.004703][ T37] audit: type=1326 audit(2464.531:10515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.005299][ T37] audit: type=1326 audit(2464.531:10516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.006021][ T37] audit: type=1326 audit(2464.531:10517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.006797][ T37] audit: type=1326 audit(2464.531:10518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.008445][ T37] audit: type=1326 audit(2464.531:10519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.051457][ T37] audit: type=1326 audit(2464.581:10520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.058517][ T37] audit: type=1326 audit(2464.581:10521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.058599][ T37] audit: type=1326 audit(2464.581:10522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2209.058662][ T37] audit: type=1326 audit(2464.581:10523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.2.20328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2210.293497][T20719] overlayfs: missing 'workdir' [ 2210.988733][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20362'. [ 2217.792417][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20422'. [ 2221.170995][T20946] netlink: 'syz.2.20451': attribute type 1 has an invalid length. [ 2221.251722][T20946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2221.338099][T20956] overlayfs: missing 'lowerdir' [ 2224.174174][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20474'. [ 2224.782967][T21026] netlink: 44 bytes leftover after parsing attributes in process `syz.6.20485'. [ 2224.900774][T20160] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2225.072002][T20160] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.072036][T20160] usb 3-1: config 0 has no interfaces? [ 2225.074896][T20160] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2225.074928][T20160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.074952][T20160] usb 3-1: Product: syz [ 2225.074968][T20160] usb 3-1: Manufacturer: syz [ 2225.074985][T20160] usb 3-1: SerialNumber: syz [ 2225.083390][T20160] usb 3-1: config 0 descriptor?? [ 2225.614491][T21057] netlink: 'syz.5.20500': attribute type 4 has an invalid length. [ 2225.921236][T20160] usb 3-1: USB disconnect, device number 9 [ 2225.990918][T21073] overlayfs: failed to clone upperpath [ 2227.198778][T21132] fuse: Bad value for 'group_id' [ 2227.198803][T21132] fuse: Bad value for 'group_id' [ 2227.561462][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.561544][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2230.182224][T21200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2231.387265][T21252] can: request_module (can-proto-0) failed. [ 2232.804411][T21315] netlink: 40 bytes leftover after parsing attributes in process `syz.5.20618'. [ 2234.018659][T21337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20626'. [ 2234.629757][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20638'. [ 2234.629790][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20638'. [ 2234.895269][T21370] tipc: Failed to remove unknown binding: 66,1,1/4:882126430/882126432 [ 2234.895312][T21370] tipc: Failed to remove unknown binding: 66,1,1/4:882126430/882126432 [ 2236.222814][T21395] /dev/nullb0: Can't lookup blockdev [ 2237.742764][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20673'. [ 2238.362365][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20688'. [ 2240.018796][ T37] audit: type=1326 audit(2495.541:10524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.023112][ T37] audit: type=1326 audit(2495.541:10525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.026658][ T37] audit: type=1326 audit(2495.551:10526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.027514][ T37] audit: type=1326 audit(2495.551:10527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.032073][ T37] audit: type=1326 audit(2495.561:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.036732][ T37] audit: type=1326 audit(2495.561:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.037291][ T37] audit: type=1326 audit(2495.561:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.037790][ T37] audit: type=1326 audit(2495.561:10531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.038573][ T37] audit: type=1326 audit(2495.561:10532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2240.049850][ T37] audit: type=1326 audit(2495.561:10533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21496 comm="syz.8.20699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194b4f6c9 code=0x7ffc0000 [ 2242.248333][T21590] netlink: 'syz.8.20741': attribute type 4 has an invalid length. [ 2243.623039][T21638] tipc: Enabling of bearer rejected, failed to enable media [ 2243.698109][T21646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2244.066983][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20772'. [ 2246.129992][T21708] netlink: 'syz.6.20794': attribute type 4 has an invalid length. [ 2246.130019][T21708] netlink: 'syz.6.20794': attribute type 5 has an invalid length. [ 2246.130034][T21708] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.20794'. [ 