last executing test programs: 34.805267638s ago: executing program 4 (id=2972): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x24b6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) accept(0xffffffffffffffff, 0x0, 0x0) 29.900719014s ago: executing program 4 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000875b0d20d8130100220e010203010902120001000000000904000000efbd7f00905ad847c3208dd48b29ca90e97281f2f0e377c12b86cbaf87d727d531307deb5b980ed3105c8b884cdd87ccb7e6b2cb83e8496b6e5d9aba385f50573988818a1c7ed03f23aa978196c80357d931db76e504fa1efe4ded54389f352815addc94b3c1efb4981334575d791ab3fd5fd6b82e"], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x275a, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r6, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000a80)={r8, 0x9, 0x6}, 0x8) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x34}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r10}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa}, {0x2, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 29.181496265s ago: executing program 4 (id=2988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r8, 0x80047453, &(0x7f0000000080)) r9 = syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d520887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x1006) 27.735271736s ago: executing program 4 (id=2990): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'vlan1\x00', {'geneve1\x00'}, 0x5}) 27.514604288s ago: executing program 4 (id=2993): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[]}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) (fail_nth: 4) 27.10802546s ago: executing program 4 (id=2995): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x4}]}) syz_io_uring_setup(0xfb, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(r2, r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000000c0)="4b0003000000", 0x6) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, 0x0, 0x0) open(0x0, 0x400, 0x86) 5.451443338s ago: executing program 1 (id=3067): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback={0x0, 0xffff888101827518}}}) (fail_nth: 4) 4.600419075s ago: executing program 1 (id=3072): sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x100) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xe, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0xfffffffffffffffe}) syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xff, 0x200800) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_io_uring_setup(0x5fa8, &(0x7f0000000200)={0x0, 0xbf83, 0x800, 0x2, 0x1f9}, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x9, 0x4}}, './file0\x00'}) write$UHID_INPUT(r3, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000001380)) syz_open_dev$MSR(&(0x7f00000013c0), 0x7ff, 0x0) io_uring_enter(r2, 0x51ac, 0xdc1a, 0x1, &(0x7f0000001400)={[0x100000000]}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000001440), 0x8000000000000000, 0x488800) openat$cgroup_devices(r3, &(0x7f0000001480)='devices.deny\x00', 0x2, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000014c0)=""/244) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000015c0), r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001640)={0x4, &(0x7f0000001600)=[{0x0, 0x3, 0x4, 0x7fff}, {0x9, 0x6, 0x4, 0x1}, {0x5, 0x4, 0x9, 0x70000000}, {0x4, 0x4, 0x0, 0x80}]}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x1, 0xafbe, 0x4, 0xb, 0x2000, r3, 0xfffff800, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000001c00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001780)={0x430, 0x3f4, 0x100, 0x70bd2d, 0x25dfdbfb, {0x10, 0x2, 0x1e, [0xffff, 0x4, 0x5ee, 0x5, 0xb, 0x3, 0x0, 0x5, 0x0, 0xdc91, 0xffffffff, 0xff, 0x0, 0x0, 0x72c, 0xfffffffd, 0x20f7, 0x0, 0x8, 0xffff, 0xfffffff4, 0x7, 0x8, 0x3, 0x6, 0x4, 0x28b8, 0x8, 0x6, 0x1, 0x7, 0x7, 0x8, 0x42b4, 0x4, 0x7f, 0x1, 0x0, 0xfffffffd, 0x8, 0x2, 0x2, 0x1, 0xff, 0x401, 0x10000, 0x8000, 0x8, 0xd8, 0x81, 0x7, 0x3, 0x3, 0x2000000, 0x1, 0x1, 0x9, 0x4, 0x12, 0xbe4, 0xfffffff7, 0x8, 0x7, 0xd1], [0x80, 0x50, 0x2, 0xf, 0x1, 0x800, 0x9, 0x6, 0x200, 0x1, 0x35, 0x2, 0x0, 0x101, 0x3, 0x8, 0x8000, 0x4, 0x7fff, 0x2, 0x8, 0x59b, 0x0, 0xb6f4, 0x8001, 0x3, 0x10, 0x4, 0x3, 0x6, 0x7, 0x6, 0xef, 0x5, 0x0, 0xfffffff8, 0x9, 0x2, 0x19d, 0x3, 0x8, 0x7fffffff, 0x3, 0x7, 0x7b6, 0x9, 0x0, 0x2, 0x2, 0x4, 0x100, 0x3, 0xfffffffc, 0x6, 0x8, 0x4, 0x4, 0x5, 0x1, 0x3ff, 0x8000, 0x1, 0x3, 0x3], [0x1c, 0x1, 0xb78d, 0xc63, 0x1, 0x9, 0x4, 0xff, 0x4, 0x8, 0x8001, 0x6, 0x8, 0x556, 0x8, 0x94, 0x8, 0x4, 0x6, 0x86f, 0x724, 0x10000, 0xa3f, 0x6, 0x5, 0x1, 0x5, 0x0, 0x8, 0x5e, 0x8, 0xf, 0x7, 0x80, 0xfffffffd, 0x7, 0x1, 0xfffffffd, 0x30000000, 0x3ff, 0x800, 0x1, 0x8000, 0xfffffffb, 0x7, 0x4, 0x51, 0x1ff, 0xc58, 0x7, 0x5, 0x10000, 0xc5, 0xf, 0x80000000, 0x4, 0xe, 0x7, 0x3, 0x401, 0x1, 0x3, 0x5, 0x4], [0x7fff, 0x3, 0x7, 0x20000, 0x5, 0x4, 0x5, 0xfffffffb, 0xd, 0x6, 0x7, 0x677015b8, 0x3, 0x0, 0x9, 0x64c7, 0x6, 0x3, 0xced, 0x0, 0x0, 0x2973, 0xf9, 0x80000001, 0x7, 0x4, 0x6, 0xffff, 0x1, 0xf, 0x7ff, 0x200, 0x7, 0x6, 0xff, 0x7fffffff, 0x6, 0x8000, 0x9, 0x0, 0x1, 0x2, 0x6, 0x3, 0x7, 0x1, 0x9, 0x2, 0x4, 0xd, 0xd, 0x8000, 0x101, 0x5, 0x6, 0xfffffffc, 0x6, 0x2, 0x4, 0x7, 0xfffffffc, 0x0, 0xd, 0x6], 