last executing test programs: 3m0.597931611s ago: executing program 0 (id=1966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r3, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) 2m58.625766495s ago: executing program 0 (id=1971): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES16=r1, @ANYRES64=r1], 0x20) connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @empty, 'gretap0\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbb8573736dcc663cc1f50bbbb15cbdbef2b7286dd698bc4d2002806fffc0100008000000000000000000000010000000003072bf7987ad8f80cbb13cd0000000000000000000000010000000000000000000000000000000411004e2000004e200000fc67000000040000000400000001"], 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e25, 0x8, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xa}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f", 0xb0, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) 2m54.916964615s ago: executing program 0 (id=1980): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {&(0x7f0000001480)="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", 0x1001}], 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff034}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 2m53.032753459s ago: executing program 0 (id=1982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x6, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) 2m50.657369181s ago: executing program 0 (id=1988): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$kcm(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x11, 0x4000, @fd_index=0x8, 0x1, 0x6, 0x1, 0x4, 0x0, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m44.243846786s ago: executing program 0 (id=2000): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x200000, @mcast2, 0x9, 0x1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.635718517s ago: executing program 32 (id=2000): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x200000, @mcast2, 0x9, 0x1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.686128571s ago: executing program 5 (id=2029): syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0002) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) 1m38.698856451s ago: executing program 5 (id=2118): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m36.1502662s ago: executing program 5 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x40040) creat(0x0, 0x0) 1m34.244886905s ago: executing program 5 (id=2127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) socket$alg(0x26, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x40, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x8000000000000001]}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 1m32.924612721s ago: executing program 5 (id=2130): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) 1m29.215752376s ago: executing program 5 (id=2138): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/16, 0x10, 0xfff9, 0x0, 0x203}}, 0x11c) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) 1m13.552715734s ago: executing program 33 (id=2138): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/16, 0x10, 0xfff9, 0x0, 0x203}}, 0x11c) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) 36.454119482s ago: executing program 1 (id=2243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) 31.851734223s ago: executing program 1 (id=2257): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 29.026789859s ago: executing program 1 (id=2249): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff034}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) 29.024817827s ago: executing program 1 (id=2253): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) epoll_create1(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 26.337808927s ago: executing program 1 (id=2256): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioprio_set$pid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, 0x0, 0x7f03) 17.858388381s ago: executing program 1 (id=2279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_batadv\x00', 0x10) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7102a00000000000000ffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) gettid() r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000340)=""/30, 0x1e}], 0x2) 9.756049094s ago: executing program 2 (id=2292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x11, 0x10ffef8, 0x15, 0xa, 0x20000050, 0xfffffffc, 0x0, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r4 = dup2(r3, r3) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r4, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 8.650750585s ago: executing program 2 (id=2293): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) syz_emit_vhci(0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 8.609748803s ago: executing program 6 (id=2294): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="ef050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 8.413104066s ago: executing program 3 (id=2295): connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x8a5b, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 6.989781033s ago: executing program 2 (id=2297): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) fdatasync(r3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x0) getdents(r4, &(0x7f0000001280)=""/4075, 0xffb) 6.129533129s ago: executing program 3 (id=2299): ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000002980)=""/4096) r0 = getuid() unshare(0x24060400) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r0, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002240)={0x6, 0x80000001, {}, {}, 0x3, 0x8}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x804000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setuid(0xee01) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002640)={&(0x7f00000023c0)="b73059c9dd813d22c5b3845c9550acc1483a233daa216deced0a4751d2b44e020d10224d733830c1de277c6098309f30deff2ea92bb296f94ce521cd2b08551eb8b300e8ba7afdf9a3dbee7f2368e6926ba34238bbde5d42d1a2198f1132c318d0cfed319f1977b91e02dfd617c348ce325d8aaf8a452163a151c9dac9a7ddd7ab1599d3f635654723f976eeb522e5cd6c16d631ba514f8556fe249d72c3701d23335cf6c0b43148c678d69eea8a30efa65ee02bd7570214cb0e332e7c1d448d8683cd0cabebf836a61ccb6fd69aca5d4fbd1cdb58", &(0x7f00000024c0)=""/86, &(0x7f0000002540)="53de9711e71608129b43de8dfed394c42d5f5baa6d2fd2b6ea6f5ff7177f", &(0x7f0000002600)="9ac55e9c810e0e6677220e79e1a22774817818a35d744aaa0a0eeb0053b1e7", 0x4, r3, 0x4}, 0x38) pread64(r2, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) sendmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x40000) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 5.505626109s ago: executing program 4 (id=2300): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) 5.493477963s ago: executing program 2 (id=2301): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069100c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [0xff000000], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x3}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1e5cced8f493c9b4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x2}, {}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x4, 0x200, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x40) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'veth0\x00', {}, 0x1ff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r7}, 0xc) 5.365842101s ago: executing program 6 (id=2302): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$notify(r1, 0x402, 0x8000003d) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.218678518s ago: executing program 3 (id=2303): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1e1a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0xffffffff) 5.008654198s ago: executing program 4 (id=2304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) read(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x3, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r4 = socket(0x84000000000e, 0x3, 0x7a) sendmsg$nl_route_sched_retired(r4, 0x0, 0xc090) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.755323415s ago: executing program 6 (id=2305): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000, 0x0, 0x48c1}, 0x30040) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8040) accept(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 3.754486939s ago: executing program 3 (id=2306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000002100010000000000000000000200"], 0x34}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdc1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.961761227s ago: executing program 4 (id=2307): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x6, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000440)=0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900, 0x1}, 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f00000002c0)=""/117, 0xffffffffffffff34) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2.891613769s ago: executing program 3 (id=2308): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 2.881493346s ago: executing program 6 (id=2309): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 2.699956455s ago: executing program 34 (id=2279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_batadv\x00', 0x10) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7102a00000000000000ffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) gettid() r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000340)=""/30, 0x1e}], 0x2) 2.683542454s ago: executing program 4 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 2.561546352s ago: executing program 3 (id=2312): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x3, 0xfd, {0x1, 0x0, 0x0, 0x3, 0x6, 0x60, 0x1, 0x4, 0x1}}) 2.45777432s ago: executing program 6 (id=2313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) writev(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x300, 0x1a2) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 2.455513681s ago: executing program 2 (id=2314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2.16315175s ago: executing program 4 (id=2315): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getxattr(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x0, 0x8000, 'lc\x00', 0x0, 0xffffffff}, 0x2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, 0x0) 1.049476582s ago: executing program 6 (id=2316): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) dup2(r2, r0) sync_file_range(r0, 0x100000000, 0x7fff, 0x0) remap_file_pages(&(0x7f0000601000/0x4000)=nil, 0x4000, 0x8, 0x8, 0x40000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)=0x3) 842.483782ms ago: executing program 2 (id=2317): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x2, 'syz0\x00', @null, 0x1, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @default, @default]}) ioctl$SIOCNRDECOBS(r0, 0x89e2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010300000000000000001f00"], 0x1c}, 0x1, 0x3000000}, 0x0) 0s ago: executing program 4 (id=2318): r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}], '\x00', 0x6b4}) r1 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x6, {0xdce4, 0x0, 0x400, 0xb40c}}) socket(0x28, 0x5, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000500)={{0xf}, 0x1, 0x0, 0xcf, {0x8, 0x80}, 0x1e, 0x6}) kernel console output (not intermixed with test programs): .549448][ T6042] ip6gretap0: entered promiscuous mode [ 114.596741][ T6042] erspan0: entered promiscuous mode [ 114.630707][ T6043] nbd3: detected capacity change from 0 to 67108884 [ 114.649568][ T6044] block nbd3: Send control failed (result -89) [ 114.697920][ T6044] block nbd3: Request send failed, requeueing [ 114.763948][ T59] block nbd3: Dead connection, failed to find a fallback [ 114.769880][ T5835] block nbd3: Receive control failed (result -32) [ 114.771756][ T59] block nbd3: shutting down sockets [ 114.785205][ T59] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.794680][ T59] Buffer I/O error on dev nbd3, logical block 0, async page read [ 114.846106][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.855537][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 114.869452][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.907186][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 115.002195][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.084535][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 115.109958][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.340523][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 115.497782][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.081022][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 116.274815][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.339644][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 116.420610][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.484690][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 116.549480][ T6056] ALSA: mixer_oss: invalid OSS volume 'u' [ 116.845835][ T6044] ldm_validate_partition_table(): Disk read failed. [ 116.939133][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.041727][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 117.211969][ T6044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.334956][ T6044] Buffer I/O error on dev nbd3, logical block 0, async page read [ 117.458696][ T6044] Dev nbd3: unable to read RDB block 0 [ 117.529557][ T6044] nbd3: unable to read partition table [ 117.692518][ T5877] ldm_validate_partition_table(): Disk read failed. [ 117.702372][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 117.738601][ T5877] Dev nbd3: unable to read RDB block 0 [ 117.772156][ T5877] nbd3: unable to read partition table [ 117.793193][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554441, location=33554441 [ 117.807046][ T5877] ldm_validate_partition_table(): Disk read failed. [ 117.832080][ T5877] Dev nbd3: unable to read RDB block 0 [ 117.844542][ T5877] nbd3: unable to read partition table [ 117.860972][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554185, location=33554185 [ 117.906781][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554440, location=33554440 [ 118.014656][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554184, location=33554184 [ 118.054245][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554439, location=33554439 [ 118.069728][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554183, location=33554183 [ 118.113461][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554291, location=33554291 [ 119.246264][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 119.281360][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554035, location=33554035 [ 119.746832][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554289, location=33554289 [ 119.822444][ T6044] blk_print_req_error: 150 callbacks suppressed [ 119.822461][ T6044] I/O error, dev nbd3, sector 67108066 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.848427][ T6082] netlink: 