last executing test programs: 23m9.525173282s ago: executing program 32 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) 22m52.400971065s ago: executing program 33 (id=71): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 22m28.003653165s ago: executing program 34 (id=105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 20m42.467221493s ago: executing program 35 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$phonet(0x23, 0x2, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x40008c1, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 19m32.320357209s ago: executing program 36 (id=485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x17}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x1, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x330) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = getpgrp(0x0) syz_pidfd_open(r4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 19m17.979346568s ago: executing program 37 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) 18m36.922472959s ago: executing program 38 (id=572): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10) socket$kcm(0x10, 0x2, 0x0) unshare(0x20060400) 18m18.587354733s ago: executing program 39 (id=586): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r2 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x100000000000f7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x8, 0x4) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000280)=0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) migrate_pages(0xffffffffffffffff, 0x52, &(0x7f00000001c0)=0x4, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) 14m23.469139744s ago: executing program 40 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd}, {0x0, 0x200000000, 0x0, 0x100000}, {0x0, 0x0, 0x2}, 0x70bd2a, 0x0, 0x2, 0x4}, [@algo_crypt={0x4a, 0x2, {{'ecb(cipher_null)\x00'}, 0x10, "ab73"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) chdir(&(0x7f0000000180)='./file0\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd0000001000010004", 0x4d}], 0x1) 12m6.284784425s ago: executing program 41 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 11m9.761917026s ago: executing program 42 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$AUDIT_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x4040000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x9, 0x110022}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x640c7100, 0x0, 0x0, 0x0, 0x0, 0x0) 9m35.996241056s ago: executing program 43 (id=1658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="66736d616769633d3078303030303030303030303030653461332c726f6f74636f6e746578743d756e636f6e66696e65645f752c7375626a5f726f6c653d405c212f2e2f2ec53a2c66736e616d653d6e6f67727069642c7375626a5f747970653d646973636172642c66736d616769633d3078303030303030303030303030303030372c657569643e", @ANYRESDEC, @ANYBLOB=',uid<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6170707261699e3c3bf8348b3e622766736465663d69736f383835392d312c6f626a5f726f6c653d2421f42c646f6e745f686173682c00"], 0x0, 0x14f5, &(0x7f0000001580)="$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") 8m35.322799999s ago: executing program 44 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) 8m21.870181048s ago: executing program 45 (id=1801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 6m42.833525114s ago: executing program 46 (id=1980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x60, r5, 0x201, 0x70bd2a, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x21}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x38, 0xe, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xe7a, "f4a4b0ec2344", @long="779d788579b5a92f543f515e467cee7e"}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x40, 0x0, @device_b, 0x9, 0x9}}]}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) 5m52.159112516s ago: executing program 5 (id=2096): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x9bb1, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 5m50.009182286s ago: executing program 5 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x70bd2c, 0x6, {0x7, r2}}, 0x18}}, 0x80) 5m48.107923486s ago: executing program 5 (id=2105): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 5m46.547511556s ago: executing program 5 (id=2109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000640)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={r2, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)) 5m44.545545347s ago: executing program 5 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) 5m43.135882798s ago: executing program 5 (id=2120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f00005a3000/0x1000)=nil, 0x1000, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f0000000240)={[{@stripe}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpquota}, {@nodiscard}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x0, 0x478, &(0x7f0000000ec0)="$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") 5m26.539527236s ago: executing program 47 (id=2120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f00005a3000/0x1000)=nil, 0x1000, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f0000000240)={[{@stripe}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpquota}, {@nodiscard}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x0, 0x478, &(0x7f0000000ec0)="$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") 5m21.240520914s ago: executing program 6 (id=2163): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) 5m19.837289171s ago: executing program 6 (id=2166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x7) sendto$inet(r0, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5m18.588685933s ago: executing program 6 (id=2169): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) write$binfmt_elf32(r1, 0x0, 0xcf) 5m16.480215613s ago: executing program 6 (id=2174): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r6, 0x0, 0x0) 5m15.067938362s ago: executing program 6 (id=2177): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) write$P9_RSTAT(r1, &(0x7f00000001c0)={0x45, 0x7d, 0x2, {0x0, 0x3e, 0x4, 0x2, {0x0, 0x2, 0x4}, 0x100000, 0x6, 0x7, 0x2, 0x7, 'binder\x00', 0x2, '\xa4^', 0x0, '', 0x2, ']*'}}, 0x45) 5m13.016772795s ago: executing program 6 (id=2182): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600001000"], 0x48) 4m57.569941335s ago: executing program 48 (id=2182): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600001000"], 0x48) 3m22.031230844s ago: executing program 3 (id=2442): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40012160, 0x0) 3m20.748677745s ago: executing program 3 (id=2445): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 3m18.71510039s ago: executing program 3 (id=2451): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}, @timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) 3m16.906153208s ago: executing program 3 (id=2456): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 3m9.991021661s ago: executing program 3 (id=2469): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4018045}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) 3m8.739655892s ago: executing program 3 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$inet_icmp(0x2, 0x2, 0x1) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 2m53.334530201s ago: executing program 49 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$inet_icmp(0x2, 0x2, 0x1) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 2m45.918839909s ago: executing program 4 (id=2541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x8) sendto$inet(r0, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m44.746598432s ago: executing program 4 (id=2544): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000040)) 2m43.741103127s ago: executing program 4 (id=2546): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) 2m42.671820164s ago: executing program 4 (id=2548): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 2m41.839541104s ago: executing program 4 (id=2550): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x8a, 0x3, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) 2m40.276420307s ago: executing program 4 (id=2555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 2m24.345825474s ago: executing program 50 (id=2555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 2m21.927568398s ago: executing program 8 (id=2587): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m20.699452861s ago: executing program 8 (id=2589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r2, 0x89e0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="15000000080000003c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r0, 0x0, 0x300, 0x0, 0x0, 0x3}]) syz_usb_connect(0x0, 0x5b, 0x0, 0x0) 2m15.590450044s ago: executing program 8 (id=2596): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) writev(r4, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f00000001c0)='x', 0x1}], 0x3) 2m14.322172392s ago: executing program 8 (id=2598): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsmount(r4, 0x0, 0xb) 2m12.799267193s ago: executing program 8 (id=2601): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r4, 0x0, 0x0) 2m11.523076733s ago: executing program 8 (id=2603): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) signalfd(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./control/file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x42000000) 1m56.072413289s ago: executing program 51 (id=2603): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) signalfd(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./control/file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x42000000) 9.750247354s ago: executing program 7 (id=2910): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000640)={0x6, 0x118, 0xfa00, {{0x800, 0x3, "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", 0xf8, 0x8, 0x1, 0x98, 0x2, 0x14, 0xd1, 0x1}, r1}}, 0x120) 8.708923123s ago: executing program 7 (id=2915): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 7.496323404s ago: executing program 7 (id=2920): syz_emit_vhci(0x0, 0xf) 7.129630107s ago: executing program 9 (id=2921): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8020, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) 6.909665193s ago: executing program 2 (id=2924): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) 6.379289574s ago: executing program 7 (id=2925): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 6.047797599s ago: executing program 1 (id=2926): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000100)) 6.02155698s ago: executing program 9 (id=2927): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 5.873852277s ago: executing program 2 (id=2928): socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x9, 0x1c, 0x65, 0x2000, 0xff, 0x1, 0x0, @multicast2, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x9}}}}}}, 0x36) 5.671266024s ago: executing program 0 (id=2929): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota']) 5.065913117s ago: executing program 1 (id=2930): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x8, 0x0) 5.02134742s ago: executing program 9 (id=2931): unshare(0x66000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.686628225s ago: executing program 0 (id=2932): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040884) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0}, 0x0) 4.596126527s ago: executing program 2 (id=2933): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.752214031s ago: executing program 1 (id=2934): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x1, 0x4008080) modify_ldt$write(0x1, &(0x7f0000000900)={0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 3.703711587s ago: executing program 0 (id=2935): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) 3.498656847s ago: executing program 9 (id=2936): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3.448478733s ago: executing program 2 (id=2937): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) 2.691780991s ago: executing program 0 (id=2938): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) 2.486099486s ago: executing program 1 (id=2939): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000540)='3', 0x1}], 0x1) 2.10712211s ago: executing program 2 (id=2940): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000100)) 1.624198814s ago: executing program 9 (id=2941): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340), 0x0) 1.319303587s ago: executing program 7 (id=2942): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) 1.253494696s ago: executing program 1 (id=2943): socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x9, 0x1c, 0x65, 0x2000, 0xff, 0x1, 0x0, @multicast2, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x9}}}}}}, 0x36) 1.196077162s ago: executing program 0 (id=2944): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) 1.089950028s ago: executing program 2 (id=2945): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 508.151526ms ago: executing program 9 (id=2946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 375.284795ms ago: executing program 0 (id=2947): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) 189.279904ms ago: executing program 7 (id=2948): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) 0s ago: executing program 1 (id=2949): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000600), &(0x7f0000001380)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/101, 0x65}], 0x1}, 0x40000162) kernel console output (not intermixed with test