last executing test programs: 9m29.676996756s ago: executing program 1 (id=1735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x3c}}, 0x0) 9m28.765590871s ago: executing program 1 (id=1738): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) socket$igmp(0x2, 0x3, 0x2) 9m27.857235023s ago: executing program 1 (id=1740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8919, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) 9m27.494626937s ago: executing program 1 (id=1741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17}}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x1) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000040)={0x2, 0x0, @ioapic={0xeeeea000, 0x101, 0x3, 0x6, 0x0, [{0x7f, 0x4}, {0x9, 0x1, 0x5, '\x00', 0x6}, {0x40, 0xe8, 0x9, '\x00', 0x9}, {0x8, 0x4, 0x2, '\x00', 0xb0}, {0x9, 0x1, 0x15, '\x00', 0x44}, {0x2, 0x5, 0x6, '\x00', 0x3}, {0x3, 0x97, 0x4, '\x00', 0x2}, {0x6, 0x6, 0xf7, '\x00', 0x81}, {0xe, 0x37, 0x2, '\x00', 0x4a}, {0x4, 0xe, 0x2, '\x00', 0xf}, {0x7a, 0x3, 0x0, '\x00', 0x6}, {0x0, 0x1, 0x27, '\x00', 0x5}, {0x1, 0x1, 0x43, '\x00', 0x9}, {0x5, 0x0, 0xa7, '\x00', 0x3}, {0xb9, 0x4, 0x0, '\x00', 0xfd}, {0x0, 0x2, 0xd, '\x00', 0xff}, {0xa, 0x2, 0xa, '\x00', 0xe7}, {0x7, 0x0, 0x0, '\x00', 0x4}, {0x9e, 0x81, 0x6, '\x00', 0x1}, {0x6, 0x3, 0x5}, {0x8, 0x9, 0x4, '\x00', 0x5}, {0x8, 0xf0, 0x6, '\x00', 0xc8}, {0x5, 0x9, 0x3, '\x00', 0x4}, {0x9, 0x8, 0x6, '\x00', 0xd3}]}}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) 9m26.131575241s ago: executing program 1 (id=1742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={'vcan0\x00', {0x2, 0x4e22, @broadcast}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m25.067495493s ago: executing program 1 (id=1745): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000340)}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000060000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000fce15dd1cd97c076bb788ac0cdc11cf193c551b3130259598373c0d2e950aab52e4b4ed1d49b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)="2ad4aab9e653c56ccb", &(0x7f0000000080), 0x3, r7}, 0x38) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x71, @dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, 0x8, 0x7, 0x9, 0x4}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r12}, 0x10) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 9m9.516057755s ago: executing program 32 (id=1745): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000340)}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000060000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000fce15dd1cd97c076bb788ac0cdc11cf193c551b3130259598373c0d2e950aab52e4b4ed1d49b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)="2ad4aab9e653c56ccb", &(0x7f0000000080), 0x3, r7}, 0x38) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x71, @dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, 0x8, 0x7, 0x9, 0x4}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r12}, 0x10) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 8m27.433774429s ago: executing program 0 (id=1884): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 8m26.397359407s ago: executing program 0 (id=1885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@bridge_delneigh={0x1c, 0x1d, 0x401, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x2, 0x94, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x240008c0}, 0x44000) 8m26.1437562s ago: executing program 0 (id=1887): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) setrlimit(0x40000000000008, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 8m25.949864793s ago: executing program 0 (id=1889): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = gettid() readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) tkill(r2, 0xb) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000700)="c9cf65b6636c8c594af24f046c0f67005a2bb42e90a4dd37be04f3c84bd8dfa3be1f2253f4cf06e35571480f7824d0b48d634ee4270c9d703263bd2e7c531cabe607c8f8287a904ab1a4551364f5f0183c32bc4259ba1bf62d02a744a03bcffe3ef1d795f6c87887fed03d7e1a39e08247dd4dfd9537d217266bc8217ddcd30a6240e99c8f45e862377d4a4f156dcc83cf0b5ee2e83751030e03d826f426", 0x9e, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 8m25.512743583s ago: executing program 0 (id=1891): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000004000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x5) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 8m23.132369023s ago: executing program 0 (id=1897): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x149) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x20002, 0x0) unshare(0x20000400) 8m6.704020819s ago: executing program 33 (id=1897): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x149) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x20002, 0x0) unshare(0x20000400) 5m30.204218527s ago: executing program 5 (id=2452): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000001a00010026bd7000fddb86c756faa546a68e00060029000008001900", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 5m28.875990851s ago: executing program 5 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=ANY=[], 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000800)={0x0, {{0x2, 0x4e24, @multicast1}}}, 0x88) 5m27.676304727s ago: executing program 5 (id=2457): mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x402) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80080, 0x0) getdents64(r2, &(0x7f00000001c0)=""/53, 0x35) getdents64(r2, 0xfffffffffffffffe, 0x29) 5m27.497806173s ago: executing program 5 (id=2458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) gettid() ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'macvlan0\x00', 0xfffc}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 5m26.467286557s ago: executing program 5 (id=2459): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101041) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 5m26.252419862s ago: executing program 5 (id=2460): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='mm_page_free\x00', r2, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 5m11.061442983s ago: executing program 34 (id=2460): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='mm_page_free\x00', r2, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 3m44.472582103s ago: executing program 3 (id=2868): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={'vcan0\x00', {0x2, 0x4e22, @broadcast}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m43.433886222s ago: executing program 3 (id=2875): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m42.099594033s ago: executing program 3 (id=2878): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB='/', @ANYRESHEX=0x0], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000cf700000c000000020000000000000000000009020000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) memfd_secret(0x7c2c44e850a180fd) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r4 = openat$vcsa(0xffffff9c, 0x0, 0xb0002, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000080605008000000000002000000000060900020073797a31000000000900020073797a32000000000900020073797a3000000000702abfc403bef17c6f5f5e78540d5c0d4a0e20d3180f1d63cad38461fde8c01dbc2cfb427cb8da24716cd570fa8f0dde11aed03fa1478fc1845123aad150cc3a6991249334b0abc27792d37443574463f67b26"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x81) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000030303016303000"/22]) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @broadcast}, &(0x7f0000000240)=0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x329800, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 3m40.462595894s ago: executing program 3 (id=2882): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff7f, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160003000000080004"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3m37.63360628s ago: executing program 3 (id=2891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000e00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0xffffffff}, {0x0}, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0x6, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x3}, 0x0, 0x0, 0xfffffffffffffff9, 0x5, 0x3, 0xffffffffffffffff, 0x20, 0xd}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0xfeb}, 0x0, 0x0, 0x2, 0xfff, 0x0, 0x4, 0x0, 0x4}}], 0x140, 0x20000014}, 0x0) 3m37.407410292s ago: executing program 3 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {0x0, 0x3}, {}, {0x0, 0x40, 0x0, 0x0, 0x3}, {}, {0x0, 0x9, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7, 0x4}, {0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x8}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x80, 0x0, 0x0, 0x951b000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0xffffffff, 0x80000000}], [{0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 3m22.269508309s ago: executing program 35 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {0x0, 0x3}, {}, {0x0, 0x40, 0x0, 0x0, 0x3}, {}, {0x0, 0x9, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7, 0x4}, {0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x8}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x80, 0x0, 0x0, 0x951b000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0xffffffff, 0x80000000}], [{0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 50.837121331s ago: executing program 4 (id=3516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x190, 0x6c, 0x0, 0x0, 0x0, 0x2c0, 0x258, 0x258, 0x2c0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'lo\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x320) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x8, r8}, 0x10) 48.974764656s ago: executing program 4 (id=3523): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r0, 0x3) 48.353097615s ago: executing program 4 (id=3526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 39.1576397s ago: executing program 4 (id=3550): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) 38.866995355s ago: executing program 4 (id=3552): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00010200000000000000", @ANYRES32=0x0, @ANYBLOB="d2"], 0x1c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_socket_connect_nvme_tcp() syz_clone(0xf30d3300, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 34.01427159s ago: executing program 4 (id=3562): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pread64(r1, 0x0, 0x0, 0x4) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r2, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000900)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 18.91102623s ago: executing program 36 (id=3562): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pread64(r1, 0x0, 0x0, 0x4) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r2, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000900)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11.537342651s ago: executing program 6 (id=3663): socket$packet(0x11, 0x3, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2c802, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x100}], 0x1, 0x0, 0x0, 0x0) 9.947315177s ago: executing program 6 (id=3672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x60}}, 0x0) 9.673866607s ago: executing program 6 (id=3675): openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020}, 0x2020) close(r0) 6.966312475s ago: executing program 8 (id=3684): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={0x0}, 0x18) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace(0x10, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES32, @ANYBLOB="00000000422200042c00128008000100677265002000028008000500bb7e00000800040006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 5.696658485s ago: executing program 8 (id=3686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="262e0f01c2660f388068f5260f5d866c0f0f20870f77640fc7aea9db36f078d8baf80c66b8c8aad18a66efbafc0c66ed0fc76a01f20f32", 0x37}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.559739924s ago: executing program 6 (id=3687): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004005}, 0x800) 5.433622939s ago: executing program 6 (id=3690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.975178603s ago: executing program 8 (id=3693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 3.844904821s ago: executing program 6 (id=3694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x38}}, 0x0) 3.760224941s ago: executing program 2 (id=3695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.690400389s ago: executing program 7 (id=3696): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000680)='./file0\x00', 0x1100008c) 1.531854867s ago: executing program 7 (id=3697): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) dup2(r0, r1) 1.478400845s ago: executing program 8 (id=3698): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth1_macvtap\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.32470588s ago: executing program 7 (id=3699): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, 0x0, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) 1.189414932s ago: executing program 8 (id=3700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) mincore(&(0x7f00003d4000/0x4000)=nil, 0x4000, &(0x7f00000002c0)=""/237) 1.172912263s ago: executing program 7 (id=3701): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030000000000200001800800010064757000140002800800014000000012080001400000000c0900010073797a30000000000900020073797a320000000014000000110005"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.066315796s ago: executing program 2 (id=3702): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0xf0, 0x1e, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in=@local, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100}, {0x5, 0x2000000000, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.065791225s ago: executing program 8 (id=3703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x0, 0x1, [{0x4f, &(0x7f0000000440)=@string={0x4f, 0x3, "2fbe62763f0c1d90f238e34f886ab9765f5e89e1e6b3055aaf8b9892309581479915810dad6a19c05a7534d59b8135ae3d73b7e2dbea628bc5bea99eb60a51286f5a588bbd49b9bed9a97a0e6a"}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140)=0xffffff6e, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) 1.006120957s ago: executing program 7 (id=3704): socket$packet(0x11, 0x3, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2c802, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x100}], 0x1, 0x0, 0x0, 0x0) 723.91979ms ago: executing program 2 (id=3705): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, 0x0, 0x0) 645.249019ms ago: executing program 2 (id=3706): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 408.109402ms ago: executing program 2 (id=3707): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 282.54269ms ago: executing program 2 (id=3708): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff7f, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160003000000080004"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) 0s ago: executing program 7 (id=3709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): on failed: -22 [ 931.575011][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.785520][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 932.157679][T15062] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 932.208736][T15062] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 932.255956][T15062] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 932.300507][T15062] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 932.600328][T15062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.631796][T15062] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.654869][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.663326][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.728257][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.735642][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.134973][T15293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 933.141828][T15293] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 933.164921][T15293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 933.186030][T15293] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 934.904309][T15341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 935.293188][T15293] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 935.310156][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.320115][T15293] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 935.472551][T15293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 935.494531][T15293] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 935.770114][T15361] netlink: 'syz.4.2617': attribute type 15 has an invalid length. [ 936.014421][T15062] veth0_vlan: entered promiscuous mode [ 936.072954][T15062] veth1_vlan: entered promiscuous mode [ 936.185397][T15062] veth0_macvtap: entered promiscuous mode [ 936.244380][T15062] veth1_macvtap: entered promiscuous mode [ 936.305326][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.334012][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.363244][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.375671][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 936.375687][ T30] audit: type=1326 audit(1746507055.253:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39e0b85927 code=0x7ffc0000 [ 936.424766][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.439097][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.447356][ T30] audit: type=1326 audit(1746507055.253:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39e0b2ab39 code=0x7ffc0000 [ 936.474050][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.505522][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.515608][ T30] audit: type=1326 audit(1746507055.253:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39e0b85927 code=0x7ffc0000 [ 936.543162][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.553992][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.571614][ T30] audit: type=1326 audit(1746507055.253:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39e0b2ab39 code=0x7ffc0000 [ 936.600954][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.625307][ T30] audit: type=1326 audit(1746507055.283:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39e0b85927 code=0x7ffc0000 [ 936.653055][ T30] audit: type=1326 audit(1746507055.283:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39e0b2ab39 code=0x7ffc0000 [ 936.725049][ T30] audit: type=1326 audit(1746507055.283:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 936.753500][ T30] audit: type=1326 audit(1746507055.293:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39e0b85927 code=0x7ffc0000 [ 936.802334][T15062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.855600][T15062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.864417][T15062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.873245][ T30] audit: type=1326 audit(1746507055.293:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39e0b2ab39 code=0x7ffc0000 [ 936.909812][T15062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.922200][ T30] audit: type=1326 audit(1746507055.293:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15379 comm="syz.4.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39e0b85927 code=0x7ffc0000 [ 938.804772][T15410] netlink: 'syz.4.2627': attribute type 15 has an invalid length. [ 938.861045][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.879485][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.998691][ T6131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.029569][T15417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 939.036238][ T6131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.741081][T15424] netlink: 'syz.3.2631': attribute type 10 has an invalid length. [ 939.818976][T15424] bridge0: port 3(team0) entered blocking state [ 939.843752][T15424] bridge0: port 3(team0) entered disabled state [ 939.864232][T15424] team0: entered allmulticast mode [ 939.892318][T15424] team_slave_0: entered allmulticast mode [ 939.975653][T15424] team_slave_1: entered allmulticast mode [ 940.029060][T15424] team0: entered promiscuous mode [ 940.034142][T15424] team_slave_0: entered promiscuous mode [ 940.060326][T15436] xt_TPROXY: Can be used only with -p tcp or -p udp [ 940.087016][T15424] team_slave_1: entered promiscuous mode [ 940.175699][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 940.254419][T15439] Invalid ELF header magic: != ELF [ 941.095582][T15445] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 941.215711][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.406265][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 941.406284][ T30] audit: type=1326 audit(1746507060.293:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 941.531909][T15459] netlink: 'syz.2.2638': attribute type 15 has an invalid length. [ 941.627945][ T30] audit: type=1326 audit(1746507060.293:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 941.708345][ T30] audit: type=1326 audit(1746507060.293:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 941.764337][ T30] audit: type=1326 audit(1746507060.293:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 941.833935][ T30] audit: type=1326 audit(1746507060.293:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 941.914135][ T30] audit: type=1326 audit(1746507060.323:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 942.896989][ T30] audit: type=1326 audit(1746507060.323:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 942.964585][ T30] audit: type=1326 audit(1746507060.323:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15448 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd860d8e969 code=0x7ffc0000 [ 943.528469][T15488] Falling back ldisc for ttyS3. [ 943.825815][ T30] audit: type=1326 audit(1746507062.703:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15499 comm="syz.7.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 943.866438][ T30] audit: type=1326 audit(1746507062.703:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15499 comm="syz.7.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 944.644911][T15511] netlink: 'syz.7.2649': attribute type 15 has an invalid length. [ 945.270117][T15526] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 945.990724][T15546] xt_l2tp: wrong L2TP version: 0 [ 948.571105][T15563] netlink: 'syz.4.2662': attribute type 15 has an invalid length. [ 949.237105][T15577] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 949.608420][T15590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 950.736129][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 951.732267][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 951.732284][ T30] audit: type=1326 audit(1746507070.613:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e98e969 code=0x7ffc0000 [ 951.794197][ T30] audit: type=1326 audit(1746507070.613:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e98e969 code=0x7ffc0000 [ 951.919746][ T30] audit: type=1326 audit(1746507070.643:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb8e98e969 code=0x7ffc0000 [ 952.096859][ T30] audit: type=1326 audit(1746507070.643:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e98e969 code=0x7ffc0000 [ 953.027907][ T30] audit: type=1326 audit(1746507070.643:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb8e98e969 code=0x7ffc0000 [ 953.387062][ T30] audit: type=1326 audit(1746507070.823:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e98e969 code=0x7ffc0000 [ 953.694009][ T30] audit: type=1326 audit(1746507070.823:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15615 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e98e969 code=0x7ffc0000 [ 954.772589][T15649] xt_l2tp: wrong L2TP version: 0 [ 956.665670][T15677] bridge0: port 3(vlan2) entered blocking state [ 956.699139][T15677] bridge0: port 3(vlan2) entered disabled state [ 956.757301][T15677] vlan2: entered allmulticast mode [ 956.797301][T15677] bridge0: entered allmulticast mode [ 956.867811][T15677] vlan2: left allmulticast mode [ 956.879613][T15677] bridge0: left allmulticast mode [ 957.072807][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x1 [ 957.083166][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 957.113458][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 957.163314][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 957.189090][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 957.219049][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 957.283755][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 957.296685][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 957.304133][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 957.381794][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 957.440623][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2700'. [ 958.056136][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.063577][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.071034][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 958.078508][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.085938][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.093340][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.100896][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.108361][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.115804][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.123206][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.131395][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.185609][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.196574][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.204105][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.293756][T15693] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 958.852119][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.859616][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.868504][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.876099][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.883509][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.890998][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.898562][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.906048][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.913460][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.924896][T15071] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 958.952042][T15071] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 959.413902][T15710] xt_l2tp: wrong L2TP version: 0 [ 960.713683][T15726] tipc: Started in network mode [ 960.725576][T15726] tipc: Node identity ce67e2e81246, cluster identity 4711 [ 960.733072][T15726] tipc: Enabled bearer , priority 0 [ 960.942094][T15726] syzkaller0: entered promiscuous mode [ 960.969076][T15726] syzkaller0: entered allmulticast mode [ 961.075909][T15739] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 961.176787][T15726] tipc: Resetting bearer [ 961.536470][T15725] tipc: Resetting bearer [ 961.817160][T15071] tipc: Node number set to 3693208296 [ 963.058447][T15756] xt_l2tp: wrong L2TP version: 0 [ 965.087627][T15725] tipc: Disabling bearer [ 965.100272][T15743] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 965.637452][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 965.653913][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 966.956956][T15798] xt_l2tp: wrong L2TP version: 0 [ 967.874461][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2744'. [ 969.477739][T15828] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 969.851982][T15831] sch_tbf: burst 88 is lower than device macsec0 mtu (1482) ! [ 971.047079][T15852] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 974.818884][T15904] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 976.040678][T15912] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 978.348889][T15938] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2782' sets config #1 [ 979.149727][T10726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 979.170536][T10726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 979.180212][T10726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 979.188500][T10726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 979.196307][T10726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.210398][T14805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 979.221194][T15954] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 979.234279][T14805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 979.242537][T14805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 979.253718][T14805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 979.263040][T14805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.432837][T15952] lo speed is unknown, defaulting to 1000 [ 979.452110][T15952] lo speed is unknown, defaulting to 1000 [ 980.708938][T15952] chnl_net:caif_netlink_parms(): no params data found [ 980.934809][T15071] IPVS: starting estimator thread 0... [ 981.255756][T15977] IPVS: using max 27 ests per chain, 64800 per kthread [ 981.295775][T10726] Bluetooth: hci0: command tx timeout [ 981.504015][T15952] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.519145][T15952] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.526909][T15952] bridge_slave_0: entered allmulticast mode [ 981.543205][T15952] bridge_slave_0: entered promiscuous mode [ 981.563288][T15952] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.570843][T15952] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.581463][T15952] bridge_slave_1: entered allmulticast mode [ 981.590303][T15952] bridge_slave_1: entered promiscuous mode [ 981.827342][T15952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.853319][T15952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.991936][T15952] team0: Port device team_slave_0 added [ 982.034395][T15952] team0: Port device team_slave_1 added [ 982.221162][T15952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.229320][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.255322][T15952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.268329][T15952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.278776][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.305784][T15952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.372543][T15952] hsr_slave_0: entered promiscuous mode [ 982.379578][T15952] hsr_slave_1: entered promiscuous mode [ 982.386473][T15952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.394237][T15952] Cannot create hsr debugfs directory [ 982.482326][T16006] fuse: Bad value for 'fd' [ 982.899806][T15991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 982.948001][T15991] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 983.035826][T15991] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 984.052850][T10726] Bluetooth: hci0: command 0x040f tx timeout [ 985.059295][T16021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 985.091201][T16021] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 989.063019][T15952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 989.119367][T15952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 989.135368][T15952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 989.171332][T15952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 990.119803][T15952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.176023][T15952] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.203914][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.211118][ T8089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.278339][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.285568][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.178884][T16109] xt_l2tp: wrong L2TP version: 0 [ 991.640487][T15952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.404036][T15952] veth0_vlan: entered promiscuous mode [ 992.462376][T15952] veth1_vlan: entered promiscuous mode [ 993.049472][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.066371][T15952] veth0_macvtap: entered promiscuous mode [ 993.068811][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.096314][T15952] veth1_macvtap: entered promiscuous mode [ 993.132971][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.165493][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.185779][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.200640][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.221485][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.240780][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.284201][T15952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.339791][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.395571][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.427596][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.441262][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.455902][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.468512][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.644964][T15952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.076821][T15952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.090914][T15952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.110424][T15952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.127768][T15952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.925613][T12561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.933638][T12561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.262481][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.292593][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.452750][T16179] Invalid ELF header magic: != ELF [ 1000.394928][T14805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1000.413663][T14805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1000.425814][T14805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1000.434202][T14805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1000.442112][T14805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1000.458665][ T8089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.570331][T16211] lo speed is unknown, defaulting to 1000 [ 1000.624681][T16214] Invalid ELF header magic: != ELF [ 1000.663313][ T8089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.698347][T16211] lo speed is unknown, defaulting to 1000 [ 1001.361852][ T8089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.495611][T14805] Bluetooth: hci2: command tx timeout [ 1002.527168][ T8089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.581402][T16240] xt_l2tp: wrong L2TP version: 0 [ 1003.051135][T16252] Invalid ELF header magic: != ELF [ 1003.093743][T16211] chnl_net:caif_netlink_parms(): no params data found [ 1004.726077][T14805] Bluetooth: hci2: command tx timeout [ 1004.793359][ T30] audit: type=1326 audit(1746507123.073:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.040077][ T30] audit: type=1326 audit(1746507123.073:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.169742][ T30] audit: type=1326 audit(1746507123.073:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.333076][ T30] audit: type=1326 audit(1746507123.073:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.380186][ T30] audit: type=1326 audit(1746507123.073:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.406303][ T30] audit: type=1326 audit(1746507123.073:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.428198][ T30] audit: type=1326 audit(1746507123.083:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.490722][ T30] audit: type=1326 audit(1746507123.083:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.6.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1005.720952][T16276] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 1006.802530][T14805] Bluetooth: hci2: command tx timeout [ 1007.761220][T16297] xt_l2tp: wrong L2TP version: 0 [ 1008.163163][ T30] audit: type=1326 audit(1746507127.023:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16298 comm="syz.7.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1008.343789][ T30] audit: type=1326 audit(1746507127.023:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16298 comm="syz.7.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1008.614262][ T8089] bond0 (unregistering): Released all slaves [ 1008.930715][T14805] Bluetooth: hci2: command tx timeout [ 1008.990555][T16211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.603981][T16211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.611366][T16211] bridge_slave_0: entered allmulticast mode [ 1009.625314][T16211] bridge_slave_0: entered promiscuous mode [ 1009.635093][T16211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.728608][T16211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.746418][T16211] bridge_slave_1: entered allmulticast mode [ 1009.757623][T16211] bridge_slave_1: entered promiscuous mode [ 1009.851211][ T8089] tipc: Left network mode [ 1010.007216][T16211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.799084][T16211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.864191][T16324] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2893'. [ 1011.163154][T16211] team0: Port device team_slave_0 added [ 1011.179214][T16332] netlink: 'syz.4.2896': attribute type 1 has an invalid length. [ 1011.240505][T16211] team0: Port device team_slave_1 added [ 1011.351740][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1011.351776][ T30] audit: type=1326 audit(1746507130.223:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1011.794740][ T30] audit: type=1326 audit(1746507130.223:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1011.828271][ T30] audit: type=1326 audit(1746507130.223:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1011.977138][ T30] audit: type=1326 audit(1746507130.233:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1011.999126][ T30] audit: type=1326 audit(1746507130.233:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1012.021080][ T30] audit: type=1326 audit(1746507130.233:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1012.083298][ T30] audit: type=1326 audit(1746507130.233:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1012.145318][T16211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.153986][T16211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.185837][ T30] audit: type=1326 audit(1746507130.233:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1012.207747][T16211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.263509][ T8089] hsr_slave_0: left promiscuous mode [ 1012.270401][ T8089] hsr_slave_1: left promiscuous mode [ 1012.351120][ T8089] veth1_macvtap: left promiscuous mode [ 1012.381072][ T8089] veth0_macvtap: left promiscuous mode [ 1012.400397][ T8089] veth1_vlan: left promiscuous mode [ 1012.431043][T16325] infiniband syz!: set active [ 1012.449157][T16325] infiniband syz!: added team_slave_0 [ 1012.470329][T16325] syz!: rxe_create_cq: returned err = -12 [ 1012.494002][T16325] infiniband syz!: Couldn't create ib_mad CQ [ 1012.514108][T16352] Invalid ELF header magic: != ELF [ 1012.521316][T16325] infiniband syz!: Couldn't open port 1 [ 1012.611919][T16325] RDS/IB: syz!: added [ 1012.636772][T16325] smc: adding ib device syz! with port count 1 [ 1012.643156][T16325] smc: ib device syz! port 1 has pnetid [ 1013.143151][T16362] netlink: 'syz.4.2906': attribute type 1 has an invalid length. [ 1013.222446][ T8089] team0 (unregistering): Port device vlan0 removed [ 1013.269898][T16365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2907'. [ 1014.049527][ T30] audit: type=1326 audit(1746507132.843:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16370 comm="syz.7.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1014.180781][ T30] audit: type=1326 audit(1746507132.843:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16370 comm="syz.7.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1014.892877][T16211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.901751][T16211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.928616][T16211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.188284][ T9626] lo speed is unknown, defaulting to 1000 [ 1015.194068][ T9626] syz2: Port: 1 Link DOWN [ 1015.314377][T16211] hsr_slave_0: entered promiscuous mode [ 1015.331274][T16211] hsr_slave_1: entered promiscuous mode [ 1015.366123][T16211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.390856][T16211] Cannot create hsr debugfs directory [ 1017.035797][T16384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1017.041767][T16384] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1018.248581][T16400] netlink: 'syz.6.2916': attribute type 1 has an invalid length. [ 1018.787990][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1018.788008][ T30] audit: type=1326 audit(1746507137.183:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1018.921310][ T30] audit: type=1326 audit(1746507137.183:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1018.944046][ T30] audit: type=1326 audit(1746507137.183:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1018.995541][ T30] audit: type=1326 audit(1746507137.183:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1019.050322][ T30] audit: type=1326 audit(1746507137.183:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1019.073449][T16410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2920'. [ 1019.097526][T16414] 9pnet_fd: Insufficient options for proto=fd [ 1019.104048][ T30] audit: type=1326 audit(1746507137.183:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1019.162086][ T30] audit: type=1326 audit(1746507137.183:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1019.259213][ T30] audit: type=1326 audit(1746507137.183:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16399 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1022.425560][ T30] audit: type=1326 audit(1746507140.883:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.6.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1022.489451][ T30] audit: type=1326 audit(1746507140.883:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.6.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1022.762299][T16450] netlink: 'syz.4.2930': attribute type 1 has an invalid length. [ 1023.975158][T16460] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2932'. [ 1024.654700][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2934'. [ 1024.905961][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1024.905992][ T30] audit: type=1326 audit(1746507143.783:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16467 comm="syz.6.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1024.972636][ T30] audit: type=1326 audit(1746507143.783:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16467 comm="syz.6.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1025.033370][ T30] audit: type=1326 audit(1746507143.783:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16467 comm="syz.6.