76 bytes leftover after parsing attributes in process `syz.1.46'. [ 119.865014][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554033, location=33554033 [ 119.988070][ T6044] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.063626][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 120.105724][ T6044] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.137863][ T6044] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.164455][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 120.180139][ T6044] I/O error, dev nbd3, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.195317][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777220, location=16777220 [ 120.211960][ T6044] I/O error, dev nbd3, sector 67107856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.226405][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776964, location=16776964 [ 120.250294][ T6044] I/O error, dev nbd3, sector 67108876 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.282873][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777219, location=16777219 [ 120.331568][ T6044] I/O error, dev nbd3, sector 67107852 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.371628][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776963, location=16776963 [ 120.400615][ T6044] I/O error, dev nbd3, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.451430][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777218, location=16777218 [ 120.475323][ T6044] I/O error, dev nbd3, sector 67107848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.550300][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776962, location=16776962 [ 120.834118][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777070, location=16777070 [ 121.707047][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776814, location=16776814 [ 122.920842][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777068, location=16777068 [ 123.003593][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776812, location=16776812 [ 123.368718][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 123.497297][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 123.568667][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388609, location=8388609 [ 123.617854][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388353, location=8388353 [ 123.802644][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388608, location=8388608 [ 123.870867][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388352, location=8388352 [ 124.521466][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388607, location=8388607 [ 124.677336][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388351, location=8388351 [ 124.688285][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388459, location=8388459 [ 124.736270][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388203, location=8388203 [ 124.752254][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388457, location=8388457 [ 124.763768][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388201, location=8388201 [ 124.774975][ T6044] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 124.957930][ T6044] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 125.761591][ T6116] sctp: [Deprecated]: syz.0.54 (pid 6116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.761591][ T6116] Use struct sctp_sack_info instead [ 130.586009][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 130.592661][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 130.607307][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 130.628558][ T6151] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.639337][ T5835] Bluetooth: hci3: Unable to find connection for big 0x14 [ 130.674737][ T6151] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.804804][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 132.320726][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 132.351001][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 132.444185][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 132.459398][ T6151] wlan0 speed is unknown, defaulting to 1000 [ 133.896221][ T30] audit: type=1326 audit(1743832893.304:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc767f8d169 code=0x7ffc0000 [ 133.969452][ T30] audit: type=1326 audit(1743832893.304:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc767f8d169 code=0x7ffc0000 [ 134.143111][ T30] audit: type=1326 audit(1743832893.334:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc767f8d169 code=0x7ffc0000 [ 134.164801][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.236789][ T30] audit: type=1326 audit(1743832893.334:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc767f8d169 code=0x7ffc0000 [ 134.339406][ T30] audit: type=1326 audit(1743832893.334:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc767f8d169 code=0x7ffc0000 [ 134.372429][ T30] audit: type=1326 audit(1743832893.334:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc767f8d169 code=0x7ffc0000 [ 134.398743][ T30] audit: type=1326 audit(1743832893.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc767f8d169 code=0x7ffc0000 [ 134.625352][ T6183] netlink: 'syz.3.73': attribute type 4 has an invalid length. [ 134.717921][ T6183] netlink: 17 bytes leftover after parsing attributes in process `syz.3.73'. [ 136.650865][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.062537][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.146032][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.050432][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.068407][ T5839] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.077646][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.211137][ T5839] usb 4-1: config 0 descriptor?? [ 138.268210][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.275055][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.594584][ T5839] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 140.091784][ T5839] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 140.171315][ T5839] usb 4-1: USB disconnect, device number 2 [ 140.359257][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 142.806551][ T6249] ======================================================= [ 142.806551][ T6249] WARNING: The mand mount option has been deprecated and [ 142.806551][ T6249] and is ignored by this kernel. Remove the mand [ 142.806551][ T6249] option from the mount to silence this warning. [ 142.806551][ T6249] ======================================================= [ 150.012730][ T6306] wlan0 speed is unknown, defaulting to 1000 [ 151.144109][ T6315] kernel read not supported for file /  (pid: 6315 comm: syz.3.109) [ 151.160663][ T30] audit: type=1800 audit(1743832910.564:9): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.109" name=200120 dev="mqueue" ino=9392 res=0 errno=0 [ 154.975831][ T6339] Zero length message leads to an empty skb [ 158.981382][ T6363] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 159.127928][ T6363] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.166630][ T6366] mmap: syz.1.121 (6366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.194298][ T6363] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.102082][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 165.067981][ T6420] wlan0 speed is unknown, defaulting to 1000 [ 165.431003][ T6427] uprobe: syz.2.142:6427 failed to unregister, leaking uprobe [ 165.435447][ T6430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.699827][ T6456] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.940694][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.071022][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 168.089287][ T6464] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.098719][ T6464] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.108237][ T6464] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.117187][ T6464] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.270463][ T6464] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.279728][ T6464] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.289163][ T6464] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.298539][ T6464] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.810437][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 168.825736][ T5882] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 168.834637][ T5882] usb 1-1: config 0 has no interface number 0 [ 168.863035][ T5882] usb 1-1: config 0 interface 85 has no altsetting 0 [ 168.896739][ T5882] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 168.926910][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.977803][ T5882] usb 1-1: Product: syz [ 169.033132][ T5882] usb 1-1: Manufacturer: syz [ 169.037835][ T5882] usb 1-1: SerialNumber: syz [ 169.103672][ T5882] usb 1-1: config 0 descriptor?? [ 169.133276][ T5882] appletouch 1-1:0.85: Could not find int-in endpoint [ 169.175430][ T5882] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 169.196099][ T5882] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 169.670841][ T6480] tipc: Started in network mode [ 169.677213][ T6480] tipc: Node identity , cluster identity 4711 [ 169.683770][ T6480] tipc: Failed to obtain node identity [ 169.691454][ T6480] tipc: Enabling of bearer rejected, failed to enable media [ 169.798112][ T5882] usb 1-1: USB disconnect, device number 2 [ 172.917363][ T30] audit: type=1800 audit(1743832932.324:10): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.163" name="/" dev="9p" ino=2 res=0 errno=0 [ 174.205688][ T6516] netlink: 'syz.2.169': attribute type 4 has an invalid length. [ 174.213874][ T6516] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.169'. [ 174.771282][ T976] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.151212][ T976] usb 5-1: config 0 has no interfaces? [ 175.177698][ T976] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.217634][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.267544][ T976] usb 5-1: Product: syz [ 175.283698][ T976] usb 5-1: Manufacturer: syz [ 175.288551][ T976] usb 5-1: SerialNumber: syz [ 175.341980][ T976] usb 5-1: config 0 descriptor?? [ 175.464356][ T30] audit: type=1800 audit(1743832934.864:11): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.172" name="/" dev="9p" ino=2 res=0 errno=0 [ 175.582598][ T30] audit: type=1804 audit(1743832934.904:12): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.172" name="/newroot/33/file0" dev="9p" ino=2 res=1 errno=0 [ 175.780883][ T6529] capability: warning: `syz.0.176' uses deprecated v2 capabilities in a way that may be insecure [ 177.129232][ T6536] xt_hashlimit: max too large, truncated to 1048576 [ 177.323731][ T6536] xt_hashlimit: overflow, rate too high: 0 [ 178.531609][ T976] usb 5-1: USB disconnect, device number 2 [ 178.765936][ T6342] syz.1.115 (6342) used greatest stack depth: 19624 bytes left [ 179.224853][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 179.240524][ T2345] pvrusb2: Failure uploading firmware1 [ 179.249878][ T2345] pvrusb2: Device initialization was not successful. [ 179.264717][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 179.321505][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 179.343297][ T47] pvrusb2: Device being rendered inoperable [ 180.806374][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.188'. [ 183.131284][ T6589] block nbd2: shutting down sockets [ 183.148648][ T6588] block nbd2: NBD_DISCONNECT [ 183.180512][ T6588] block nbd2: Send disconnect failed -22 [ 183.186464][ T6588] block nbd2: Send disconnect failed -22 [ 186.696707][ T6617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.925842][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 192.371044][ T6661] block nbd1: NBD_DISCONNECT [ 192.377796][ T6661] block nbd1: Disconnected due to user request. [ 192.389553][ T6661] block nbd1: shutting down sockets [ 196.555231][ T6692] netlink: 'syz.0.225': attribute type 4 has an invalid length. [ 199.362373][ T6711] vlan2: entered promiscuous mode [ 199.384629][ T6711] vlan2: entered allmulticast mode [ 199.410494][ T6711] hsr_slave_1: entered allmulticast mode [ 199.728078][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.735062][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.430772][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 201.026730][ T30] audit: type=1326 audit(1743832960.434:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.051028][ T30] audit: type=1326 audit(1743832960.434:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.078039][ T30] audit: type=1326 audit(1743832960.434:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.213201][ T30] audit: type=1326 audit(1743832960.434:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.329278][ T30] audit: type=1326 audit(1743832960.434:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.422480][ T30] audit: type=1326 audit(1743832960.434:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.488655][ T30] audit: type=1326 audit(1743832960.434:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.537816][ T30] audit: type=1326 audit(1743832960.434:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.583653][ T30] audit: type=1326 audit(1743832960.434:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.606403][ T30] audit: type=1326 audit(1743832960.434:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 201.641288][ T5839] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 201.738321][ T6740] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 201.867402][ T5839] usb 2-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 201.880466][ T5839] usb 2-1: config 0 has no interfaces? [ 201.887268][ T5839] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.900947][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.089004][ T5839] usb 2-1: config 0 descriptor?? [ 202.436348][ T976] usb 2-1: USB disconnect, device number 2 [ 206.014232][ T6775] syzkaller0: entered promiscuous mode [ 206.022618][ T6775] syzkaller0: entered allmulticast mode [ 207.103151][ T6789] Cannot find add_set index 0 as target [ 207.910540][ T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 208.071020][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 208.097286][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.140456][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.183842][ T47] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 208.445522][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.207481][ T47] usb 3-1: config 0 descriptor?? [ 209.441364][ T47] usb 3-1: can't set config #0, error -71 [ 209.451098][ T47] usb 3-1: USB disconnect, device number 3 [ 211.708760][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 211.709978][ T30] audit: type=1804 audit(1743832971.114:38): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.261" name="/newroot/52/file1" dev="fuse" ino=1 res=1 errno=0 [ 211.739056][ T30] audit: type=1800 