2246.250351][T21717] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2246.250369][T21717] overlayfs: missing 'lowerdir' [ 2246.274588][T21712] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2248.562642][T21773] netlink: 'syz.6.20823': attribute type 4 has an invalid length. [ 2248.797360][T21783] netlink: 92 bytes leftover after parsing attributes in process `syz.6.20829'. [ 2248.845254][T21782] overlayfs: failed to clone lowerpath [ 2249.523007][T21800] /dev/nullb0: Can't lookup blockdev [ 2252.541025][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 2252.541047][ T37] audit: type=1326 audit(2508.071:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21830 comm="syz.6.20849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 2252.541104][ T37] audit: type=1326 audit(2508.071:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21830 comm="syz.6.20849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 2252.550318][ T37] audit: type=1326 audit(2508.081:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21830 comm="syz.6.20849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 2252.550380][ T37] audit: type=1326 audit(2508.081:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21830 comm="syz.6.20849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 2252.550431][ T37] audit: type=1326 audit(2508.081:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21830 comm="syz.6.20849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff93eaf6c9 code=0x7ffc0000 [ 2254.908050][T21875] overlayfs: missing 'lowerdir' [ 2255.734170][T21902] netlink: 'syz.5.20878': attribute type 4 has an invalid length. [ 2255.734197][T21902] netlink: 17 bytes leftover after parsing attributes in process `syz.5.20878'. [ 2255.920213][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20882'. [ 2255.930443][T21909] sit2: entered allmulticast mode [ 2257.249631][T14222] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2257.399878][T14222] usb 3-1: Using ep0 maxpacket: 32 [ 2257.402321][T14222] usb 3-1: config 0 has no interfaces? [ 2257.405657][T14222] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2257.405686][T14222] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2257.405707][T14222] usb 3-1: Product: syz [ 2257.405720][T14222] usb 3-1: Manufacturer: syz [ 2257.405733][T14222] usb 3-1: SerialNumber: syz [ 2257.516202][T14222] usb 3-1: config 0 descriptor?? [ 2257.750348][T14222] usb 3-1: USB disconnect, device number 10 [ 2258.711963][T21993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20921'. [ 2258.795493][T21999] netlink: 'syz.5.20922': attribute type 1 has an invalid length. [ 2258.875938][T21999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2258.953451][T21999] vlan0: entered allmulticast mode [ 2258.953472][T21999] bond0: entered allmulticast mode [ 2258.955021][T22005] netlink: 68 bytes leftover after parsing attributes in process `syz.8.20924'. [ 2259.003279][ T37] audit: type=1326 audit(2514.531:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.003417][ T37] audit: type=1326 audit(2514.531:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.003721][ T37] audit: type=1326 audit(2514.531:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.004220][ T37] audit: type=1326 audit(2514.531:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.005232][ T37] audit: type=1326 audit(2514.531:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.007341][ T37] audit: type=1326 audit(2514.531:10559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.007775][ T37] audit: type=1326 audit(2514.531:10560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.008316][ T37] audit: type=1326 audit(2514.531:10561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.008722][ T37] audit: type=1326 audit(2514.531:10562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.050551][ T37] audit: type=1326 audit(2514.581:10563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22008 comm="syz.3.20928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42daf6c9 code=0x7ffc0000 [ 2259.106918][T22004] bond0: (slave gretap2): making interface the new active one [ 2259.107007][T22004] gretap2: entered allmulticast mode [ 2259.121393][T22004] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 2260.346510][T22060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2260.558480][T22067] lo: Caught tx_queue_len zero misconfig [ 2260.882416][T22077] overlayfs: failed to clone upperpath [ 2264.294563][ T37] audit: type=1800 audit(2519.821:10564): pid=22148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.20989" name="bus" dev="tmpfs" ino=22497 res=0 errno=0 [ 2270.561567][T22245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21032'. [ 2271.129800][T22258] netlink: 'syz.8.21038': attribute type 1 has an invalid length. [ 2271.142854][T22235] tipc: Failed to remove unknown binding: 66,1,1/2886997039:90361320/90361322 [ 2271.142897][T22235] tipc: Failed to remove unknown binding: 66,1,1/2886997039:90361320/90361322 [ 2278.031502][T22383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21090'. [ 2279.409920][T22431] netlink: 720 bytes leftover after parsing attributes in process `syz.5.21112'. [ 