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1025.897537][ T8089] IPVS: stop unused estimator thread 0... [ 1026.656284][T10726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1026.665600][T10726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1026.673965][T10726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1026.683512][T10726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1026.692280][T10726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.709242][T14805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1026.717361][T14805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1026.725154][T14805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1026.735808][T14805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1026.747157][T14805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.853130][ T8087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.007282][T16499] lo speed is unknown, defaulting to 1000 [ 1027.892485][ T8087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.324084][T16518] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1029.072006][T14805] Bluetooth: hci0: command tx timeout [ 1029.366954][ T8087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.597920][ T8087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.858517][T16211] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1030.768675][T16211] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1031.189820][T14805] Bluetooth: hci0: command tx timeout [ 1031.245038][T16550] Invalid ELF header magic: != ELF [ 1031.259693][T16211] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1031.326418][T16211] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1032.465947][ T8087] bridge_slave_1: left allmulticast mode [ 1032.471652][ T8087] bridge_slave_1: left promiscuous mode [ 1032.492597][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.277064][T14805] Bluetooth: hci0: command tx timeout [ 1033.703325][ T8087] bridge_slave_0: left allmulticast mode [ 1033.709474][ T8087] bridge_slave_0: left promiscuous mode [ 1033.715269][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.455178][T14805] Bluetooth: hci0: command tx timeout [ 1035.833431][ T8087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.849968][ T8087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.863383][ T8087] bond0 (unregistering): Released all slaves [ 1037.451990][T16211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.496584][T16211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.563641][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.570887][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.658360][T16499] chnl_net:caif_netlink_parms(): no params data found [ 1038.791179][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.798531][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.593008][T16211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1039.608092][T16211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1039.683830][T16646] fuse: Bad value for 'user_id' [ 1039.688843][T16646] fuse: Bad value for 'user_id' [ 1039.890711][ T8087] hsr_slave_0: left promiscuous mode [ 1039.925609][ T8087] hsr_slave_1: left promiscuous mode [ 1039.943180][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.966706][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.988051][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.019857][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.141713][ T8087] veth1_macvtap: left promiscuous mode [ 1040.163158][ T8087] veth0_macvtap: left promiscuous mode [ 1040.196800][ T8087] veth1_vlan: left promiscuous mode [ 1040.212464][ T8087] veth0_vlan: left promiscuous mode [ 1041.863506][T16674] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2994'. [ 1042.071590][T16678] xt_l2tp: wrong L2TP version: 0 [ 1042.529697][ T30] audit: type=1326 audit(1746507161.413:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1042.588939][ T30] audit: type=1326 audit(1746507161.433:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1042.615873][ T30] audit: type=1326 audit(1746507161.433:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1042.656607][ T30] audit: type=1326 audit(1746507161.433:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1042.713804][T16689] fuse: Bad value for 'user_id' [ 1042.718937][T16689] fuse: Bad value for 'user_id' [ 1042.789608][ T30] audit: type=1326 audit(1746507161.433:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1042.906298][ T30] audit: type=1326 audit(1746507161.433:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1043.031119][ T30] audit: type=1326 audit(1746507161.433:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1043.139357][ T30] audit: type=1326 audit(1746507161.433:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1043.244719][ T30] audit: type=1326 audit(1746507161.453:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1043.327083][ T30] audit: type=1326 audit(1746507161.453:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16683 comm="syz.7.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1045.247898][ T8087] team0 (unregistering): Port device team_slave_1 removed [ 1045.311051][ T8087] team0 (unregistering): Port device team_slave_0 removed [ 1045.332205][ T6131] smc: removing ib device syz! [ 1046.744535][T16725] fuse: Bad value for 'user_id' [ 1046.750457][T16725] fuse: Bad value for 'user_id' [ 1047.627814][T16211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.404296][T16747] xt_l2tp: wrong L2TP version: 0 [ 1049.029453][T16743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 1051.063567][T16499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.263989][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.305809][T16499] bridge_slave_0: entered allmulticast mode [ 1051.340737][T16499] bridge_slave_0: entered promiscuous mode [ 1051.404300][T16499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.427643][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.434905][T16499] bridge_slave_1: entered allmulticast mode [ 1051.474066][T16499] bridge_slave_1: entered promiscuous mode [ 1052.699979][T16499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.737144][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.880112][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1052.880131][ T30] audit: type=1326 audit(1746507171.763:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1052.953139][ T30] audit: type=1326 audit(1746507171.813:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1053.024122][ T30] audit: type=1326 audit(1746507171.823:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1053.095026][ T30] audit: type=1326 audit(1746507171.823:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1053.224929][T16775] fuse: Bad value for 'fd' [ 1054.097761][ T30] audit: type=1326 audit(1746507171.823:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1054.119787][ T30] audit: type=1326 audit(1746507171.823:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1054.143390][ T30] audit: type=1326 audit(1746507171.823:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1054.169430][ T30] audit: type=1326 audit(1746507171.823:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1054.264115][ T30] audit: type=1326 audit(1746507171.823:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1054.293108][T16499] team0: Port device team_slave_0 added [ 1054.339417][ T30] audit: type=1326 audit(1746507171.823:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.6.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1054.373580][T16780] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3028'. [ 1054.428577][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.434940][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.541971][T16499] team0: Port device team_slave_1 added [ 1055.186993][T16796] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1055.432588][T16499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.451927][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.525497][T16499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.718313][T16211] veth0_vlan: entered promiscuous mode [ 1055.751244][T16499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.767693][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.810813][T16499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.929554][T16499] hsr_slave_0: entered promiscuous mode [ 1055.956746][T16499] hsr_slave_1: entered promiscuous mode [ 1055.963007][T16499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.001501][T16499] Cannot create hsr debugfs directory [ 1056.668972][ T8087] team0: left allmulticast mode [ 1056.673891][ T8087] team_slave_0: left allmulticast mode [ 1056.703289][ T8087] team_slave_1: left allmulticast mode [ 1056.725507][ T8087] team0: left promiscuous mode [ 1056.730320][ T8087] team_slave_0: left promiscuous mode [ 1056.747046][ T8087] team_slave_1: left promiscuous mode [ 1056.753046][ T8087] bridge0: port 3(team0) entered disabled state [ 1056.770521][ T8087] bridge_slave_1: left allmulticast mode [ 1056.777765][ T8087] bridge_slave_1: left promiscuous mode [ 1056.784846][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.809183][ T8087] bridge_slave_0: left allmulticast mode [ 1056.820494][ T8087] bridge_slave_0: left promiscuous mode [ 1056.835763][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.965245][ T8087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.975149][ T8087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.984824][ T8087] bond0 (unregistering): Released all slaves [ 1058.000505][T16211] veth1_vlan: entered promiscuous mode [ 1058.067808][ T8087] IPVS: stopping master sync thread 8314 ... [ 1058.436742][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3038'. [ 1059.356204][T16828] fuse: Bad value for 'fd' [ 1059.795848][T14805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1059.804933][T14805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1059.813139][T14805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1059.993026][T14805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1060.001580][T14805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1060.788852][ T8087] hsr_slave_0: left promiscuous mode [ 1060.804392][ T8087] hsr_slave_1: left promiscuous mode [ 1060.818760][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.617067][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.535626][T14805] Bluetooth: hci4: command tx timeout [ 1063.608268][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3049'. [ 1064.580867][T14805] Bluetooth: hci4: command tx timeout [ 1064.697015][ T8087] team0 (unregistering): Port device team_slave_1 removed [ 1064.742155][ T8087] team0 (unregistering): Port device team_slave_0 removed [ 1065.365768][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1065.365786][ T30] audit: type=1326 audit(1746507184.243:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.397720][ T30] audit: type=1326 audit(1746507184.243:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.443430][ T30] audit: type=1326 audit(1746507184.243:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.475009][ T30] audit: type=1326 audit(1746507184.243:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.501463][ T30] audit: type=1326 audit(1746507184.243:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.529209][ T30] audit: type=1326 audit(1746507184.243:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.554999][ T30] audit: type=1326 audit(1746507184.243:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.601110][ T30] audit: type=1326 audit(1746507184.243:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.630656][ T30] audit: type=1326 audit(1746507184.243:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.657176][ T30] audit: type=1326 audit(1746507184.243:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921138e969 code=0x7ffc0000 [ 1065.702747][T16499] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1065.789942][T16499] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1065.856231][T16499] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1065.922439][T16499] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1066.169317][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3058'. [ 1066.312509][T16891] hsr_slave_0: left promiscuous mode [ 1066.416482][T16891] hsr_slave_1: left promiscuous mode [ 1066.665622][T14805] Bluetooth: hci4: command tx timeout [ 1066.752605][ T8087] IPVS: stop unused estimator thread 0... [ 1066.808728][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3062'. [ 1068.079078][T16499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.114842][T16833] chnl_net:caif_netlink_parms(): no params data found [ 1068.250115][T16499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.745847][T14805] Bluetooth: hci4: command tx timeout [ 1069.250070][T16924] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3067'. [ 1069.268784][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.276016][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.341181][T16923] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3068'. [ 1069.392023][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.399224][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.750782][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.758923][T16833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.767234][T16833] bridge_slave_0: entered allmulticast mode [ 1070.775110][T16833] bridge_slave_0: entered promiscuous mode [ 1070.789987][T16833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.799197][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.806559][T16833] bridge_slave_1: entered allmulticast mode [ 1070.814528][T16833] bridge_slave_1: entered promiscuous mode [ 1070.866197][T16833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.879635][T16833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.932661][T16833] team0: Port device team_slave_0 added [ 1070.943513][T16833] team0: Port device team_slave_1 added [ 1070.993612][T16833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.001270][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.027575][T16833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.705025][T16945] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1071.733938][T16833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.774543][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.854989][T16833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.876861][T16943] slcan: can't register candev [ 1073.031800][T16499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1073.042423][T16499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1073.311243][T16833] hsr_slave_0: entered promiscuous mode [ 1073.331079][T16833] hsr_slave_1: entered promiscuous mode [ 1073.347758][T16833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.372053][T16833] Cannot create hsr debugfs directory [ 1073.521884][ T8087] bridge_slave_1: left allmulticast mode [ 1073.543770][ T8087] bridge_slave_1: left promiscuous mode [ 1073.561020][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.601788][ T8087] bridge_slave_0: left allmulticast mode [ 1073.610329][ T8087] bridge_slave_0: left promiscuous mode [ 1073.627847][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.476985][ T8087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.498633][ T8087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.514353][ T8087] bond0 (unregistering): Released all