programs): rface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1252.086492][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1252.097004][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1252.110622][ T5886] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1252.120626][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.256313][ T5886] usb 3-1: config 0 descriptor?? [ 1252.546600][T10933] Bluetooth: hci3: command tx timeout [ 1252.654607][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'. [ 1252.908657][ T5886] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1253.434940][T13370] chnl_net:caif_netlink_parms(): no params data found [ 1254.610413][T10933] Bluetooth: hci3: command tx timeout [ 1254.640853][ T7815] usb 3-1: reset high-speed USB device number 56 using dummy_hcd [ 1256.211460][T10775] usb 3-1: USB disconnect, device number 56 [ 1256.386164][T13370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.394529][T13370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.402866][T13370] bridge_slave_0: entered allmulticast mode [ 1256.413386][T13370] bridge_slave_0: entered promiscuous mode [ 1256.662243][T13370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.685859][T13370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.693957][T13370] bridge_slave_1: entered allmulticast mode [ 1256.703323][T10933] Bluetooth: hci3: command tx timeout [ 1256.713504][T13370] bridge_slave_1: entered promiscuous mode [ 1257.409993][T13370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.598865][T13370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.609609][T10775] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1257.862704][T10775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1257.874758][T10775] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1257.893472][T10775] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1257.904584][T10775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.067172][T10775] usb 7-1: config 0 descriptor?? [ 1258.082921][T13432] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1258.297516][T13370] team0: Port device team_slave_0 added [ 1258.369017][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.380884][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.488925][T13370] team0: Port device team_slave_1 added [ 1258.640527][T10775] usbhid 7-1:0.0: can't add hid device: -71 [ 1258.647323][T10775] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1258.713400][T10775] usb 7-1: USB disconnect, device number 23 [ 1258.760639][T10933] Bluetooth: hci3: command tx timeout [ 1259.160614][T10775] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1259.186132][T13370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.194386][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.227414][T13370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.282646][ T7815] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1259.394290][T10775] usb 7-1: Using ep0 maxpacket: 32 [ 1259.468819][T10775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1259.481290][T10775] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1259.494791][T10775] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1259.505629][T10775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.532611][T13370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.540936][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.567530][T13370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.650523][ T7815] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1259.662874][ T7815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1259.674564][ T7815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1259.684808][ T7815] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1259.698712][ T7815] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1259.708243][ T7815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.784920][T10775] usb 7-1: config 0 descriptor?? [ 1259.976037][ T7815] usb 3-1: config 0 descriptor?? [ 1260.269599][T10775] hid-multitouch 0003:0EEF:72C4.000F: unknown main item tag 0x0 [ 1260.278010][T10775] hid-multitouch 0003:0EEF:72C4.000F: reserved main item tag 0xd [ 1260.416773][T10775] hid-multitouch 0003:0EEF:72C4.000F: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.6-1/input0 [ 1260.472542][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.522734][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.607138][ T7815] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1260.670173][T10775] usb 7-1: USB disconnect, device number 24 [ 1260.681605][T13370] hsr_slave_0: entered promiscuous mode [ 1260.693200][T13370] hsr_slave_1: entered promiscuous mode [ 1260.703009][T13370] debugfs: 'hsr0' already exists in 'hsr' [ 1260.708962][T13370] Cannot create hsr debugfs directory [ 1260.922741][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1261.746946][T13456] fido_id[13456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1262.353075][T10775] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 1263.370348][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1263.589371][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1263.601686][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1263.613037][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1263.628223][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1263.643397][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1263.653282][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.956395][ T7815] usb 3-1: USB disconnect, device number 57 [ 1264.023901][ T9] usb 6-1: config 0 descriptor?? [ 1264.808283][ T9] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1265.115900][T13370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1265.232113][T13370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1265.393970][T13370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1265.516719][T13370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1266.718886][ T9] usb 6-1: USB disconnect, device number 16 [ 1267.790196][T12162] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1267.997616][T13370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.057222][T12162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1268.069501][T12162] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1268.083459][T12162] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1268.093325][T12162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.250706][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1268.323185][T13370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.346181][T12162] usb 6-1: config 0 descriptor?? [ 1268.355539][T13506] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1268.493492][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1268.505817][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1268.517286][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1268.530618][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1268.548725][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1268.560002][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.614179][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.621927][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.699350][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.710203][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.927226][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.935349][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.990740][T12162] usbhid 6-1:0.0: can't add hid device: -71 [ 1268.997483][T12162] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1269.074042][ T9] usb 4-1: config 0 descriptor?? [ 1269.137122][T12162] usb 6-1: USB disconnect, device number 17 [ 1269.572507][T12162] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1269.787098][T12162] usb 6-1: Using ep0 maxpacket: 32 [ 1269.815989][T12162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1269.828391][T12162] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1269.841031][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1269.842252][T12162] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1269.872254][T12162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.083967][T12162] usb 6-1: config 0 descriptor?? [ 1270.546845][T12162] hid-multitouch 0003:0EEF:72C4.0013: unknown main item tag 0x0 [ 1270.548501][ T9] usb 4-1: USB disconnect, device number 17 [ 1270.555032][T12162] hid-multitouch 0003:0EEF:72C4.0013: reserved main item tag 0xd [ 1270.703526][T12162] hid-multitouch 0003:0EEF:72C4.0013: hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 1270.769001][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.779365][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.112739][ T7815] usb 6-1: USB disconnect, device number 18 [ 1271.308800][T13523] fido_id[13523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1272.157584][T13530] fido_id[13530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1272.388951][T13537] loop2: detected capacity change from 0 to 512 [ 1273.198660][T13370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.247329][ T7815] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1273.403145][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1273.463316][ T7815] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1273.475707][ T7815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1273.487282][ T7815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1273.497729][ T7815] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1273.511281][ T7815] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1273.521038][ T7815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.673725][ T24] usb 7-1: config 1 has an invalid interface number: 204 but max is 2 [ 1273.675301][ T7815] usb 6-1: config 0 descriptor?? [ 1273.682472][ T24] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1273.682611][ T24] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1273.682752][ T24] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1273.682905][ T24] usb 7-1: config 1 has no interface number 1 [ 1273.683190][ T24] usb 7-1: too many endpoints for config 1 interface 204 altsetting 7: 37, using maximum allowed: 30 [ 1273.683373][ T24] usb 7-1: config 1 interface 204 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1273.683561][ T24] usb 7-1: config 1 interface 204 has no altsetting 0 [ 1273.782619][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1273.792323][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.801146][ T24] usb 7-1: Product: syz [ 1273.805541][ T24] usb 7-1: Manufacturer: syz [ 1273.810583][ T24] usb 7-1: SerialNumber: syz [ 1274.199421][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1274.199575][ T30] audit: type=1326 audit(1763509122.176:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1274.258276][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.270191][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.464609][ T24] usb 7-1: 0:2 : does not exist [ 1274.493580][ T7815] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1274.584731][ T24] usb 7-1: unknown interface protocol 0x80, assuming v1 [ 1274.592312][ T24] usb 7-1: cannot find UAC_HEADER [ 1274.703211][ T24] snd-usb-audio 7-1:1.204: probe with driver snd-usb-audio failed with error -22 [ 1274.840772][ T30] audit: type=1326 audit(1763509122.776:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1274.888225][ T24] usb 7-1: USB disconnect, device number 25 [ 1275.112946][ T6232] udevd[6232]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1276.140464][ T24] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 1276.360604][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.830221][T12162] usb 6-1: USB disconnect, device number 19 [ 1278.025998][T13370] veth0_vlan: entered promiscuous mode [ 1278.205951][T13370] veth1_vlan: entered promiscuous mode [ 1278.720832][T13370] veth0_macvtap: entered promiscuous mode [ 1278.783990][T13370] veth1_macvtap: entered promiscuous mode [ 1279.141078][T10775] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1279.223207][T13370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.353213][T13370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.410010][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1279.422586][T10775] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.434717][T10775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.446129][T10775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1279.456266][T10775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1279.470486][T10775] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1279.480215][T10775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.556838][T12713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.648060][T12713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.712473][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1279.724612][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1279.738050][ T9] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1279.747535][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.761897][T10658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.800557][T10775] usb 3-1: config 0 descriptor?? [ 1279.824800][T10658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.969098][ T9] usb 6-1: config 0 descriptor?? [ 1279.979708][T13587] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1280.422955][T13587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.435541][T13587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.573704][T10775] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1280.652253][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1280.659165][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1280.780642][ T9] usb 6-1: USB disconnect, device number 20 [ 1281.273291][ T24] usb 3-1: USB disconnect, device number 58 [ 1281.340489][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1281.460381][ T30] audit: type=1326 audit(1763509129.436:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.484150][ T30] audit: type=1326 audit(1763509129.436:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.544316][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1281.604774][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1281.616594][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1281.630089][ T9] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1281.644614][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.729419][ T30] audit: type=1326 audit(1763509129.506:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.757773][ T30] audit: type=1326 audit(1763509129.516:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.773283][ T9] usb 6-1: config 0 descriptor?? [ 1281.782760][ T30] audit: type=1326 audit(1763509129.516:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.809734][ T30] audit: type=1326 audit(1763509129.566:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.833990][ T30] audit: type=1326 audit(1763509129.566:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.861671][ T30] audit: type=1326 audit(1763509129.586:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.886812][ T30] audit: type=1326 audit(1763509129.626:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.909776][ T30] audit: type=1326 audit(1763509129.626:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.3.2065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1281.987350][T13594] fido_id[13594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1282.730926][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1282.737799][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1282.911423][ T9] usb 6-1: USB disconnect, device number 21 [ 1283.079027][T13605] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2066'. [ 1285.200626][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1285.448007][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1285.460625][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1285.472327][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1285.482721][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1285.496298][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1285.506201][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.795632][ T24] usb 6-1: config 0 descriptor?? [ 1286.392878][ T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1287.650585][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1287.878189][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1287.895493][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1287.908660][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1287.919116][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1287.932911][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1287.942462][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.061009][ T9] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 1288.179441][ T24] usb 7-1: config 0 descriptor?? [ 1288.874629][ T24] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1289.520524][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1289.771915][T10775] usb 6-1: USB disconnect, device number 22 [ 1289.813738][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1289.825492][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1289.843755][ T24] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1289.855238][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.067263][ T24] usb 4-1: config 0 descriptor?? [ 1290.076860][T13662] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1290.427188][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.437929][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.604592][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 1290.611685][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1290.706693][ T24] usb 4-1: USB disconnect, device number 18 [ 1290.933301][T10775] usb 7-1: USB disconnect, device number 26 [ 1291.108347][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 1291.205087][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1291.432250][T13675] overlayfs: missing 'lowerdir' [ 1291.450760][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1291.528257][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1291.540344][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1291.554065][ T24] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1291.564113][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.834253][ T24] usb 4-1: config 0 descriptor?? [ 1292.019017][T10658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.027837][T10658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.303221][ T24] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0 [ 1292.311513][ T24] hid-multitouch 0003:0EEF:72C4.0018: reserved main item tag 0xd [ 1292.444618][ T24] hid-multitouch 0003:0EEF:72C4.0018: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 1292.514200][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.524672][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.577146][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1292.577241][ T30] audit: type=1326 audit(1763509140.556:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.6.2081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7fc00000 [ 1292.680995][T12709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.689392][T12709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.714610][T10775] usb 4-1: USB disconnect, device number 19 [ 1293.816697][T13686] fido_id[13686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1294.450255][ T30] audit: type=1326 audit(1763509142.406:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13697 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1294.610559][ T30] audit: type=1326 audit(1763509142.476:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13697 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=63 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1294.636257][ T30] audit: type=1326 audit(1763509142.486:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13697 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1294.830641][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1295.092186][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1295.104255][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1295.115711][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1295.126154][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1295.139757][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1295.149336][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.423477][ T24] usb 4-1: config 0 descriptor?? [ 1296.115559][ T24] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1297.270731][ T30] audit: type=1326 audit(1763509145.216:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1297.293921][ T30] audit: type=1326 audit(1763509145.216:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1297.629415][ T30] audit: type=1326 audit(1763509145.606:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1297.792927][ T30] audit: type=1326 audit(1763509145.676:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13722 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1297.823128][ T30] audit: type=1326 audit(1763509145.716:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13722 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1297.847912][ T30] audit: type=1326 audit(1763509145.716:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13722 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1297.940148][T10775] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 1299.004058][ T7815] usb 4-1: USB disconnect, device number 20 [ 1299.337402][ T30] audit: type=1326 audit(1763509147.306:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1299.930358][ T30] audit: type=1326 audit(1763509147.906:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1302.720762][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1302.972613][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1302.984808][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1302.996243][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1303.009259][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1303.023779][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1303.033601][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.057589][ T24] usb 7-1: config 0 descriptor?? [ 1303.744090][ T24] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1304.497618][ T24] usb 7-1: USB disconnect, device number 27 [ 1305.241393][ T30] audit: type=1326 audit(1763509153.216:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.5.2109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 1305.336176][T13773] fido_id[13773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1305.872704][ T30] audit: type=1326 audit(1763509153.846:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.5.2109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705d539 code=0x7fc00000 [ 1309.453245][T13814] loop5: detected capacity change from 0 to 512 [ 1309.511312][T13814] ext3: Unknown parameter 'rootcontext' [ 1310.320140][ T7815] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1310.544073][ T7815] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1310.556458][ T7815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1310.568041][ T7815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1310.578325][ T7815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1310.591946][ T7815] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1310.601714][ T7815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.713884][ T7815] usb 5-1: config 0 descriptor?? [ 1311.316655][ T7815] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1312.081669][ T7815] usb 5-1: USB disconnect, device number 61 [ 1312.657213][T13824] fido_id[13824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1312.736376][ T30] audit: type=1326 audit(1763509160.706:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1313.330763][ T30] audit: type=1326 audit(1763509161.296:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1314.600290][T13844] loop3: detected capacity change from 0 to 1024 [ 1314.829482][T13844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.753543][T12599] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.232234][T13862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.242815][T13862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.696306][T13862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.726739][T13862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.867601][ T30] audit: type=1326 audit(1763509165.746:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1317.898496][ T30] audit: type=1326 audit(1763509165.756:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1317.923865][ T30] audit: type=1326 audit(1763509165.756:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1317.946717][ T30] audit: type=1326 audit(1763509165.836:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1319.088520][T12722] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.200441][ T3873] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.215947][T12722] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.294469][T12722] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.841094][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1320.059520][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1320.072701][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1320.084220][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1320.094617][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1320.108232][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1320.117817][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.343449][ T30] audit: type=1326 audit(1763509168.316:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13880 comm="syz.3.2139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1320.405318][ T24] usb 7-1: config 0 descriptor?? [ 1320.944927][ T24] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1320.986995][ T30] audit: type=1326 audit(1763509168.926:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13880 comm="syz.3.2139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1321.730859][ T24] usb 7-1: USB disconnect, device number 28 [ 1322.055031][T13887] fido_id[13887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1323.407772][ T30] audit: type=1326 audit(1763509171.386:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.434719][ T30] audit: type=1326 audit(1763509171.386:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.517281][T13902] loop6: detected capacity change from 0 to 128 [ 1323.652564][ T30] audit: type=1326 audit(1763509171.456:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.675859][ T30] audit: type=1326 audit(1763509171.456:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.698899][ T30] audit: type=1326 audit(1763509171.456:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.721924][ T30] audit: type=1326 audit(1763509171.456:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.749749][ T30] audit: type=1326 audit(1763509171.466:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.774730][ T30] audit: type=1326 audit(1763509171.466:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.797745][ T30] audit: type=1326 audit(1763509171.466:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1323.822299][ T30] audit: type=1326 audit(1763509171.466:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.6.