audit(1743832971.114:39): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.261" name="/" dev="fuse" ino=1 res=0 errno=0 [ 211.760600][ T30] audit: type=1800 audit(1743832971.114:40): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.261" name="/" dev="fuse" ino=1 res=0 errno=0 [ 214.218945][ T6827] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 214.293660][ T6831] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 215.560519][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 215.733940][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 215.778951][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 215.801362][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.828829][ T47] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 215.840079][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.850080][ T47] usb 3-1: Product: syz [ 215.854408][ T47] usb 3-1: Manufacturer: syz [ 215.859096][ T47] usb 3-1: SerialNumber: syz [ 215.871097][ T47] usb 3-1: config 0 descriptor?? [ 215.892340][ T47] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 216.099343][ T47] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 216.122919][ T47] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 216.508247][ T6840] wlan0 speed is unknown, defaulting to 1000 [ 216.714624][ T47] usb 3-1: USB disconnect, device number 4 [ 216.900746][ T976] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 217.095760][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.158675][ T976] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.243079][ T976] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 217.509751][ T6836] Bluetooth: hci0: command 0x0406 tx timeout [ 217.777375][ T6835] Bluetooth: hci1: command 0x0406 tx timeout [ 217.784833][ T6835] Bluetooth: hci2: command 0x0406 tx timeout [ 217.792241][ T6835] Bluetooth: hci3: command 0x0406 tx timeout [ 217.799875][ T6835] Bluetooth: hci4: command 0x0406 tx timeout [ 218.221147][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.229221][ T976] usb 2-1: Product: syz [ 218.266785][ T976] usb 2-1: Manufacturer: syz [ 218.279509][ T976] usb 2-1: SerialNumber: syz [ 218.322433][ T976] usb 2-1: config 0 descriptor?? [ 219.715282][ T5879] usb 2-1: USB disconnect, device number 3 [ 221.137515][ T6879] vlan2: entered allmulticast mode [ 221.669621][ C0] Unknown status report in ack skb [ 222.088039][ T6908] process 'syz.4.287' launched './file1' with NULL argv: empty string added [ 223.404160][ T6911] wlan0 speed is unknown, defaulting to 1000 [ 224.907724][ T6931] Unknown options in mask 5 [ 228.004623][ T6971] cgroup: Unknown subsys name 'noxattr' [ 228.502369][ T6976] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.305'. [ 228.502433][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 229.776405][ T6994] tipc: Started in network mode [ 230.299683][ T6994] tipc: Node identity 7f000001, cluster identity 4711 [ 230.573653][ T6994] tipc: Enabled bearer , priority 10 [ 230.674230][ T6994] tipc: Enabled bearer , priority 0 [ 230.762408][ T7005] overlayfs: failed to clone upperpath [ 230.866998][ T7011] netlink: 'syz.3.318': attribute type 21 has an invalid length. [ 230.879238][ T7011] netlink: 'syz.3.318': attribute type 6 has an invalid length. [ 230.899983][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.318'. [ 230.930878][ T7014] netlink: 'syz.3.318': attribute type 21 has an invalid length. [ 230.955168][ T7014] netlink: 'syz.3.318': attribute type 6 has an invalid length. [ 230.970724][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 231.007831][ T7014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.318'. [ 231.184485][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 231.212744][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.352841][ T5839] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 231.464841][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.569003][ T5839] usb 5-1: Product: syz [ 231.638682][ T5839] usb 5-1: Manufacturer: syz [ 231.652320][ T7001] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 231.717832][ T5839] usb 5-1: SerialNumber: syz [ 231.729908][ T47] tipc: Node number set to 2130706433 [ 232.411502][ T5839] usb 5-1: config 0 descriptor?? [ 232.726588][ T5839] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 233.729192][ T10] hid (null): unknown global tag 0x64 [ 233.970393][ T10] hid (null): unknown global tag 0xe [ 233.975953][ T10] hid (null): global environment stack underflow [ 234.087944][ T10] hid (null): unknown global tag 0xc [ 234.093503][ T10] hid (null): bogus close delimiter [ 234.098926][ T10] hid (null): report_id 3964 is invalid [ 234.120952][ T10] hid-generic 0100:0002:3774.0002: unknown main item tag 0x4 [ 234.130651][ T10] hid-generic 0100:0002:3774.0002: unexpected long global item [ 234.139086][ T10] hid-generic 0100:0002:3774.0002: probe with driver hid-generic failed with error -22 [ 234.202154][ T5839] usb 5-1: USB disconnect, device number 3 [ 235.515029][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 235.565775][ T7072] tipc: Resetting bearer [ 236.008711][ T7076] random: crng reseeded on system resumption [ 237.713084][ T7082] ufs: You didn't specify the type of your ufs filesystem [ 237.713084][ T7082] [ 237.713084][ T7082] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 237.713084][ T7082] [ 237.713084][ T7082] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 237.744599][ T7082] ufs: ufstype=old is supported read-only [ 237.754753][ T7082] ufs: ufs_fill_super(): bad magic number [ 239.661195][ T7095] Cannot find add_set index 0 as target [ 239.829825][ T7072] tipc: Disabling bearer [ 239.995111][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 240.142126][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 240.788682][ T7107] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 240.859291][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 245.820653][ T7155] overlayfs: failed to clone upperpath [ 245.971679][ T7159] overlayfs: failed to clone upperpath [ 252.908717][ T7219] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 256.011365][ T7238] ip6t_srh: unknown srh invflags 7D00 [ 258.274528][ T7252] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 259.267857][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.284828][ T7262] batadv_slave_0: entered promiscuous mode [ 260.764296][ T7272] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 261.157201][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.169973][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.215073][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 263.860550][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 267.434057][ T30] audit: type=1326 audit(1743833479.845:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.1.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8f1c584127 code=0x0 [ 269.311080][ T7327] syz.2.404 (7327) used greatest stack depth: 19448 bytes left [ 269.864732][ T7368] siw: device registration error -23 [ 270.971408][ T7373] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 271.065711][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.333060][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 272.474282][ T7400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 272.736683][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 274.574195][ T7430] syz_tun: entered allmulticast mode [ 274.733013][ T7426] syz_tun: left allmulticast mode [ 276.330731][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 277.311098][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 277.341542][ T5878] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 277.424758][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.470852][ T5878] usb 3-1: Product: syz [ 277.475973][ T5878] usb 3-1: Manufacturer: syz [ 277.503700][ T5878] usb 3-1: SerialNumber: syz [ 277.532045][ T5878] usb 3-1: config 0 descriptor?? [ 277.574598][ T5878] gspca_main: sq930x-2.14.0 probing 2770:930c [ 277.748590][ T5878] gspca_sq930x: reg_r 001f failed -71 [ 277.785741][ T5878] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 277.865367][ T5878] usb 3-1: USB disconnect, device number 5 [ 278.708149][ T7462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.762445][ T7462] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 278.838500][ T7462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.847339][ T7462] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 278.870900][ T7462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.883890][ T7462] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 278.900797][ T7462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.917235][ T7462] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 279.000020][ T7462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.028664][ T7462] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 279.138751][ T30] audit: type=1326 audit(1743833491.545:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.231065][ T30] audit: type=1326 audit(1743833491.545:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.360392][ T30] audit: type=1326 audit(1743833491.545:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.518067][ T30] audit: type=1326 audit(1743833491.545:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.542734][ T976] wlan0 speed is unknown, defaulting to 1000 [ 279.555654][ T976] syz2: Port: 1 Link DOWN [ 279.583372][ T30] audit: type=1326 audit(1743833491.545:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.615147][ T30] audit: type=1326 audit(1743833491.545:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.665401][ T30] audit: type=1326 audit(1743833491.545:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.693662][ T30] audit: type=1326 audit(1743833491.545:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 279.720904][ T30] audit: type=1326 audit(1743833491.545:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 281.188280][ T7503] wlan0 speed is unknown, defaulting to 1000 [ 284.881032][ T7536] tipc: Started in network mode [ 284.886574][ T7536] tipc: Node identity ffffffff, cluster identity 4711 [ 284.893979][ T7536] tipc: Node number set to 4294967295 [ 285.045461][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 285.091822][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 285.467728][ T7548] futex_wake_op: syz.3.475 tries to shift op by 144; fix this program [ 289.980623][ T5839] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 290.162630][ T5839] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 290.178124][ T5839] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 290.188320][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.380224][ T5839] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 291.211910][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.409498][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 291.430388][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 291.547130][ T47] usb 2-1: USB disconnect, device number 4 [ 292.195664][ T7632] Cannot find add_set index 0 as target [ 295.246094][ T7670] xt_hashlimit: max too large, truncated to 1048576 [ 297.774862][ T5839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 298.860360][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 298.868808][ T5839] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 298.880172][ T5839] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.890874][ T5839] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 298.900358][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.908548][ T5839] usb 5-1: Product: syz [ 298.912903][ T5839] usb 5-1: Manufacturer: syz [ 298.917530][ T5839] usb 5-1: SerialNumber: syz [ 299.348808][ T5839] usb 5-1: config 0 descriptor?? [ 299.364084][ T5839] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 299.579928][ T5839] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 299.598449][ T5839] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 302.135465][ T47] usb 5-1: USB disconnect, device number 4 [ 304.642549][ T7720] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 305.219634][ T7720] kvm: pic: non byte read [ 305.227043][ T7720] kvm: pic: level sensitive irq not supported [ 305.228158][ T7720] kvm: pic: non byte read [ 311.197125][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 312.240491][ T30] audit: type=1800 audit(1743833524.615:51): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.547" name="file1" dev="tmpfs" ino=636 res=0 errno=0 [ 312.574166][ T7788] wlan0 speed is unknown, defaulting to 1000 [ 312.719497][ T30] audit: type=1326 audit(1743833525.125:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 312.796451][ T30] audit: type=1326 audit(1743833525.155:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 312.837738][ T30] audit: type=1326 audit(1743833525.155:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 312.911591][ T30] audit: type=1326 audit(1743833525.155:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 312.977712][ T30] audit: type=1326 audit(1743833525.155:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 313.151691][ T30] audit: type=1326 audit(1743833525.155:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 313.307383][ T30] audit: type=1326 audit(1743833525.165:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 313.526050][ T30] audit: type=1326 audit(1743833525.165:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 313.724795][ T30] audit: type=1326 audit(1743833525.165:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 315.890948][ T7824] wlan0 speed is unknown, defaulting to 1000 [ 316.216425][ T7832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.460828][ T7842] netlink: 72 bytes leftover after parsing attributes in process `syz.4.564'. [ 322.586689][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.597519][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.544008][ T7922] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 325.900631][ T5839] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 325.913998][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.107051][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 326.114356][ T5839] usb 5-1: config 5 has an invalid interface number: 72 but max is 0 [ 326.125191][ T5839] usb 5-1: config 5 has no interface number 0 [ 326.135372][ T5839] usb 5-1: config 5 interface 72 has no altsetting 0 [ 326.157897][ T5839] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 326.167922][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.189569][ T5839] usb 5-1: Product: syz [ 326.198481][ T5839] usb 5-1: Manufacturer: syz [ 326.211892][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 326.221369][ T5839] usb 5-1: SerialNumber: syz [ 326.250469][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 326.325543][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 326.654485][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 326.820516][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 