slaves [ 1074.618426][T16980] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3079'. [ 1074.724309][T16499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.099090][ T8087] hsr_slave_0: left promiscuous mode [ 1075.350622][ T8087] hsr_slave_1: left promiscuous mode [ 1075.436381][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.534900][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.792202][ T8087] veth1_vlan: left promiscuous mode [ 1075.805103][ T8087] veth0_vlan: left promiscuous mode [ 1076.830761][ T8087] team0 (unregistering): Port device team_slave_1 removed [ 1076.877816][ T8087] team0 (unregistering): Port device team_slave_0 removed [ 1077.625145][T17012] ip6gretap0: entered promiscuous mode [ 1077.885049][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3089'. [ 1078.633461][T16499] veth0_vlan: entered promiscuous mode [ 1078.651167][T16499] veth1_vlan: entered promiscuous mode [ 1078.838620][T16499] veth0_macvtap: entered promiscuous mode [ 1078.863272][T16499] veth1_macvtap: entered promiscuous mode [ 1079.007741][T17034] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3094'. [ 1079.128110][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.144177][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.159061][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.169618][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.179721][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.190423][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.202975][T16499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.252655][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.299756][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.310333][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.321493][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.432207][T16499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.514726][T16499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.762051][T16499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.860974][T16499] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.883702][T16499] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.898515][T16499] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.907523][T16499] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.106478][T16833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1080.162541][T16833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1080.212425][T16833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1080.249244][T16833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1080.356355][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.364239][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.625028][ T8087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.643383][ T8087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.722863][T17062] netlink: 292 bytes leftover after parsing attributes in process `syz.6.3103'. [ 1081.381492][T16833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.464774][T16833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.514944][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.522204][T16746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.595444][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.602675][T16746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.757339][T16833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.961010][T16833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.984638][T17089] overlayfs: statfs failed on './file0' [ 1083.014200][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3113'. [ 1083.118815][T16833] veth0_vlan: entered promiscuous mode [ 1083.163027][T16833] veth1_vlan: entered promiscuous mode [ 1083.293572][T16833] veth0_macvtap: entered promiscuous mode [ 1083.332200][T16833] veth1_macvtap: entered promiscuous mode [ 1083.352049][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.393105][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.422103][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.443852][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.462834][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.484249][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.518943][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.536418][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.548300][T16833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.571436][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.598174][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.614930][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.628017][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.638478][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.654270][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.675050][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.696765][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.722590][T16833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.762761][T16833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.772942][T16833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.786533][T16833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.806936][T16833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.094785][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1084.094801][ T30] audit: type=1326 audit(1746507202.973:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.125969][ T8093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.133814][ T8093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.145184][ T30] audit: type=1326 audit(1746507202.973:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.171997][ T30] audit: type=1326 audit(1746507202.983:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.204028][ T30] audit: type=1326 audit(1746507202.983:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.285928][ T30] audit: type=1326 audit(1746507202.983:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.380605][ T30] audit: type=1326 audit(1746507203.013:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.461161][ T8087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.484397][ T8087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.533456][ T30] audit: type=1326 audit(1746507203.013:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.661815][ T30] audit: type=1326 audit(1746507203.013:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.783834][ T30] audit: type=1326 audit(1746507203.013:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1084.903671][ T30] audit: type=1326 audit(1746507203.013:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17114 comm="syz.4.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e0b8e969 code=0x7ffc0000 [ 1085.232116][T17131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1086.450517][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3130'. [ 1086.537520][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3130'. [ 1086.816708][T10726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1086.826257][T10726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1086.835065][T10726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1086.875667][T10726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1086.885863][T10726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1087.884555][T17159] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3135'. [ 1088.133750][T17147] chnl_net:caif_netlink_parms(): no params data found [ 1088.977309][T10726] Bluetooth: hci2: command tx timeout [ 1090.442964][T17180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1090.450421][T17180] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1090.470472][T17180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1090.500334][T17180] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1090.531992][ T6131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.555099][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.564777][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.574406][T17147] bridge_slave_0: entered allmulticast mode [ 1090.612054][T17147] bridge_slave_0: entered promiscuous mode [ 1090.713102][T17192] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3145'. [ 1091.057304][T10726] Bluetooth: hci2: command tx timeout [ 1091.152302][ T6131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.243999][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.274124][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.292653][T17147] bridge_slave_1: entered allmulticast mode [ 1091.309573][T17147] bridge_slave_1: entered promiscuous mode [ 1091.432434][T17195] fuse: Unknown parameter '00000000000000000000' [ 1091.898474][T17180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1091.904478][T17180] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1091.933696][ T6131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.965849][T17198] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3147'. [ 1092.087407][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.893115][ T6131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.003935][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.112704][T17147] team0: Port device team_slave_0 added [ 1094.153579][T17147] team0: Port device team_slave_1 added [ 1094.383001][T17233] fuse: Unknown parameter '00000000000000000000' [ 1094.483054][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.529258][T17235] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3160'. [ 1094.538481][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.682834][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.886490][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.127791][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.155561][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.286793][T17242] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1096.137054][T17147] hsr_slave_0: entered promiscuous mode [ 1096.328917][T17147] hsr_slave_1: entered promiscuous mode [ 1096.335450][T17147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.343123][T17147] Cannot create hsr debugfs directory [ 1098.327742][T17278] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1098.519002][ T6131] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 1098.604389][ T6131] ÿ: left promiscuous mode [ 1098.731454][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.741098][ T6131] bond_slave_1: left promiscuous mode [ 1098.801668][T17279] fuse: Unknown parameter '00000000000000000000' [ 1099.141314][ T6131] bond0 (unregistering): Released all slaves [ 1099.756590][T17281] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3173'. [ 1099.938890][ T6131] tipc: Left network mode [ 1100.008148][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1100.008165][ T30] audit: type=1326 audit(1746507218.893:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.042211][ T30] audit: type=1326 audit(1746507218.923:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.064806][ T30] audit: type=1326 audit(1746507218.923:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.087559][ T30] audit: type=1326 audit(1746507218.923:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.186029][ T30] audit: type=1326 audit(1746507218.923:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.250718][ T30] audit: type=1326 audit(1746507218.923:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.272571][ T30] audit: type=1326 audit(1746507218.923:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.297626][T17297] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1100.313900][ T30] audit: type=1326 audit(1746507218.923:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.339269][ T30] audit: type=1326 audit(1746507218.923:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1100.361222][ T30] audit: type=1326 audit(1746507218.923:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17290 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1101.646642][ T6131] hsr_slave_0: left promiscuous mode [ 1101.652803][ T6131] hsr_slave_1: left promiscuous mode [ 1101.658962][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1101.678270][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.257213][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.273837][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.317779][ T6131] veth0_macvtap: left promiscuous mode [ 1102.323713][ T6131] veth1_vlan: left promiscuous mode [ 1102.330467][ T6131] veth0_vlan: left promiscuous mode [ 1103.618064][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 1103.663095][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 1104.461737][T17327] xt_l2tp: wrong L2TP version: 0 [ 1105.072391][T17325] batadv1: entered allmulticast mode [ 1105.123356][T17325] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1105.144732][T17325] bridge0: port 3(batadv1) entered blocking state [ 1105.160655][T17325] bridge0: port 3(batadv1) entered disabled state [ 1105.180032][T17325] batadv1: entered promiscuous mode [ 1105.186995][T17325] bridge0: port 3(batadv1) entered blocking state [ 1105.193864][T17325] bridge0: port 3(batadv1) entered forwarding state [ 1105.389335][T17339] overlayfs: missing 'lowerdir' [ 1105.572932][ T6131] IPVS: stop unused estimator thread 0... [ 1105.587685][ T8087] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1105.597486][ T8087] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1106.022970][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3196'. [ 1106.083713][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3196'. [ 1106.432913][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1106.432929][ T30] audit: type=1326 audit(1746507225.313:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1106.588687][ T30] audit: type=1326 audit(1746507225.353:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1106.687576][T17363] xt_l2tp: wrong L2TP version: 0 [ 1107.127369][ T30] audit: type=1326 audit(1746507225.353:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.156523][ T30] audit: type=1326 audit(1746507225.353:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.178619][ T30] audit: type=1326 audit(1746507225.353:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.203511][T17147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1107.226366][ T30] audit: type=1326 audit(1746507225.353:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.254691][ T30] audit: type=1326 audit(1746507225.353:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.318715][ T30] audit: type=1326 audit(1746507225.353:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.341457][T17147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1107.349217][ T30] audit: type=1326 audit(1746507225.353:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.349268][ T30] audit: type=1326 audit(1746507225.363:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17350 comm="syz.6.