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1324.130430][T13902] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1324.221748][T13902] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1324.840946][T12098] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1326.241850][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1326.293842][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1326.305603][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1326.347344][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1326.362433][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1328.061413][T13940] netlink: 'syz.3.2155': attribute type 4 has an invalid length. [ 1328.147592][T13946] netlink: 'syz.3.2155': attribute type 4 has an invalid length. [ 1328.444212][ T51] Bluetooth: hci5: command tx timeout [ 1328.571268][T13922] chnl_net:caif_netlink_parms(): no params data found [ 1330.532200][ T51] Bluetooth: hci5: command tx timeout [ 1331.242620][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 1332.051493][T13922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.059317][T13922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.067571][T13922] bridge_slave_0: entered allmulticast mode [ 1332.168629][T13922] bridge_slave_0: entered promiscuous mode [ 1332.244428][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1332.244516][ T30] audit: type=1326 audit(1763509180.226:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1332.292156][T13922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.300253][T13922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.308466][T13922] bridge_slave_1: entered allmulticast mode [ 1332.320023][T13922] bridge_slave_1: entered promiscuous mode [ 1332.610503][ T51] Bluetooth: hci5: command tx timeout [ 1332.892271][ T30] audit: type=1326 audit(1763509180.846:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1333.127449][T13922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.306596][T13922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.904654][T13922] team0: Port device team_slave_0 added [ 1334.018727][T13922] team0: Port device team_slave_1 added [ 1334.041548][ T30] audit: type=1326 audit(1763509181.996:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1334.176872][ T30] audit: type=1326 audit(1763509182.066:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1334.323707][ T30] audit: type=1326 audit(1763509182.266:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1334.346631][ T30] audit: type=1326 audit(1763509182.326:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1334.370662][ T30] audit: type=1326 audit(1763509182.326:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1334.706491][ T51] Bluetooth: hci5: command tx timeout [ 1334.740588][ T30] audit: type=1326 audit(1763509182.416:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1334.763809][ T30] audit: type=1326 audit(1763509182.436:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1334.792217][ T30] audit: type=1326 audit(1763509182.436:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1335.006442][T13922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.013961][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.040903][T13922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.227972][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 1335.237723][T14008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.318659][T14008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.577679][T13922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.587236][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.618648][T13922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.713606][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.720598][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.694159][T13922] hsr_slave_0: entered promiscuous mode [ 1336.705700][T13922] hsr_slave_1: entered promiscuous mode [ 1336.715541][T13922] debugfs: 'hsr0' already exists in 'hsr' [ 1336.721784][T13922] Cannot create hsr debugfs directory [ 1337.950743][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1337.950847][ T30] audit: type=1326 audit(1763509185.856:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.4.2180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7fc00000 [ 1338.552167][ T30] audit: type=1326 audit(1763509186.496:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.4.2180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57539 code=0x7fc00000 [ 1341.391904][T14046] loop5: detected capacity change from 0 to 7 [ 1341.659586][T13922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1341.793974][T13922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1341.879638][T13922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1342.001981][T13922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1343.254907][T13922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.515313][T13922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.645896][T12722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.653618][T12722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.723266][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.731028][ T3873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.033385][T13922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.170198][ T30] audit: type=1326 audit(1763509195.146:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1347.678253][T13922] veth0_vlan: entered promiscuous mode [ 1347.735622][ T30] audit: type=1326 audit(1763509195.706:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1347.810987][T13922] veth1_vlan: entered promiscuous mode [ 1348.456326][T13922] veth0_macvtap: entered promiscuous mode [ 1348.488780][T13922] veth1_macvtap: entered promiscuous mode [ 1348.743786][T13922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.867159][T13922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.974554][T12727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.050492][T12727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.059665][T12727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.175717][T12709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.951696][T14046] Dev loop5: unable to read RDB block 7 [ 1350.957669][T14046] loop5: unable to read partition table [ 1351.053106][T14046] loop5: partition table beyond EOD, truncated [ 1351.060013][T14046] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1352.357944][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.636555][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.790951][T14111] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2197'. [ 1352.906416][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.157750][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.524460][ T59] bridge_slave_1: left allmulticast mode [ 1354.530939][ T59] bridge_slave_1: left promiscuous mode [ 1354.537712][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.770989][ T59] bridge_slave_0: left allmulticast mode [ 1354.776945][ T59] bridge_slave_0: left promiscuous mode [ 1354.784255][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.611644][ T30] audit: type=1326 audit(1763509203.586:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.3.2204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1355.771534][T10933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1355.788953][T10933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1355.799222][T10933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1356.204156][T10933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1356.219473][T10933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1356.305752][ T30] audit: type=1326 audit(1763509204.246:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.3.2204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1356.514794][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.622375][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.707522][ T59] bond0 (unregistering): Released all slaves [ 1357.222071][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'. [ 1358.370672][ T51] Bluetooth: hci6: command tx timeout [ 1358.649482][ T59] hsr_slave_0: left promiscuous mode [ 1358.690805][ T59] hsr_slave_1: left promiscuous mode [ 1358.699587][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.707751][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.859091][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.867123][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.032462][ T59] veth1_macvtap: left promiscuous mode [ 1359.041021][ T59] veth0_macvtap: left promiscuous mode [ 1359.047216][ T59] veth1_vlan: left promiscuous mode [ 1359.059558][ T59] veth0_vlan: left promiscuous mode [ 1360.444621][ T51] Bluetooth: hci6: command tx timeout [ 1360.526956][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1360.656992][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1362.567164][ T51] Bluetooth: hci6: command tx timeout [ 1362.617337][T12717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.625541][T12717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.956012][T14140] chnl_net:caif_netlink_parms(): no params data found [ 1363.004240][ T30] audit: type=1326 audit(1763509210.966:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14174 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7fc00000 [ 1363.060119][T12722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.068391][T12722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.493828][ T30] audit: type=1326 audit(1763509211.456:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14174 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57539 code=0x7fc00000 [ 1364.467092][T10661] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.600335][ T51] Bluetooth: hci6: command tx timeout [ 1364.792822][T10661] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.904365][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'. [ 1364.974263][T14189] bridge_slave_1: left allmulticast mode [ 1364.980565][T14189] bridge_slave_1: left promiscuous mode [ 1364.987629][T14189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.210602][T14189] bridge_slave_0: left allmulticast mode [ 1365.216708][T14189] bridge_slave_0: left promiscuous mode [ 1365.224390][T14189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.697245][T10661] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.020953][T10661] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.328804][T14140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.339277][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.347406][T14140] bridge_slave_0: entered allmulticast mode [ 1366.357827][T14140] bridge_slave_0: entered promiscuous mode [ 1366.573115][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.581197][T14140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.589159][T14140] bridge_slave_1: entered allmulticast mode [ 1366.601103][T14140] bridge_slave_1: entered promiscuous mode [ 1367.407372][T10661] bridge_slave_1: left allmulticast mode [ 1367.413705][T10661] bridge_slave_1: left promiscuous mode [ 1367.421386][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.594045][T10661] bridge_slave_0: left allmulticast mode [ 1367.600370][T10661] bridge_slave_0: left promiscuous mode [ 1367.607362][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.982785][ T30] audit: type=1326 audit(1763509215.936:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1368.608407][ T30] audit: type=1326 audit(1763509216.556:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1368.772634][T10661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.791638][ T30] audit: type=1326 audit(1763509216.616:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1368.814903][ T30] audit: type=1326 audit(1763509216.616:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1368.837636][ T30] audit: type=1326 audit(1763509216.616:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.1.