2279.409948][T22431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21112'. [ 2279.610533][T22431] veth9: entered promiscuous mode [ 2279.701163][T22437] netlink: 536 bytes leftover after parsing attributes in process `syz.3.21115'. [ 2279.743676][T22437] netlink: 124 bytes leftover after parsing attributes in process `syz.3.21115'. [ 2280.800068][ T37] audit: type=1326 audit(2536.331:10565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.801126][ T37] audit: type=1326 audit(2536.331:10566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.801441][ T37] audit: type=1326 audit(2536.331:10567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.801731][ T37] audit: type=1326 audit(2536.331:10568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.802455][ T37] audit: type=1326 audit(2536.331:10569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.802750][ T37] audit: type=1326 audit(2536.331:10570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.848665][ T37] audit: type=1326 audit(2536.371:10571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22480 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee81a81f85 code=0x7ffc0000 [ 2280.848758][ T37] audit: type=1326 audit(2536.371:10572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.849191][ T37] audit: type=1326 audit(2536.371:10573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2280.913987][ T37] audit: type=1326 audit(2536.441:10574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22478 comm="syz.2.21133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2281.547202][T22495] netlink: 'syz.5.21138': attribute type 16 has an invalid length. [ 2281.547231][T22495] netlink: 64122 bytes leftover after parsing attributes in process `syz.5.21138'. [ 2283.183510][T22552] netlink: 368 bytes leftover after parsing attributes in process `syz.2.21164'. [ 2283.644523][T22562] overlayfs: missing 'lowerdir' [ 2284.254120][T22574] 9pnet: Could not find request transport: 00000000000000000004 [ 2285.399675][T22594] netlink: 156 bytes leftover after parsing attributes in process `syz.8.21182'. [ 2288.744793][T22695] tipc: Failed to remove unknown binding: 66,1,1/4:1618186985/1618186987 [ 2288.994988][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.995085][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.799434][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 2289.799456][ T37] audit: type=1326 audit(2545.301:10578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.799511][ T37] audit: type=1326 audit(2545.321:10579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.853266][ T37] audit: type=1326 audit(2545.381:10580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.859540][ T37] audit: type=1326 audit(2545.381:10581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.859601][ T37] audit: type=1326 audit(2545.381:10582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.878108][ T37] audit: type=1326 audit(2545.401:10583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.879666][ T37] audit: type=1326 audit(2545.401:10584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.879722][ T37] audit: type=1326 audit(2545.401:10585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.879767][ T37] audit: type=1326 audit(2545.401:10586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2289.880144][ T37] audit: type=1326 audit(2545.411:10587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22725 comm="syz.5.21242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2291.991393][T22759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21256'. [ 2292.333689][T22769] tipc: Enabling of bearer rejected, failed to enable media [ 2294.778369][T22849] netlink: 'syz.5.21296': attribute type 4 has an invalid length. [ 2294.778750][T22849] netlink: 'syz.5.21296': attribute type 4 has an invalid length. [ 2294.826030][T22850] netlink: 'syz.2.21299': attribute type 4 has an invalid length. [ 2294.826057][T22850] netlink: 'syz.2.21299': attribute type 5 has an invalid length. [ 2294.826073][T22850] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.21299'. [ 2295.780414][T22883] netlink: 'syz.3.21316': attribute type 7 has an invalid length. [ 2299.446438][T22976] netlink: 'syz.3.21353': attribute type 13 has an invalid length. [ 2299.522216][T22976] erspan0: refused to change device tx_queue_len [ 2299.931005][T22991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21359'. [ 2300.441290][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21368'. [ 2300.441377][T23007] bridge_slave_1: left allmulticast mode [ 2300.441401][T23007] bridge_slave_1: left promiscuous mode [ 2300.441665][T23007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.096914][T23007] bridge_slave_0: left promiscuous mode [ 2301.231853][T23007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2302.497183][T23043] netlink: 256 bytes leftover after parsing attributes in process `syz.8.21382'. [ 2302.543444][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21383'. [ 2302.595438][T23046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2302.785809][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21386'. [ 2304.952693][T23052] team0 (unregistering): Port