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1107.454525][T17147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1107.472976][T17147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1107.772622][T17377] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1107.873131][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.904829][T17147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.925060][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.932318][ T8087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.961003][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.968276][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.352469][T17147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1108.415782][T17147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.500535][T17147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.787654][T17411] xt_l2tp: wrong L2TP version: 0 [ 1110.726736][T17430] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1112.355108][T17147] veth0_vlan: entered promiscuous mode [ 1112.401391][T17147] veth1_vlan: entered promiscuous mode [ 1112.492738][T17147] veth0_macvtap: entered promiscuous mode [ 1112.539037][T17147] veth1_macvtap: entered promiscuous mode [ 1112.620111][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.630850][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.640845][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.655248][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.674214][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.691831][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.701754][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.712672][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.727288][T17147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.739599][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.750394][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.761127][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.771679][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.781765][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.792312][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.802295][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.812848][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.838478][T17147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.877043][T17147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.895295][T17147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.930082][T17147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.957396][T17147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.082156][T17448] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1113.109330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.125213][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.297959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.499107][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.623778][T17456] xt_l2tp: wrong L2TP version: 0 [ 1114.231860][T17460] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3229'. [ 1116.351381][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.357784][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.795006][T17500] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3241'. [ 1119.597345][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3242'. [ 1120.050065][T17531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1121.261845][T17539] fuse: Unknown parameter 'user_i00000000000000000000' [ 1121.457025][T17541] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3253'. [ 1121.754410][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1122.329416][T17567] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1123.632051][T17580] fuse: Unknown parameter 'user_i00000000000000000000' [ 1124.142649][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 1126.333699][T17616] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1127.006173][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 1127.865714][T17631] netlink: 592 bytes leftover after parsing attributes in process `syz.2.3287'. [ 1130.060926][ T30] audit: type=1326 audit(1746507248.943:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1130.105218][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3298'. [ 1130.122465][ T30] audit: type=1326 audit(1746507248.943:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1130.151207][ T30] audit: type=1326 audit(1746507248.943:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1130.249784][ T30] audit: type=1326 audit(1746507248.943:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1130.303472][ T30] audit: type=1326 audit(1746507248.993:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1130.369755][ T30] audit: type=1326 audit(1746507248.993:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1130.607895][ T30] audit: type=1326 audit(1746507248.993:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1130.655538][ T30] audit: type=1326 audit(1746507248.993:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1131.363866][T17676] xt_l2tp: wrong L2TP version: 0 [ 1131.375810][ T30] audit: type=1326 audit(1746507248.993:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1131.786765][ T30] audit: type=1326 audit(1746507248.993:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.2.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1132.323184][T17703] 9pnet_fd: Insufficient options for proto=fd [ 1133.821808][T17729] xt_l2tp: wrong L2TP version: 0 [ 1135.909103][T17751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3330'. [ 1135.929575][T17753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3331'. [ 1136.079942][T17759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1136.235337][T17765] 9pnet_fd: Insufficient options for proto=fd [ 1136.425169][T17769] 9pnet_fd: Insufficient options for proto=fd [ 1137.563711][T17781] 9pnet_fd: Insufficient options for proto=fd [ 1138.663798][T17793] wg1: entered promiscuous mode [ 1138.675412][T17793] wg1: entered allmulticast mode [ 1138.747764][T17797] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3347'. [ 1138.839784][T17801] 9pnet_fd: Insufficient options for proto=fd [ 1140.782848][T17831] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1141.158568][T17840] 9pnet_fd: Insufficient options for proto=fd [ 1141.718735][T17848] xt_l2tp: wrong L2TP version: 0 [ 1142.540232][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1142.892795][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1142.892813][ T30] audit: type=1326 audit(1746507261.773:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1142.934454][ T30] audit: type=1326 audit(1746507261.803:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1142.956981][ T30] audit: type=1326 audit(1746507261.803:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1142.978962][ T30] audit: type=1326 audit(1746507261.803:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1143.000712][ T30] audit: type=1326 audit(1746507261.803:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1143.035685][ T30] audit: type=1326 audit(1746507261.913:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1143.177090][ T30] audit: type=1326 audit(1746507261.913:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1143.571405][T17876] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1143.624592][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3376'. [ 1143.778304][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3376'. [ 1144.156447][T17888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3379'. [ 1144.220426][ T30] audit: type=1326 audit(1746507263.103:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17889 comm="syz.4.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1144.296257][T17891] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3379'. [ 1144.367452][ T30] audit: type=1326 audit(1746507263.103:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17889 comm="syz.4.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1144.580287][ T30] audit: type=1326 audit(1746507263.133:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17889 comm="syz.4.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7878d8e969 code=0x7ffc0000 [ 1145.545024][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3387'. [ 1145.662479][T17912] hsr_slave_0: left promiscuous mode [ 1145.679399][T17912] hsr_slave_1: left promiscuous mode [ 1146.695930][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3390'. [ 1147.212562][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1147.265013][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1147.652364][T17931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3396'. [ 1147.722191][T17938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3396'. [ 1147.753542][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1147.762995][T17939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.771495][T17939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.820559][T17939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.840028][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3399'. [ 1147.866556][T17939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.920154][ T24] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1147.928535][T17942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.940997][ T24] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1147.962883][T17942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.984460][T17942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.028742][T17942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.973171][T17958] xt_policy: too many policy elements [ 1149.062693][T17962] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1149.341875][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1149.688738][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3406'. [ 1149.706151][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3406'. [ 1150.647458][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3408'. [ 1150.924790][T17975] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1150.955876][T17975] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1151.307772][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1151.307809][ T30] audit: type=1326 audit(1746507270.183:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17969 comm="syz.6.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1151.556619][T17987] wireguard0: entered promiscuous mode [ 1151.562935][T17987] wireguard0: entered allmulticast mode [ 1151.817382][T17996] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1151.950204][ T30] audit: type=1326 audit(1746507270.183:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17969 comm="syz.6.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1151.972126][ T30] audit: type=1326 audit(1746507270.183:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17969 comm="syz.6.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1151.994017][ T30] audit: type=1326 audit(1746507270.183:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17969 comm="syz.6.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1152.469199][ T30] audit: type=1326 audit(1746507270.183:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17969 comm="syz.6.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4838e969 code=0x7ffc0000 [ 1153.164843][T18007] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1153.510027][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3420'. [ 1153.527082][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3420'. [ 1154.152382][T18029] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3426'. [ 1154.193180][T18029] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3426'. [ 1154.289664][ T30] audit: type=1326 audit(1746507273.163:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18035 comm="syz.2.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a0f85927 code=0x7ffc0000 [ 1154.358405][ T30] audit: type=1326 audit(1746507273.163:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18035 comm="syz.2.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a0f2ab39 code=0x7ffc0000 [ 1154.412708][ T30] audit: type=1326 audit(1746507273.163:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18035 comm="syz.2.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a0f85927 code=0x7ffc0000 [ 1154.526262][ T30] audit: type=1326 audit(1746507273.163:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18035 comm="syz.2.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a0f2ab39 code=0x7ffc0000 [ 1154.589549][ T30] audit: type=1326 audit(1746507273.163:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18035 comm="syz.2.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a0f85927 code=0x7ffc0000 [ 1155.130081][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3437'. [ 1155.359700][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3437'. [ 1155.855737][T18066] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3444'. [ 1157.725729][T18096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1158.490759][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'. [ 1158.998330][T18111] xt_l2tp: wrong L2TP version: 0 [ 1159.373901][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 1159.373937][ T30] audit: type=1326 audit(1746507278.253:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.452819][ T30] audit: type=1326 audit(1746507278.283:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.486305][ T30] audit: type=1326 audit(1746507278.333:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.511237][ T30] audit: type=1326 audit(1746507278.333:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.536049][ T30] audit: type=1326 audit(1746507278.333:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.558328][ T30] audit: type=1326 audit(1746507278.333:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.580135][ T30] audit: type=1326 audit(1746507278.333:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.604705][ T30] audit: type=1326 audit(1746507278.333:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.635472][ T30] audit: type=1326 audit(1746507278.333:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.658133][ T30] audit: type=1326 audit(1746507278.333:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18110 comm="syz.8.