326.877961][ T5839] ftdi_sio 5-1:5.72: FTDI USB Serial Device converter detected [ 326.970800][ T5839] usb 5-1: Detected FT4232H [ 327.013202][ T5839] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 327.035966][ T5839] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 327.049731][ T5839] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 327.116996][ T5839] usb 5-1: USB disconnect, device number 5 [ 327.142936][ T5839] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 327.161118][ T5839] ftdi_sio 5-1:5.72: device disconnected [ 329.115066][ T7959] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.126046][ T7959] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.137133][ T7959] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.146526][ T7959] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.218895][ T7959] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 333.717328][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.738827][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.610'. [ 334.976378][ T8010] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 334.985659][ T8010] bond0: (slave bond_slave_0): Releasing backup interface [ 336.541232][ T8023] fuse: Bad value for 'fd' [ 336.672548][ T8029] smc: net device bond0 applied user defined pnetid SYZ0 [ 336.732245][ T8030] smc: net device bond0 erased user defined pnetid SYZ0 [ 338.582974][ T8043] xt_hashlimit: size too large, truncated to 1048576 [ 340.354520][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.628'. [ 341.270966][ T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 341.530481][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 341.539820][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 342.110441][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 342.293625][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.315444][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.345961][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.385939][ T47] usb 2-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 342.398417][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.572367][ T47] usb 2-1: config 0 descriptor?? [ 343.860998][ T47] usbhid 2-1:0.0: can't add hid device: -71 [ 343.867810][ T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 344.039054][ T47] usb 2-1: USB disconnect, device number 5 [ 344.632506][ T8127] xt_hashlimit: max too large, truncated to 1048576 [ 353.837121][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.658'. [ 353.949442][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 355.717653][ T8217] wlan0 speed is unknown, defaulting to 1000 [ 361.221192][ T5839] IPVS: starting estimator thread 0... [ 361.340942][ T8267] IPVS: using max 28 ests per chain, 67200 per kthread [ 362.439352][ T8252] syz.1.673 (8252): drop_caches: 2 [ 362.497116][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 362.497143][ T30] audit: type=1326 audit(1743833574.885:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 362.610398][ T30] audit: type=1326 audit(1743833574.895:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 362.824187][ T30] audit: type=1326 audit(1743833574.895:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 363.050663][ T30] audit: type=1326 audit(1743833574.895:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 363.099414][ T30] audit: type=1326 audit(1743833574.895:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 364.040390][ T30] audit: type=1326 audit(1743833574.895:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 364.070525][ T30] audit: type=1326 audit(1743833574.895:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 364.110348][ T30] audit: type=1326 audit(1743833574.895:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 364.618688][ T30] audit: type=1326 audit(1743833574.895:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 364.643178][ T30] audit: type=1326 audit(1743833574.895:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 365.884097][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 368.873157][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 369.328608][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 369.367869][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.885875][ T8381] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 370.901406][ T8381] Bluetooth: MGMT ver 1.23 [ 372.297589][ T8398] bridge0: port 3(syz_tun) entered blocking state [ 372.306084][ T8398] bridge0: port 3(syz_tun) entered disabled state [ 372.372310][ T8398] syz_tun: entered allmulticast mode [ 372.453809][ T8398] syz_tun: entered promiscuous mode [ 372.477120][ T8398] bridge0: port 3(syz_tun) entered blocking state [ 372.484389][ T8398] bridge0: port 3(syz_tun) entered forwarding state [ 372.932159][ T5832] Bluetooth: hci0: command tx timeout [ 373.770478][ T8409] netlink: 550 bytes leftover after parsing attributes in process `syz.0.722'. [ 375.455906][ T8423] netlink: 'syz.4.728': attribute type 7 has an invalid length. [ 375.464693][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 377.675935][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 377.675997][ T30] audit: type=1326 audit(1743833590.055:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x0 [ 378.839757][ T8450] CUSE: unknown device info "ÿ" [ 378.845008][ T8450] CUSE: zero length info key specified [ 379.943945][ T8452] IPVS: Error connecting to the multicast addr [ 381.199189][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 381.209471][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 381.218691][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 382.047295][ T8478] bridge0: entered promiscuous mode [ 382.054412][ T8478] vlan2: entered promiscuous mode [ 383.010544][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 383.182649][ T10] usb 3-1: config 0 has no interfaces? [ 383.188560][ T10] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 383.218816][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.283643][ T10] usb 3-1: config 0 descriptor?? [ 383.594526][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 384.029905][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.084033][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.260428][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 384.386071][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 384.410305][ T5878] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 384.419417][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.461551][ T5878] usb 2-1: config 0 descriptor?? [ 384.491537][ T5878] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 384.564509][ T10] usb 3-1: USB disconnect, device number 6 [ 384.605074][ T8520] geneve2: entered promiscuous mode [ 384.674355][ T5186] bcm5974 2-1:0.0: could not read from device [ 384.691323][ T8520] netlink: 156 bytes leftover after parsing attributes in process `syz.3.762'. [ 384.715759][ T5878] bcm5974 2-1:0.0: could not read from device [ 384.746580][ T5186] bcm5974 2-1:0.0: could not read from device [ 384.797807][ T5878] input: failed to attach handler mousedev to device input7, error: -5 [ 384.827390][ T5186] bcm5974 2-1:0.0: could not read from device [ 384.840619][ T5878] usb 2-1: USB disconnect, device number 6 [ 391.393713][ T8576] evm: overlay not supported [ 391.772090][ T8592] sctp: [Deprecated]: syz.0.782 (pid 8592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.772090][ T8592] Use struct sctp_sack_info instead [ 393.634850][ T8602] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 394.821877][ T30] audit: type=1326 audit(1743833607.235:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 394.871075][ T30] audit: type=1326 audit(1743833607.265:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 395.101202][ T30] audit: type=1326 audit(1743833607.265:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 395.126696][ T30] audit: type=1326 audit(1743833607.265:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 395.208352][ T8615] vxcan1: tx drop: invalid da for name 0x000000000003ffff [ 396.030584][ T30] audit: type=1326 audit(1743833607.265:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 396.060598][ T30] audit: type=1326 audit(1743833607.265:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 396.083587][ T30] audit: type=1326 audit(1743833607.265:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 396.106174][ T30] audit: type=1326 audit(1743833607.265:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 396.394614][ T8616] syz.0.788 uses obsolete (PF_INET,SOCK_PACKET) [ 396.402175][ T30] audit: type=1326 audit(1743833607.265:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 396.426925][ T30] audit: type=1326 audit(1743833607.265:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 396.617322][ T5839] Process accounting resumed [ 396.652135][ T5839] Process accounting resumed [ 397.957253][ T8626] Process accounting resumed [ 398.542562][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 402.102130][ T8683] gtp0: entered allmulticast mode [ 406.570935][ T8742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.655408][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 407.998023][ T8772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.056089][ T8771] fuse: Bad value for 'fd' [ 409.686458][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 409.980340][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 410.001136][ T47] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 410.009562][ T47] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 410.034352][ T47] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 410.045802][ T47] usb 2-1: config 250 has no interface number 0 [ 410.053433][ T47] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 410.111719][ T47] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 410.140344][ T47] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 410.160517][ T47] usb 2-1: config 250 interface 228 has no altsetting 0 [ 410.174569][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 410.200310][ T47] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 410.252206][ T47] usb 2-1: Product: syz [ 410.256468][ T47] usb 2-1: SerialNumber: syz [ 410.276841][ T47] hub 2-1:250.228: bad descriptor, ignoring hub [ 410.296862][ T47] hub 2-1:250.228: probe with driver hub failed with error -5 [ 410.523365][ T47] usb 2-1: USB disconnect, device number 7 [ 412.692281][ T8817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.826207][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'. [ 415.231993][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 415.232014][ T30] audit: type=1326 audit(1743833627.645:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 415.308946][ T30] audit: type=1326 audit(1743833627.645:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 415.336591][ T30] audit: type=1326 audit(1743833627.645:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 415.520149][ T30] audit: type=1326 audit(1743833627.645:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 415.550346][ T30] audit: type=1326 audit(1743833627.645:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 415.595949][ T30] audit: type=1326 audit(1743833627.645:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 415.623173][ T30] audit: type=1326 audit(1743833627.645:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 416.350563][ T30] audit: type=1326 audit(1743833627.645:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 416.381369][ T30] audit: type=1326 audit(1743833627.645:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 416.480573][ T30] audit: type=1326 audit(1743833627.645:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 418.090952][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 418.220324][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 418.819029][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 421.025585][ T976] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 421.360833][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 422.601127][ T976] usb 3-1: unable to read config index 0 descriptor/all [ 422.612023][ T976] usb 3-1: can't read configurations, error -71 [ 423.812022][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 423.812042][ T30] audit: type=1326 audit(1743833636.225:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cdb78d169 code=0x0 [ 430.182038][ T30] audit: type=1326 audit(1743833642.585:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 430.205380][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 430.221423][ T30] audit: type=1326 audit(1743833642.615:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 430.458089][ T30] audit: type=1326 audit(1743833642.615:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 430.481872][ T30] audit: type=1326 audit(1743833642.615:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 430.503525][ T30] audit: type=1326 audit(1743833642.615:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 430.527859][ T30] audit: type=1326 audit(1743833642.615:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 431.213609][ T30] audit: type=1326 audit(1743833642.615:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 431.236624][ T30] audit: type=1326 audit(1743833642.615:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 431.279503][ T30] audit: type=1326 audit(1743833642.615:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 431.340405][ T30] audit: type=1326 audit(1743833642.625:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8966 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f8f1c58d169 code=0x7ffc0000 [ 437.036045][ T9030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.315695][ T9046] capability: warning: `syz.3.923' uses 32-bit capabilities (legacy support in use) [ 439.368847][ T9043] wlan0 speed is unknown, defaulting to 1000 [ 439.434721][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 441.415400][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 441.415421][ T30] audit: type=1326 audit(1743833653.825:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9065 comm="syz.0.930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc767f8d169 code=0x0 [ 442.381925][ T9081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.139960][ T9082] wlan0 speed is unknown, defaulting to 1000 [ 445.499024][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.332933][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.363281][ T9114] netlink: 'syz.0.941': attribute type 12 has an invalid length. [ 451.563040][ T9171] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 451.571394][ T9171] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 451.581031][ T9171] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 451.588859][ T9171] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 454.068761][ T30] audit: type=1804 