last executing test programs: 4m55.253442193s ago: executing program 0 (id=20): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m52.541630398s ago: executing program 0 (id=23): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r1, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r3, 0x12) tkill(r4, 0x14) r5 = dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) epoll_create1(0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x44, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r6}, 0x38) pselect6(0x40, &(0x7f00000000c0)={0x43, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x800000000, 0x6, 0x0, 0x6, 0x3, 0x100000}, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x20, 0x8000, 0x6, 0xffff0001, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@generic={0x83, 0x3, 'C'}, @lsrr={0x83, 0x3, 0xdb}, @ssrr={0x89, 0xf, 0xc, [@multicast2, @local, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0xf7, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@loopback, 0xa}, {@loopback, 0x7}, {@private=0xa010101, 0x1}, {@multicast2, 0x400}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x56}, @ldst={0x1, 0x2, 0x2, 0xb, 0xb, 0x50}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @jmp={0x5, 0x0, 0x6, 0x9, 0x3, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f00000001c0)='GPL\x00', 0x7, 0xa2, &(0x7f0000000440)=""/162, 0x1f00, 0x0, '\x00', r7, 0x25, r5, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x5, 0x101}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r2, r5, r6], &(0x7f0000000640)=[{0x0, 0x3, 0xf, 0x7}], 0x10, 0x4, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x6, 0x0, 0x0, 0x1, [@generic="976b"]}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) 4m47.642662904s ago: executing program 0 (id=31): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) 4m44.882019669s ago: executing program 0 (id=37): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000280)={&(0x7f0000000d40)=[0x8, 0x1fffe, 0x8, 0x1000, 0x7fff, 0xc9a3, 0x16a7, 0xffff7fff, 0x2, 0x9, 0x0, 0x10, 0x7, 0x9e3, 0x1, 0x80000000, 0x8, 0x0, 0x100, 0x5, 0xe, 0x8, 0x8, 0x2caf, 0x7a7, 0x5, 0xb, 0x6, 0x80000001, 0xfffffff8, 0x7f, 0x80000000, 0x10, 0x100, 0x3, 0xa, 0x7, 0x3ff, 0x3ff, 0x7, 0x0, 0x9, 0x10, 0x20f, 0x9, 0x4000fff, 0x2, 0x80, 0xb8e5, 0x40, 0x5, 0x4, 0x1, 0x2, 0x1, 0x8, 0xf, 0x38, 0x6, 0x72, 0xf, 0x1, 0x6, 0xa, 0x5, 0x9, 0x9, 0x7, 0x1, 0x384b, 0x0, 0x9, 0x8, 0x3, 0x8, 0x4, 0x5, 0x1, 0x40, 0x81, 0xa, 0x5, 0x3, 0x7ff, 0x3, 0x4, 0x0, 0x800, 0xdb2, 0xc, 0x9a, 0xd0d00000, 0xdc3e, 0xfffffff9, 0xfffff800, 0x80, 0x1d, 0x400, 0x87, 0x1, 0x400, 0x4, 0x8, 0x8b, 0xc60e, 0x8, 0x7, 0x10000, 0x6, 0x3ba1800, 0x1, 0x4, 0x8, 0x0, 0x10, 0x4, 0xdd8, 0x8001, 0x3, 0x81, 0x4, 0x0, 0x1, 0x10, 0x1, 0x27, 0xc, 0x0, 0x4, 0x9, 0x6, 0x0, 0x7, 0x8, 0x7, 0x10, 0x5, 0xe98, 0xc, 0x58aeb0b8, 0x40, 0xfffffffd, 0x10, 0x9, 0x8eb, 0x2, 0x6, 0x9b, 0x2, 0x8, 0x6, 0x8, 0xf, 0x28f6, 0x80000, 0x5, 0x3f, 0x8, 0x6, 0x1, 0xfffffffe, 0x40, 0x2, 0x9, 0xf, 0x464, 0x1, 0x661, 0x596, 0x4, 0xfff, 0x2, 0x9, 0x8, 0x1, 0x4, 0x9, 0x1ff, 0xfcea, 0x5, 0x4, 0x9, 0x6, 0xff8000, 0x9, 0xad3, 0xd5e, 0x4a, 0x9, 0x7fffffff, 0x7, 0x303, 0x7, 0x7, 0xec, 0x3, 0x1, 0x5, 0x5575, 0x80000001, 0x0, 0x80000000, 0xffffff89, 0x3, 0xc0000000, 0x9bc, 0x3, 0x3fa, 0xe, 0xe, 0x481, 0x1, 0x4, 0x4, 0x2, 0x1, 0x2, 0x61b, 0x7, 0x1000, 0xe, 0x2, 0x863, 0x3, 0x4, 0x3, 0xa, 0x91, 0x7, 0x8, 0xff, 0x5, 0x1, 0xfff, 0x6, 0x6, 0x5, 0x9, 0x7, 0x4, 0x190, 0x1000, 0xa, 0xe68, 0x3, 0x800, 0x95, 0x7, 0x2000f9db, 0x0, 0x9, 0x3, 0xffffff81, 0xee9b, 0x48db, 0x1, 0xa, 0x101, 0x400, 0x4, 0x100, 0x100, 0x0, 0xff, 0x2, 0x100, 0x92, 0x8, 0x7, 0x0, 0xf0, 0x429ba397, 0xb67e, 0x10, 0xea, 0x4, 0x5, 0x8, 0x7, 0x3, 0x1, 0x4, 0xf, 0x1, 0x2, 0x8, 0x1, 0x1ff, 0x6, 0x9, 0x400, 0x2, 0x1, 0x3, 0x1, 0x3, 0x1, 0xb6, 0x7f, 0x6, 0x1, 0xffff, 0x1, 0x401, 0x7, 0x5, 0x9, 0x477, 0x80, 0x7, 0x800, 0x7fffffff, 0x4, 0x8, 0x7, 0x6, 0x9, 0x0, 0x6, 0x88, 0x7, 0x80, 0x7, 0x1c, 0x1, 0x2b, 0x9, 0x1, 0x7fff, 0x401, 0xd2e, 0x6, 0x87b8, 0x6, 0x8, 0x1, 0x1, 0x40, 0x8001, 0x815, 0x6, 0xcf, 0x2, 0x6, 0xffffffff, 0x4, 0x1ff, 0x7, 0x5, 0x0, 0x61ef, 0x2, 0x7f, 0x7fffffff, 0x3, 0x5, 0xc7e, 0xff7f, 0x4, 0x7, 0x2, 0x9, 0x1, 0x2db8, 0xffff, 0x4, 0x3, 0x2a, 0x4, 0x5, 0x9, 0x1, 0x0, 0x5, 0xdad, 0x8000, 0x8, 0x3c93, 0x13, 0x81, 0xe, 0x9, 0x1a, 0x8e7, 0xffff, 0x3, 0x7, 0x1, 0x0, 0x2, 0x4000000, 0x8, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x4, 0x28, 0x0, 0x1, 0x8bf, 0x1, 0x6, 0x2, 0x5, 0x3, 0x1000, 0x2, 0x9, 0x4, 0xffffffff, 0x10001, 0x80000001, 0x7ff, 0x6, 0x5, 0x6, 0x8007, 0xd970, 0x3, 0xff, 0x3, 0x1000, 0x9, 0xe, 0x4, 0xc, 0x0, 0x5, 0x8, 0x7, 0x8, 0x6, 0x2, 0x0, 0x5e, 0x3, 0x2, 0x800003, 0x9, 0x7, 0xfffffff6, 0xfffff928, 0x200, 0x6, 0x2, 0x5, 0x8, 0x765, 0x3, 0x0, 0x800, 0xfffffffa, 0x3, 0x1, 0x94a6, 0xc, 0x684f, 0x0, 0x6, 0x1, 0x6, 0x7, 0x279, 0xff, 0x40, 0x5, 0x7, 0x932, 0x2ac88562, 0x8, 0xd, 0xbbd9, 0x14000, 0x6, 0xfffffffc, 0x32, 0xa, 0x3, 0xec6, 0x9, 0xff, 0x81, 0x4, 0xfff, 0x100, 0x9916, 0x2, 0xfffffe00, 0xffff8000, 0xfffffc00, 0x3ff, 0xb, 0x1000, 0x3, 0x4, 0x6, 0xfff, 0x24000, 0x7ff, 0x7, 0x2, 0x8, 0xfff, 0x6, 0x9, 0x7, 0x81, 0x1, 0x80, 0x4, 0x6, 0xc, 0xd6d7, 0x4, 0x7, 0x9, 0x6bb, 0x400, 0x100, 0x2, 0xe8, 0x10, 0xf2a, 0x953e, 0xfffffffd, 0xa72, 0x3, 0x4, 0x7, 0x4, 0x2, 0x324, 0x7, 0x9, 0x8, 0x0, 0xc, 0x0, 0x9, 0x5, 0x7fff, 0x9, 0x8001, 0x0, 0x4, 0x7f, 0x80, 0x6, 0x0, 0xa, 0x0, 0x0, 0x400000, 0x4, 0x9, 0x5, 0xd8b0f4e, 0x1ff, 0x2, 0xf, 0x2, 0x8, 0x5, 0xe8eb, 0x8, 0x30000, 0xf, 0xdeb3, 0x7fff, 0x9cd, 0x81, 0x3, 0x2, 0x8, 0x4, 0x100, 0x400, 0x40, 0x6, 0xe, 0x8, 0x7874, 0xa, 0x10001, 0x1, 0x9, 0x3, 0x4, 0x4, 0x4, 0x7, 0x0, 0x9, 0x80, 0xfff, 0x7cc, 0x1, 0x4, 0x927, 0x7fff, 0x800, 0x8, 0x5, 0x80000000, 0x4, 0x2, 0x0, 0xfffffffa, 0x0, 0xfffffffc, 0xf18632e, 0xc4, 0x1, 0x0, 0x6, 0xfb12, 0x9, 0x2, 0xd7e, 0xfffffffd, 0x2, 0x756, 0x7fffffff, 0x1, 0x0, 0x1, 0x10, 0x3, 0x2, 0x5, 0x14c, 0x3, 0x0, 0x6, 0x10, 0x5, 0x5, 0x9, 0x7fff, 0x3, 0x3, 0x2, 0x2, 0x1ff, 0x100, 0x3, 0x4, 0x7, 0x1, 0x4e8f, 0x7fff, 0x5, 0x8, 0x6, 0x9ebf, 0xffffffff, 0x400000, 0x4, 0x7, 0xfffffff9, 0x3, 0x6, 0x80000001, 0x0, 0x3, 0x10001, 0xffffff4e, 0x1003, 0x0, 0x4, 0x3, 0x7, 0x2, 0x1, 0x7, 0x11, 0xffe000, 0x40000006, 0x4, 0xfffffffb, 0xe75, 0x3, 0xc0, 0x101, 0x6, 0x4ad, 0x6, 0xfffffbcc, 0x0, 0x10000, 0x6, 0xd, 0x5, 0x1, 0x3, 0x7, 0x7, 0x6, 0xfdd, 0x0, 0xd739, 0x9, 0x9, 0x401, 0x800, 0x3, 0x7, 0x7, 0x7f, 0x9, 0xfffffff7, 0x9, 0x9, 0x3, 0x10, 0x10000, 0xfffffffc, 0x7fff, 0x3, 0xffff72dc, 0xee4c, 0x4, 0x8, 0xd, 0x8, 0x80000001, 0x5, 0x6, 0x7, 0x7ff, 0x2, 0x6e4, 0x3, 0xc000, 0x401, 0x79, 0xfe7, 0x1, 0x101, 0x9, 0x3, 0x8, 0x200, 0xffff, 0x3, 0x7f, 0x9, 0xfffffffe, 0x7, 0x6b, 0x1, 0x2, 0x5, 0x5f01, 0xe0, 0x9, 0x6, 0x5, 0xffffffff, 0x806, 0x10000, 0x6, 0x2, 0x6, 0xdd, 0xa3, 0xa, 0xe14, 0x0, 0x8e3cd9, 0x5, 0x2, 0x9, 0x1, 0x7fffffff, 0x40, 0x1, 0x1, 0x0, 0xfffffffc, 0x101, 0x4, 0x401, 0xfd09, 0x4, 0x39, 0x14000, 0xe660, 0x0, 0xf0d, 0x3, 0xbc, 0xa, 0x3, 0x1, 0x200, 0x57ea, 0x0, 0x3d15, 0x81, 0xe, 0x2, 0x3, 0xa, 0x1, 0x1ff, 0x2, 0xffff79a4, 0x5ae, 0x7, 0x5, 0x56, 0x0, 0xa, 0x9, 0x0, 0x2c, 0x75, 0x295, 0xfffffffd, 0x6, 0x7, 0x9d6a, 0x5, 0x0, 0xfffffffd, 0x4, 0x0, 0xfffffc00, 0x1000, 0xff, 0x4, 0x7, 0x1, 0x2, 0x6, 0x2, 0x4, 0x7, 0xfffffff7, 0x3f8f, 0xbd, 0xe1, 0x7, 0x7, 0xffffffff, 0xc, 0x5, 0x100, 0x1ff, 0x1, 0x6e3d, 0xd6, 0xfffffffc, 0xc, 0x576, 0x6, 0x5, 0x2, 0x5, 0x6, 0x3e, 0x7f, 0x1000, 0x81, 0x5, 0x101, 0x3ff, 0x100, 0x0, 0x2, 0x0, 0x400, 0x4, 0xf, 0x2, 0x2, 0xaa, 0x3, 0x6, 0x4, 0x33, 0x80000000, 0x2, 0x2, 0x1, 0xffffffff, 0x78d, 0x0, 0x2, 0x3ff, 0x0, 0x71, 0x0, 0x2, 0x2, 0x3887, 0x2, 0xd5, 0x0, 0xffff, 0x6ca, 0x2f, 0xfffffffc, 0x9, 0xffff, 0x6, 0x1, 0xd, 0x3, 0x6, 0x3, 0x38, 0xfffffffc, 0x5, 0x6, 0x2, 0x7ff, 0xe, 0x1, 0x81, 0x9, 0x9, 0x3, 0x8, 0x4, 0x10000, 0x9, 0x1, 0x1, 0xdbc2a20, 0xc, 0x6, 0x3, 0xea1, 0xec8, 0x84d9, 0x9, 0x6, 0x2b, 0x6, 0x1, 0x80000001, 0x0, 0x3, 0x7, 0x6, 0x1192c00, 0x5, 0x2, 0x0, 0x3, 0x3, 0xf9, 0x5, 0x2, 0x7ff, 0x7fff, 0x5, 0x6, 0x1, 0xff, 0x9, 0x6, 0x9, 0x4, 0x0, 0xfff, 0x1000, 0x7fffffff, 0x6, 0x1, 0x7, 0xcb7c, 0xd4, 0x4, 0x3, 0x7, 0x5, 0x2, 0xfff, 0x40, 0xffff, 0xba, 0xaed0000, 0xb, 0x7bd0, 0x7, 0x2, 0x101, 0x7ba, 0xfffffff7, 0x142, 0xfffffeff, 0xc68e, 0x6, 0x1, 0x7, 0x3, 0x401, 0xd, 0x7f, 0x6, 0x4, 0x7, 0x2, 0x5, 0x7fffffff, 0x0, 0x2, 0x0, 0x3, 0xfff, 0x3, 0x5, 0x2, 0x5, 0x2, 0x5da000, 0x7, 0x8, 0xff], 0x6, 0x400, 0x3159}) 4m43.754865398s ago: executing program 0 (id=40): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 4m42.905011408s ago: executing program 0 (id=45): landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0xc285a00, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0xffffffffffffff02, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prlimit64(0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='erofs\x00', 0x10008, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='binder\x00', 0x810481, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x344034, 0x0) 4m25.051497531s ago: executing program 32 (id=45): landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0xc285a00, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0xffffffffffffff02, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prlimit64(0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='erofs\x00', 0x10008, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='binder\x00', 0x810481, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x344034, 0x0) 2m53.819720623s ago: executing program 4 (id=265): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$inet(0x2, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2f, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3, 0x0, 0xa00369a4}, 0x38) 2m52.526517767s ago: executing program 4 (id=269): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001100)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}], 0x1, 0x8040) 2m50.126432936s ago: executing program 4 (id=271): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x2, 0x8}, 'syz0\x00', 0x4}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000fc0)={{0x0, 0xea60}, 0x16}, 0x18) 2m48.742467919s ago: executing program 4 (id=275): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m43.560734869s ago: executing program 4 (id=279): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000024}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) r1 = dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/91) io_uring_enter(0xffffffffffffffff, 0x325b, 0x39f0, 0x15, 0x0, 0x0) r2 = syz_io_uring_setup(0x110d, &(0x7f00000003c0)={0x0, 0x80d5, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11Hx\x0e\xa17\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\xa24\xa9am\xde\xb2\xd3\xcb\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00\"\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x83\xc9\x86$\x1bj\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8:o\xebF)\x9dL\x01vRk\xaacBsRe\x1c\xe0\xdeU\xd7\xe86\xcd\xeb\xc4$\x98\x06J\xd4dD\x8d\x03\x02\x00\x00i{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf}\x1f7\x16\xb6f\xa0K \xb2\a\x89*>\xc7V\x0f\xc5\x02p\xf6-U\x19\xaf\x1a\xa2\xf0\xca\xd4\x19\xa3\xe0\xc2@2\xa0\x9c\xaa\x1e\xff\xaf\xecbS\x00\x87\x82\x95\xf9f\xef\xbf\x9bP\xb3*\xbd\xca\xb0\\kVU\x06t\f\xa8A\x84\x967=c\x1aX\x9e\x01\xadc\x8c\x9f\xde{q\xf0\x00\xf7:\xbf\xa2\xc4s\xe4r\x7fK#\xcb\x9b\x10\xbb7\xfb\x11\xa7\x0fp\xc4\xb4\xfbZ\x1a\x00\x00\x00\xb5L\x95\xf0\x99\x8f\x91\x88*u\x93\xdcp\xec\x1c\x8c\x00'/408, 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x8455}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 2m40.936810845s ago: executing program 4 (id=286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 2m25.512436057s ago: executing program 33 (id=286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 1m48.732654144s ago: executing program 1 (id=396): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) open$dir(0x0, 0x440802, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b5d090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f38306d090890e0879b0a0ac6e70a9b3348959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1m42.661480683s ago: executing program 1 (id=406): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00'}) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) 1m36.518346976s ago: executing program 1 (id=416): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m34.988905789s ago: executing program 1 (id=419): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r1, 0x0, 0xfdef) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) close(r3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @ioapic={0x4, 0x0, 0x5c77f6aa, 0x0, 0x0, [{0x40, 0xe, 0xa, '\x00', 0x4}, {0x8, 0x8, 0x3, '\x00', 0x5}, {0x4d, 0x1, 0x6, '\x00', 0x7}, {0x81, 0x6, 0x8, '\x00', 0x6a}, {0x81, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xe, 0x3, '\x00', 0xe}, {0x1, 0xd, 0x7, '\x00', 0x20}, {0x9, 0x7, 0x6, '\x00', 0xf7}, {0x1, 0x0, 0x3, '\x00', 0x60}, {0xe, 0x3, 0xe1, '\x00', 0xff}, {0x0, 0x5, 0xfa, '\x00', 0xc}, {0x3, 0x0, 0x4, '\x00', 0xf2}, {0x3, 0x1, 0x4, '\x00', 0x9}, {0x17, 0x9, 0x80, '\x00', 0x1}, {0xf9, 0xd6, 0x7f, '\x00', 0x7}, {0xa5, 0x9, 0x81, '\x00', 0x8}, {0x6, 0x8, 0x7, '\x00', 0x1}, {0x2, 0xbe, 0xfd, '\x00', 0x1}, {0x10, 0x7, 0x99, '\x00', 0x40}, {0x77, 0x5, 0x6a, '\x00', 0xf9}, {0xf0, 0xd3, 0x4, '\x00', 0x14}, {0x3, 0x1, 0x1, '\x00', 0x3}, {0x9, 0x36, 0x41, '\x00', 0x1}, {0x8, 0x2, 0xb, '\x00', 0x7}]}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, 0x0, 0x0) syz_usb_ep_write(r8, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") r10 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x6}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) 1m34.793249928s ago: executing program 6 (id=321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x48, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x48}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)=@arm64={0x0, 0x2, 0xfd, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m28.991492326s ago: executing program 1 (id=427): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x8000201c}) r2 = io_uring_setup(0x58fb, &(0x7f0000000080)={0x0, 0x3142, 0x1, 0x1, 0x2e1}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08002cbd707cce14cb6d47df4800"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000600)={0x2, 'lo\x00', 0x1}, 0x18) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 1m28.098389758s ago: executing program 6 (id=429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) fdatasync(r3) 