device team_slave_0 removed [ 2305.000629][T23052] team0 (unregistering): Port device team_slave_1 removed [ 2307.557029][T23159] 9pnet_fd: Insufficient options for proto=fd [ 2308.795715][T23219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21462'. [ 2309.042078][T23228] netlink: 104 bytes leftover after parsing attributes in process `syz.2.21466'. [ 2309.934887][T23261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21482'. [ 2310.610461][T23284] overlayfs: failed to clone upperpath [ 2311.624736][T23298] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21498'. [ 2311.806870][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21499'. [ 2312.743282][T23334] 9pnet_fd: Insufficient options for proto=fd [ 2313.613601][T23336] fuse: Unknown parameter '0xffffffffffffffff' [ 2314.060020][T23376] fuse: Bad value for 'user_id' [ 2314.060042][T23376] fuse: Bad value for 'user_id' [ 2316.966254][T23436] overlayfs: missing 'lowerdir' [ 2318.817683][T23458] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2318.817702][T23458] overlayfs: missing 'lowerdir' [ 2319.106713][T23471] overlayfs: failed to clone upperpath [ 2319.138337][T23473] netlink: 68 bytes leftover after parsing attributes in process `syz.6.21574'. [ 2319.764271][T23492] overlayfs: missing 'lowerdir' [ 2319.920037][T23502] overlayfs: failed to clone upperpath [ 2320.046461][T23505] netlink: 84 bytes leftover after parsing attributes in process `syz.5.21590'. [ 2320.046502][T23505] netlink: 40 bytes leftover after parsing attributes in process `syz.5.21590'. [ 2321.832002][T23533] tipc: Failed to remove unknown binding: 66,1,1/11552:575454406/575454408 [ 2321.898551][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21603'. [ 2321.898586][T23537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2321.958187][T23537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2322.250822][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21610'. [ 2323.557529][ T6905] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2323.712666][ T6905] usb 3-1: Using ep0 maxpacket: 16 [ 2323.723531][ T6905] usb 3-1: config 0 has no interfaces? [ 2323.723575][ T6905] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2323.723604][ T6905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.772453][ T6905] usb 3-1: config 0 descriptor?? [ 2323.984406][ T6905] usb 3-1: USB disconnect, device number 11 [ 2327.524342][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21651'. [ 2327.769093][T23657] netlink: 28 bytes leftover after parsing attributes in process `syz.8.21657'. [ 2327.845080][T23653] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2328.054364][T23668] netlink: 32 bytes leftover after parsing attributes in process `syz.8.21661'. [ 2328.054403][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21661'. [ 2328.054422][T23668] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21661'. [ 2328.856123][T23708] overlayfs: failed to clone upperpath [ 2338.235812][ T5116] Bluetooth: hci7: unexpected event for opcode 0x080b [ 2339.064469][T23962] 9p: Unknown access argument 18446744073709551615: -34 [ 2339.452004][T23979] overlayfs: failed to clone upperpath [ 2342.273740][ T5116] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 2342.274189][ T5116] Bluetooth: hci7: Injecting HCI hardware error event [ 2342.296600][ T5116] Bluetooth: hci7: hardware error 0x00 [ 2343.717503][T24038] 9pnet_fd: Insufficient options for proto=fd [ 2344.224920][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21833'. [ 2344.349542][ T5116] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 2346.665205][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21857'. [ 2347.767646][T24114] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 2348.639548][T24161] tmpfs: Bad value for 'mpol' [ 2348.723477][T24169] overlayfs: failed to clone lowerpath [ 2349.061421][T24183] netlink: 72 bytes leftover after parsing attributes in process `syz.8.21888'. [ 2349.422011][T24199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21896'. [ 2349.651251][T24208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21902'. [ 2349.714957][T24212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21903'. [ 2349.774534][T24212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2351.184082][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2351.184163][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2351.293610][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21912'. [ 2352.055306][T24258] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2353.008899][T24300] netlink: 268 bytes leftover after parsing attributes in process `syz.6.21943'. [ 2353.735793][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21957'. [ 2354.007050][T24343] tipc: Enabling of bearer rejected, already enabled [ 2354.727562][T24375] overlayfs: failed to clone lowerpath [ 2354.964814][T24384] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2354.964848][T24384] overlayfs: missing 'lowerdir' [ 2355.236443][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21985'. [ 2355.577514][T24404] overlayfs: missing 'lowerdir' [ 2356.218490][T24430] netlink: 536 bytes leftover after