audit(1743833666.475:256): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.959" name="file0" dev="tmpfs" ino=1164 res=1 errno=0 [ 454.177945][ T9176] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 454.204505][ T9176] ref_ctr increment failed for inode: 0x48c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888028270000 [ 454.278805][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.306188][ T9194] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 454.319410][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.352811][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.416820][ T9196] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 454.474009][ T9194] veth5: entered promiscuous mode [ 454.504531][ T9194] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 454.541605][ T976] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 454.670702][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 454.683066][ T9204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.693947][ T9204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 454.730271][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 455.272356][ T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.308418][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.480778][ T976] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.516564][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.544836][ T976] usb 2-1: Product: syz [ 455.550121][ T976] usb 2-1: Manufacturer: syz [ 455.565474][ T976] usb 2-1: SerialNumber: syz [ 455.966548][ T976] usb 2-1: 0:2 : does not exist [ 456.509141][ T976] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 456.512620][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.969'. [ 456.558932][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.969'. [ 456.630309][ T976] usb 2-1: USB disconnect, device number 8 [ 457.050845][ T9190] udevd[9190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.471344][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 457.508993][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'. [ 459.900347][ T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 460.150870][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 460.159915][ T976] usb 2-1: config 0 has no interfaces? [ 460.180729][ T976] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 460.189911][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.227328][ T976] usb 2-1: config 0 descriptor?? [ 461.054812][ T5839] usb 2-1: USB disconnect, device number 9 [ 461.336189][ T9276] overlayfs: failed to clone upperpath [ 467.831316][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 470.485681][ T9374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.904291][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 473.574353][ T9407] syz.0.1026 (9407) used greatest stack depth: 19304 bytes left [ 476.070455][ T5839] IPVS: starting estimator thread 0... [ 476.190919][ T9434] IPVS: using max 26 ests per chain, 62400 per kthread [ 478.809449][ T9452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 481.061432][ T9472] netfs: Couldn't get user pages (rc=-14) [ 481.910950][ T9479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.297960][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1053'. [ 486.425696][ T9516] xt_TCPMSS: Only works on TCP SYN packets [ 490.925776][ T9580] kvm: kvm [9574]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 491.981719][ T9595] pim6reg: entered allmulticast mode [ 491.998218][ T9595] pim6reg: left allmulticast mode [ 495.006472][ T9622] fuse: Bad value for 'fd' [ 506.285240][ T9698] wlan0 speed is unknown, defaulting to 1000 [ 506.931514][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.938331][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.171084][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 507.544963][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 507.975792][ T9720] overlayfs: failed to clone upperpath [ 515.283767][ T9770] xt_CONNSECMARK: invalid mode: 0 [ 516.373874][ T9788] wlan0 speed is unknown, defaulting to 1000 [ 516.467400][ T9791] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 516.494478][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.705724][ T9791] CIFS mount error: No usable UNC path provided in device string! [ 516.705724][ T9791] [ 516.720341][ T9791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 516.829449][ T9795] 9pnet_fd: Insufficient options for proto=fd [ 518.842723][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 518.877677][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 519.300460][ T976] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 519.564067][ T9828] futex_wake_op: syz.3.1135 tries to shift op by 32; fix this program [ 519.595397][ T976] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 519.766810][ T976] usb 3-1: config 150 has no interface number 0 [ 519.788618][ T976] usb 3-1: config 150 interface 204 has no altsetting 0 [ 519.797487][ T976] usb 3-1: config 150 interface 1 has no altsetting 0 [ 520.599391][ T976] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 520.621681][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.629761][ T976] usb 3-1: Product: syz [ 520.635174][ T976] usb 3-1: Manufacturer: syz [ 520.639924][ T976] usb 3-1: SerialNumber: syz [ 524.006450][ T976] xr_serial 3-1:150.204: xr_serial converter detected [ 524.204549][ T976] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 524.821132][ T976] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 524.850605][ T976] usb 3-1: USB disconnect, device number 9 [ 524.911809][ T976] xr_serial 3-1:150.204: device disconnected [ 529.285856][ T9896] Invalid ELF header type: 0 != 1 [ 531.300126][ T9916] wg1 speed is unknown, defaulting to 1000 [ 531.306245][ T9916] wg1 speed is unknown, defaulting to 1000 [ 531.314730][ T9916] wg1 speed is unknown, defaulting to 1000 [ 531.333080][ T9916] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 531.386837][ T9916] wg1 speed is unknown, defaulting to 1000 [ 531.395170][ T9916] wg1 speed is unknown, defaulting to 1000 [ 531.407231][ T9916] wg1 speed is unknown, defaulting to 1000 [ 531.419635][ T9916] wg1 speed is unknown, defaulting to 1000 [ 531.430531][ T9916] wg1 speed is unknown, defaulting to 1000 [ 535.895661][ T9944] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 535.903675][ T9944] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1169'. [ 537.235097][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1173'. [ 538.274950][ T9951] vlan2: entered promiscuous mode [ 538.311794][ T9951] team0: entered promiscuous mode [ 538.338214][ T9951] team_slave_0: entered promiscuous mode [ 538.358557][ T9951] team_slave_1: entered promiscuous mode [ 538.731844][ T9968] xt_nat: multiple ranges no longer supported [ 544.324569][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 544.550593][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 544.697017][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 545.051049][ T5839] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 545.936018][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 545.966158][ T5839] usb 3-1: Product: syz [ 545.975569][ T5839] usb 3-1: Manufacturer: syz [ 546.006085][ T5839] usb 3-1: SerialNumber: syz [ 546.034783][ T5839] usb 3-1: config 0 descriptor?? [ 546.327248][ T5839] usb 3-1: can't set config #0, error -71 [ 547.306787][T10044] xt_CONNSECMARK: invalid mode: 0 [ 547.333220][ T30] audit: type=1326 audit(1743833759.745:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f1c58d169 code=0x0 [ 547.411965][ T5839] usb 3-1: USB disconnect, device number 10 [ 548.285466][T10048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.231674][T10048] bond0: (slave rose0): Enslaving as an active interface with an up link [ 550.477219][T10067] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1207'. [ 554.229970][T10100] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1218'. [ 556.717806][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 563.394217][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 565.790936][T10208] program syz.2.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.161447][T10226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 568.220339][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1253'. [ 568.239260][T10226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 568.353270][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.359716][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.455733][T10226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 568.468174][ T30] audit: type=1326 audit(1743833780.805:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 569.248623][ T30] audit: type=1326 audit(1743833780.915:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 569.374585][ T30] audit: type=1326 audit(1743833780.915:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 569.496566][ T30] audit: type=1326 audit(1743833781.695:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 569.719835][ T30] audit: type=1326 audit(1743833781.695:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 569.750242][ T30] audit: type=1326 audit(1743833781.695:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 570.531815][ T30] audit: type=1326 audit(1743833781.695:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 570.568940][ T30] audit: type=1326 audit(1743833781.695:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 571.444447][ T30] audit: type=1326 audit(1743833781.695:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 571.467052][ T30] audit: type=1326 audit(1743833781.695:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10228 comm="syz.4.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 582.087659][T10340] xt_CT: No such helper "netbios-ns" [ 583.370101][T10352] virtio-fs: tag <(null)> not found [ 583.380417][T10348] futex_wake_op: syz.3.1284 tries to shift op by 32; fix this program [ 583.904871][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 583.904892][ T30] audit: type=1326 audit(1743833796.295:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 584.099372][T10354] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 584.154697][ T30] audit: type=1326 audit(1743833796.295:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 584.797643][ T976] IPVS: starting estimator thread 0... [ 584.820669][ T30] audit: type=1326 audit(1743833796.295:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 584.902219][ T30] audit: type=1326 audit(1743833796.295:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 584.924816][ T30] audit: type=1326 audit(1743833796.295:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 585.100464][T10361] IPVS: using max 28 ests per chain, 67200 per kthread [ 585.140305][ T30] audit: type=1326 audit(1743833796.295:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 585.233558][ T30] audit: type=1326 audit(1743833796.295:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 585.284272][ T30] audit: type=1326 audit(1743833796.295:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 585.317592][ T30] audit: type=1326 audit(1743833796.295:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 585.347635][ T30] audit: type=1326 audit(1743833796.295:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10353 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f978d169 code=0x7ffc0000 [ 587.375780][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'. [ 587.385105][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'. [ 587.577007][T10385] bond0: entered promiscuous mode [ 587.666526][T10385] bond_slave_0: entered promiscuous mode [ 587.777852][T10385] bond_slave_1: entered promiscuous mode [ 587.796057][T10391] new mount options do not match the existing superblock, will be ignored [ 588.540075][T10385] bond0: left promiscuous mode [ 588.545857][T10385] bond_slave_0: left promiscuous mode [ 588.566424][T10385] bond_slave_1: left promiscuous mode [ 592.023543][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 594.231255][T10452] netlink: 'syz.4.1315': attribute type 13 has an invalid length. [ 595.031455][T10452] gretap0: refused to change device tx_queue_len [ 595.037916][T10452] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 606.757401][T10552] wlan0 speed is unknown, defaulting to 1000 [ 606.857075][T10553] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 606.865273][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1343'. [ 606.980530][T10553] team0: Port device geneve0 added [ 607.074422][T10553] CUSE: unknown device info "ÿ" [ 607.079520][T10553] CUSE: zero length info key specified [ 607.233338][T10552] wg1 speed is unknown, defaulting to 1000 [ 609.954037][T10582] wlan0 speed is unknown, defaulting to 1000 [ 610.477304][T10582] wg1 speed is unknown, defaulting to 1000 [ 610.888963][T10591] team_slave_0: entered promiscuous mode [ 610.895586][T10591] team_slave_1: entered promiscuous mode [ 610.902160][T10591] vlan2: entered promiscuous mode [ 610.907336][T10591] team0: entered promiscuous mode [ 610.994261][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 610.994284][ T30] audit: type=1107 audit(1743833823.395:295): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 617.420868][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 618.268932][T10655] Falling back ldisc for ttyprintk. [ 624.637856][T10706] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1383'. [ 629.906202][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.922857][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.120422][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 637.877434][T10818] futex_wake_op: syz.2.1413 tries to shift op by -1; fix this program [ 638.760626][T10821] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 639.073677][T10835] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 644.735899][T10893] syz.2.1429 (10893): drop_caches: 2 [ 644.983294][T10889] team0: Port device team_slave_1 removed [ 655.395423][T10983] syz.4.1455 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 655.559226][ T30] audit: type=1326 audit(1743834320.959:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.2.1456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cdb78d169 code=0x0 [ 655.560013][T10973] kvm: kvm [10972]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8d5 [ 655.629624][T10989] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 655.799630][T10992] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 655.967616][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1458'. [ 656.009191][T10996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.029152][T10995] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 656.042521][T10995] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 656.057431][T10995] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 656.067099][T10995] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 656.112393][T10995] bond1: (slave geneve2): making interface the new