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1368.860680][ T30] audit: type=1326 audit(1763509216.616:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1368.889522][ T30] audit: type=1326 audit(1763509216.616:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1368.914108][ T30] audit: type=1326 audit(1763509216.616:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1368.938451][ T30] audit: type=1326 audit(1763509216.616:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1368.962463][ T30] audit: type=1326 audit(1763509216.616:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1368.990892][ T30] audit: type=1326 audit(1763509216.616:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1369.111933][T10661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.169658][T10661] bond0 (unregistering): Released all slaves [ 1369.459057][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.617723][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.281837][T14140] team0: Port device team_slave_0 added [ 1370.588263][T14140] team0: Port device team_slave_1 added [ 1370.971861][T10661] hsr_slave_0: left promiscuous mode [ 1371.011085][T10661] hsr_slave_1: left promiscuous mode [ 1371.020006][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.027733][T10661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.103205][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.111374][T10661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.192758][T10661] veth1_macvtap: left promiscuous mode [ 1371.198677][T10661] veth0_macvtap: left promiscuous mode [ 1371.206792][T10661] veth1_vlan: left promiscuous mode [ 1371.212931][T10661] veth0_vlan: left promiscuous mode [ 1372.579087][T10661] team0 (unregistering): Port device team_slave_1 removed [ 1372.654525][T10661] team0 (unregistering): Port device team_slave_0 removed [ 1373.481643][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.489260][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.522215][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.570091][T10933] Bluetooth: hci3: command 0x0406 tx timeout [ 1373.753937][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.762797][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.790291][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.887092][T14140] hsr_slave_0: entered promiscuous mode [ 1374.901366][T14140] hsr_slave_1: entered promiscuous mode [ 1374.911161][T14140] debugfs: 'hsr0' already exists in 'hsr' [ 1374.917194][T14140] Cannot create hsr debugfs directory [ 1375.048933][T14248] netlink: 'syz.3.2238': attribute type 12 has an invalid length. [ 1376.001256][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1376.001356][ T30] audit: type=1326 audit(1763509223.976:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7fc00000 [ 1376.582920][ T30] audit: type=1326 audit(1763509224.556:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f74539 code=0x7fc00000 [ 1377.780159][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1377.824838][T14140] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1377.921850][T14140] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1377.952975][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1377.991706][ T24] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1378.004661][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.014142][ T24] usb 2-1: Product: syz [ 1378.018548][ T24] usb 2-1: Manufacturer: syz [ 1378.023566][ T24] usb 2-1: SerialNumber: syz [ 1378.041798][T14140] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1378.132152][T14140] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1378.146065][ T24] usb 2-1: config 0 descriptor?? [ 1378.206301][ T24] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 1378.471352][T10775] usb 2-1: USB disconnect, device number 19 [ 1378.857514][T14276] loop2: detected capacity change from 0 to 512 [ 1378.971820][T14276] EXT4-fs: Ignoring removed mblk_io_submit option [ 1378.978772][T14276] EXT4-fs: Ignoring removed bh option [ 1379.060640][T14276] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1379.067994][T14276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1379.391238][T14276] EXT4-fs (loop2): 1 truncate cleaned up [ 1379.411529][T14276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.537529][T14140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.915491][T14140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.922537][T14276] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1380.116222][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.123935][ T3873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.387899][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.395740][ T3873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.657075][ T7906] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.637471][ T30] audit: type=1326 audit(1763509229.606:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1381.824164][T14300] netlink: 'syz.2.2251': attribute type 4 has an invalid length. [ 1381.835341][T14300] netlink: 'syz.2.2251': attribute type 5 has an invalid length. [ 1381.843857][T14300] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2251'. [ 1382.129469][ T30] audit: type=1326 audit(1763509230.106:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1383.667126][T14140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.583465][T14331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2260'. [ 1384.593214][T14331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2260'. [ 1385.580317][ T30] audit: type=1326 audit(1763509233.536:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1385.672941][ T30] audit: type=1326 audit(1763509233.586:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1385.700853][ T30] audit: type=1326 audit(1763509233.636:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1385.725501][ T30] audit: type=1326 audit(1763509233.636:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1385.906373][ T30] audit: type=1326 audit(1763509233.736:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1385.929707][ T30] audit: type=1326 audit(1763509233.736:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1385.952942][ T30] audit: type=1326 audit(1763509233.746:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=99 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1385.976631][ T30] audit: type=1326 audit(1763509233.746:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.2263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1387.445056][T14140] veth0_vlan: entered promiscuous mode [ 1387.638113][T14140] veth1_vlan: entered promiscuous mode [ 1387.943463][ T30] audit: type=1326 audit(1763509235.906:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1388.217345][T14140] veth0_macvtap: entered promiscuous mode [ 1388.300756][T14140] veth1_macvtap: entered promiscuous mode [ 1388.474722][ T30] audit: type=1326 audit(1763509236.416:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1388.622637][T14140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.759605][T14140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.852197][T12709] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.916637][T12709] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.994588][T12709] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.103127][ T3873] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.576583][ T30] audit: type=1326 audit(1763509237.536:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1389.664077][ T30] audit: type=1326 audit(1763509237.636:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1389.692126][ T30] audit: type=1326 audit(1763509237.646:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1389.716802][ T30] audit: type=1326 audit(1763509237.646:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1389.740085][ T30] audit: type=1326 audit(1763509237.666:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1389.762912][ T30] audit: type=1326 audit(1763509237.666:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1389.790170][ T30] audit: type=1326 audit(1763509237.686:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1389.814345][ T30] audit: type=1326 audit(1763509237.706:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.2.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1391.123250][T14379] FAT-fs (loop7): unable to read boot sector [ 1393.394560][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1393.394653][ T30] audit: type=1326 audit(1763509241.356:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.4.2279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57539 code=0x7fc00000 [ 1394.568655][T14421] loop3: detected capacity change from 0 to 256 [ 1394.693362][T14421] exfat: Deprecated parameter 'utf8' [ 1394.700427][T14421] exfat: Deprecated parameter 'utf8' [ 1394.706971][T14421] exfat: Deprecated parameter 'namecase' [ 1395.132207][T14421] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1397.112493][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.119950][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.387566][T14456] loop1: detected capacity change from 0 to 128 [ 1398.733238][T14456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1398.833793][T14456] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.992054][ T30] audit: type=1326 audit(1763509246.966:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14458 comm="syz.4.2293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7fc00000 [ 1399.395416][ T30] audit: type=1326 audit(1763509247.346:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14458 comm="syz.4.2293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57539 code=0x7fc00000 [ 1399.668038][T13922] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1399.869604][T12722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.878734][T12722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.415805][ T3873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.427655][ T3873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.637067][T14474] 9pnet_fd: Insufficient options for proto=fd [ 1405.670822][ T30] audit: type=1326 audit(1763509253.636:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1406.180495][ T30] audit: type=1326 audit(1763509254.136:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d539 code=0x7fc00000 [ 1406.653632][ T30] audit: type=1326 audit(1763509254.616:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1406.800564][ T30] audit: type=1326 audit(1763509254.666:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1406.823779][ T30] audit: type=1326 audit(1763509254.666:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1406.846964][ T30] audit: type=1326 audit(1763509254.666:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1406.870046][ T30] audit: type=1326 audit(1763509254.666:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1406.897891][ T30] audit: type=1326 audit(1763509254.686:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1406.922449][ T30] audit: type=1326 audit(1763509254.686:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1406.945523][ T30] audit: type=1326 audit(1763509254.716:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.1.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1409.153353][T14537] loop2: detected capacity change from 0 to 512 [ 1409.266398][T14537] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1409.276669][T14537] EXT4-fs (loop2): external journal has bad superblock [ 1411.474085][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1411.474180][ T30] audit: type=1326 audit(1763509259.456:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.8.2321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7fc00000 [ 1411.980178][ T30] audit: type=1326 audit(1763509259.946:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.8.2321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f46539 code=0x7fc00000 [ 1419.581836][T14630] binder: 14629:14630 ioctl c0306201 0 returned -14 [ 1421.496767][T12727] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.696671][T14647] loop8: detected capacity change from 0 to 512 [ 1421.786448][T12727] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.856500][T14647] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1421.955838][T12727] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.014945][T14647] EXT4-fs (loop8): 1 truncate cleaned up [ 1422.023528][T14647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.225108][T12727] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.903497][T14140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.137865][T12727] bridge_slave_1: left allmulticast mode [ 1423.144124][T12727] bridge_slave_1: left promiscuous mode [ 1423.151490][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.347179][T12727] bridge_slave_0: left allmulticast mode [ 1423.354021][T12727] bridge_slave_0: left promiscuous mode [ 1423.368304][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.752271][ T30] audit: type=1326 audit(1763509271.696:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1423.823907][ T30] audit: type=1326 audit(1763509271.786:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1423.848039][ T30] audit: type=1326 audit(1763509271.786:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1423.876853][ T30] audit: type=1326 audit(1763509271.796:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1423.901262][ T30] audit: type=1326 audit(1763509271.796:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1423.924894][ T30] audit: type=1326 audit(1763509271.806:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1423.947815][ T30] audit: type=1326 audit(1763509271.816:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1423.974288][ T30] audit: type=1326 audit(1763509271.816:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1424.002523][ T30] audit: type=1326 audit(1763509271.816:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1424.027064][ T30] audit: type=1326 audit(1763509271.836:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14664 comm="syz.8.