1m27.074962554s ago: executing program 1 (id=432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80542, 0x0) readv(r4, &(0x7f0000000480), 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) 1m22.360939671s ago: executing program 6 (id=439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x48, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x48}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)=@arm64={0x0, 0x2, 0xfd, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m21.902193074s ago: executing program 3 (id=441): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x40084503, &(0x7f0000001500)=""/4103) ioctl$KVM_RUN(r5, 0x8004ae98, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6000"], 0xbf}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r7, 0x0, 0x0}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) socket$nl_generic(0x10, 0x3, 0x10) 1m16.125123908s ago: executing program 3 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) 1m15.848537403s ago: executing program 6 (id=446): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000004780)=""/198, 0xc6}], 0x2}, 0x1}], 0x1, 0x10001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "65128e5d8d64e40d14277c921c857474664a8c7a1216dd8e82d58b7d7f0be8bd", "d0672bd2d42cf7f03ceb585c8d332950d2f30c65bb31dbb17a5381158ec17a0e972824943f259c4bf83f4e3805d4d5ea", "f91cd90e1499d927cb14f6349be24456d8b7597e6bbbf5204b037c16", {"53351562fa70410c30f461f24002acb3", "e6d938bd89aea4fe53a4acc775dd97f4"}}}}}}}, 0x0) 1m15.438820751s ago: executing program 3 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) fdatasync(r3) 1m12.170069518s ago: executing program 6 (id=452): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m10.742234907s ago: executing program 34 (id=432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80542, 0x0) readv(r4, &(0x7f0000000480), 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) 1m10.304673782s ago: executing program 3 (id=456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x48, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x48}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)=@arm64={0x0, 0x2, 0xfd, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m7.468375056s ago: executing program 3 (id=458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m5.98320616s ago: executing program 3 (id=461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x61, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) io_uring_setup(0x1834, &(0x7f0000000140)={0x0, 0x296b, 0x1000, 0x1, 0x66}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 54.255781954s ago: executing program 35 (id=452): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 50.357544267s ago: executing program 36 (id=461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x61, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) io_uring_setup(0x1834, &(0x7f0000000140)={0x0, 0x296b, 0x1000, 0x1, 0x66}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 7.151157328s ago: executing program 2 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 6.358023543s ago: executing program 2 (id=525): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r0) 4.770007595s ago: executing program 5 (id=526): socket$qrtr(0x2a, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, 0x0, 0x0) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) 3.734093474s ago: executing program 5 (id=527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ff0000141420000000003300"], 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.894100436s ago: executing program 2 (id=528): add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000300)="0680ef1c", 0x4, 0xfffffffffffffffe) 2.67995217s ago: executing program 5 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x40, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 2.091152466s ago: executing program 2 (id=530): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="df24ead320b4dae0859dec60eb0dcc2dc884fd6c88cfeb62ae4c2f2c8581d69df21eb01bc69da23bd57868b2a256c16da38c11e08c3c29dda7a9a5a5d8a838d233b2b0456e3f234c4631071ea196a961cbd82f7162017b5c3e0f63d49402245fc809837fef7fcd4e0851cbfb4290a0be7c129e787de71ab075f86581f2ed4b795935cd7b8f55f97707b07a902f1739a9d1", 0x91, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="cc", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="da1103b23d6e9ec7b0960f8a45520fdee8bbafd038af5357cc2bf5969a77a332ef6c7c1a675389b16063696dee3af27a8f971dbce5b93d02d840ee08d2d124e67fa17642c4d99d45aa878237a1663a31f7ef396e4b22348c06000000ac87d8f9f5d19ceb0609e3b019c0a4814a268de5def201eb268f1dfb204aa37d70e75db23f9449afe074d5c17bd43d8450cefcb35bdabe30f169ea854c0d09bad3caab3dadbbcc04d1f6e2403c2ca21f837f62901da7a98ab45d458273", 0xb9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) 1.738698904s ago: executing program 5 (id=531): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x5, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x6, 0x10000000000}, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, 0xd87, 0xfffffffffffffffe, 0x0, 0x8000000000000, 0xc}, 0x0, 0x0, 0x0) 1.090677807s ago: executing program 2 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 582.342703ms ago: executing program 5 (id=533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) readv(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x200}}, 0x91) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r4, 0x2}}, 0x18) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xe, &(0x7f0000000000), &(0x7f0000000280)=0x4) 208.073743ms ago: executing program 2 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000340)=@arm64={0x0, 0x2, 0xfd, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 5 (id=535): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): sing preconfigured BSSID 50:50:50:50:50:50 [ 285.830103][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.628268][ T5796] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 286.725016][ T3978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.733522][ T3978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.910038][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.918046][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.164018][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.172516][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.243373][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.252835][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.776509][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.784724][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.822456][ T5978] input: syz0 as /devices/virtual/input/input5 [ 289.300457][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.308574][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.250080][ T5992] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 290.989340][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.996095][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.286243][ T6008] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15'. [ 293.583936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 293.890801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 293.993167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 297.574707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 297.881732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 298.124903][ T6026] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 298.136995][ T6026] overlayfs: maximum fs stacking depth exceeded [ 298.598231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 298.700485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 298.905448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 299.007918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 299.110373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 303.849723][ T29] audit: type=1326 audit(1738317784.172:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 303.872231][ T29] audit: type=1326 audit(1738317784.172:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.088523][ T29] audit: type=1326 audit(1738317784.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.111761][ T29] audit: type=1326 audit(1738317784.242:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.136637][ T29] audit: type=1326 audit(1738317784.242:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.159861][ T29] audit: type=1326 audit(1738317784.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.182127][ T29] audit: type=1326 audit(1738317784.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.204333][ T29] audit: type=1326 audit(1738317784.242:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.226533][ T29] audit: type=1326 audit(1738317784.242:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.251227][ T29] audit: type=1326 audit(1738317784.242:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7fc00000 [ 304.459898][ T5847] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 304.523010][ T6049] mmap: syz.4.28 (6049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 304.653554][ T5847] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.662685][ T5847] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 304.673308][ T5847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.682553][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 304.693902][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 304.867688][ T5847] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.877379][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.885767][ T5847] usb 2-1: Product: syz [ 304.890156][ T5847] usb 2-1: Manufacturer: syz [ 305.004735][ T5847] cdc_wdm 2-1:1.0: skipping garbage [ 305.021194][ T5847] cdc_wdm 2-1:1.0: skipping garbage [ 305.133817][ T5847] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 305.141129][ T5847] cdc_wdm 2-1:1.0: Unknown control protocol [ 305.526993][ T5837] usb 2-1: USB disconnect, device number 2 [ 306.886981][ T6065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.900364][ T6065] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 306.960951][ T6065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 306.967261][ T6065] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 307.094158][ T6065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.103535][ T6065] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 307.302912][ T6065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.310117][ T6065] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 307.417216][ T6065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.424546][ T6065] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 308.660639][ T6078] Can't find ip_set type hash:i [ 310.313316][ T6100] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 312.707183][ T6123] warning: `syz.4.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.370171][ T6144] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.352166][ T6156] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 318.820557][ T6179] tun0: tun_chr_ioctl cmd 1074025675 [ 318.826041][ T6179] tun0: persist enabled [ 320.277682][ T6196] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 320.989017][ T6202] 9pnet_virtio: no channels available for device syz [ 321.120331][ T6202] IPVS: Error connecting to the multicast addr [ 321.600697][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 322.773380][ T6217] netlink: 'syz.4.78': attribute type 10 has an invalid length. [ 329.582213][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'. [ 329.841328][ T5794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.867605][ T5794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.900143][ T5794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.963333][ T5794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.976722][ T5794] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 329.987093][ T5794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.266921][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.279253][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.411536][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.066447][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.102370][ T5790] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 331.151482][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.781768][ T6257] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.249183][ T5794] Bluetooth: hci5: command tx timeout [ 334.670566][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 335.330066][ T5794] Bluetooth: hci5: command tx timeout [ 336.133828][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.305464][ T6295] misc userio: Invalid payload size [ 336.350970][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.380912][ T6295] misc userio: Invalid payload size [ 336.583468][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.932394][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.940447][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.948137][ T6251] bridge_slave_0: entered allmulticast mode [ 336.957719][ T6251] bridge_slave_0: entered promiscuous mode [ 336.976202][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.115287][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.123884][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.134177][ T6251] bridge_slave_1: entered allmulticast mode [ 337.142974][ T6251] bridge_slave_1: entered promiscuous mode [ 337.208417][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 337.861054][ T5794] Bluetooth: hci5: command tx timeout [ 339.501703][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.524751][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.611010][ T1147] bridge_slave_1: left allmulticast mode [ 339.617208][ T1147] bridge_slave_1: left promiscuous mode [ 339.624127][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.007524][ T5794] Bluetooth: hci5: command tx timeout [ 340.080168][ T1147] bridge_slave_0: left allmulticast mode [ 340.086111][ T1147] bridge_slave_0: left promiscuous mode [ 340.096260][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.858358][ T6307] qnx6: unable to read the first superblock [ 341.860096][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.509604][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.724942][ T6317] input: syz1 as /devices/virtual/input/input6 [ 342.958287][ T1147] bond0 (unregistering): Released all slaves [ 343.022591][ T6251] team0: Port device team_slave_0 added [ 343.062885][ T6251] team0: Port device team_slave_1 added [ 348.515460][ T6307] Set syz1 is full, maxelem 65536 reached [ 348.666806][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.676346][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.703480][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.084648][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.092038][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.118338][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.417317][ T1147] hsr_slave_0: left promiscuous mode [ 349.467227][ T1147] hsr_slave_1: left promiscuous mode [ 349.474843][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.482811][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.611831][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.619805][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.799867][ T1147] veth1_macvtap: left promiscuous mode [ 349.805740][ T1147] veth0_macvtap: left promiscuous mode [ 349.817919][ T1147] veth1_vlan: left promiscuous mode [ 349.823984][ T1147] veth0_vlan: left promiscuous mode [ 352.753248][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.760181][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.191039][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 354.245052][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 354.590326][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.117'. [ 354.935362][ T6251] hsr_slave_0: entered promiscuous mode [ 354.944875][ T6251] hsr_slave_1: entered promiscuous mode [ 357.345305][ T6251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 357.494402][ T6251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 357.613278][ T6251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 357.738115][ T6251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.370692][ T6387] misc userio: Invalid payload size [ 361.285691][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.706180][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.916791][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.924744][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.170537][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.178344][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.849561][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 365.202695][ T6444] misc userio: Invalid payload size [ 365.411951][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.812495][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 369.966293][ T6488] misc userio: Invalid payload size [ 370.532367][ T6251] veth0_vlan: entered promiscuous mode [ 370.639466][ T6251] veth1_vlan: entered promiscuous mode [ 371.121581][ T6251] veth0_macvtap: entered promiscuous mode [ 371.241884][ T6251] veth1_macvtap: entered promiscuous mode [ 371.487033][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.498069][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.513466][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.525985][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.536306][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.547233][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.557609][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.568447][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.585474][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.946783][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.958068][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.968311][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.979165][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.989366][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.000154][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.010362][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.026312][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.033069][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 372.043523][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.283142][ T6251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.292432][ T6251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.301695][ T6251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.310924][ T6251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.292951][ T6521] misc userio: Invalid payload size [ 375.335008][ T6521] misc userio: Invalid payload size [ 377.532146][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 377.631467][ T6550] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 378.518587][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'. [ 380.179963][ T6575] misc userio: Invalid payload size [ 380.219963][ T6575] misc userio: Invalid payload size [ 383.020368][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 383.591547][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 388.446408][ T3978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.454790][ T3978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.944211][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 390.088043][ T6648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.192'. [ 390.360231][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.415239][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.431525][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.481606][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.511317][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 390.534520][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.169535][ T5794] Bluetooth: hci1: command tx timeout [ 395.250385][ T5794] Bluetooth: hci1: command tx timeout [ 395.334632][ T6651] chnl_net:caif_netlink_parms(): no params data found [ 395.441250][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.639485][ T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.884695][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.204233][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.860733][ T78] bridge_slave_1: left allmulticast mode [ 396.866677][ T78] bridge_slave_1: left promiscuous mode [ 396.873792][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.012628][ T78] bridge_slave_0: left allmulticast mode [ 397.018571][ T78] bridge_slave_0: left promiscuous mode [ 397.025765][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.330136][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 397.341347][ T5794] Bluetooth: hci1: command tx timeout [ 397.572070][ T6701] netlink: 48 bytes leftover after parsing attributes in process `syz.4.207'. [ 398.149763][ T6709] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 398.413584][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 398.413660][ T29] audit: type=1326 audit(1738317878.752:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 399.489983][ T5794] Bluetooth: hci1: command tx timeout [ 399.509208][ T29] audit: type=1326 audit(1738317878.962:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 400.110726][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.163122][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.698596][ T78] bond0 (unregistering): Released all slaves [ 400.864823][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.873010][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.881471][ T6651] bridge_slave_0: entered allmulticast mode [ 400.891434][ T6651] bridge_slave_0: entered promiscuous mode [ 401.073809][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.083556][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.091672][ T6651] bridge_slave_1: entered allmulticast mode [ 401.107874][ T6651] bridge_slave_1: entered promiscuous mode [ 401.460282][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.513531][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.827801][ T78] hsr_slave_0: left promiscuous mode [ 401.879547][ T78] hsr_slave_1: left promiscuous mode [ 401.888057][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.896246][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.956934][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.965066][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.160296][ T78] veth1_macvtap: left promiscuous mode [ 402.166228][ T78] veth0_macvtap: left promiscuous mode [ 402.172466][ T78] veth1_vlan: left promiscuous mode [ 402.178120][ T78] veth0_vlan: left promiscuous mode [ 403.229350][ T6731] ip6gretap0: entered promiscuous mode [ 403.235491][ T6731] macvtap1: entered promiscuous mode [ 403.366551][ T6731] ip6gretap0: left promiscuous mode [ 403.630675][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 403.710284][ T6745] netlink: 48 bytes leftover after parsing attributes in process `syz.2.220'. [ 404.258522][ T78] team0 (unregistering): Port device team_slave_1 removed [ 404.351368][ T78] team0 (unregistering): Port device team_slave_0 removed [ 404.676585][ T29] audit: type=1326 audit(1738317885.002:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 404.701139][ T29] audit: type=1326 audit(1738317885.002:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 404.818333][ T6747] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 404.951626][ T6651] team0: Port device team_slave_0 added [ 405.024934][ T29] audit: type=1326 audit(1738317885.132:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 405.031230][ T6651] team0: Port device team_slave_1 added [ 405.047562][ T29] audit: type=1326 audit(1738317885.132:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 405.076280][ T29] audit: type=1326 audit(1738317885.132:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 405.102427][ T29] audit: type=1326 audit(1738317885.132:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 405.126016][ T29] audit: type=1326 audit(1738317885.132:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 405.148406][ T29] audit: type=1326 audit(1738317885.212:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 405.170844][ T29] audit: type=1326 audit(1738317885.212:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 405.560123][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.567406][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.594343][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.801035][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.810756][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.838105][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.124983][ T6764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.228'. [ 406.566902][ T6651] hsr_slave_0: entered promiscuous mode [ 406.577627][ T6651] hsr_slave_1: entered promiscuous mode [ 407.728068][ T6777] ip6gretap0: entered promiscuous mode [ 407.734242][ T6777] macvtap1: entered promiscuous mode [ 407.761829][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 407.826563][ T6779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.233'. [ 407.885091][ T6777] ip6gretap0: left promiscuous mode [ 409.016571][ T29] audit: type=1326 audit(1738317889.352:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 409.307554][ T6789] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 409.566498][ T6651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 409.682083][ T6651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 409.815912][ T6651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 409.942141][ T6651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.357516][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 411.456670][ T6816] netlink: 48 bytes leftover after parsing attributes in process `syz.4.245'. [ 411.574052][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.830414][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.914250][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.922428][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.042514][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.050435][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.596606][ T6825] ip6gretap0: entered promiscuous mode [ 412.602972][ T6825] macvtap1: entered promiscuous mode [ 412.642265][ T6825] ip6gretap0: left promiscuous mode [ 413.851997][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.858728][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.452719][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 414.452801][ T29] audit: type=1326 audit(1738317894.792:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 414.536794][ T6836] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 414.607068][ T29] audit: type=1326 audit(1738317894.842:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 414.632954][ T29] audit: type=1326 audit(1738317894.842:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 414.655456][ T29] audit: type=1326 audit(1738317894.842:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 414.677869][ T29] audit: type=1326 audit(1738317894.842:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 414.700469][ T29] audit: type=1326 audit(1738317894.852:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 414.724575][ T29] audit: type=1326 audit(1738317894.992:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 414.747674][ T29] audit: type=1326 audit(1738317894.992:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 415.924761][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.645091][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 418.495499][ T6883] ip6gretap0: entered promiscuous mode [ 418.501697][ T6883] macvtap1: entered promiscuous mode [ 418.621571][ T6883] ip6gretap0: left promiscuous mode [ 419.209122][ T29] audit: type=1326 audit(1738317899.532:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 419.232995][ T29] audit: type=1326 audit(1738317899.542:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 419.281398][ T6889] overlay: filesystem on ./bus not supported as upperdir [ 419.494316][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 419.494390][ T29] audit: type=1326 audit(1738317899.602:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 419.523637][ T29] audit: type=1326 audit(1738317899.612:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 419.551377][ T29] audit: type=1326 audit(1738317899.622:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 419.574978][ T29] audit: type=1326 audit(1738317899.662:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 