active one [ 656.132078][T10995] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 659.647287][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 659.656397][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 659.665553][T11008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1461'. [ 662.451685][T11045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.566646][ T30] audit: type=1326 audit(1743834329.369:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 664.676879][ T30] audit: type=1326 audit(1743834329.369:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 664.710762][ T30] audit: type=1326 audit(1743834329.369:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 664.732980][ T30] audit: type=1326 audit(1743834329.369:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 664.804455][ T30] audit: type=1326 audit(1743834329.369:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 665.076219][T11075] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[11075] [ 665.828212][ T30] audit: type=1326 audit(1743834329.369:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 665.832159][T11077] xt_CONNSECMARK: invalid mode: 0 [ 665.854798][ T30] audit: type=1326 audit(1743834329.369:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 666.049032][ T30] audit: type=1326 audit(1743834329.369:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 666.322990][ T30] audit: type=1326 audit(1743834329.369:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 666.920011][ T30] audit: type=1326 audit(1743834329.369:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdb78d169 code=0x7ffc0000 [ 668.057605][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1487'. [ 669.237750][T11101] fuse: root generation should be zero [ 669.459419][T11117] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 669.566644][T11120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.666201][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.675947][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.685325][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.694510][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.703717][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.713623][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.723092][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.732406][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 670.745219][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 675.721453][T11165] new mount options do not match the existing superblock, will be ignored [ 677.249650][T11182] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.258945][T11182] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.267849][T11182] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.276893][T11182] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.795237][T11182] team0: Port device vxlan0 added [ 677.845516][T11189] __nla_validate_parse: 45 callbacks suppressed [ 677.845533][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 679.090736][ T10] IPVS: starting estimator thread 0... [ 679.220358][T11203] IPVS: using max 26 ests per chain, 62400 per kthread [ 682.590657][ T976] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 682.857129][ T976] usb 3-1: config 0 has no interfaces? [ 682.865837][ T976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 682.878524][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.923362][ T976] usb 3-1: Product: syz [ 682.960801][ T976] usb 3-1: Manufacturer: syz [ 682.980626][ T976] usb 3-1: SerialNumber: syz [ 683.563328][ T976] usb 3-1: config 0 descriptor?? [ 684.041162][ T976] usb 3-1: USB disconnect, device number 11 [ 685.263112][T11292] block nbd1: NBD_DISCONNECT [ 685.267886][T11292] block nbd1: Disconnected due to user request. [ 685.274267][T11292] block nbd1: shutting down sockets [ 691.224028][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.230966][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.738266][T11361] overlayfs: failed to clone upperpath [ 700.839727][T11422] befs: (nullb0): No write support. Marking filesystem read-only [ 700.850470][T11422] befs: (nullb0): invalid magic header [ 702.849138][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 702.859920][T11444] wlan0 speed is unknown, defaulting to 1000 [ 703.833725][T11461] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 703.841629][T11461] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 703.849917][T11461] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 703.857825][T11461] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 707.284300][T11486] siw: device registration error -23 [ 713.739612][T11543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 718.834649][T11578] overlayfs: failed to clone upperpath [ 723.821830][T11626] MTD: Couldn't look up '': -22 [ 725.957035][T11639] xt_CONNSECMARK: invalid mode: 0 [ 727.141142][T11651] netlink: 'syz.1.1641': attribute type 21 has an invalid length. [ 728.918713][T11665] Process accounting resumed [ 735.774127][T11717] wlan0 speed is unknown, defaulting to 1000 [ 735.786253][T11717] wg1 speed is unknown, defaulting to 1000 [ 748.563770][T11797] bond1: entered promiscuous mode [ 748.568888][T11797] bond1: entered allmulticast mode [ 748.574657][T11797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.844734][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.860694][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.075309][T11854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.216969][T11865] netlink: 'syz.0.1694': attribute type 2 has an invalid length. [ 756.479141][T11871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.540206][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.907555][T11915] batman_adv: batadv0: Adding interface: dummy0 [ 761.940641][T11915] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.133399][T11915] batman_adv: batadv0: Interface activated: dummy0 [ 763.393029][T11923] batadv0: mtu less than device minimum [ 763.401372][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.413996][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.426354][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.438651][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.451130][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.463616][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.476313][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.488601][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.501273][T11923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.863277][T11948] geneve2: entered promiscuous mode [ 770.521449][T11975] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 772.310222][T11991] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1727'. [ 773.875491][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1730'. [ 773.884956][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1730'. [ 774.768168][T12002] overlayfs: failed to clone upperpath [ 780.021395][T12035] netlink: 'syz.2.1739': attribute type 2 has an invalid length. [ 780.073490][T12035] ÿ: entered promiscuous mode [ 793.249122][T12128] nfs: Unknown parameter '' [ 797.244091][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1777'. [ 797.256647][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1777'. [ 798.461451][T12173] net_ratelimit: 10 callbacks suppressed [ 798.461469][T12173] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 801.063608][T12204] netlink: 'syz.4.1792': attribute type 13 has an invalid length. [ 801.298598][T12204] gretap0: refused to change device tx_queue_len [ 801.318459][T12204] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 804.541934][T12222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 806.435637][T12254] fuse: Bad value for 'group_id' [ 806.577149][T12256] overlayfs: failed to clone upperpath [ 806.588512][T12254] fuse: Bad value for 'group_id' [ 812.880635][ T976] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 814.271614][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.561234][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.080244][ T976] usb 2-1: device descriptor read/64, error -110 [ 818.498014][ T976] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 818.530492][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 820.947239][T12370] kvm: kvm [12369]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd0 [ 821.103154][T12370] kvm: kvm [12369]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x843 [ 821.386450][T12370] kvm: kvm [12369]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 821.407764][T12370] kvm: kvm [12369]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x835 [ 821.418650][T12370] kvm: kvm [12369]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x868 [ 824.656048][T12403] sp0: Synchronizing with TNC [ 835.081429][T12461] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 836.000180][T12477] syz.4.1860 (12477) used greatest stack depth: 19056 bytes left [ 838.155472][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 838.155497][ T30] audit: type=1326 audit(2000000155.580:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.504790][ T30] audit: type=1326 audit(2000000155.580:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.527675][ T30] audit: type=1326 audit(2000000155.580:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.719362][ T30] audit: type=1326 audit(2000000155.580:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.823552][ T30] audit: type=1326 audit(2000000155.580:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.823691][ T30] audit: type=1326 audit(2000000155.580:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.823795][ T30] audit: type=1326 audit(2000000155.580:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.823897][ T30] audit: type=1326 audit(2000000155.580:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.824001][ T30] audit: type=1326 audit(2000000155.580:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 838.824102][ T30] audit: type=1326 audit(2000000155.580:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ab8d169 code=0x7ffc0000 [ 841.853588][T12530] 8021q: VLANs not supported on caif0 [ 843.507488][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 843.531465][T12547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'. [ 848.053277][T12577] loop6: detected capacity change from 0 to 524287999 [ 848.136178][ C1] blk_print_req_error: 18 callbacks suppressed [ 848.136202][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 848.222124][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 848.396478][ T53] loop: Write error at byte offset 1, length 4096. [ 848.445439][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 848.454998][ C1] buffer_io_error: 138 callbacks suppressed [ 848.455016][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 849.505955][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 849.505976][ T30] audit: type=1326 audit(2000000166.930:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.4.1891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14f978d169 code=0x0 [ 850.327299][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 854.437439][T12618] xt_recent: Unsupported userspace flags (000000de) [ 857.133101][T12635] ceph: No mds server is up or the cluster is laggy [ 859.677126][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1920'. [ 860.032289][T12673] libceph: resolve '4' (ret=-3): failed [ 862.381712][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'. [ 862.621383][T12681] hub 1-0:1.0: USB hub found [ 862.640399][T12681] hub 1-0:1.0: 1 port detected [ 863.995449][T12712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'. [ 873.370317][T12788] trusted_key: syz.2.1941 sent an empty control message without MSG_MORE. [ 874.406885][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1942'. [ 874.418545][T12802] Invalid ELF header magic: != ELF [ 875.544497][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.550984][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.779479][T12805] kvm: kvm [12804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x718e [ 876.815597][T12805] kvm: kvm [12804]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x790e [ 879.293680][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 879.313504][T12851] bond_slave_1: entered promiscuous mode [ 879.320509][T12851] vxlan0: entered promiscuous mode [ 880.316033][T12851] macvtap1: entered promiscuous mode [ 880.324778][T12851] bond0: entered promiscuous mode [ 880.332555][T12851] macvtap1: entered allmulticast mode [ 880.338367][T12851] bond0: entered allmulticast mode [ 881.102289][T12851] bond_slave_1: entered allmulticast mode [ 881.870537][T12851] team0: entered allmulticast mode [ 881.875835][T12851] team_slave_0: entered allmulticast mode [ 881.890614][T12851] team_slave_1: entered allmulticast mode [ 881.896563][T12851] vxlan0: entered allmulticast mode [ 881.904811][T12851] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 883.329933][T12876] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 887.308123][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1975'. [ 887.317586][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1975'. [ 887.433620][T12904] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 887.443096][T12904] dummy0: entered promiscuous mode [ 887.449240][T12904] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 887.458653][T12904] Cannot create hsr debugfs directory [ 889.724360][T12924] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 890.729281][T12931] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 892.579466][T12947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1983'. [ 892.658214][T12952] CIFS: VFS: Malformed UNC in devname [ 893.089046][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 898.899927][T12982] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 898.969905][T12992] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 899.104826][T12992] bond2: entered promiscuous mode [ 899.133859][T12992] bond2: entered allmulticast mode [ 900.307940][T13010] kvm: kvm [13004]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005) [ 901.936897][T13020] Malformed UNC in devname [ 901.936897][T13020] [ 901.943924][T13020] CIFS: VFS: Malformed UNC in devname [ 906.935052][T13060] xt_CT: No such helper "netbios-ns" [ 909.061511][T13070] ceph: No mds server is up or the cluster is laggy [ 909.087642][ T976] libceph: connect (1)[c::]:6789 error -101 [ 909.110887][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 909.950449][T13093] Invalid ELF header type: 0 != 1 [ 917.840570][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.932682][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.941811][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.950319][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.970638][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 