0x10, ['\x00', '/dev/cpu/#/msr\x00']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000001c40)=""/4096) socket$unix(0x1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000002c80)={0x5, 0x0, &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x9c, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x50, 0xa8, @random="8d0d6ae412f2d70f1ee41242fbc362c458047374902b057690ff5f3b1adf83d7fa7c0ce4e4bfdbdcfb1c31a19d242602dea4d928269e1f1ba10cacd2ecf4e24333c383220c295bc403dd0e0a"}]}, 0x9c}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e80), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003100)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002ec0)={0x1f0, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @remote, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8073}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76b7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3da}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x44}, 0x40013) 3.950539046s ago: executing program 3 (id=3075): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 3.839784399s ago: executing program 1 (id=3076): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x605a, &(0x7f0000000100)={0x0, 0x7212, 0x2000, 0x0, 0x36e}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_enter(r0, 0x301, 0x4389, 0x69, &(0x7f00000001c0)={[0x1]}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x73) timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0x20, 0x20, 0x33}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0x4f0f017, 0x3e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x92020007) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001140)={0x1, 'veth0_macvtap\x00', {}, 0x9}) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.719132165s ago: executing program 3 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000875b0d20d8130100220e010203010902120001000000000904000000efbd7f00905ad847c3208dd48b29ca90e97281f2f0e377c12b86cbaf87d727d531307deb5b980ed3105c8b884cdd87ccb7e6b2cb83e8496b6e5d9aba385f50573988818a1c7ed03f23aa978196c80357d931db76e504fa1efe4ded54389f352815addc94b3c1efb4981334575d791ab3fd5fd6b82e"], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.state\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000a80)={r7, 0x9, 0x6}, 0x8) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x3c}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r9}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.607033342s ago: executing program 0 (id=3080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x6, 0xb, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="7c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a00"], 0x7c}}, 0x0) 3.344875297s ago: executing program 2 (id=3082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x14) accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 3.265830547s ago: executing program 0 (id=3083): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x4298}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8508cc22971522e99c1ca18b36e601b0a344fd87e058500b010000000000140003006d6163736563300700000000000000000a0076283459b66ff358a5b0b84552e5dfe20c5f5f5db2a905fa7de95892b139e94a6f0f2d7621b0ddc00d819d1fba0a827463d8550b23d8d19769102621341a2753a577c63e7ced9c94d3daf4af140ac6b7e5b7f6c2a4b8bed7e05722f47e3c48e3a7ce78aaa9b7f1cd4e9774315b80633fdf07d0254148330dde"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009058402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) close(r0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x200, 0x200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_usb_connect$cdc_ncm(0x1, 0x91, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0xb0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "3bf95b"}, {0x5, 0x24, 0x0, 0x83c}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x8, 0xa, 0x7}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xcf, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x90824831af63b8aa, 0x8, 0xe, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x40, 0x29, 0xd}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x3, 0x4, 0x6, 0x0, 0x5}, 0x43, &(0x7f0000000400)={0x5, 0xf, 0x43, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x3, 0x0, 0x16, [0xff3f0f, 0x3ff0, 0xf, 0x3f]}, @ssp_cap={0x18, 0x10, 0xa, 0x4f, 0x3, 0x81, 0xf, 0x1, [0xffff00, 0x3f30, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xdc, 0x3, 0xdfcd}]}, 0x4, [{0x46, &(0x7f0000000480)=@string={0x46, 0x3, "d9c938164409e94d325a6250fbe57a39d386785084dfdcc6e07fa22adb76ff254147a258278ec99dfc1b7d2a8d85cffa01705a5990688978da4a83402fd6489f904da2b0"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x380a}}, {0x6d, &(0x7f0000000500)=@string={0x6d, 0x3, "27763b47f0692063b13a64038781672a6fe14371412664aae5aaf9eeb2e5d0d14d75711abcdeadf32aea6f98d22722462b2d62a3ab7383dd7ae360e5934d2ab6dbbd4bf1127188215f04747d3a196a686dd55c3b40faa593815db01a960d82ada2666ff1ebea61131d75cb"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x825}}]}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="09000000000000c35dfa2bf778080000000000001c9f0c0674a631a6225fa8c234b1acf58ed42c18c043708e82be", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000000030000000300"/28], 