419.598126][ T29] audit: type=1326 audit(1738317899.672:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 419.675523][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 419.817115][ T6651] veth0_vlan: entered promiscuous mode [ 420.055962][ T6651] veth1_vlan: entered promiscuous mode [ 421.190073][ T6651] veth0_macvtap: entered promiscuous mode [ 421.224481][ T6651] veth1_macvtap: entered promiscuous mode [ 421.560274][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.571338][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.586578][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.598647][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.609437][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.620233][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.630520][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.641291][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.655940][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.107943][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.119049][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.132163][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.144455][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.155539][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.166411][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.176892][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.188356][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.210831][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.837747][ T6651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.847123][ T6651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.856284][ T6651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.865329][ T6651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.345249][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 423.428405][ T6918] input: syz0 as /devices/virtual/input/input7 [ 426.015292][ T6932] ip6gretap0: entered promiscuous mode [ 426.022489][ T6932] macvtap1: entered promiscuous mode [ 426.137459][ T6932] ip6gretap0: left promiscuous mode [ 428.641054][ T29] audit: type=1326 audit(1738317908.972:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 428.699771][ T6935] overlay: filesystem on ./bus not supported as upperdir [ 428.814714][ T29] audit: type=1326 audit(1738317909.002:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 428.837398][ T29] audit: type=1326 audit(1738317909.002:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 428.861523][ T29] audit: type=1326 audit(1738317909.032:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 428.884431][ T29] audit: type=1326 audit(1738317909.032:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 428.906938][ T29] audit: type=1326 audit(1738317909.032:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 428.929322][ T29] audit: type=1326 audit(1738317909.092:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 428.953555][ T29] audit: type=1326 audit(1738317909.092:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 431.043994][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 431.150899][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 431.264219][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 431.336846][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.3.284'. [ 433.626605][ T6983] ip6gretap0: entered promiscuous mode [ 433.632821][ T6983] macvtap1: entered promiscuous mode [ 433.840370][ T29] audit: type=1326 audit(1738317914.042:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 433.905431][ T6984] overlay: filesystem on ./bus not supported as upperdir [ 433.914354][ T6983] ip6gretap0: left promiscuous mode [ 434.043127][ T29] audit: type=1326 audit(1738317914.212:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 434.066307][ T29] audit: type=1326 audit(1738317914.232:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 434.092590][ T29] audit: type=1326 audit(1738317914.232:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 434.116094][ T29] audit: type=1326 audit(1738317914.232:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 434.139283][ T29] audit: type=1326 audit(1738317914.242:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 434.161626][ T29] audit: type=1326 audit(1738317914.292:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 434.188031][ T29] audit: type=1326 audit(1738317914.292:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 437.840184][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 437.870993][ T3978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.879097][ T3978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.912048][ T7015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.296'. [ 438.170510][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 438.213182][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 438.329824][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.338150][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.970078][ T7025] overlay: filesystem on ./bus not supported as upperdir [ 439.631412][ T7031] ip6gretap0: entered promiscuous mode [ 439.637624][ T7031] macvtap1: entered promiscuous mode [ 439.760977][ T7031] ip6gretap0: left promiscuous mode [ 442.440273][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 442.494339][ T7055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.308'. [ 442.907120][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 442.986414][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 444.574836][ T7067] overlay: filesystem on ./bus not supported as upperdir [ 446.006407][ T7078] ip6gretap0: entered promiscuous mode [ 446.012947][ T7078] macvtap1: entered promiscuous mode [ 446.120509][ T7078] ip6gretap0: left promiscuous mode [ 447.711029][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 447.821816][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 447.840964][ T7090] netlink: 48 bytes leftover after parsing attributes in process `syz.1.322'. [ 447.892117][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 449.168440][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.178165][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.192103][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.260409][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.290778][ T5790] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 449.305146][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.735139][ T7104] overlay: filesystem on ./bus not supported as upperdir [ 450.028206][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.326'. [ 451.492966][ T5790] Bluetooth: hci5: command tx timeout [ 451.509535][ T7122] ip6gretap0: entered promiscuous mode [ 451.515528][ T7122] macvtap1: entered promiscuous mode [ 451.542940][ T7122] ip6gretap0: left promiscuous mode [ 452.719624][ T7101] chnl_net:caif_netlink_parms(): no params data found [ 453.207901][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 453.332733][ T7133] netlink: 48 bytes leftover after parsing attributes in process `syz.1.333'. [ 453.570753][ T5790] Bluetooth: hci5: command tx timeout [ 454.149526][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 454.484999][ T4649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.722098][ T4649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.159702][ T4649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.522996][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.531714][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.539879][ T7101] bridge_slave_0: entered allmulticast mode [ 455.549530][ T7101] bridge_slave_0: entered promiscuous mode [ 455.567243][ T4649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.664587][ T5790] Bluetooth: hci5: command tx timeout [ 455.687334][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.695512][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.703380][ T7101] bridge_slave_1: entered allmulticast mode [ 455.712005][ T7101] bridge_slave_1: entered promiscuous mode [ 456.102442][ T29] audit: type=1326 audit(1738317936.402:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.102711][ T7157] overlay: filesystem on ./bus not supported as upperdir [ 456.125981][ T29] audit: type=1326 audit(1738317936.402:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.155134][ T29] audit: type=1326 audit(1738317936.402:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.177976][ T29] audit: type=1326 audit(1738317936.402:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.206102][ T29] audit: type=1326 audit(1738317936.402:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.236351][ T29] audit: type=1326 audit(1738317936.412:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.259093][ T29] audit: type=1326 audit(1738317936.412:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.272513][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.281601][ T29] audit: type=1326 audit(1738317936.412:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.315445][ T29] audit: type=1326 audit(1738317936.412:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.339419][ T29] audit: type=1326 audit(1738317936.442:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 456.691224][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.874325][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 457.068631][ T4649] bridge_slave_1: left allmulticast mode [ 457.076587][ T4649] bridge_slave_1: left promiscuous mode [ 457.083246][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.131847][ T5837] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.140994][ T5837] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 457.151796][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.161231][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 457.172833][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 457.259832][ T4649] bridge_slave_0: left allmulticast mode [ 457.265809][ T4649] bridge_slave_0: left promiscuous mode [ 457.273075][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.371186][ T5837] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.380632][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.389160][ T5837] usb 2-1: Product: syz [ 457.393569][ T5837] usb 2-1: Manufacturer: syz [ 457.678503][ T5837] cdc_wdm 2-1:1.0: skipping garbage [ 457.684155][ T5837] cdc_wdm 2-1:1.0: skipping garbage [ 457.739139][ T5790] Bluetooth: hci5: command tx timeout [ 457.752509][ T5837] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 457.759644][ T5837] cdc_wdm 2-1:1.0: Unknown control protocol [ 457.841809][ T7101] team0: Port device team_slave_0 added [ 458.128082][ T5837] usb 2-1: USB disconnect, device number 3 [ 458.573388][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.661049][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.724592][ T4649] bond0 (unregistering): Released all slaves [ 458.762389][ T7101] team0: Port device team_slave_1 added [ 459.278078][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.285476][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.311943][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.652065][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.659567][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.692045][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.787561][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 459.825964][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.345'. [ 460.551010][ T4649] hsr_slave_0: left promiscuous mode [ 460.596431][ T4649] hsr_slave_1: left promiscuous mode [ 460.604721][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.612840][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.659935][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.667871][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.703483][ T4649] veth1_macvtap: left promiscuous mode [ 460.709616][ T4649] veth0_macvtap: left promiscuous mode [ 460.715576][ T4649] veth1_vlan: left promiscuous mode [ 460.721408][ T4649] veth0_vlan: left promiscuous mode [ 461.170747][ T7198] netlink: 184 bytes leftover after parsing attributes in process `syz.2.348'. [ 461.223410][ T7101] hsr_slave_0: entered promiscuous mode [ 461.234409][ T7101] hsr_slave_1: entered promiscuous mode [ 461.246521][ T7101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.254582][ T7101] Cannot create hsr debugfs directory [ 462.039277][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 462.039352][ T29] audit: type=1326 audit(1738317942.362:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.119168][ T7203] overlay: filesystem on ./bus not supported as upperdir [ 462.249090][ T29] audit: type=1326 audit(1738317942.432:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.271900][ T29] audit: type=1326 audit(1738317942.432:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.294744][ T29] audit: type=1326 audit(1738317942.432:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.317083][ T29] audit: type=1326 audit(1738317942.452:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.341070][ T29] audit: type=1326 audit(1738317942.452:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.364398][ T29] audit: type=1326 audit(1738317942.452:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.386817][ T29] audit: type=1326 audit(1738317942.452:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 462.500541][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 462.661852][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 463.132019][ T29] audit: type=1326 audit(1738317942.942:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 463.159244][ T29] audit: type=1326 audit(1738317942.942:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 464.239521][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 464.257312][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 464.288329][ T7221] netlink: 48 bytes leftover after parsing attributes in process `syz.2.356'. [ 464.541920][ T5898] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 464.551734][ T5898] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 464.562609][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 464.572219][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 464.583730][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 464.781588][ T5898] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.794626][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.804027][ T5898] usb 4-1: Product: syz [ 464.808445][ T5898] usb 4-1: Manufacturer: syz [ 464.961897][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 464.967410][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 465.121570][ T5898] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 465.127769][ T5898] cdc_wdm 4-1:1.0: Unknown control protocol [ 465.396812][ T25] usb 4-1: USB disconnect, device number 2 [ 465.445134][ T7101] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 465.628629][ T7101] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 465.821779][ T7232] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 465.829401][ T7101] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 465.963196][ T7101] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 466.937545][ T7242] loop9: detected capacity change from 0 to 6 [ 467.053672][ T7242] Dev loop9: unable to read RDB block 6 [ 467.059962][ T7242] loop9: unable to read partition table [ 467.072026][ T7242] loop9: partition table beyond EOD, truncated [ 467.078546][ T7242] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 467.078546][ T7242] ) failed (rc=-5) [ 468.166005][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.543056][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.702282][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.710203][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.841547][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.849356][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.357289][ T7101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.526789][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 469.533543][ T29] audit: type=1326 audit(1738317949.822:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.548330][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz.2.366'. [ 469.558184][ T29] audit: type=1326 audit(1738317949.822:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.640615][ T7258] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 469.796723][ T29] audit: type=1326 audit(1738317949.932:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.823143][ T29] audit: type=1326 audit(1738317949.942:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.845123][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.854878][ T29] audit: type=1326 audit(1738317949.942:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.877294][ T29] audit: type=1326 audit(1738317949.952:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.899141][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.905623][ T29] audit: type=1326 audit(1738317949.952:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.931632][ T29] audit: type=1326 audit(1738317949.962:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 469.954718][ T29] audit: type=1326 audit(1738317950.132:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 471.779624][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 472.035020][ T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.044316][ T25] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 472.057769][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.072041][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 472.085257][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 472.186529][ T7293] ipvlan2: entered allmulticast mode [ 472.192660][ T7293] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 472.207261][ T7293] batman_adv: batadv0: Adding interface: ipvlan2 [ 472.214154][ T7293] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.240199][ T7293] batman_adv: batadv0: Interface activated: ipvlan2 [ 472.571754][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.590779][ T7290] sctp: failed to load transform for md5: -2 [ 472.704716][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.715735][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.725245][ T25] usb 6-1: Product: syz [ 472.729787][ T25] usb 6-1: Manufacturer: syz [ 472.945975][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 472.951650][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 473.038368][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 473.045852][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 473.364061][ T5898] usb 6-1: USB disconnect, device number 2 [ 474.770669][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 474.803585][ T7319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.378'. [ 475.278427][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.285760][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.411946][ T29] audit: type=1326 audit(1738317955.742:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.482178][ T7328] overlay: filesystem on ./bus not supported as upperdir [ 475.580097][ T29] audit: type=1326 audit(1738317955.802:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.602739][ T29] audit: type=1326 audit(1738317955.812:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.626154][ T29] audit: type=1326 audit(1738317955.812:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.652614][ T29] audit: type=1326 audit(1738317955.812:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.676208][ T29] audit: type=1326 audit(1738317955.812:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.698416][ T29] audit: type=1326 audit(1738317955.812:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.720616][ T29] audit: type=1326 audit(1738317955.822:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.743065][ T29] audit: type=1326 audit(1738317955.872:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 475.768093][ T29] audit: type=1326 audit(1738317955.872:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 479.063864][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.072786][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.080929][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.088692][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.099606][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.107632][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.115955][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.124277][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.135898][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.145384][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.153368][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.157836][ T7101] veth0_vlan: entered promiscuous mode [ 479.161139][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.174572][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.182445][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.190362][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.198156][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.206171][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.214055][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.221917][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.235220][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.244720][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.256663][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.264701][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.272567][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.280425][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.288202][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.296108][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.303996][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.312099][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.320673][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.328435][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.341977][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.351503][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.359463][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.367230][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.370897][ T7101] veth1_vlan: entered promiscuous mode [ 479.375087][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.388269][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.396137][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.404009][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.411981][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.419868][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.427688][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.441336][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.450872][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 479.457370][ T5842] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 479.720382][ T5842] usb 2-1: config 0 has no interfaces? [ 479.726244][ T5842] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 479.735846][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.887696][ T5842] usb 2-1: config 0 descriptor?? [ 479.922051][ T25] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.04 Device [syz0] on syz1 [ 479.957127][ T7101] veth0_macvtap: entered promiscuous mode [ 480.124305][ T7101] veth1_macvtap: entered promiscuous mode [ 480.133846][ T25] usb 2-1: USB disconnect, device number 4 [ 480.311437][ T7352] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 480.427621][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.439010][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.449471][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.464015][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.475340][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.486316][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.496622][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.507578][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.523638][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.941079][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.951961][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.962306][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.976748][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.987978][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.998913][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.010877][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.022802][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.038467][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.713252][ T7101] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.723497][ T7101] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.733578][ T7101] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.742957][ T7101] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.829618][ T5836] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 481.895788][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 481.990577][ T7365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.390'. [ 482.062451][ T5836] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 482.071876][ T5836] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 482.082487][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 482.091733][ T5836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 482.105973][ T5836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 482.193211][ T5836] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 482.207248][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 482.217484][ T5836] usb 3-1: Product: syz [ 482.222164][ T5836] usb 3-1: Manufacturer: syz [ 482.359907][ T5836] cdc_wdm 3-1:1.0: skipping garbage [ 482.365422][ T5836] cdc_wdm 3-1:1.0: skipping garbage [ 482.440887][ T5836] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 482.447345][ T5836] cdc_wdm 3-1:1.0: Unknown control protocol [ 482.787569][ T5836] usb 3-1: USB disconnect, device number 2 [ 483.264473][ T29] audit: type=1326 audit(1738317963.592:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 483.287383][ T29] audit: type=1326 audit(1738317963.612:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 483.310610][ T29] audit: type=1326 audit(1738317963.612:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 483.336417][ T7374] overlay: filesystem on ./bus not supported as upperdir [ 483.345668][ T29] audit: type=1326 audit(1738317963.632:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 483.368135][ T29] audit: type=1326 audit(1738317963.632:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 483.390563][ T29] audit: type=1326 audit(1738317963.652:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 483.412893][ T29] audit: type=1326 audit(1738317963.652:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 483.439360][ T29] audit: type=1326 audit(1738317963.672:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 484.530765][ T29] audit: type=1326 audit(1738317963.812:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 487.809564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.989968][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 488.046308][ T7411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.401'. [ 489.501728][ T5836] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 489.732638][ T29] audit: type=1326 audit(1738317970.062:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 489.756215][ T29] audit: type=1326 audit(1738317970.082:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 489.782903][ T29] audit: type=1326 audit(1738317970.082:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 489.783956][ T7430] overlay: filesystem on ./bus not supported as upperdir [ 489.806496][ T29] audit: type=1326 audit(1738317970.082:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 489.806738][ T29] audit: type=1326 audit(1738317970.102:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 489.859891][ T29] audit: type=1326 audit(1738317970.122:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 489.886126][ T29] audit: type=1326 audit(1738317970.122:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 489.910076][ T29] audit: type=1326 audit(1738317970.122:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 490.219058][ T5836] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 490.227996][ T5836] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 490.238915][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 490.248240][ T5836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 