917.986334][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 918.707047][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 918.729748][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 918.751687][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 918.815546][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 919.414411][T13146] wlan0 speed is unknown, defaulting to 1000 [ 919.460683][T13146] wg1 speed is unknown, defaulting to 1000 [ 921.241795][ T5832] Bluetooth: hci5: command tx timeout [ 922.036083][T13146] chnl_net:caif_netlink_parms(): no params data found [ 923.044466][T13191] 8021q: VLANs not supported on caif0 [ 923.612909][ T5832] Bluetooth: hci5: command tx timeout [ 925.620913][ T5832] Bluetooth: hci5: command tx timeout [ 925.807488][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.828713][T13146] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.851556][T13146] bridge_slave_0: entered allmulticast mode [ 925.872296][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 926.032953][T13146] bridge_slave_0: entered promiscuous mode [ 926.051839][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.059310][T13146] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.077283][T13146] bridge_slave_1: entered allmulticast mode [ 926.100930][T13146] bridge_slave_1: entered promiscuous mode [ 927.147007][T13146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.433458][T13230] geneve2: entered allmulticast mode [ 927.459719][T13146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.378547][ T5832] Bluetooth: hci5: command tx timeout [ 929.046956][T13146] team0: Port device team_slave_0 added [ 929.079074][T13146] team0: Port device team_slave_1 added [ 930.267912][T13146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.334212][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.652167][T13146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.838267][T13146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.879126][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.046745][T13146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.232201][T13146] hsr_slave_0: entered promiscuous mode [ 931.261917][T13146] hsr_slave_1: entered promiscuous mode [ 931.268371][T13146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.268168][T13146] Cannot create hsr debugfs directory [ 934.266129][ T30] audit: type=1804 audit(2000000251.690:348): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2065" name="/newroot/373/file0" dev="tmpfs" ino=1990 res=1 errno=0 [ 937.001072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.012256][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.558624][T13146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 937.589091][T13311] tty tty2: ldisc open failed (-12), clearing slot 1 [ 937.717332][T13146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 937.971031][T13146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 938.752939][T13146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 941.307820][T13146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.664021][T13146] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.711959][T13146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 941.722770][T13146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 941.858057][T12314] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.865419][T12314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.896287][T13343] /dev/nullb0: Can't lookup blockdev [ 941.927226][T12314] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.934616][T12314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.998253][T13341] IPVS: starting estimator thread 0... [ 942.005357][T13350] IPVS: set_ctl: invalid protocol: 60 172.30.4.4:20001 [ 942.247064][T13354] IPVS: using max 30 ests per chain, 72000 per kthread [ 946.357257][T13146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.800463][T13392] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2088'. [ 949.117314][T13410] sctp: [Deprecated]: syz.3.2090 (pid 13410) Use of int in max_burst socket option deprecated. [ 949.117314][T13410] Use struct sctp_assoc_value instead [ 951.783633][T13146] veth0_vlan: entered promiscuous mode [ 951.807496][T13146] veth1_vlan: entered promiscuous mode [ 955.227144][T13146] veth0_macvtap: entered promiscuous mode [ 955.305170][T13146] veth1_macvtap: entered promiscuous mode [ 955.386608][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.429879][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.440904][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.458057][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.663835][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.711301][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.010660][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.133602][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.366342][T13146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.503734][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.531983][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.558320][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.822508][T13457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2101'. [ 957.080031][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.154322][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.190219][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.211094][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.240457][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.260126][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.294929][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.317351][T13146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.342957][T13146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.360795][T13146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.369750][T13146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.389208][T13146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.171599][ T9573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.179520][ T9573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.260193][T13485] Bluetooth: MGMT ver 1.23 [ 959.907065][T12305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.150611][T12305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.452773][T13512] wlan0 speed is unknown, defaulting to 1000 [ 963.486688][T13512] wg1 speed is unknown, defaulting to 1000 [ 968.169184][T13537] Cannot find add_set index 0 as target [ 972.637555][T13562] No such timeout policy "syz0" [ 982.421540][T13627] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 988.234498][T13670] Invalid ELF header magic: != ELF [ 993.219681][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.237151][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.249082][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.262677][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.287007][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 996.346490][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.421291][ T5836] Bluetooth: hci0: command tx timeout [ 996.505571][T13713] wlan0 speed is unknown, defaulting to 1000 [ 996.739817][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.750205][T13713] wg1 speed is unknown, defaulting to 1000 [ 998.489761][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.496334][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.503385][ T5836] Bluetooth: hci0: command tx timeout [ 1000.581888][ T5836] Bluetooth: hci0: command tx timeout [ 1000.930612][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.801395][ T5832] Bluetooth: hci0: command tx timeout [ 1003.958489][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.149140][T13713] chnl_net:caif_netlink_parms(): no params data found [ 1007.674081][ T36] bridge_slave_1: left allmulticast mode [ 1007.724696][ T36] bridge_slave_1: left promiscuous mode [ 1007.915456][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.808832][ T36] bridge_slave_0: left allmulticast mode [ 1009.069617][T13829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'. [ 1009.321514][ T36] bridge_slave_0: left promiscuous mode [ 1009.374604][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.676124][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2210'. [ 1010.880233][T13841] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1010.975718][T13849] xt_SECMARK: invalid mode: 2 [ 1011.490411][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2211'. [ 1014.847140][T13876] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1015.380972][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.406534][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.433587][ T36] bond0 (unregistering): Released all slaves [ 1016.050358][T13855] team_slave_0: entered promiscuous mode [ 1016.056160][T13855] team_slave_1: entered promiscuous mode [ 1016.062034][T13855] vxlan0: entered promiscuous mode [ 1016.095645][T13855] macvtap1: entered promiscuous mode [ 1016.108867][T13855] team0: entered promiscuous mode [ 1016.127012][T13855] geneve0: entered promiscuous mode [ 1016.137935][T13855] macvtap1: entered allmulticast mode [ 1016.147538][T13855] team0: entered allmulticast mode [ 1016.159360][T13855] team_slave_0: entered allmulticast mode [ 1016.168605][T13855] team_slave_1: entered allmulticast mode [ 1016.178001][T13855] geneve0: entered allmulticast mode [ 1016.195323][T13855] vxlan0: entered allmulticast mode [ 1016.206983][T13855] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1016.227330][T13856] team0: left allmulticast mode [ 1016.246939][T13856] team_slave_0: left allmulticast mode [ 1016.256807][T13856] team_slave_1: left allmulticast mode [ 1016.271279][T13856] geneve0: left allmulticast mode [ 1016.279124][T13856] vxlan0: left allmulticast mode [ 1016.288768][T13856] team0: left promiscuous mode [ 1016.327063][T13856] geneve0: left promiscuous mode [ 1016.333521][T13856] team_slave_0: left promiscuous mode [ 1016.339367][T13856] team_slave_1: left promiscuous mode [ 1016.345180][T13856] vxlan0: left promiscuous mode [ 1016.361053][T13881] batadv_slave_0: left promiscuous mode [ 1016.369025][T13881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.166194][T13881] batadv0: mtu less than device minimum [ 1017.198205][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.210605][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.222664][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.234673][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.246734][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.258917][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.271062][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.282936][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.294925][T13881] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1019.912220][T13916] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1020.362352][T13915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.430489][T13915] batadv_slave_1: entered promiscuous mode [ 1020.444169][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 1020.641881][T13713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.657939][T13713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.674170][T13713] bridge_slave_0: entered allmulticast mode [ 1021.471987][T13713] bridge_slave_0: entered promiscuous mode [ 1021.630545][T13713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.720764][T13713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.737524][T13713] bridge_slave_1: entered allmulticast mode [ 1021.756865][T13713] bridge_slave_1: entered promiscuous mode [ 1021.995069][T13931] trusted_key: encrypted_key: master key parameter 'if#€Â"R‹_' is invalid [ 1022.006027][T13931] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 1022.361111][T13713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.406014][T13713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.559574][ T36] hsr_slave_0: left promiscuous mode [ 1022.579335][ T36] hsr_slave_1: left promiscuous mode [ 1022.597457][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.637537][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.688792][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.719071][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.843220][ T36] veth1_macvtap: left promiscuous mode [ 1023.539663][ T36] veth0_macvtap: left promiscuous mode [ 1023.561647][ T36] veth1_vlan: left promiscuous mode [ 1023.567491][ T36] veth0_vlan: left promiscuous mode [ 1023.875169][T13959] No such timeout policy "syz0" [ 1026.182251][T13976] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1027.939701][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1028.003999][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1029.588430][T13713] team0: Port device team_slave_0 added [ 1029.613795][T13713] team0: Port device team_slave_1 added [ 1029.725068][T13713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.734268][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.761220][T13713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.774598][T13713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.782294][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.816611][T13713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.927091][T13713] hsr_slave_0: entered promiscuous mode [ 1029.935215][T13713] hsr_slave_1: entered promiscuous mode [ 1029.942181][T13713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1029.949828][T13713] Cannot create hsr debugfs directory [ 1030.164918][T13713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.175815][T13713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.188680][T13713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1030.198889][T13713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1030.288288][T13713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.314540][T13713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.334021][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.341226][T12313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.376156][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.383393][T12313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.456980][T13713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.611805][T13713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.819150][T13713] veth0_vlan: entered promiscuous mode [ 1030.833804][T13713] veth1_vlan: entered promiscuous mode [ 1030.867043][T13713] veth0_macvtap: entered promiscuous mode [ 1030.877544][T13713] veth1_macvtap: entered promiscuous mode [ 