parsing attributes in process `syz.2.22003'. [ 2356.218521][T24430] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22003'. [ 2356.615555][T24446] netlink: 92 bytes leftover after parsing attributes in process `syz.3.22011'. [ 2356.925582][ T37] kauditd_printk_skb: 92 callbacks suppressed [ 2356.925607][ T37] audit: type=1326 audit(2612.451:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24453 comm="syz.5.22014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89adaf6c9 code=0x7ffc0000 [ 2357.915054][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22030'. [ 2360.894027][T24596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22080'. [ 2361.199471][T20160] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2361.358308][T20160] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2361.358340][T20160] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2361.360559][T20160] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2361.360596][T20160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2361.360622][T20160] usb 3-1: SerialNumber: syz [ 2361.606584][T20160] usb 3-1: 0:2 : does not exist [ 2361.606734][T20160] usb 3-1: unit 255 not found! [ 2361.635202][T20160] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 2361.732378][T20160] usb 3-1: USB disconnect, device number 12 [ 2361.896860][T24604] udevd[24604]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2362.497673][T24652] netlink: 68 bytes leftover after parsing attributes in process `syz.8.22102'. [ 2364.070358][T24716] netlink: 'syz.3.22129': attribute type 1 has an invalid length. [ 2364.147192][T24716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2364.311624][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22132'. [ 2367.343774][T24794] netlink: 128 bytes leftover after parsing attributes in process `syz.6.22165'. [ 2367.841718][T24815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22173'. [ 2370.930929][T24911] overlayfs: missing 'workdir' [ 2371.739881][ T37] audit: type=1326 audit(2627.261:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.739950][ T37] audit: type=1326 audit(2627.261:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.742186][ T37] audit: type=1326 audit(2627.271:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.742243][ T37] audit: type=1326 audit(2627.271:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.756059][ T37] audit: type=1326 audit(2627.281:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.758556][ T37] audit: type=1326 audit(2627.281:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.825277][ T37] audit: type=1326 audit(2627.351:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.840523][ T37] audit: type=1326 audit(2627.371:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.840589][ T37] audit: type=1326 audit(2627.371:10689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2371.841619][ T37] audit: type=1326 audit(2627.371:10690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24937 comm="syz.2.22232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2374.180996][T25007] 9pnet_fd: Insufficient options for proto=fd [ 2375.099853][T25036] netlink: 16 bytes leftover after parsing attributes in process `syz.8.22278'. [ 2381.587670][T25142] netlink: 188 bytes leftover after parsing attributes in process `syz.3.22322'. [ 2381.848771][T25153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22326'. [ 2382.747136][T25183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22339'. [ 2383.377260][T25198] overlayfs: missing 'lowerdir' [ 2384.979515][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 2384.979536][ T37] audit: type=1326 audit(2640.501:10695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.2.22362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2385.024957][ T37] audit: type=1326 audit(2640.511:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.2.22362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee81a4f6c9 code=0x7ffc0000 [ 2388.184437][T25318] 9pnet_fd: Insufficient options for proto=fd [ 2388.600171][T25323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22404'. [ 2392.555385][T25416] netlink: 84 bytes leftover after parsing attributes in process `syz.2.22440'. [ 2392.555424][T25416] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22440'. [ 2394.971977][T25455] overlayfs: missing 'lowerdir' [ 2395.225167][T25463] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 2395.225200][T25463] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 2395.250614][T25464] netlink: 28 bytes leftover after parsing attributes in process `syz.8.22459'. [ 2396.437248][T25506] overlayfs: failed to resolve './file0': -2 [ 2396.563348][T25512] netlink: 236 bytes leftover after parsing attributes in process `syz.2.22484'. [ 2397.523359][T25549] 9pnet: Could not find request transport: f [ 2399.989659][T25626] netlink: 188 bytes leftover after parsing attributes in process `syz.5.22532'. [ 2402.575441][T25711] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2405.764423][T25795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22605'. [ 2405.927846][T25806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22609'. [ 