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1813d8e969 code=0x7ffc0000 [ 1159.989985][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 1160.004659][T18129] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1160.016649][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 1160.029675][T18129] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1161.383257][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 1161.470882][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3470'. [ 1162.713669][T18163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1162.975194][T18175] xt_l2tp: wrong L2TP version: 0 [ 1163.842396][T18174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1165.432617][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3486'. [ 1165.495815][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3486'. [ 1168.517827][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3492'. [ 1169.861442][T18231] 9pnet_fd: Insufficient options for proto=fd [ 1169.890103][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3496'. [ 1171.387568][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1171.405622][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1173.004771][T18272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1177.302553][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.309223][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.483846][T18310] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3518'. [ 1182.448533][T18355] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3532'. [ 1182.801293][T18359] xt_l2tp: wrong L2TP version: 0 [ 1183.521411][T18364] hub 2-0:1.0: USB hub found [ 1183.526677][T18364] hub 2-0:1.0: 1 port detected [ 1184.546428][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3541'. [ 1184.634804][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3541'. [ 1187.970563][T18362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1188.529099][ T5910] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1189.543756][ T5910] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1191.722300][T18415] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1191.728888][T18415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1191.922153][T18415] vhci_hcd vhci_hcd.0: Device attached [ 1192.064574][T18417] vhci_hcd: connection closed [ 1192.068567][ T36] vhci_hcd: stop threads [ 1192.172292][ T36] vhci_hcd: release socket [ 1192.207156][ T9624] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1192.233174][ T36] vhci_hcd: disconnect device [ 1192.294541][ T9624] usb 47-1: enqueue for inactive port 0 [ 1192.446274][ T9624] vhci_hcd: vhci_device speed not set [ 1193.587246][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3557'. [ 1193.604153][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3557'. [ 1194.395127][T18440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3562'. [ 1194.433116][T18440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3562'. [ 1194.663397][T18453] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1194.663397][T18453] The task syz.4.3562 (18453) triggered the difference, watch for misbehavior. [ 1196.909589][T18462] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1197.292373][T18477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1197.324929][T18476] tipc: Enabling of bearer rejected, failed to enable media [ 1198.937428][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3583'. [ 1200.250625][T18453] warn_alloc: 1 callbacks suppressed [ 1200.250642][T18453] syz.4.3562: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1200.288676][T18453] CPU: 0 UID: 0 PID: 18453 Comm: syz.4.3562 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 1200.288705][T18453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1200.288719][T18453] Call Trace: [ 1200.288726][T18453] [ 1200.288734][T18453] dump_stack_lvl+0x189/0x250 [ 1200.288790][T18453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.288817][T18453] ? __pfx__printk+0x10/0x10 [ 1200.288847][T18453] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1200.288878][T18453] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1200.288909][T18453] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1200.288942][T18453] warn_alloc+0x214/0x310 [ 1200.288969][T18453] ? __pfx_warn_alloc+0x10/0x10 [ 1200.288997][T18453] ? __get_vm_area_node+0x1c5/0x2d0 [ 1200.289025][T18453] ? __get_vm_area_node+0x25a/0x2d0 [ 1200.289062][T18453] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 1200.289105][T18453] ? __kasan_kmalloc+0x93/0xb0 [ 1200.289136][T18453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1200.289165][T18453] ? __get_vm_area_node+0x1c5/0x2d0 [ 1200.289193][T18453] ? __get_vm_area_node+0x25a/0x2d0 [ 1200.289245][T18453] __vmalloc_node_range_noprof+0x4e8/0x12c0 [ 1200.289267][T18453] ? hash_netiface_create+0x358/0xfe0 [ 1200.289291][T18453] ? do_syscall_64+0xf6/0x210 [ 1200.289347][T18453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1200.289368][T18453] ? __kasan_kmalloc_large+0x1a/0xa0 [ 1200.289400][T18453] ? rcu_is_watching+0x15/0xb0 [ 1200.289431][T18453] ? hash_netiface_create+0x358/0xfe0 [ 1200.289455][T18453] ? hash_netiface_create+0x358/0xfe0 [ 1200.289478][T18453] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 1200.289511][T18453] ? hash_netiface_create+0x358/0xfe0 [ 1200.289536][T18453] ? hash_netiface_create+0x2fe/0xfe0 [ 1200.289567][T18453] hash_netiface_create+0x358/0xfe0 [ 1200.289601][T18453] ? __nla_parse+0x40/0x60 [ 1200.289625][T18453] ? __pfx_hash_netiface_create+0x10/0x10 [ 1200.289653][T18453] ip_set_create+0xa94/0x1940 [ 1200.289680][T18453] ? ip_set_create+0x4a2/0x1940 [ 1200.289719][T18453] ? __pfx_ip_set_create+0x10/0x10 [ 1200.289783][T18453] nfnetlink_rcv_msg+0xb4a/0x1130 [ 1200.289811][T18453] ? __kernel_text_address+0xd/0x40 [ 1200.289835][T18453] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1200.289883][T18453] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1200.289963][T18453] netlink_rcv_skb+0x219/0x490 [ 1200.289985][T18453] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1200.290014][T18453] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1200.290050][T18453] ? safesetid_security_capable+0xa9/0x1a0 [ 1200.290074][T18453] ? bpf_lsm_capable+0x9/0x20 [ 1200.290099][T18453] ? security_capable+0x7e/0x2e0 [ 1200.290134][T18453] nfnetlink_rcv+0x273/0x2530 [ 1200.290167][T18453] ? __dev_queue_xmit+0x27e/0x3a70 [ 1200.290195][T18453] ? __dev_queue_xmit+0x27e/0x3a70 [ 1200.290220][T18453] ? __dev_queue_xmit+0x27e/0x3a70 [ 1200.290249][T18453] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1200.290288][T18453] ? __dev_queue_xmit+0x27e/0x3a70 [ 1200.290316][T18453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.290341][T18453] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1200.290374][T18453] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1200.290418][T18453] ? ref_tracker_free+0x63a/0x7d0 [ 1200.290437][T18453] ? __copy_skb_header+0xa7/0x550 [ 1200.290465][T18453] ? __pfx_ref_tracker_free+0x10/0x10 [ 1200.290486][T18453] ? __skb_clone+0x63/0x7a0 [ 1200.290517][T18453] ? __skb_clone+0x483/0x7a0 [ 1200.290550][T18453] ? skb_clone+0x246/0x3a0 [ 1200.290581][T18453] ? __netlink_deliver_tap+0x807/0x850 [ 1200.290602][T18453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1200.290630][T18453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1200.290650][T18453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1200.290677][T18453] netlink_unicast+0x758/0x8d0 [ 1200.290721][T18453] netlink_sendmsg+0x805/0xb30 [ 1200.290753][T18453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.290784][T18453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1200.290804][T18453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.290827][T18453] __sock_sendmsg+0x219/0x270 [ 1200.290862][T18453] ____sys_sendmsg+0x505/0x830 [ 1200.290895][T18453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.290931][T18453] ? import_iovec+0x74/0xa0 [ 1200.290962][T18453] ___sys_sendmsg+0x21f/0x2a0 [ 1200.290991][T18453] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.291056][T18453] ? __fget_files+0x2a/0x420 [ 1200.291085][T18453] ? __fget_files+0x3a0/0x420 [ 1200.291126][T18453] __x64_sys_sendmsg+0x19b/0x260 [ 1200.291153][T18453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1200.291204][T18453] ? do_syscall_64+0xba/0x210 [ 1200.291233][T18453] do_syscall_64+0xf6/0x210 [ 1200.291258][T18453] ? clear_bhb_loop+0x45/0xa0 [ 1200.291283][T18453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.291303][T18453] RIP: 0033:0x7f7878d8e969 [ 1200.291322][T18453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.291339][T18453] RSP: 002b:00007f7879bb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.291360][T18453] RAX: ffffffffffffffda RBX: 00007f7878fb6160 RCX: 00007f7878d8e969 [ 1200.291375][T18453] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 1200.291388][T18453] RBP: 00007f7878e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1200.291401][T18453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.291413][T18453] R13: 0000000000000000 R14: 00007f7878fb6160 R15: 00007ffeb7c04cc8 [ 1200.291446][T18453] [ 1200.291455][T18453] Mem-Info: [ 1200.528917][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803344b800: rx timeout, send abort [ 1200.537067][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803344b800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1201.055688][T18453] active_anon:353 inactive_anon:4898 isolated_anon:0 [ 1201.055688][T18453] active_file:14735 inactive_file:38359 isolated_file:0 [ 1201.055688][T18453] unevictable:17111 dirty:174 writeback:0 [ 1201.055688][T18453] slab_reclaimable:10935 slab_unreclaimable:103335 [ 1201.055688][T18453] mapped:30626 shmem:1432 pagetables:987 [ 1201.055688][T18453] sec_pagetables:0 bounce:0 [ 1201.055688][T18453] kernel_misc_reclaimable:0 [ 1201.055688][T18453] free:1274215 free_pcp:3866 free_cma:0 [ 1201.367657][T18453] Node 0 active_anon:1436kB inactive_anon:18448kB active_file:58868kB inactive_file:153436kB unevictable:66908kB isolated(anon):0kB isolated(file):0kB mapped:118508kB dirty:708kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11264kB pagetables:3980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1201.670272][T18453] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1201.702100][T18453] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.734806][T18453] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1201.740729][T18453] Node 0 DMA32 free:1176028kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:1404kB inactive_anon:18768kB active_file:58776kB inactive_file:153424kB unevictable:66908kB writepending:716kB present:3129332kB managed:2564600kB mlocked:0kB bounce:0kB free_pcp:6680kB local_pcp:868kB free_cma:0kB [ 1201.773322][T18453] lowmem_reserve[]: 0 0 0 0 0 [ 1201.783192][T18453] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.809977][T18453] lowmem_reserve[]: 0 0 0 0 0 [ 1201.814749][T18453] Node 1 Normal free:3901820kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12296kB local_pcp:0kB free_cma:0kB [ 1202.536674][T18453] lowmem_reserve[]: 0 0 0 0 0 [ 1202.557839][T18453] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1202.574483][T18545] 9pnet_fd: Insufficient options for proto=fd [ 1202.613952][T18453] Node 0 DMA32: 177*4kB (UME) 1160*8kB (UME) 1052*16kB (UME) 665*32kB (UME) 372*64kB (UME) 104*128kB (UME) 65*256kB (UME) 31*512kB (ME) 23*1024kB (ME) 2*2048kB (M) 252*4096kB (M) = 1177572kB [ 1202.731119][T18453] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1202.775065][T18453] Node 1 Normal: 221*4kB (U) 43*8kB (UME) 35*16kB (UME) 222*32kB (UME) 101*64kB (UME) 35*128kB (UME) 12*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 2*2048kB (U) 944*4096kB (UM) = 3901820kB [ 1202.793977][T18453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.805384][T18453] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1202.820163][T18453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.859119][T18453] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1202.875426][T18453] 71435 total pagecache pages [ 1202.885369][T18453] 0 pages in swap cache [ 1202.889630][T18453] Free swap = 124996kB [ 1202.900793][T18453] Total swap = 124996kB [ 1202.904995][T18453] 2097051 pages RAM [ 1202.909057][T18453] 0 pages HighMem/MovableOnly [ 1202.965617][T18453] 424242 pages reserved [ 1202.970090][T18453] 0 pages cma reserved [ 1208.836591][T18634] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3627'. [ 1209.606437][T18649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1209.616095][T18649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1209.625665][T18649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1209.638957][T18649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1209.647091][T18649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1209.666793][T10726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1209.674305][T10726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1209.682447][T10726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1209.691963][T10726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1209.701758][T10726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1209.770807][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1209.770824][ T30] audit: type=1326 audit(1746507328.643:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1209.865575][ T30] audit: type=1326 audit(1746507328.643:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1209.915579][ T30] audit: type=1326 audit(1746507328.643:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1209.956764][ T30] audit: type=1326 audit(1746507328.643:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1209.979390][ T30] audit: type=1326 audit(1746507328.643:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1210.001526][ T30] audit: type=1326 audit(1746507328.643:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1210.023456][ T30] audit: type=1326 audit(1746507328.643:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1210.119723][ T30] audit: type=1326 audit(1746507328.643:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1210.146234][ T30] audit: type=1326 audit(1746507328.643:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1210.168566][T18646] fuse: Bad value for 'fd' [ 1210.244746][ T30] audit: type=1326 audit(1746507328.643:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a0f8e969 code=0x7ffc0000 [ 1210.434853][T18648] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1210.442655][T18648] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1210.459419][T18648] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1210.830289][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3638'. [ 