1030.896291][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.907212][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.917595][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.928463][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.938751][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.954238][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.964435][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.975359][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.987394][T13713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.007439][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.018478][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.029426][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.040889][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.050994][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.068563][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.078510][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.089304][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.102158][T13713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.118598][T13713] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.127830][T13713] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.137983][T13713] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.149012][T13713] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.238127][T12314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.248630][T12314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.286467][T12314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.295019][T12314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.035978][T14033] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1033.535673][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2259'. [ 1037.502802][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 1040.405801][T14097] use of bytesused == 0 is deprecated and will be removed in the future, [ 1040.428530][T14097] use the actual size instead. [ 1040.562026][T14093] kAFS: unable to lookup cell '.,' [ 1041.117560][T14110] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1044.993066][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2276'. [ 1054.926903][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2294'. [ 1054.994812][T14206] vlan2: entered promiscuous mode [ 1055.012337][T14206] batadv0: entered promiscuous mode [ 1057.546316][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1057.733979][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1057.975522][T14230] netlink: 'syz.2.2301': attribute type 12 has an invalid length. [ 1058.162438][T14234] ip6t_rpfilter: unknown options [ 1059.865773][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.872384][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.263940][T14253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2306'. [ 1063.416462][T14283] [ 1063.418859][T14283] ====================================================== [ 1063.425974][T14283] WARNING: possible circular locking dependency detected [ 1063.433121][T14283] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 1063.439992][T14283] ------------------------------------------------------ [ 1063.447480][T14283] syz.2.2317/14283 is trying to acquire lock: [ 1063.453761][T14283] ffffffff90241bd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x39a/0xff0 [ 1063.463048][T14283] [ 1063.463048][T14283] but task is already holding lock: [ 1063.470434][T14283] ffff888143ade470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x194/0xff0 [ 1063.479799][T14283] [ 1063.479799][T14283] which lock already depends on the new lock. [ 1063.479799][T14283] [ 1063.490312][T14283] [ 1063.490312][T14283] the existing dependency chain (in reverse order) is: [ 1063.499368][T14283] [ 1063.499368][T14283] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1063.507475][T14283] lock_acquire+0x116/0x2f0 [ 1063.512523][T14283] _raw_spin_lock_bh+0x35/0x50 [ 1063.517817][T14283] nr_rt_ioctl+0x194/0xff0 [ 1063.522847][T14283] sock_do_ioctl+0x15a/0x490 [ 1063.527968][T14283] sock_ioctl+0x644/0x900 [ 1063.532961][T14283] __se_sys_ioctl+0xf1/0x160 [ 1063.538192][T14283] do_syscall_64+0xf3/0x230 [ 1063.543344][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.549775][T14283] [ 1063.549775][T14283] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1063.557613][T14283] lock_acquire+0x116/0x2f0 [ 1063.562659][T14283] _raw_spin_lock_bh+0x35/0x50 [ 1063.568069][T14283] nr_rt_device_down+0xb5/0x7b0 [ 1063.573477][T14283] nr_device_event+0x134/0x150 [ 1063.579047][T14283] notifier_call_chain+0x1a5/0x3f0 [ 1063.584869][T14283] dev_close_many+0x33e/0x4c0 [ 1063.590170][T14283] netif_close+0x1c2/0x2d0 [ 1063.595160][T14283] dev_close+0x137/0x280 [ 1063.599941][T14283] bpq_device_event+0x36a/0x620 [ 1063.605338][T14283] notifier_call_chain+0x1a5/0x3f0 [ 1063.611076][T14283] dev_close_many+0x33e/0x4c0 [ 1063.616291][T14283] netif_close+0x1c2/0x2d0 [ 1063.621410][T14283] dev_close+0x137/0x280 [ 1063.626186][T14283] bond_setup_by_slave+0x64/0x420 [ 1063.632002][T14283] bond_enslave+0x7fb/0x38d0 [ 1063.637211][T14283] bond_do_ioctl+0x7c9/0xc00 [ 1063.642431][T14283] dev_ifsioc+0x97a/0x1010 [ 1063.647396][T14283] dev_ioctl+0x819/0x1380 [ 1063.652264][T14283] sock_do_ioctl+0x233/0x490 [ 1063.657387][T14283] sock_ioctl+0x644/0x900 [ 1063.662269][T14283] __se_sys_ioctl+0xf1/0x160 [ 1063.667514][T14283] do_syscall_64+0xf3/0x230 [ 1063.672652][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.679215][T14283] [ 1063.679215][T14283] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1063.687162][T14283] validate_chain+0xa69/0x24e0 [ 1063.692472][T14283] __lock_acquire+0xad5/0xd80 [ 1063.697680][T14283] lock_acquire+0x116/0x2f0 [ 1063.702715][T14283] _raw_spin_lock_bh+0x35/0x50 [ 1063.708016][T14283] nr_rt_ioctl+0x39a/0xff0 [ 1063.713051][T14283] sock_do_ioctl+0x15a/0x490 [ 1063.718182][T14283] sock_ioctl+0x644/0x900 [ 1063.723043][T14283] __se_sys_ioctl+0xf1/0x160 [ 1063.728248][T14283] do_syscall_64+0xf3/0x230 [ 1063.733285][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.739704][T14283] [ 1063.739704][T14283] other info that might help us debug this: [ 1063.739704][T14283] [ 1063.749958][T14283] Chain exists of: [ 1063.749958][T14283] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1063.749958][T14283] [ 1063.763798][T14283] Possible unsafe locking scenario: [ 1063.763798][T14283] [ 1063.771292][T14283] CPU0 CPU1 [ 1063.776668][T14283] ---- ---- [ 1063.782039][T14283] lock(&nr_node->node_lock); [ 1063.786882][T14283] lock(nr_node_list_lock); [ 1063.794040][T14283] lock(&nr_node->node_lock); [ 1063.801348][T14283] lock(nr_neigh_list_lock); [ 1063.806048][T14283] [ 1063.806048][T14283] *** DEADLOCK *** [ 1063.806048][T14283] [ 1063.814308][T14283] 2 locks held by syz.2.2317/14283: [ 1063.819517][T14283] #0: ffffffff90241c38 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x102/0xff0 [ 1063.829119][T14283] #1: ffff888143ade470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x194/0xff0 [ 1063.838884][T14283] [ 1063.838884][T14283] stack backtrace: [ 1063.844794][T14283] CPU: 1 UID: 0 PID: 14283 Comm: syz.2.2317 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 1063.844817][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1063.844829][T14283] Call Trace: [ 1063.844837][T14283] [ 1063.844845][T14283] dump_stack_lvl+0x241/0x360 [ 1063.844874][T14283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1063.844897][T14283] ? __pfx__printk+0x10/0x10 [ 1063.844919][T14283] ? print_lock+0x171/0x1a0 [ 1063.844939][T14283] print_circular_bug+0x2e1/0x300 [ 1063.844962][T14283] check_noncircular+0x142/0x160 [ 1063.844985][T14283] validate_chain+0xa69/0x24e0 [ 1063.845007][T14283] ? __pfx_stack_trace_save+0x10/0x10 [ 1063.845040][T14283] __lock_acquire+0xad5/0xd80 [ 1063.845060][T14283] lock_acquire+0x116/0x2f0 [ 1063.845074][T14283] ? nr_rt_ioctl+0x39a/0xff0 [ 1063.845092][T14283] ? nr_rt_ioctl+0x39a/0xff0 [ 1063.845107][T14283] _raw_spin_lock_bh+0x35/0x50 [ 1063.845123][T14283] ? nr_rt_ioctl+0x39a/0xff0 [ 1063.845137][T14283] nr_rt_ioctl+0x39a/0xff0 [ 1063.845158][T14283] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1063.845172][T14283] ? lockdep_hardirqs_on+0x9d/0x150 [ 1063.845194][T14283] ? cap_capable+0x139/0x450 [ 1063.845221][T14283] ? trace_event_raw_event_cap_capable+0x140/0x2a0 [ 1063.845249][T14283] sock_do_ioctl+0x15a/0x490 [ 1063.845273][T14283] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1063.845301][T14283] ? __lock_acquire+0xad5/0xd80 [ 1063.845318][T14283] ? __asan_memset+0x23/0x50 [ 1063.845338][T14283] ? smack_file_ioctl+0x2a7/0x3b0 [ 1063.845361][T14283] sock_ioctl+0x644/0x900 [ 1063.845382][T14283] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.845401][T14283] ? __fget_files+0x2a/0x420 [ 1063.845421][T14283] ? __fget_files+0x2a/0x420 [ 1063.845442][T14283] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.845461][T14283] __se_sys_ioctl+0xf1/0x160 [ 1063.845486][T14283] do_syscall_64+0xf3/0x230 [ 1063.845506][T14283] ? clear_bhb_loop+0x45/0xa0 [ 1063.845525][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.845542][T14283] RIP: 0033:0x7f6cdb78d169 [ 1063.845563][T14283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.845579][T14283] RSP: 002b:00007f6cdc6c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.845597][T14283] RAX: ffffffffffffffda RBX: 00007f6cdb9a5fa0 RCX: 00007f6cdb78d169 [ 1063.845610][T14283] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1063.845621][T14283] RBP: 00007f6cdb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.845632][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.845641][T14283] R13: 0000000000000000 R14: 00007f6cdb9a5fa0 R15: 00007ffc7ffc4208 [ 1063.845660][T14283] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1064.421579][ T5836] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1064.441581][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1064.454222][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1064.541566][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 1064.564190][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1064.575213][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1064.591409][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1065.119050][T14285] wlan0 speed is unknown, defaulting to 1000 [ 1065.135815][T14285] wg1 speed is unknown, defaulting to 1000 [ 1065.269550][T14285] chnl_net:caif_netlink_parms(): no params data found [ 1065.849145][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.882001][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.909034][T14285] bridge_slave_0: entered allmulticast mode [ 1065.988056][T14285] bridge_slave_0: entered promiscuous mode [ 1066.015216][T14285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.030087][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.039091][T14285] bridge_slave_1: entered allmulticast mode [ 1066.046628][T14285] bridge_slave_1: entered promiscuous mode [ 1066.061508][T14269] bridge0: port 3(syz_tun) entered disabled state [ 1066.088734][T14269] syz_tun (unregistering): left allmulticast mode [ 1066.098103][T14269] syz_tun (unregistering): left promiscuous mode [ 1066.106164][T14269] bridge0: port 3(syz_tun) entered disabled state [ 1066.168805][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.185073][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.209820][T14285] team0: Port device team_slave_0 added [ 1066.217466][T14285] team0: Port device team_slave_1 added [ 1066.312672][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.319756][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.355621][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.368647][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.376527][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.403515][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.437681][T14285] hsr_slave_0: entered promiscuous mode [ 1066.444255][T14285] hsr_slave_1: entered promiscuous mode [ 1066.450834][T14285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.458445][T14285] Cannot create hsr debugfs directory [ 1066.554718][T14285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1066.565111][T14285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1066.576150][T14285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1066.588127][T14285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1066.648789][T14285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.668284][T14285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.679790][T12305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.686940][T12305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.702926][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.710097][T12313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.830241][T14285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.967299][T14285] veth0_vlan: entered promiscuous mode [ 1066.979056][T14285] veth1_vlan: entered promiscuous mode [ 1067.004811][T14285] veth0_macvtap: entered promiscuous mode [ 1067.014311][T14285] veth1_macvtap: entered promiscuous mode [ 1067.028828][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.039410][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.049496][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.061933][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.072441][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.083262][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.093834][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.104393][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.114464][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.125284][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.136906][T14285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.149049][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.160150][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.170332][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.181560][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.191636][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.202373][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.212702][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.223481][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.233969][T14285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.244821][T14285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.257949][T14285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.269210][T14285] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.278626][T14285] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.288211][T14285] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.297299][T14285] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.327339][T14285] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 1067.353271][T12305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.355184][T14285] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 1067.366474][T12305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.380569][T14290] Bluetooth: hci6: command tx timeout [ 1067.396434][T12305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.404997][T12305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50