2406.093675][T15431] tipc: Subscription rejected, illegal request [ 2406.211203][T25816] netlink: 92 bytes leftover after parsing attributes in process `syz.8.22612'. [ 2406.829754][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22629'. [ 2406.878601][T25847] overlayfs: failed to resolve './file1/file0': -2 [ 2406.906561][T25848] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2408.352398][T25908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22656'. [ 2409.499019][T25960] bpf: Bad value for 'uid' [ 2409.610146][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22684'. [ 2410.343561][T25996] fuse: Bad value for 'user_id' [ 2410.343584][T25996] fuse: Bad value for 'user_id' [ 2411.268280][T26031] bond0: (slave bond_slave_0): Releasing backup interface [ 2411.344435][T26031] bond0: (slave c@0Ù): Releasing backup interface [ 2411.434366][T26031] team0: Port device team_slave_0 removed [ 2411.475240][T26031] team0: Port device team_slave_1 removed [ 2411.478687][T26031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2412.141971][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2412.142046][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2415.655382][T26140] fuse: Unknown parameter '"' [ 2416.076461][T26161] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22773'. [ 2417.309126][T26169] netlink: 'syz.8.22777': attribute type 4 has an invalid length. [ 2417.309153][T26169] netlink: 'syz.8.22777': attribute type 5 has an invalid length. [ 2417.309170][T26169] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.22777'. [ 2418.037234][T26197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22789'. [ 2418.252670][T26208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22791'. [ 2418.850164][ C1] ------------[ cut here ]------------ [ 2418.850183][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 2418.851426][ C1] WARNING: CPU: 1 PID: 29 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 2418.851570][ C1] Modules linked in: [ 2418.851610][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2418.851638][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2418.851658][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 2418.851684][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 ef f9 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f b6 4b f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 2418.851707][ C1] RSP: 0018:ffffc90000a3f1f0 EFLAGS: 00010246 [ 2418.851729][ C1] RAX: e824179b59e42700 RBX: 000000000000000c RCX: ffff88801bed1e00 [ 2418.851748][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2418.851763][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2418.851780][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888051227668 [ 2418.851799][ C1] R13: 0000000000000000 R14: ffff888071991060 R15: ffff888071993c38 [ 2418.851817][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 2418.851837][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2418.851855][ C1] CR2: 0000001b2e111ff8 CR3: 0000000033f26000 CR4: 00000000003526f0 [ 2418.851876][ C1] Call Trace: [ 2418.851891][ C1] [ 2418.851924][ C1] rate_control_send_low+0x1a7/0x7b0 [ 2418.851957][ C1] rate_control_get_rate+0x20b/0x5f0 [ 2418.851996][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 2418.852082][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 2418.852141][ C1] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 2418.852197][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 2418.852257][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 2418.852296][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 2418.852327][ C1] __ieee80211_beacon_get+0x1190/0x1850 [ 2418.852358][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 2418.852402][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 2418.852438][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 2418.852488][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 2418.852531][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2418.852585][ C1] __iterate_interfaces+0x2ab/0x590 [ 2418.852613][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2418.852651][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2418.852681][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2418.852719][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2418.852752][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 2418.852785][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2418.852814][ C1] __hrtimer_run_queues+0x552/0xd40 [ 2418.852877][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2418.852913][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 2418.852957][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 2418.852987][ C1] handle_softirqs+0x22f/0x710 [ 2418.853031][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2418.853074][ C1] run_ktimerd+0xcf/0x190 [ 2418.853108][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 2418.853139][ C1] ? schedule+0x91/0x360 [ 2418.853231][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2418.853262][ C1] smpboot_thread_fn+0x542/0xa60 [ 2418.853296][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2418.853339][ C1] kthread+0x711/0x8a0 [ 2418.853380][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2418.853412][ C1] ? __pfx_kthread+0x10/0x10 [ 2418.853445][ C1] ? rt_spin_unlock+0x150/0x200 [ 2418.853486][ C1] ? rt_spin_unlock+0x161/0x200 [ 2418.853514][ C1] ? __pfx_kthread+0x10/0x10 [ 2418.853553][ C1] ret_from_fork+0x4bc/0x870 [ 2418.853586][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2418.853625][ C1] ? __switch_to_asm+0x39/0x70 [ 2418.853649][ C1] ? __switch_to_asm+0x33/0x70 [ 2418.853672][ C1] ? __pfx_kthread+0x10/0x10 [ 2418.853712][ C1] ret_from_fork_asm+0x1a/0x30 [ 2418.853758][ C1] [ 2418.853776][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2418.853795][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2418.853823][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2418.853838][ C1] Call Trace: [ 2418.853848][ C1] [ 2418.853858][ C1] dump_stack_lvl+0x99/0x250 [ 2418.853897][ C1] ? __asan_memcpy+0x40/0x70 [ 2418.853927][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2418.853965][ C1] ? __pfx__printk+0x10/0x10 [ 2418.854012][ C1] vpanic+0x237/0x6d0 [ 2418.854036][ C1] ? __pfx_vpanic+0x10/0x10 [ 2418.854073][ C1] panic+0xb9/0xc0 [ 2418.854110][ C1] ? __pfx_panic+0x10/0x10 [ 2418.854155][ C1] __warn+0x31b/0x4b0 [ 2418.854176][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 2418.854204][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 2418.854230][ C1] report_bug+0x2be/0x4f0 [ 2418.854306][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 2418.854331][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 2418.854356][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 2418.854380][ C1] handle_bug+0x84/0x160 [ 2418.854405][ C1] exc_invalid_op+0x1a/0x50 [ 2418.854431][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2418.854455][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 2418.854486][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 ef f9 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f b6 4b f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 2418.854508][ C1] RSP: 0018:ffffc90000a3f1f0 EFLAGS: 00010246 [ 2418.854530][ C1] RAX: e824179b59e42700 RBX: 000000000000000c RCX: ffff88801bed1e00 [ 2418.854548][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2418.854563][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2418.854580][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888051227668 [ 2418.854598][ C1] R13: 0000000000000000 R14: ffff888071991060 R15: ffff888071993c38 [ 2418.854656][ C1] rate_control_send_low+0x1a7/0x7b0 [ 2418.854688][ C1] rate_control_get_rate+0x20b/0x5f0 [ 2418.854725][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 2418.854769][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 2418.854827][ C1] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 2418.854883][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 2418.854944][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 2418.854980][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 2418.855009][ C1] __ieee80211_beacon_get+0x1190/0x1850 [ 2418.855039][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 2418.855081][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 2418.855114][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 2418.855160][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 2418.855201][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2418.855236][ C1] __iterate_interfaces+0x2ab/0x590 [ 2418.855264][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2418.855303][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2418.855333][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2418.855372][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2418.855406][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 2418.855439][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2418.855478][ C1] __hrtimer_run_queues+0x552/0xd40 [ 2418.855540][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2418.855576][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 2418.855621][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 2418.855651][ C1] handle_softirqs+0x22f/0x710 [ 2418.855694][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2418.855738][ C1] run_ktimerd+0xcf/0x190 [ 2418.855771][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 2418.855803][ C1] ? schedule+0x91/0x360 [ 2418.855845][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2418.855875][ C1] smpboot_thread_fn+0x542/0xa60 [ 2418.855909][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2418.855951][ C1] kthread+0x711/0x8a0 [ 2418.855993][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2418.856024][ C1] ? __pfx_kthread+0x10/0x10 [ 2418.856057][ C1] ? rt_spin_unlock+0x150/0x200 [ 2418.856093][ C1] ? rt_spin_unlock+0x161/0x200 [ 2418.856120][ C1] ? __pfx_kthread+0x10/0x10 [ 2418.856159][ C1] ret_from_fork+0x4bc/0x870 [ 2418.856192][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2418.856231][ C1] ? __switch_to_asm+0x39/0x70 [ 2418.856255][ C1] ? __switch_to_asm+0x33/0x70 [ 2418.856278][ C1] ? __pfx_kthread+0x10/0x10 [ 2418.856317][ C1] ret_from_fork_asm+0x1a/0x30 [ 2418.856364][ C1] [ 2418.856646][ C1] Kernel Offset: disabled