490.259696][ T5836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 490.368002][ T5836] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.377606][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.386080][ T5836] usb 3-1: Product: syz [ 490.390634][ T5836] usb 3-1: Manufacturer: syz [ 490.492994][ T29] audit: type=1326 audit(1738317970.272:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 490.522215][ T29] audit: type=1326 audit(1738317970.272:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 490.650852][ T5836] cdc_wdm 3-1:1.0: skipping garbage [ 490.656368][ T5836] cdc_wdm 3-1:1.0: skipping garbage [ 490.742810][ T5836] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 490.749278][ T5836] cdc_wdm 3-1:1.0: Unknown control protocol [ 491.512003][ T5836] usb 3-1: USB disconnect, device number 3 [ 492.372653][ T7443] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 495.392238][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 495.525731][ T7101] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 495.536033][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.569509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.598670][ T7465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.413'. [ 496.011923][ T4649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.020528][ T4649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.513949][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.522359][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.134963][ T29] audit: type=1326 audit(1738317977.462:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 497.162115][ T29] audit: type=1326 audit(1738317977.462:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 497.222302][ T7479] overlay: filesystem on ./bus not supported as upperdir [ 497.325361][ T7483] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 497.410965][ T29] audit: type=1326 audit(1738317977.532:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 497.434621][ T29] audit: type=1326 audit(1738317977.532:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 497.460950][ T29] audit: type=1326 audit(1738317977.532:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 497.484721][ T29] audit: type=1326 audit(1738317977.562:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 497.507284][ T29] audit: type=1326 audit(1738317977.612:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 497.529777][ T29] audit: type=1326 audit(1738317977.632:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 499.420237][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 499.928267][ T5836] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 499.937599][ T5836] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 499.949281][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 499.958602][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 499.970636][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 500.101262][ T5836] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 500.111568][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 500.126114][ T5836] usb 2-1: Product: syz [ 500.132374][ T5836] usb 2-1: Manufacturer: syz [ 500.353516][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 500.359341][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 500.451006][ T5836] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 500.457206][ T5836] cdc_wdm 2-1:1.0: Unknown control protocol [ 502.233044][ T5842] usb 2-1: USB disconnect, device number 5 [ 503.607594][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 503.676463][ T7516] netlink: 48 bytes leftover after parsing attributes in process `syz.3.424'. [ 505.189077][ T29] audit: type=1326 audit(1738317985.512:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.237586][ T7531] overlay: filesystem on ./bus not supported as upperdir [ 505.304009][ T29] audit: type=1326 audit(1738317985.552:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.326754][ T29] audit: type=1326 audit(1738317985.552:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.352752][ T29] audit: type=1326 audit(1738317985.562:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.376303][ T29] audit: type=1326 audit(1738317985.572:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.398978][ T29] audit: type=1326 audit(1738317985.572:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.421850][ T29] audit: type=1326 audit(1738317985.572:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.447829][ T29] audit: type=1326 audit(1738317985.572:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.472005][ T29] audit: type=1326 audit(1738317985.572:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 505.494383][ T29] audit: type=1326 audit(1738317985.642:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.3.428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 510.250410][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 510.329424][ T7565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.438'. [ 510.481035][ T5842] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 510.695035][ T5842] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 510.704262][ T5842] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 510.714794][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 510.724034][ T5842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 510.735349][ T5842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 510.891092][ T5842] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 510.901304][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 510.909713][ T5842] usb 6-1: Product: syz [ 510.914016][ T5842] usb 6-1: Manufacturer: syz [ 511.065935][ T5842] cdc_wdm 6-1:1.0: skipping garbage [ 511.071525][ T5842] cdc_wdm 6-1:1.0: skipping garbage [ 511.169483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.170653][ T5842] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 511.184200][ T5842] cdc_wdm 6-1:1.0: Unknown control protocol [ 513.446300][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 514.000173][ T5836] usb 6-1: USB disconnect, device number 3 [ 516.232717][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 516.232803][ T29] audit: type=1326 audit(1738317996.522:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.263366][ T29] audit: type=1326 audit(1738317996.522:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.285708][ T29] audit: type=1326 audit(1738317996.522:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.308012][ T29] audit: type=1326 audit(1738317996.572:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.330220][ T29] audit: type=1326 audit(1738317996.572:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.352473][ T29] audit: type=1326 audit(1738317996.572:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.374708][ T29] audit: type=1326 audit(1738317996.572:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.396849][ T29] audit: type=1326 audit(1738317996.572:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 516.452862][ T7592] overlay: filesystem on ./bus not supported as upperdir [ 517.225270][ T29] audit: type=1326 audit(1738317996.792:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 517.248623][ T29] audit: type=1326 audit(1738317996.892:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.5.443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 520.915458][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.451'. [ 520.990976][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.451'. [ 524.215127][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.241173][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.257827][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.285484][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.305417][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 524.340414][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.056114][ T29] audit: type=1326 audit(1738318006.362:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.079546][ T29] audit: type=1326 audit(1738318006.362:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.101963][ T29] audit: type=1326 audit(1738318006.382:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.124188][ T29] audit: type=1326 audit(1738318006.382:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.146464][ T29] audit: type=1326 audit(1738318006.392:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.168594][ T29] audit: type=1326 audit(1738318006.392:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.256220][ T7650] overlay: filesystem on ./bus not supported as upperdir [ 526.445844][ T29] audit: type=1326 audit(1738318006.532:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.482736][ T29] audit: type=1326 audit(1738318006.592:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.504919][ T29] audit: type=1326 audit(1738318006.612:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.527105][ T29] audit: type=1326 audit(1738318006.622:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 526.571433][ T5794] Bluetooth: hci2: command tx timeout [ 526.677004][ T7639] chnl_net:caif_netlink_parms(): no params data found [ 528.609301][ T5794] Bluetooth: hci2: command tx timeout [ 529.416608][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 529.512302][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 529.763972][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.771862][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.779735][ T7639] bridge_slave_0: entered allmulticast mode [ 529.787994][ T7639] bridge_slave_0: entered promiscuous mode [ 530.052647][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.063886][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.071785][ T7639] bridge_slave_1: entered allmulticast mode [ 530.080575][ T7639] bridge_slave_1: entered promiscuous mode [ 530.699599][ T5794] Bluetooth: hci2: command tx timeout [ 530.887888][ T7639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.083320][ T7639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.721625][ T7639] team0: Port device team_slave_0 added [ 531.844590][ T7639] team0: Port device team_slave_1 added [ 532.272591][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.280082][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.306957][ T7639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.325360][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.332799][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.362629][ T7639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.800893][ T5794] Bluetooth: hci2: command tx timeout [ 533.989165][ T7639] hsr_slave_0: entered promiscuous mode [ 533.998332][ T7639] hsr_slave_1: entered promiscuous mode [ 534.006753][ T7639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.014585][ T7639] Cannot create hsr debugfs directory [ 536.745497][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.752319][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 540.704804][ T7639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 540.909576][ T7639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 540.928296][ T5790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.952848][ T5790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.962271][ T5790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.976796][ T5790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.988018][ T5790] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 540.997305][ T5790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.118214][ T29] audit: type=1326 audit(1738318021.442:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 541.192772][ T7639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 541.283307][ T29] audit: type=1326 audit(1738318021.542:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 541.305887][ T29] audit: type=1326 audit(1738318021.542:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 541.328527][ T29] audit: type=1326 audit(1738318021.562:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 541.351194][ T29] audit: type=1326 audit(1738318021.562:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 541.510476][ T7639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 541.680155][ T7715] overlay: filesystem on ./bus not supported as upperdir [ 542.139358][ T29] audit: type=1326 audit(1738318021.822:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 542.161660][ T29] audit: type=1326 audit(1738318021.822:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 542.184110][ T29] audit: type=1326 audit(1738318021.822:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 543.118990][ T5794] Bluetooth: hci6: command tx timeout [ 543.365195][ T7723] netlink: 134708 bytes leftover after parsing attributes in process `syz.5.473'. [ 543.376499][ T7723] openvswitch: netlink: Message has 76 unknown bytes. [ 543.600049][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 543.674027][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 543.946430][ T3978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.297875][ T3978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.657451][ T3978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.773785][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.861988][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.911238][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.959953][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.976928][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.993709][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 545.004686][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 545.064483][ T3978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.170126][ T5794] Bluetooth: hci6: command tx timeout [ 545.180376][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 545.284004][ T7639] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.709962][ T3978] bridge_slave_1: left allmulticast mode [ 545.715915][ T3978] bridge_slave_1: left promiscuous mode [ 545.725424][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.824089][ T3978] bridge_slave_0: left allmulticast mode [ 545.830251][ T3978] bridge_slave_0: left promiscuous mode [ 545.836977][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.850812][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.971830][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.054811][ T3978] bond0 (unregistering): Released all slaves [ 547.174381][ T5794] Bluetooth: hci0: command tx timeout [ 547.249857][ T5794] Bluetooth: hci6: command tx timeout [ 547.324883][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.332790][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.824405][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.832304][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.960799][ T3978] IPVS: stopping backup sync thread 7232 ... [ 549.255146][ T5794] Bluetooth: hci0: command tx timeout [ 549.324972][ T3978] hsr_slave_0: left promiscuous mode [ 549.336049][ T5794] Bluetooth: hci6: command tx timeout [ 549.359608][ T3978] hsr_slave_1: left promiscuous mode [ 549.367679][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.375843][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.391154][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.399087][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.574914][ T3978] veth1_macvtap: left promiscuous mode [ 550.582838][ T3978] veth0_macvtap: left promiscuous mode [ 550.589002][ T3978] veth1_vlan: left promiscuous mode [ 550.594545][ T3978] veth0_vlan: left promiscuous mode [ 551.492896][ T5794] Bluetooth: hci0: command tx timeout [ 551.533142][ T7754] netlink: 112 bytes leftover after parsing attributes in process `syz.5.480'. [ 552.979765][ T7730] chnl_net:caif_netlink_parms(): no params data found [ 553.589582][ T5794] Bluetooth: hci0: command tx timeout [ 554.125564][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.133507][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.141817][ T7711] bridge_slave_0: entered allmulticast mode [ 554.151894][ T7711] bridge_slave_0: entered promiscuous mode [ 554.951265][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 554.982000][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 555.360464][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.368290][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.377157][ T7711] bridge_slave_1: entered allmulticast mode [ 555.386848][ T7711] bridge_slave_1: entered promiscuous mode [ 556.043135][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.261007][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.452977][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 557.099737][ T7711] team0: Port device team_slave_0 added [ 557.385345][ T7711] team0: Port device team_slave_1 added [ 557.595836][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.596415][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.597146][ T7730] bridge_slave_0: entered allmulticast mode [ 557.600970][ T7730] bridge_slave_0: entered promiscuous mode [ 557.642021][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.642610][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.643349][ T7730] bridge_slave_1: entered allmulticast mode [ 557.646696][ T7730] bridge_slave_1: entered promiscuous mode [ 558.543225][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.550589][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.577091][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.607043][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.926482][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.934624][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.961335][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.643616][ T7730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.880090][ T7730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.069603][ T7711] hsr_slave_0: entered promiscuous mode [ 560.084163][ T7711] hsr_slave_1: entered promiscuous mode [ 560.093535][ T7711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.101546][ T7711] Cannot create hsr debugfs directory [ 560.440970][ T7805] loop9: detected capacity change from 0 to 7 [ 560.455327][ T7805] Dev loop9: unable to read RDB block 7 [ 560.461650][ T7805] loop9: unable to read partition table [ 560.486403][ T3978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.490244][ T7805] loop9: partition table beyond EOD, truncated [ 560.504378][ T7805] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 560.613611][ T7730] team0: Port device team_slave_0 added [ 560.796073][ T7730] team0: Port device team_slave_1 added [ 561.298596][ T3978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.337684][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.345231][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.371442][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.378283][ T7730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.431025][ T7813] misc userio: Invalid payload size [ 561.437100][ T7813] misc userio: Invalid payload size [ 561.445484][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.453198][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.479641][ T7730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.549976][ T3978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.675829][ T3978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.997038][ T7730] hsr_slave_0: entered promiscuous mode [ 562.008945][ T7730] hsr_slave_1: entered promiscuous mode [ 562.018097][ T7730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.026074][ T7730] Cannot create hsr debugfs directory [ 562.070640][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.492'. [ 562.147444][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.492'. [ 563.129220][ T5898] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 563.187704][ T3978] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.414716][ T7639] veth0_vlan: entered promiscuous mode [ 563.441417][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 563.449929][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.541921][ T5898] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 563.542085][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 563.542213][ T5898] usb 6-1: Product: syz [ 563.542318][ T5898] usb 6-1: Manufacturer: syz [ 563.542424][ T5898] usb 6-1: SerialNumber: syz [ 563.562677][ T5898] usb 6-1: config 0 descriptor?? [ 563.668966][ T7711] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 563.718334][ T7639] veth1_vlan: entered promiscuous mode [ 563.745630][ T3978] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.819592][ T7711] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 563.913210][ T7711] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 563.962991][ T7828] fuse: Bad value for 'fd' [ 564.010869][ T3978] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.023660][ T7711] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 564.092934][ T5847] usb 6-1: USB disconnect, device number 4 [ 564.191396][ T3978] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.408856][ T7639] veth0_macvtap: entered promiscuous mode [ 564.477885][ T7639] veth1_macvtap: entered promiscuous mode [ 564.719833][ T7730] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 564.801064][ T7730] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 564.926258][ T7730] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 565.148918][ T3978] bridge_slave_1: left allmulticast mode [ 565.154855][ T3978] bridge_slave_1: left promiscuous mode [ 565.164428][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.231798][ T3978] bridge_slave_0: left allmulticast mode [ 565.237746][ T3978] bridge_slave_0: left promiscuous mode [ 565.244707][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.363696][ T3978] bridge_slave_1: left allmulticast mode [ 565.372048][ T3978] bridge_slave_1: left promiscuous mode [ 565.378666][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.492039][ T3978] bridge_slave_0: left allmulticast mode [ 565.498110][ T3978] bridge_slave_0: left promiscuous mode [ 565.504977][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.039289][ T7730] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 566.718530][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.793127][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.825341][ T3978] bond0 (unregistering): Released all slaves [ 566.871604][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.912504][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.939621][ T3978] bond0 (unregistering): Released all slaves [ 566.977724][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.989914][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.001278][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.013235][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.025157][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.037568][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.049137][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.061154][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.091714][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.476572][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.489172][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.503085][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.515187][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.525374][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.536044][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.546099][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.556778][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.570821][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.697578][ T7639] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.710550][ T7639] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.719881][ T7639] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.729743][ T7639] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.732473][ T3978] IPVS: stopping backup sync thread 6550 ... [ 567.849721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.309577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.433896][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.991754][ T3978] hsr_slave_0: left promiscuous mode [ 569.019294][ T3978] hsr_slave_1: left promiscuous mode [ 569.027539][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.036278][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.115598][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.123838][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.227711][ T3978] hsr_slave_0: left promiscuous mode [ 569.262511][ T3978] hsr_slave_1: left promiscuous mode [ 569.271635][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.279572][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.341221][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.349244][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.410165][ T3978] veth1_macvtap: left promiscuous mode [ 569.415886][ T3978] veth0_macvtap: left promiscuous mode [ 569.421839][ T3978] veth1_vlan: left promiscuous mode [ 569.427271][ T3978] veth0_vlan: left promiscuous mode [ 569.434950][ T7856] misc userio: Invalid payload size [ 569.506115][ T7856] misc userio: Invalid payload size [ 569.506136][ T3978] veth1_macvtap: left promiscuous mode [ 569.506271][ T3978] veth0_macvtap: left promiscuous mode [ 569.523642][ T3978] veth1_vlan: left promiscuous mode [ 569.529370][ T3978] veth0_vlan: left promiscuous mode [ 570.096834][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.190433][ T7730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.235971][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.243677][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.423169][ T7730] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.470097][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.477703][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.759401][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.767120][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.794226][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.802077][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.940351][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 570.994497][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 572.062332][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 572.150460][ T29] audit: type=1326 audit(1738318052.492:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.2.503" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf749d579 code=0x0 [ 572.544641][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 573.773231][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 573.842481][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 574.756013][ T7730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.066682][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.216634][ T7730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.619292][ T7905] misc userio: Invalid payload size [ 577.659868][ T7905] misc userio: Invalid payload size [ 578.339890][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 578.423813][ T7917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.509'. [ 580.116406][ T7711] veth0_vlan: entered promiscuous mode [ 580.403881][ T7730] veth0_vlan: entered promiscuous mode [ 580.515773][ T7711] veth1_vlan: entered promiscuous mode [ 580.570366][ T7730] veth1_vlan: entered promiscuous mode [ 581.092105][ T7711] veth0_macvtap: entered promiscuous mode [ 581.198290][ T7711] veth1_macvtap: entered promiscuous mode [ 581.233933][ T7730] veth0_macvtap: entered promiscuous mode [ 581.287408][ T7730] veth1_macvtap: entered promiscuous mode [ 581.460117][ T7639] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 581.470358][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.570648][ T7730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.581669][ T7730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.591974][ T7730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.602873][ T7730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.613074][ T7730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.624869][ T7730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.640585][ T7730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.677428][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.688533][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.698931][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.710007][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.720326][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.731357][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.741917][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.752763][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.768520][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.818181][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.826489][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.050605][ T7730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.062533][ T7730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.074166][ T7730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.085059][ T7730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.095430][ T7730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.106323][ T7730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.122111][ T7730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.181152][ T3811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.189401][ T3811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.250394][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.261282][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.271576][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.282462][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.292918][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.303810][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.314133][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.325035][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.340826][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.425947][ T7730] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.437556][ T7730] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.446938][ T7730] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.457380][ T7730] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.815604][ T7711] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.819616][ T7957] misc userio: Invalid payload size [ 582.824963][ T7711] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.839366][ T7711] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.848406][ T7711] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.922222][ T7960] misc userio: Invalid payload size [ 583.532249][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.518'. [ 583.623328][ T7965] netlink: 48 bytes leftover after parsing attributes in process `syz.5.518'. [ 584.673926][ T7978] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 584.683227][ T7978] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 585.061817][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.071856][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.085130][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.112362][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.124559][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 585.134879][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 587.257531][ T5790] Bluetooth: hci3: command tx timeout [ 587.371019][ T5842] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 587.390536][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 587.605656][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 587.667059][ T5842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 587.754050][ T5842] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 587.764063][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 587.773225][ T5842] usb 3-1: Product: syz [ 587.778168][ T5842] usb 3-1: Manufacturer: syz [ 587.784085][ T5842] usb 3-1: SerialNumber: syz [ 587.821317][ T5842] usb 3-1: config 0 descriptor?? [ 587.829519][ T8010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 587.907783][ T5842] hub 3-1:0.0: bad descriptor, ignoring hub [ 587.914941][ T5842] hub 3-1:0.0: probe with driver hub failed with error -5 [ 588.563250][ T3811] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.664366][ T8020] misc userio: Invalid payload size [ 588.700607][ T8020] misc userio: Invalid payload size [ 588.803290][ T3811] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.910701][ T5836] usb 3-1: USB disconnect, device number 4 [ 589.037178][ T3811] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.286054][ T3811] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.330105][ T5790] Bluetooth: hci3: command tx timeout [ 589.520014][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.527'. [ 589.608369][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.5.527'. [ 589.732942][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.742536][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.750744][ T7983] bridge_slave_0: entered allmulticast mode [ 589.760497][ T7983] bridge_slave_0: entered promiscuous mode [ 590.068399][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.076896][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.085114][ T7983] bridge_slave_1: entered allmulticast mode [ 590.094906][ T7983] bridge_slave_1: entered promiscuous mode [ 590.574603][ T8038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 590.584084][ T8038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 590.751118][ T3811] bridge_slave_1: left allmulticast mode [ 590.757140][ T3811] bridge_slave_1: left promiscuous mode [ 590.765706][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.851583][ T3811] bridge_slave_0: left allmulticast mode [ 590.857546][ T3811] bridge_slave_0: left promiscuous mode [ 590.864719][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.230636][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.377232][ T7730] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 591.387566][ T7730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.437548][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.450008][ T5790] Bluetooth: hci3: command tx timeout [ 591.709849][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.783180][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.807008][ T3811] bond0 (unregistering): Released all slaves [ 592.356243][ T7983] team0: Port device team_slave_0 added [ 592.409727][ T3978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.417836][ T3978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.307487][ T8065] ===================================================== [ 593.316736][ T8065] BUG: KMSAN: uninit-value in full_proxy_poll+0xdf/0x3b0 [ 593.324285][ T8065] full_proxy_poll+0xdf/0x3b0 [ 593.329438][ T8065] __io_read+0x4c6/0x20e0 [ 593.334028][ T8065] io_read+0x3e/0xf0 [ 593.338166][ T8065] io_issue_sqe+0x436/0x1f60 [ 593.343254][ T8065] io_submit_sqes+0x11bc/0x2f80 [ 593.348370][ T8065] __se_sys_io_uring_enter+0x41d/0x4da0 [ 593.354560][ T8065] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 593.361023][ T8065] ia32_sys_call+0xd59/0x4180 [ 593.365955][ T8065] __do_fast_syscall_32+0xb0/0x110 [ 593.371793][ T8065] do_fast_syscall_32+0x38/0x80 [ 593.376914][ T8065] do_SYSENTER_32+0x1f/0x30 [ 593.381864][ T8065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.388483][ T8065] [ 593.391225][ T8065] Uninit was stored to memory at: [ 593.396528][ T8065] __debugfs_file_get+0xe59/0xef0 [ 593.402047][ T8065] full_proxy_open_regular+0x67/0xa00 [ 593.407650][ T8065] do_dentry_open+0x1bdd/0x26b0 [ 593.414680][ T8065] vfs_open+0x53/0x5b0 [ 593.419175][ T8065] path_openat+0x56a1/0x6250 [ 593.423972][ T8065] do_filp_open+0x268/0x600 [ 593.428861][ T8065] do_sys_openat2+0x1bf/0x2f0 [ 593.433780][ T8065] __ia32_compat_sys_openat+0x298/0x300 [ 593.439750][ T8065] ia32_sys_call+0x2fb4/0x4180 [ 593.444751][ T8065] __do_fast_syscall_32+0xb0/0x110 [ 593.450336][ T8065] do_fast_syscall_32+0x38/0x80 [ 593.455454][ T8065] do_SYSENTER_32+0x1f/0x30 [ 593.460605][ T8065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.467259][ T8065] [ 593.469865][ T8065] Uninit was stored to memory at: [ 593.475298][ T8065] __debugfs_file_get+0xdff/0xef0 [ 593.480722][ T8065] full_proxy_open_regular+0x67/0xa00 [ 593.486311][ T8065] do_dentry_open+0x1bdd/0x26b0 [ 593.491608][ T8065] vfs_open+0x53/0x5b0 [ 593.495897][ T8065] path_openat+0x56a1/0x6250 [ 593.500854][ T8065] do_filp_open+0x268/0x600 [ 593.505549][ T8065] do_sys_openat2+0x1bf/0x2f0 [ 593.510684][ T8065] __ia32_compat_sys_openat+0x298/0x300 [ 593.516497][ T8065] ia32_sys_call+0x2fb4/0x4180 [ 593.521741][ T8065] __do_fast_syscall_32+0xb0/0x110 [ 593.527130][ T8065] do_fast_syscall_32+0x38/0x80 [ 593.532542][ T8065] do_SYSENTER_32+0x1f/0x30 [ 593.537312][ T8065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.544101][ T8065] [ 593.546561][ T8065] Uninit was created at: [ 593.551291][ T8065] __kmalloc_cache_noprof+0x8e3/0xdf0 [ 593.556936][ T8065] __debugfs_file_get+0x31d/0xef0 [ 593.562576][ T8065] full_proxy_open_regular+0x67/0xa00 [ 593.568173][ T8065] do_dentry_open+0x1bdd/0x26b0 [ 593.574203][ T8065] vfs_open+0x53/0x5b0 [ 593.578516][ T8065] path_openat+0x56a1/0x6250 [ 593.583455][ T8065] do_filp_open+0x268/0x600 [ 593.588156][ T8065] do_sys_openat2+0x1bf/0x2f0 [ 593.593452][ T8065] __ia32_compat_sys_openat+0x298/0x300 [ 593.599410][ T8065] ia32_sys_call+0x2fb4/0x4180 [ 593.604410][ T8065] __do_fast_syscall_32+0xb0/0x110 [ 593.610009][ T8065] do_fast_syscall_32+0x38/0x80 [ 593.615127][ T8065] do_SYSENTER_32+0x1f/0x30 [ 593.620197][ T8065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.626801][ T8065] [ 593.629487][ T8065] CPU: 0 UID: 0 PID: 8065 Comm: syz.5.535 Not tainted 6.13.0-syzkaller-09585-gb4b0881156fb #0 [ 593.640100][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 593.652170][ T8065] ===================================================== [ 593.660916][ T8065] Disabling lock debugging due to kernel taint [ 593.667289][ T8065] Kernel panic - not syncing: kmsan.panic set ... [ 593.673911][ T8065] CPU: 0 UID: 0 PID: 8065 Comm: syz.5.535 Tainted: G B 6.13.0-syzkaller-09585-gb4b0881156fb #0 [ 593.685897][ T8065] Tainted: [B]=BAD_PAGE [ 593.690208][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 593.700469][ T8065] Call Trace: [ 593.703915][ T8065] [ 593.706988][ T8065] dump_stack_lvl+0x216/0x2d0 [ 593.711878][ T8065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.717965][ T8065] dump_stack+0x1e/0x24 [ 593.722317][ T8065] panic+0x4e2/0xcf0 [ 593.726485][ T8065] ? kmsan_get_metadata+0x61/0x1c0 [ 593.731875][ T8065] kmsan_report+0x2c7/0x2d0 [ 593.736602][ T8065] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 593.742824][ T8065] ? __msan_warning+0x95/0x120 [ 593.747793][ T8065] ? full_proxy_poll+0xdf/0x3b0 [ 593.752848][ T8065] ? __io_read+0x4c6/0x20e0 [ 593.757673][ T8065] ? io_read+0x3e/0xf0 [ 593.762003][ T8065] ? io_issue_sqe+0x436/0x1f60 [ 593.767024][ T8065] ? io_submit_sqes+0x11bc/0x2f80 [ 593.772316][ T8065] ? __se_sys_io_uring_enter+0x41d/0x4da0 [ 593.778310][ T8065] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 593.784391][ T8065] ? ia32_sys_call+0xd59/0x4180 [ 593.789502][ T8065] ? __do_fast_syscall_32+0xb0/0x110 [ 593.795063][ T8065] ? do_fast_syscall_32+0x38/0x80 [ 593.800353][ T8065] ? do_SYSENTER_32+0x1f/0x30 [ 593.805310][ T8065] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.812120][ T8065] ? kmsan_internal_poison_memory+0x7d/0x90 [ 593.818329][ T8065] ? stack_depot_save_flags+0x2c/0x750 [ 593.824088][ T8065] ? kmsan_internal_poison_memory+0x49/0x90 [ 593.830296][ T8065] ? kmsan_slab_alloc+0xdf/0x160 [ 593.835459][ T8065] ? __kmalloc_noprof+0x923/0x1230 [ 593.840848][ T8065] ? io_prep_rw+0x9f4/0x1300 [ 593.845687][ T8065] ? io_prep_rwv+0xb3/0x510 [ 593.850435][ T8065] ? io_prep_readv+0x37/0x50 [ 593.855279][ T8065] ? io_submit_sqes+0x1082/0x2f80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 593.860575][ T8065] ? __se_sys_io_uring_enter+0x41d/0x4da0 [ 593.866680][ T8065] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 593.872812][ T8065] ? kmsan_get_metadata+0x13e/0x1c0 [ 593.878291][ T8065] ? kmsan_metadata_is_contiguous+0x66/0x1e0 [ 593.884605][ T8065] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 593.891345][ T8065] ? kmsan_get_metadata+0x13e/0x1c0 [ 593.896777][ T8065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.902823][ T8065] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 593.908894][ T8065] ? kmsan_get_metadata+0x13e/0x1c0 [ 593.914462][ T8065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.920548][ T8065] __msan_warning+0x95/0x120 [ 593.926258][ T8065] full_proxy_poll+0xdf/0x3b0 [ 593.931177][ T8065] ? __pfx_full_proxy_poll+0x10/0x10 [ 593.936785][ T8065] __io_read+0x4c6/0x20e0 [ 593.941383][ T8065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.947465][ T8065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.953586][ T8065] io_read+0x3e/0xf0 [ 593.957758][ T8065] ? __pfx_io_read+0x10/0x10 [ 593.962621][ T8065] io_issue_sqe+0x436/0x1f60 [ 593.967498][ T8065] ? io_prep_rwv+0x129/0x510 [ 593.972361][ T8065] io_submit_sqes+0x11bc/0x2f80 [ 593.977506][ T8065] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 593.984172][ T8065] __se_sys_io_uring_enter+0x41d/0x4da0 [ 593.990016][ T8065] ? futex_wait+0x2bf/0x360 [ 593.994782][ T8065] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 594.001443][ T8065] ? kmsan_get_metadata+0x13e/0x1c0 [ 594.006887][ T8065] ? do_futex+0x341/0x4a0 [ 594.011376][ T8065] ? kmsan_get_metadata+0x13e/0x1c0 [ 594.016733][ T8065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 594.022712][ T8065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 594.028713][ T8065] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 594.034644][ T8065] ia32_sys_call+0xd59/0x4180 [ 594.039543][ T8065] __do_fast_syscall_32+0xb0/0x110 [ 594.044848][ T8065] ? switch_fpu_return+0x17/0x20 [ 594.050043][ T8065] do_fast_syscall_32+0x38/0x80 [ 594.055085][ T8065] do_SYSENTER_32+0x1f/0x30 [ 594.059834][ T8065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 594.066378][ T8065] RIP: 0023:0xf7f14579 [ 594.070556][ T8065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 594.090321][ T8065] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 594.098897][ T8065] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047ba [ 594.107000][ T8065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.115132][ T8065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 594.123251][ T8065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 594.131389][ T8065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.139476][ T8065] [ 594.142985][ T8065] Kernel Offset: disabled [ 594.147406][ T8065] Rebooting in 86400 seconds..