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1424.508426][T14668] loop2: detected capacity change from 0 to 1024 [ 1424.807240][T12727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.856508][T14668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1425.032662][T12727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.090322][T12727] bond0 (unregistering): Released all slaves [ 1425.691249][ T7906] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.245828][T12727] hsr_slave_0: left promiscuous mode [ 1426.292530][T12727] hsr_slave_1: left promiscuous mode [ 1426.301323][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.309188][T12727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.473573][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.481630][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.682666][T12727] veth1_macvtap: left promiscuous mode [ 1426.688642][T12727] veth0_macvtap: left promiscuous mode [ 1426.694888][T12727] veth1_vlan: left promiscuous mode [ 1426.700793][T12727] veth0_vlan: left promiscuous mode [ 1426.873662][T14686] 9pnet: Could not find request transport: f [ 1428.410883][T14701] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 1428.473832][T14704] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 1428.761982][T12727] team0 (unregistering): Port device team_slave_1 removed [ 1428.933504][T12727] team0 (unregistering): Port device team_slave_0 removed [ 1429.549334][T14710] fuse: Bad value for 'fd' [ 1429.860147][T14714] 9pnet_fd: Insufficient options for proto=fd [ 1430.723832][T14718] loop2: detected capacity change from 0 to 512 [ 1430.914650][T14718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1431.105288][T14718] EXT4-fs (loop2): 1 truncate cleaned up [ 1431.114652][T14718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.694871][ T7906] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.350601][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1433.350694][ T30] audit: type=1326 audit(1763509281.326:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.570794][ T30] audit: type=1326 audit(1763509281.376:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.594102][ T30] audit: type=1326 audit(1763509281.376:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.621964][ T30] audit: type=1326 audit(1763509281.376:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.646491][ T30] audit: type=1326 audit(1763509281.386:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.669335][ T30] audit: type=1326 audit(1763509281.386:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.693929][ T30] audit: type=1326 audit(1763509281.426:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.721775][ T30] audit: type=1326 audit(1763509281.426:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.746313][ T30] audit: type=1326 audit(1763509281.436:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1433.769064][ T30] audit: type=1326 audit(1763509281.436:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1434.297971][T14760] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2388'. [ 1439.652525][T14817] netlink: 'syz.3.2408': attribute type 4 has an invalid length. [ 1441.150291][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1441.395238][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.406084][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1441.419672][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1441.429126][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.553533][ T9] usb 2-1: config 0 descriptor?? [ 1441.624622][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1441.876907][ T24] usb 2-1: USB disconnect, device number 20 [ 1444.542261][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2426'. [ 1444.551788][T14868] sit0: entered promiscuous mode [ 1444.562025][T14868] sit0: entered allmulticast mode [ 1444.587579][T14855] loop1: detected capacity change from 0 to 8192 [ 1444.684256][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1444.684356][ T30] audit: type=1800 audit(1763509292.666:1635): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2427" name="blkio.bfq.group_wait_time" dev="overlay" ino=462 res=0 errno=0 [ 1447.910809][ T30] audit: type=1326 audit(1763509295.876:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1447.934251][ T30] audit: type=1326 audit(1763509295.876:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1447.962435][ T30] audit: type=1326 audit(1763509295.916:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1447.988730][ T30] audit: type=1326 audit(1763509295.916:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1448.011953][ T30] audit: type=1326 audit(1763509295.916:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1448.034908][ T30] audit: type=1326 audit(1763509295.946:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1448.063192][ T30] audit: type=1326 audit(1763509295.946:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1448.088214][ T30] audit: type=1326 audit(1763509295.946:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1448.111192][ T30] audit: type=1326 audit(1763509295.946:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 1450.135841][T14924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2443'. [ 1450.443890][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1457.494841][T14982] loop8: detected capacity change from 0 to 512 [ 1457.618343][T14982] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1457.791061][T14982] EXT4-fs (loop8): 1 truncate cleaned up [ 1457.799574][T14982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1458.564380][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.571394][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1459.913766][T14994] loop1: detected capacity change from 0 to 1024 [ 1460.208781][T14994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.871997][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1461.690713][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1461.690804][ T30] audit: type=1326 audit(1763509309.656:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15008 comm="syz.3.2469" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x0 [ 1461.933483][T14140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.326202][T15030] loop3: detected capacity change from 0 to 16 [ 1463.412438][T15030] erofs: Unknown parameter 'sched_switch' [ 1466.877663][T15058] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1469.247859][T15080] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1472.252802][T15116] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1475.185615][T15140] loop4: detected capacity change from 0 to 512 [ 1475.250106][T15140] EXT4-fs: Ignoring removed i_version option [ 1475.310811][T15143] overlayfs: missing 'lowerdir' [ 1475.395710][T15140] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 1475.470585][T15140] System zones: 0-2, 18-18, 34-35 [ 1475.554289][T15140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1475.567757][T15140] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1475.975549][T13370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.452171][T15153] loop2: detected capacity change from 0 to 512 [ 1476.533222][T15153] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 1476.690428][ T30] audit: type=1326 audit(1763509324.656:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1476.717970][ T30] audit: type=1326 audit(1763509324.666:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1476.758052][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2516'. [ 1476.956715][ T30] audit: type=1326 audit(1763509324.756:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1478.215949][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1478.291274][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1478.372295][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1479.184234][T15182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1479.231682][T15182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1479.260674][T15182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1479.301832][T15182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1479.317390][T15182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1481.088151][T15179] Bluetooth: hci6: command 0x0406 tx timeout [ 1481.490195][ T51] Bluetooth: hci0: command tx timeout [ 1482.157627][ T30] audit: type=1326 audit(1763509330.126:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1482.181327][ T30] audit: type=1326 audit(1763509330.126:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1482.204633][ T30] audit: type=1326 audit(1763509330.136:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1482.306387][T15181] chnl_net:caif_netlink_parms(): no params data found [ 1482.540213][ T30] audit: type=1326 audit(1763509330.216:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1482.567916][ T30] audit: type=1326 audit(1763509330.296:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1482.592230][ T30] audit: type=1326 audit(1763509330.296:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1482.617125][ T30] audit: type=1326 audit(1763509330.316:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1483.040037][ T30] audit: type=1326 audit(1763509330.686:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15214 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1483.067827][ T30] audit: type=1326 audit(1763509330.706:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1483.095607][ T30] audit: type=1326 audit(1763509330.706:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15209 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1483.560403][ T51] Bluetooth: hci0: command tx timeout [ 1485.156151][T15181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.164514][T15181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.172727][T15181] bridge_slave_0: entered allmulticast mode [ 1485.183271][T15181] bridge_slave_0: entered promiscuous mode [ 1485.383122][T15181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.390958][T15181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.398800][T15181] bridge_slave_1: entered allmulticast mode [ 1485.409553][T15181] bridge_slave_1: entered promiscuous mode [ 1485.650646][ T51] Bluetooth: hci0: command tx timeout [ 1485.701213][T15181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.733257][T15181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.082595][T15181] team0: Port device team_slave_0 added [ 1486.156176][T15181] team0: Port device team_slave_1 added [ 1486.737127][T15181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.748278][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.776234][T15181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.002722][T15181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.010404][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.036962][T15181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.760580][ T51] Bluetooth: hci0: command tx timeout [ 1487.926698][T15181] hsr_slave_0: entered promiscuous mode [ 1487.938276][T15181] hsr_slave_1: entered promiscuous mode [ 1491.334861][T15181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1491.438728][T15181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1491.578155][T15181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1491.697222][T15288] loop4: detected capacity change from 0 to 16 [ 1491.713363][T15181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1491.943693][T15288] erofs (device loop4): too large lz4 pclusterblks 16832 [ 1494.035519][T15181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.324356][T15181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.453857][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.461572][ T3873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.642620][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.650391][ T3873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.191318][ T7815] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1495.440871][ T7815] usb 9-1: Using ep0 maxpacket: 8 [ 1495.505126][ T7815] usb 9-1: config 0 has an invalid interface number: 244 but max is 1 [ 1495.514896][ T7815] usb 9-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1495.528967][ T7815] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1495.538657][ T7815] usb 9-1: config 0 has no interface number 0 [ 1495.545139][ T7815] usb 9-1: config 0 interface 244 has no altsetting 0 [ 1495.699282][ T7815] usb 9-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5 [ 1495.709107][ T7815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.719429][ T7815] usb 9-1: Product: syz [ 1495.724314][ T7815] usb 9-1: SerialNumber: syz [ 1495.857146][ T7815] usb 9-1: config 0 descriptor?? [ 1496.213497][ T7815] usb 9-1: USB disconnect, device number 3 [ 1498.182060][T15181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.891935][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 1501.667496][T15181] veth0_vlan: entered promiscuous mode [ 1501.856285][T15181] veth1_vlan: entered promiscuous mode [ 1502.383913][T15181] veth0_macvtap: entered promiscuous mode [ 1502.454862][T15181] veth1_macvtap: entered promiscuous mode [ 1503.049280][T15181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.177831][T15181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1503.321809][T12722] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.386452][T12722] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.457556][T12722] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.534793][T12722] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.347631][T15375] loop2: detected capacity change from 0 to 128 [ 1508.513018][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1508.513109][ T30] audit: type=1326 audit(1763509356.466:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.1.2585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1508.542542][ T30] audit: type=1326 audit(1763509356.466:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.1.2585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1508.569285][ T30] audit: type=1326 audit(1763509356.496:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.1.2585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1508.593233][ T30] audit: type=1326 audit(1763509356.496:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.1.2585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1508.617014][ T30] audit: type=1326 audit(1763509356.496:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.1.2585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1508.807158][T15179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1508.817206][T15179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1508.829341][T15179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1508.851373][T15179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1508.881141][T15179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1511.002148][T15179] Bluetooth: hci2: command tx timeout [ 1511.748847][T15411] chnl_net:caif_netlink_parms(): no params data found [ 1513.087921][T15179] Bluetooth: hci2: command tx timeout [ 1513.409531][ T30] audit: type=1326 audit(1763509361.376:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.2592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1513.437447][ T30] audit: type=1326 audit(1763509361.376:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.2592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1513.464059][ T30] audit: type=1326 audit(1763509361.406:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.2592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1513.490373][ T30] audit: type=1326 audit(1763509361.406:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.2592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1513.514695][ T30] audit: type=1326 audit(1763509361.486:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.2592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1514.994948][T15411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.002965][T15411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.019102][T15411] bridge_slave_0: entered allmulticast mode [ 1515.029640][T15411] bridge_slave_0: entered promiscuous mode [ 1515.160340][T15179] Bluetooth: hci2: command tx timeout [ 1515.206890][T15411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.222686][T15411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.230882][T15411] bridge_slave_1: entered allmulticast mode [ 1515.242227][T15411] bridge_slave_1: entered promiscuous mode [ 1516.013177][T15411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.170705][T12717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.179013][T12717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.212167][T15411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.859549][T15411] team0: Port device team_slave_0 added [ 1516.893691][T12713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.901952][T12713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.032938][T15411] team0: Port device team_slave_1 added [ 1517.275437][T15179] Bluetooth: hci2: command tx timeout [ 1517.392567][T15411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.403912][T15411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.431279][T15411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.456721][T15411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.466881][T15411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.497143][T15411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.242462][T15411] hsr_slave_0: entered promiscuous mode [ 1518.254224][T15411] hsr_slave_1: entered promiscuous mode [ 1518.264091][T15411] debugfs: 'hsr0' already exists in 'hsr' [ 1518.270406][T15411] Cannot create hsr debugfs directory [ 1518.942489][T15480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2600'. [ 1518.952070][T15480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2600'. [ 1520.047318][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1520.054507][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1523.925565][T15411] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1524.034357][T15411] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1524.157749][T15411] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1524.268959][T15411] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1525.410469][T15513] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2610'. [ 1525.420101][T15513] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1526.520386][T15411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.834903][T15411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.880462][ T5886] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1526.968402][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.976578][T12709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.130751][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 1527.170365][ T5886] usb 3-1: config 0 has an invalid interface number: 218 but max is 0 [ 1527.178998][ T5886] usb 3-1: config 0 has no interface number 0 [ 1527.185835][ T5886] usb 3-1: config 0 interface 218 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1527.204168][ T5886] usb 3-1: config 0 interface 218 has no altsetting 0 [ 1527.240452][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.248152][T12709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.392849][ T5886] usb 3-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice=4d.ad [ 1527.409615][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.420546][ T5886] usb 3-1: Product: syz [ 1527.425025][ T5886] usb 3-1: Manufacturer: syz [ 1527.430723][ T5886] usb 3-1: SerialNumber: syz [ 1527.635571][ T5886] usb 3-1: config 0 descriptor?? [ 1527.645780][T15519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1527.982244][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1528.252243][ T5886] snd-usb-audio 3-1:0.218: probe with driver snd-usb-audio failed with error -2 [ 1528.352159][ T5886] usb 3-1: USB disconnect, device number 59 [ 1528.643532][ T8385] udevd[8385]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.218/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1530.493862][T15537] loop1: detected capacity change from 0 to 1024 [ 1530.584251][T15537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1530.656861][T15537] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1530.787907][T15537] System zones: 0-1, 3-36 [ 1530.844893][T15537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1531.548208][T15411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1531.656516][T13922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.890387][ T30] audit: type=1326 audit(1763509384.846:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1537.073666][ T30] audit: type=1326 audit(1763509384.976:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1537.097036][ T30] audit: type=1326 audit(1763509385.056:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1537.121133][ T30] audit: type=1326 audit(1763509385.056:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1537.146637][ T30] audit: type=1326 audit(1763509385.056:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1537.171455][ T30] audit: type=1326 audit(1763509385.086:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1537.194467][ T30] audit: type=1326 audit(1763509385.086:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1537.196830][T15411] veth0_vlan: entered promiscuous mode [ 1537.479851][T15411] veth1_vlan: entered promiscuous mode [ 1537.698981][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1537.710100][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1537.750082][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1537.772660][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1537.797965][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1538.348278][T15411] veth0_macvtap: entered promiscuous mode [ 1538.469438][T15411] veth1_macvtap: entered promiscuous mode [ 1538.903818][T15411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.068699][T15411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.358966][T10661] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.498389][T10661] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.638114][T10661] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.707217][T10661] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.990290][T15179] Bluetooth: hci7: command tx timeout [ 1540.345128][T15597] kvm: pic: single mode not supported [ 1540.345233][T15597] kvm: pic: level sensitive irq not supported [ 1540.376143][T15597] kvm: pic: non byte read [ 1540.534424][T15597] kvm: pic: non byte read [ 1540.677430][T15597] kvm: pic: non byte read [ 1541.422366][T15587] chnl_net:caif_netlink_parms(): no params data found [ 1542.079891][T15179] Bluetooth: hci7: command tx timeout [ 1544.122910][T15179] Bluetooth: hci7: command tx timeout [ 1545.334328][T12722] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.438788][T15587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.446973][T15587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.455334][T15587] bridge_slave_0: entered allmulticast mode [ 1545.465850][T15587] bridge_slave_0: entered promiscuous mode [ 1545.669194][T12722] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.758308][T15587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.766302][T15587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.776261][T15587] bridge_slave_1: entered allmulticast mode [ 1545.786818][T15587] bridge_slave_1: entered promiscuous mode [ 1545.922669][T12722] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.220705][T15179] Bluetooth: hci7: command tx timeout [ 1546.407466][T12722] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.838223][T15587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.342009][T15587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.452686][T12722] bridge_slave_1: left allmulticast mode [ 1547.458799][T12722] bridge_slave_1: left promiscuous mode [ 1547.465846][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.535135][T12722] bridge_slave_0: left allmulticast mode [ 1547.541811][T12722] bridge_slave_0: left promiscuous mode [ 1547.548588][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.042306][T12722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.116621][T12722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.155444][T12722] bond0 (unregistering): Released all slaves [ 1549.789984][T15587] team0: Port device team_slave_0 added [ 1550.134423][T15587] team0: Port device team_slave_1 added [ 1550.562558][T12722] hsr_slave_0: left promiscuous mode [ 1550.592155][T12722] hsr_slave_1: left promiscuous mode [ 1550.601131][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.608953][T12722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.733980][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.741983][T12722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.010733][T12722] veth1_macvtap: left promiscuous mode [ 1551.016543][T12722] veth0_macvtap: left promiscuous mode [ 1551.023960][T12722] veth1_vlan: left promiscuous mode [ 1551.029606][T12722] veth0_vlan: left promiscuous mode [ 1552.260857][T15663] loop2: detected capacity change from 0 to 512 [ 1552.271427][T15663] EXT4-fs: Ignoring removed i_version option [ 1552.331116][T15663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1552.660570][T15663] EXT4-fs (loop2): 1 truncate cleaned up [ 1552.668838][T15663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.463842][T12722] team0 (unregistering): Port device team_slave_1 removed [ 1553.592579][T12722] team0 (unregistering): Port device team_slave_0 removed [ 1554.077848][ T7906] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.423074][T15587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.430854][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.460865][T15587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.816492][T15587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.824474][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.857371][T15587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.072481][T15675] tmpfs: Bad value for 'nr_inodes' [ 1555.923507][T15587] hsr_slave_0: entered promiscuous mode [ 1555.935524][T15587] hsr_slave_1: entered promiscuous mode [ 1555.945322][T15587] debugfs: 'hsr0' already exists in 'hsr' [ 1555.951378][T15587] Cannot create hsr debugfs directory [ 1556.466070][T15686] 9p: Unknown access argument a: -22 [ 1557.728752][T12722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.737415][T12722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.370264][T10661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.378550][T10661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.746734][T15587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1560.912721][T15587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1561.145337][T15587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1561.304310][T15587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1562.482321][T15734] 9pnet_fd: Insufficient options for proto=fd [ 1562.801230][T15738] netlink: 'syz.7.2668': attribute type 4 has an invalid length. [ 1562.809299][T15738] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2668'. [ 1563.578354][T15587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.980404][T15587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.122574][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.130433][ T3873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.304994][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.312714][ T3873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.850765][T15751] loop9: detected capacity change from 0 to 4096 [ 