1210.863349][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3638'. [ 1210.942838][T18647] chnl_net:caif_netlink_parms(): no params data found [ 1211.235704][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.243053][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.250948][T18647] bridge_slave_0: entered allmulticast mode [ 1211.259355][T18647] bridge_slave_0: entered promiscuous mode [ 1211.270983][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.278889][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.295108][T18647] bridge_slave_1: entered allmulticast mode [ 1211.317867][T18647] bridge_slave_1: entered promiscuous mode [ 1211.524063][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805c379400: rx timeout, send abort [ 1211.533444][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c379400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1211.663396][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.861850][T18649] Bluetooth: hci3: command 0x041b tx timeout [ 1212.252789][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.881810][T18731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1213.154091][T18735] 9pnet_fd: Insufficient options for proto=fd [ 1213.221679][T18647] team0: Port device team_slave_0 added [ 1213.371301][T18647] team0: Port device team_slave_1 added [ 1213.416286][T18742] rdma_op ffff8880758291f0 conn xmit_rdma 0000000000000000 [ 1214.307797][T18649] Bluetooth: hci3: command 0x041b tx timeout [ 1214.572453][T18707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.860870][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.869542][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.896208][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.914023][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.934834][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.974944][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.215235][T18707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.254467][T18707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.329648][T18647] hsr_slave_0: entered promiscuous mode [ 1216.339489][T18649] Bluetooth: hci3: command 0x041b tx timeout [ 1216.356569][T18647] hsr_slave_1: entered promiscuous mode [ 1216.418581][T18707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.439626][T18783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1217.463081][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807cc20400: rx timeout, send abort [ 1217.473252][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807cc20400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1218.201156][T18707] bridge_slave_1: left allmulticast mode [ 1218.220200][T18707] bridge_slave_1: left promiscuous mode [ 1218.512810][T18649] Bluetooth: hci3: command 0x041b tx timeout [ 1218.519638][T18707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.555476][T18707] bridge_slave_0: left allmulticast mode [ 1218.574439][T18707] bridge_slave_0: left promiscuous mode [ 1218.753187][T18707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.004296][T18824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1220.575711][T18649] Bluetooth: hci3: command 0x041b tx timeout [ 1220.939017][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3684'. [ 1221.026894][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3684'. [ 1221.602802][T18707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.615019][T18707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.629387][T18707] bond0 (unregistering): Released all slaves [ 1221.663330][T18830] wg1: entered promiscuous mode [ 1221.679755][T18830] wg1: entered allmulticast mode [ 1221.801516][T18647] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1221.934854][T18647] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1221.990081][T18647] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1222.171744][T18647] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1222.618346][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.672393][T10726] Bluetooth: hci3: command 0x041b tx timeout [ 1223.705441][T18707] hsr_slave_0: left promiscuous mode [ 1224.635634][T18707] hsr_slave_1: left promiscuous mode [ 1224.735589][T18649] Bluetooth: hci3: command 0x041b tx timeout [ 1225.605519][T18707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.623958][T18707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.806519][T18707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.813983][T18707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.145674][T18707] veth1_macvtap: left promiscuous mode [ 1226.154244][T18707] veth0_macvtap: left promiscuous mode [ 1226.160182][T18707] veth1_vlan: left promiscuous mode [ 1226.166034][T18707] veth0_vlan: left promiscuous mode [ 1226.842617][T18907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1227.318811][T18707] team0 (unregistering): Port device team_slave_1 removed [ 1227.439524][T18707] team0 (unregistering): Port device team_slave_0 removed [ 1228.120435][T18921] ------------[ cut here ]------------ [ 1228.126457][T18921] WARNING: CPU: 0 PID: 18921 at ./include/linux/memcontrol.h:361 folio_memcg+0x1a8/0x310 [ 1228.136446][T18921] Modules linked in: [ 1228.141157][T18921] CPU: 0 UID: 0 PID: 18921 Comm: syz.7.3709 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 1228.153340][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1228.163464][T18921] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1228.168923][T18921] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cd 1a 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a9 fe ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1228.188682][T18921] RSP: 0018:ffffc90004247270 EFLAGS: 00010283 [ 1228.194785][T18921] RAX: ffffffff8204d0b7 RBX: 0000000000000000 RCX: 0000000000080000 [ 1228.203048][T18921] RDX: ffffc9000d073000 RSI: 0000000000001933 RDI: 0000000000001934 [ 1228.211357][T18921] RBP: 0000000000000000 R08: ffffea00009f6a87 R09: 1ffffd400013ed50 [ 1228.219476][T18921] R10: dffffc0000000000 R11: fffff9400013ed51 R12: ffffea00009f6ab0 [ 1228.227570][T18921] R13: dffffc0000000000 R14: ffff88805d916980 R15: 0000000000000002 [ 1228.235628][T18921] FS: 00007f92122a46c0(0000) GS:ffff8881260fd000(0000) knlGS:0000000000000000 [ 1228.244588][T18921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1228.251561][T18921] CR2: 0000000000000000 CR3: 0000000043ee8000 CR4: 00000000003526f0 [ 1228.259623][T18921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1228.267684][T18921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1228.275753][T18921] Call Trace: [ 1228.279058][T18921] [ 1228.282009][T18921] workingset_activation+0x5f/0x4a0 [ 1228.287303][T18921] ? folio_mark_accessed+0x2b1/0x4a0 [ 1228.292638][T18921] folio_mark_accessed+0x3b5/0x4a0 [ 1228.297838][T18921] kvm_release_page_clean+0x9a/0xe0 [ 1228.303082][T18921] kvm_tdp_page_fault+0x2dd/0x370 [ 1228.308282][T18921] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1228.313616][T18921] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1228.319524][T18921] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1228.325113][T18921] kvm_mmu_page_fault+0x22f/0xb70 [ 1228.330250][T18921] ? __pfx_handle_ept_violation+0x10/0x10 [ 1228.336070][T18921] vmx_handle_exit+0x103b/0x1850 [ 1228.341043][T18921] ? vcpu_run+0x34f6/0x6b20 [ 1228.345643][T18921] ? rcu_is_watching+0x15/0xb0 [ 1228.350483][T18921] vcpu_run+0x41c3/0x6b20 [ 1228.355254][T18921] ? sched_clock+0x3f/0x60 [ 1228.359805][T18921] ? vcpu_run+0x34f6/0x6b20 [ 1228.364411][T18921] ? __pfx_vcpu_run+0x10/0x10 [ 1228.369187][T18921] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1228.374962][T18921] kvm_arch_vcpu_ioctl_run+0xfca/0x1940 [ 1228.380624][T18921] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1228.386449][T18921] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1228.392509][T18921] ? rcu_is_watching+0x15/0xb0 [ 1228.397437][T18921] ? trace_contention_end+0x39/0x120 [ 1228.403808][T18921] ? look_up_lock_class+0x74/0x170 [ 1228.409054][T18921] ? register_lock_class+0x51/0x320 [ 1228.414301][T18921] ? __lock_acquire+0xaac/0xd20 [ 1228.419929][T18921] kvm_vcpu_ioctl+0x95a/0xe90 [ 1228.424682][T18921] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1228.430004][T18921] ? __lock_acquire+0xaac/0xd20 [ 1228.434918][T18921] ? __asan_memset+0x22/0x50 [ 1228.439611][T18921] ? smack_file_ioctl+0x302/0x340 [ 1228.444682][T18921] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1228.450327][T18921] ? __fget_files+0x3a0/0x420 [ 1228.455050][T18921] ? __fget_files+0x2a/0x420 [ 1228.459754][T18921] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1228.464733][T18921] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1228.470325][T18921] __se_sys_ioctl+0xf9/0x170 [ 1228.474963][T18921] do_syscall_64+0xf6/0x210 [ 1228.479544][T18921] ? clear_bhb_loop+0x45/0xa0 [ 1228.484261][T18921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.490282][T18921] RIP: 0033:0x7f921138e969 [ 1228.494728][T18921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.516503][T18921] RSP: 002b:00007f92122a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.524972][T18921] RAX: ffffffffffffffda RBX: 00007f92115b6080 RCX: 00007f921138e969 [ 1228.533354][T18921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1228.541431][T18921] RBP: 00007f9211410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1228.550142][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.558286][T18921] R13: 0000000000000000 R14: 00007f92115b6080 R15: 00007fff23a41ff8 [ 1228.566374][T18921] [ 1228.569445][T18921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1228.576751][T18921] CPU: 0 UID: 0 PID: 18921 Comm: syz.7.3709 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 1228.588928][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1228.598990][T18921] Call Trace: [ 1228.602271][T18921] [ 1228.605204][T18921] dump_stack_lvl+0x99/0x250 [ 1228.609928][T18921] ? __asan_memcpy+0x40/0x70 [ 1228.614549][T18921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1228.619771][T18921] ? __pfx__printk+0x10/0x10 [ 1228.624402][T18921] panic+0x2db/0x790 [ 1228.628353][T18921] ? __pfx_panic+0x10/0x10 [ 1228.632800][T18921] __warn+0x31b/0x4b0 [ 1228.636798][T18921] ? folio_memcg+0x1a8/0x310 [ 1228.641410][T18921] ? folio_memcg+0x1a8/0x310 [ 1228.646019][T18921] report_bug+0x2be/0x4f0 [ 1228.650360][T18921] ? folio_memcg+0x1a8/0x310 [ 1228.654973][T18921] ? folio_memcg+0x1a8/0x310 [ 1228.659591][T18921] ? folio_memcg+0x1aa/0x310 [ 1228.664284][T18921] handle_bug+0x84/0x160 [ 1228.668550][T18921] exc_invalid_op+0x1a/0x50 [ 1228.673067][T18921] asm_exc_invalid_op+0x1a/0x20 [ 1228.677925][T18921] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1228.683135][T18921] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cd 1a 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a9 fe ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1228.702772][T18921] RSP: 0018:ffffc90004247270 EFLAGS: 00010283 [ 1228.708873][T18921] RAX: ffffffff8204d0b7 RBX: 0000000000000000 RCX: 0000000000080000 [ 1228.716865][T18921] RDX: ffffc9000d073000 RSI: 0000000000001933 RDI: 0000000000001934 [ 1228.724949][T18921] RBP: 0000000000000000 R08: ffffea00009f6a87 R09: 1ffffd400013ed50 [ 1228.732935][T18921] R10: dffffc0000000000 R11: fffff9400013ed51 R12: ffffea00009f6ab0 [ 1228.740918][T18921] R13: dffffc0000000000 R14: ffff88805d916980 R15: 0000000000000002 [ 1228.748915][T18921] ? folio_memcg+0x1a7/0x310 [ 1228.753540][T18921] workingset_activation+0x5f/0x4a0 [ 1228.758782][T18921] ? folio_mark_accessed+0x2b1/0x4a0 [ 1228.764189][T18921] folio_mark_accessed+0x3b5/0x4a0 [ 1228.769346][T18921] kvm_release_page_clean+0x9a/0xe0 [ 1228.774574][T18921] kvm_tdp_page_fault+0x2dd/0x370 [ 1228.779652][T18921] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1228.784967][T18921] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1228.790817][T18921] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1228.796386][T18921] kvm_mmu_page_fault+0x22f/0xb70 [ 1228.801443][T18921] ? __pfx_handle_ept_violation+0x10/0x10 [ 1228.807184][T18921] vmx_handle_exit+0x103b/0x1850 [ 1228.812133][T18921] ? vcpu_run+0x34f6/0x6b20 [ 1228.816645][T18921] ? rcu_is_watching+0x15/0xb0 [ 1228.821433][T18921] vcpu_run+0x41c3/0x6b20 [ 1228.825780][T18921] ? sched_clock+0x3f/0x60 [ 1228.830226][T18921] ? vcpu_run+0x34f6/0x6b20 [ 1228.834794][T18921] ? __pfx_vcpu_run+0x10/0x10 [ 1228.839489][T18921] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1228.845232][T18921] kvm_arch_vcpu_ioctl_run+0xfca/0x1940 [ 1228.850797][T18921] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1228.856532][T18921] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1228.862526][T18921] ? rcu_is_watching+0x15/0xb0 [ 1228.867307][T18921] ? trace_contention_end+0x39/0x120 [ 1228.872606][T18921] ? look_up_lock_class+0x74/0x170 [ 1228.877729][T18921] ? register_lock_class+0x51/0x320 [ 1228.882942][T18921] ? __lock_acquire+0xaac/0xd20 [ 1228.887838][T18921] kvm_vcpu_ioctl+0x95a/0xe90 [ 1228.892540][T18921] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1228.897746][T18921] ? __lock_acquire+0xaac/0xd20 [ 1228.902613][T18921] ? __asan_memset+0x22/0x50 [ 1228.907214][T18921] ? smack_file_ioctl+0x302/0x340 [ 1228.912255][T18921] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1228.917651][T18921] ? __fget_files+0x3a0/0x420 [ 1228.922346][T18921] ? __fget_files+0x2a/0x420 [ 1228.926954][T18921] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1228.931904][T18921] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1228.937114][T18921] __se_sys_ioctl+0xf9/0x170 [ 1228.941718][T18921] do_syscall_64+0xf6/0x210 [ 1228.946230][T18921] ? clear_bhb_loop+0x45/0xa0 [ 1228.950934][T18921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.956833][T18921] RIP: 0033:0x7f921138e969 [ 1228.961254][T18921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.980872][T18921] RSP: 002b:00007f92122a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.989316][T18921] RAX: ffffffffffffffda RBX: 00007f92115b6080 RCX: 00007f921138e969 [ 1228.997295][T18921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1229.005268][T18921] RBP: 00007f9211410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1229.013257][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.021243][T18921] R13: 0000000000000000 R14: 00007f92115b6080 R15: 00007fff23a41ff8 [ 1229.029232][T18921] [ 1229.032599][T18921] Kernel Offset: disabled [ 1229.036926][T18921] Rebooting in 86400 seconds..