1567.812904][T15587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.841280][T15587] veth0_vlan: entered promiscuous mode [ 1569.091620][T15587] veth1_vlan: entered promiscuous mode [ 1569.861091][T15587] veth0_macvtap: entered promiscuous mode [ 1569.947179][T15587] veth1_macvtap: entered promiscuous mode [ 1570.364570][T15587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.575314][T15587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.836275][ T3873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.939223][T10661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.038071][T12713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.088472][T12713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.651461][ T30] audit: type=1326 audit(1763509419.596:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1571.674471][ T30] audit: type=1326 audit(1763509419.596:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1571.698894][ T30] audit: type=1326 audit(1763509419.616:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1571.721936][ T30] audit: type=1326 audit(2000000000.000:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1571.748180][ T30] audit: type=1326 audit(2000000000.000:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.1.2686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1574.780854][T15819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2692'. [ 1576.103898][T15829] Invalid ELF header type: 3 != 1 [ 1577.514297][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2697'. [ 1577.661765][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2697'. [ 1578.671253][ T30] audit: type=1326 audit(2000000007.010:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1578.694817][ T30] audit: type=1326 audit(2000000007.010:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1578.720564][ T30] audit: type=1326 audit(2000000007.040:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1578.744256][ T30] audit: type=1326 audit(2000000007.040:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1578.767332][ T30] audit: type=1326 audit(2000000007.100:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1579.452791][ T30] audit: type=1326 audit(2000000007.190:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1579.482092][ T30] audit: type=1326 audit(2000000007.190:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1579.505861][ T30] audit: type=1326 audit(2000000007.300:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1579.531407][ T30] audit: type=1326 audit(2000000007.310:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1579.555011][ T30] audit: type=1326 audit(2000000007.340:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 1580.122151][ T59] bridge_slave_1: left allmulticast mode [ 1580.128063][ T59] bridge_slave_1: left promiscuous mode [ 1580.145207][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.400654][ T59] bridge_slave_0: left allmulticast mode [ 1580.406566][ T59] bridge_slave_0: left promiscuous mode [ 1580.413969][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.291886][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.377217][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.437457][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.444617][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1581.477915][ T59] bond0 (unregistering): Released all slaves [ 1582.613470][ T59] hsr_slave_0: left promiscuous mode [ 1582.657349][ T59] hsr_slave_1: left promiscuous mode [ 1583.975035][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1584.212252][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1585.387189][T15179] Bluetooth: Frame is too long (len 10, expected len 4) [ 1586.070992][T12727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.082727][T12727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.604845][T12717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.613474][T12717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.626063][T15945] random: crng reseeded on system resumption [ 1590.343664][T15953] syz.9.2729 (15953): /proc/15951/oom_adj is deprecated, please use /proc/15951/oom_score_adj instead. [ 1598.648783][T16024] Bluetooth: MGMT ver 1.23 [ 1602.731320][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2772'. [ 1602.785412][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2772'. [ 1603.971818][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1609.598816][T16122] binder_alloc: 16119: binder_alloc_buf, no vma [ 1613.654799][T10658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.938253][T10658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.256837][T10658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.507261][T10658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.665924][T10658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1616.740034][T10658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.768764][T10658] bond0 (unregistering): Released all slaves [ 1616.775468][T16189] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.253011][T10658] hsr_slave_0: left promiscuous mode [ 1618.335877][T10658] hsr_slave_1: left promiscuous mode [ 1618.413637][T10658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1618.423737][T10658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.563340][T10658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1618.571398][T10658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.751710][T10658] veth1_macvtap: left promiscuous mode [ 1618.757512][T10658] veth0_macvtap: left promiscuous mode [ 1618.763891][T10658] veth1_vlan: left promiscuous mode [ 1618.769467][T10658] veth0_vlan: left promiscuous mode [ 1621.099910][T10658] team0 (unregistering): Port device team_slave_1 removed [ 1621.261767][T10658] team0 (unregistering): Port device team_slave_0 removed [ 1623.584718][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2839'. [ 1626.924578][T16298] ip6gretap1: entered promiscuous mode [ 1626.936811][T16298] ip6gretap1: entered allmulticast mode [ 1627.158085][T15179] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 1634.169168][T16376] netlink: 'syz.2.2878': attribute type 4 has an invalid length. [ 1634.177918][T16376] netlink: 'syz.2.2878': attribute type 5 has an invalid length. [ 1634.186285][T16376] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2878'. [ 1634.682527][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1635.349602][T16393] comedi comedi0: Minor 3 could not be opened [ 1636.571179][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1636.790340][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1636.843619][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.854655][ T24] usb 3-1: config 0 has no interfaces? [ 1636.860883][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1636.876289][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.043496][ T24] usb 3-1: config 0 descriptor?? [ 1637.291454][ T24] usb 3-1: USB disconnect, device number 60 [ 1642.883943][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.891315][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1651.360611][T16563] ===================================================== [ 1651.368239][T16563] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 1651.376870][T16563] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 1651.383149][T16563] do_xdp_generic+0xd52/0x1690 [ 1651.388175][T16563] tun_get_user+0x45c0/0x6d70 [ 1651.393265][T16563] tun_chr_write_iter+0x3e9/0x5c0 [ 1651.398908][T16563] vfs_write+0xbe2/0x15d0 [ 1651.403608][T16563] __ia32_sys_write+0x1f9/0x4d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1651.408866][T16563] ia32_sys_call+0x35bc/0x4310 [ 1651.414160][T16563] __do_fast_syscall_32+0xb0/0x150 [ 1651.419545][T16563] do_fast_syscall_32+0x38/0x80 [ 1651.424895][T16563] do_SYSENTER_32+0x1f/0x30 [ 1651.429836][T16563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1651.436403][T16563] [ 1651.438898][T16563] Uninit was stored to memory at: [ 1651.444469][T16563] pskb_expand_head+0x310/0x1610 [ 1651.449794][T16563] do_xdp_generic+0xa79/0x1690 [ 1651.454828][T16563] tun_get_user+0x45c0/0x6d70 [ 1651.459918][T16563] tun_chr_write_iter+0x3e9/0x5c0 [ 1651.465165][T16563] vfs_write+0xbe2/0x15d0 [ 1651.469848][T16563] __ia32_sys_write+0x1f9/0x4d0 [ 1651.474875][T16563] ia32_sys_call+0x35bc/0x4310 [ 1651.480135][T16563] __do_fast_syscall_32+0xb0/0x150 [ 1651.485682][T16563] do_fast_syscall_32+0x38/0x80 [ 1651.491012][T16563] do_SYSENTER_32+0x1f/0x30 [ 1651.495926][T16563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1651.502739][T16563] [ 1651.505157][T16563] Uninit was created at: [ 1651.509850][T16563] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 1651.516695][T16563] kmalloc_reserve+0x22f/0x4b0 [ 1651.521871][T16563] __alloc_skb+0x347/0x7d0 [ 1651.526500][T16563] alloc_skb_with_frags+0xc5/0xa60 [ 1651.532029][T16563] sock_alloc_send_pskb+0xacc/0xc60 [ 1651.537581][T16563] tun_get_user+0x1142/0x6d70 [ 1651.542685][T16563] tun_chr_write_iter+0x3e9/0x5c0 [ 1651.548111][T16563] vfs_write+0xbe2/0x15d0 [ 1651.552796][T16563] __ia32_sys_write+0x1f9/0x4d0 [ 1651.557841][T16563] ia32_sys_call+0x35bc/0x4310 [ 1651.563049][T16563] __do_fast_syscall_32+0xb0/0x150 [ 1651.568508][T16563] do_fast_syscall_32+0x38/0x80 [ 1651.573886][T16563] do_SYSENTER_32+0x1f/0x30 [ 1651.578809][T16563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1651.585560][T16563] [ 1651.588103][T16563] CPU: 1 UID: 0 PID: 16563 Comm: syz.9.2946 Not tainted syzkaller #0 PREEMPT(none) [ 1651.598218][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.608819][T16563] ===================================================== [ 1651.616139][T16563] Disabling lock debugging due to kernel taint [ 1651.622548][T16563] Kernel panic - not syncing: kmsan.panic set ... [ 1651.629136][T16563] CPU: 1 UID: 0 PID: 16563 Comm: syz.9.2946 Tainted: G B syzkaller #0 PREEMPT(none) [ 1651.640323][T16563] Tainted: [B]=BAD_PAGE [ 1651.644600][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.654843][T16563] Call Trace: [ 1651.658338][T16563] [ 1651.661480][T16563] __dump_stack+0x26/0x30 [ 1651.666159][T16563] dump_stack_lvl+0x53/0x270 [ 1651.670980][T16563] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1651.677121][T16563] dump_stack+0x1e/0x25 [ 1651.681504][T16563] vpanic+0x435/0xd30 [ 1651.685753][T16563] panic+0x15d/0x160 [ 1651.689933][T16563] kmsan_report+0x31c/0x320 [ 1651.694643][T16563] ? __msan_warning+0x1b/0x30 [ 1651.699514][T16563] ? bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 1651.705800][T16563] ? do_xdp_generic+0xd52/0x1690 [ 1651.710990][T16563] ? tun_get_user+0x45c0/0x6d70 [ 1651.716073][T16563] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1651.721505][T16563] ? vfs_write+0xbe2/0x15d0 [ 1651.726204][T16563] ? __ia32_sys_write+0x1f9/0x4d0 [ 1651.731515][T16563] ? ia32_sys_call+0x35bc/0x4310 [ 1651.736726][T16563] ? __do_fast_syscall_32+0xb0/0x150 [ 1651.742264][T16563] ? do_fast_syscall_32+0x38/0x80 [ 1651.747531][T16563] ? do_SYSENTER_32+0x1f/0x30 [ 1651.752477][T16563] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1651.759320][T16563] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1651.765453][T16563] ? ___bpf_prog_run+0xea65/0xeba0 [ 1651.770823][T16563] ? kmsan_get_metadata+0xfb/0x160 [ 1651.776151][T16563] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1651.782761][T16563] ? kmsan_get_metadata+0x150/0x160 [ 1651.788178][T16563] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1651.794918][T16563] ? kmsan_get_metadata+0xfb/0x160 [ 1651.800701][T16563] __msan_warning+0x1b/0x30 [ 1651.805473][T16563] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 1651.811561][T16563] do_xdp_generic+0xd52/0x1690 [ 1651.816668][T16563] ? tun_get_user+0x40d1/0x6d70 [ 1651.821753][T16563] ? filter_irq_stacks+0x49/0x190 [ 1651.827038][T16563] ? kmsan_get_metadata+0xfb/0x160 [ 1651.832466][T16563] ? tun_get_user+0x453f/0x6d70 [ 1651.837549][T16563] tun_get_user+0x45c0/0x6d70 [ 1651.842460][T16563] ? stack_depot_save_flags+0x35/0x7b0 [ 1651.848123][T16563] ? kmsan_get_metadata+0xfb/0x160 [ 1651.853426][T16563] ? kmsan_get_metadata+0xfb/0x160 [ 1651.858741][T16563] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1651.865422][T16563] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1651.871957][T16563] tun_chr_write_iter+0x3e9/0x5c0 [ 1651.877330][T16563] vfs_write+0xbe2/0x15d0 [ 1651.882047][T16563] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1651.887865][T16563] __ia32_sys_write+0x1f9/0x4d0 [ 1651.893018][T16563] ia32_sys_call+0x35bc/0x4310 [ 1651.898055][T16563] __do_fast_syscall_32+0xb0/0x150 [ 1651.903425][T16563] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 1651.909400][T16563] do_fast_syscall_32+0x38/0x80 [ 1651.914527][T16563] do_SYSENTER_32+0x1f/0x30 [ 1651.919278][T16563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1651.925841][T16563] RIP: 0023:0xf70ed539 [ 1651.930140][T16563] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1651.950272][T16563] RSP: 002b:00000000f54dd520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1651.958972][T16563] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 1651.967092][T16563] RDX: 000000000000fdef RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 1651.975549][T16563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1651.983782][T16563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1651.991908][T16563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1652.000064][T16563] [ 1652.003388][T16563] Kernel Offset: disabled [ 1652.007909][T16563] Rebooting in 86400 seconds..