0x50) getpgid(r2) ioprio_set$pid(0x2, r2, 0x6000) 3.224553921s ago: executing program 2 (id=3084): r0 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x5972, 0x2, 0x0, 0x257}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$TCXONC(r1, 0x540a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400169287b822b0a58b0000000000000a000000"], 0x14}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000a40)="b1", 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000002780)={0xbff8, {0x8000, 0xd97, 0xebac, 0x4, 0x3, 0xfff}}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0xc0000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 2.816524889s ago: executing program 2 (id=3085): unshare(0x20000400) unshare(0x8000000) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="578900000000000000000000000000000000008000000000000000003056476b9a86851067a1250972e30edf21bdcbd704a241ee349fb1f9892874dee36ae68be0859d5c1dc7567ec954425a9e8ae7b939eb66e783b942ea24e59b058393baa84ee3b1260cd205a392e8f7930264531e8aae38b3d3832f2d5a5f80577e1181451c3b3a9f130a497049405b91e90b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x28, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) fcntl$getown(r2, 0x9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.728085459s ago: executing program 3 (id=3086): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x4000020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) semget$private(0x0, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe20}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) 2.063497951s ago: executing program 1 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.908749106s ago: executing program 1 (id=3088): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000898}, 0x4051) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0xb0, 0x0, &(0x7f0000000700)=[@exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/38, 0x26, 0x2, 0x8000030}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/171, 0xab, 0x1, 0x11}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}, 0x40}, @dead_binder_done], 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x400, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000140), 0x2000001, &(0x7f0000000880)=ANY=[@ANYBLOB="6664b7", @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESDEC=0x0, @ANYBLOB="2c67726775705f699d0334eb5394643d7e36522e24c2a5338f6d225672070000000000005a4b639ad9a8430eb4e3b94199be0054b0aa868431a3fe61d3b1340a9b017f96e3e2bb12e4e7f6d815199dd16329708f7df188a27c1383c7fe4906b2b67b72216540de7886caa4897d0d87a416addb97e97b39be4290a4da1618376447d2266798f676125303bb03e027059f686cb173fe678618ab7fb3df0c57b17d6e6042a9ce9613ad72a0be1f", @ANYRESDEC=0x0, @ANYBLOB]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x9, 0x2, 0xff, 0xe90}, {0x80, 0xe, 0x0, 0x99}]}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000080)=0x29cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() lchown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00') r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fdatasync(r8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="aa108f42aad562ef70ed3fd97c89f573203bed4622d5e4bf0762525688e78c9855b9098cacdd82677d084afeb9ee6b4f66b30908f0bdfc9b498e", 0x3a}], 0x1}}], 0x1, 0x4001c00) 1.698126656s ago: executing program 0 (id=3089): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.634314956s ago: executing program 0 (id=3090): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000500)=""/119, 0x77}], 0x6) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280050001003a00000014000180084001000000000008000200000000000c0019800800020099"], 0x44}}, 0x0) fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x9d2, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x3, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x5) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.579193718s ago: executing program 3 (id=3091): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x22, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000280)={0x320, 0x20, 0x500, 0x800, 0x1ff, 0xffff, 0x4, 0x2, {0x7a4, 0x7}, {0x7}, {0x3, 0x9}, {0x7fffffff, 0xe}, 0x2, 0x2, 0xfff, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x6, 0x2, 0x3, 0xa}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="400000000000000000000000070000004404e943860a0000000301043b138615"], 0x40}, 0x4008040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) pselect6(0x40, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7f8a, 0x7, 0x2, 0x1, 0x80, 0x3}, &(0x7f0000000340)={0x200, 0x101, 0x2, 0x5, 0x1, 0x4, 0x8000000000000001, 0x3}, &(0x7f0000000380)={0x80000000, 0x200, 0x9, 0x3, 0xa, 0xfffffffffffffffd, 0x526, 0x2}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x50}, 0x1, 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/149, 0x95}], 0x5}, 0x21) 1.361001267s ago: executing program 3 (id=3092): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9fa02400180000000000005e34000000000000000213fe"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa, 0x2, 0x0, @void, @value}, 0x28) (fail_nth: 4) 1.249066766s ago: executing program 2 (id=3093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) syz_clone3(&(0x7f0000000380)={0x1000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) pipe(&(0x7f0000000040)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}, {@nodevmap}, {@msize={'msize', 0x3d, 0x10001}}, {@directio}, {@access_client}, {@noextend}], [], 0x6b}}) 1.166732891s ago: executing program 0 (id=3094): eventfd(0x3c) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) connect$nfc_raw(r1, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000080)={0x100000, 0x388000, 0x8}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000434) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) eventfd(0x67) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) dup2(r6, r6) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 1.108854194s ago: executing program 3 (id=3095): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000875b0d20d8130100220e010203010902120001000000000904000000efbd7f00905ad847c3208dd48b29ca90e97281f2f0e377c12b86cbaf87d727d531307deb5b980ed3105c8b884cdd87ccb7e6b2cb83e8496b6e5d9aba385f50573988818a1c7ed03f23aa978196c80357d931db76e504fa1efe4ded54389f352815addc94b3c1efb4981334575d791ab3fd5fd6b82e"], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.state\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000a80)={r7, 0x9, 0x6}, 0x8) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x3c}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r9}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 966.312944ms ago: executing program 1 (id=3096): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x605a, &(0x7f0000000100)={0x0, 0x7212, 0x2000, 0x0, 0x36e}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_enter(r0, 0x301, 0x4389, 0x69, &(0x7f00000001c0)={[0x1]}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x73) timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0x20, 0x20, 0x33}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0x4f0f017, 0x3e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x92020007) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001140)={0x1, 'veth0_macvtap\x00', {}, 0x9}) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, 0x0) 719.770611ms ago: executing program 2 (id=3097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async, rerun: 32) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) (rerun: 32) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$int_in(r8, 0x5452, 0x0) (async) listen(r8, 0xda90) accept4(r8, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) 660.863242ms ago: executing program 0 (id=3098): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x8, 0x800, 0x6, 0x6, 0x2, 0x9, 0xf}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x0, 0x5, [0x8, 0x2, 0x7, 0x5bce, 0x297b]}, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) connect$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x4d97, 0x2, 0x80, 0xe0, 0x89, 0x0, r5}, {0x0, 0xfffffffffffffff6, 0xffffffff, 0xfffffffffffffffd, 0x8000000000000000, 0x5, 0x2, 0x5}, {0x4, 0xa, 0xbaaf, 0x90ad}, 0x80000000, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0xa, @in6=@remote, 0x3500, 0x4, 0x2, 0x63, 0x5, 0x481}}, 0xe8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)=0x0) r7 = accept4$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000480)={0xd, 0xfffffffc, 0x4}, 0xc) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, r8, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xffff}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r9 = msgget$private(0x0, 0x0) msgrcv(r9, &(0x7f0000000680)={0x0, ""/215}, 0xdf, 0x2, 0x1000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000780)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, 0xd, 0x4}}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000800)=0x1ff) getpriority(0x1, r6) r10 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$can_j1939(r11, &(0x7f0000000a00)={&(0x7f00000008c0)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x4}, 0xfe}, 0x18, &(0x7f00000009c0)={&(0x7f0000000900)="2686e3933ba81b271449b598ad264b1f2a61d34c53d01dda10fde8a28dcab3250b0a259af92be650d7a74f24d72beae31d84867ac0254127746f2b97942da22f1c5d498d1891355630aff0a50469ff92ed99fe318a27b90cf3a6f5a6dbfd5a2818c53e8727396f43e5f7e9b948a2ec57a9e0f017b7b186aa81af056f8a7169ad1e54283fcb9397994929afacce9514e58474a1e5", 0x94}, 0x1, 0x0, 0x0, 0x488c1}, 0x1) close(r2) preadv(r0, &(0x7f0000001d40)=[{&(0x7f0000000a40)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/131, 0x83}, {&(0x7f0000001c80)=""/162, 0xa2}], 0x5, 0x4, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) bind$unix(r3, &(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000001e80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001e40), 0x13f, 0x8}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001ec0)) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000001f00), &(0x7f0000001f40)='./file0\x00', 0x8, 0x2) 0s ago: executing program 2 (id=3099): socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0xba, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x84, 0x2b, 0x0, @rand_addr=' \x01\x00', @local, {[@hopopts={0x87}, @routing={0x3b, 0x2, 0x1, 0x0, 0x0, [@remote]}], {0x4e21, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "34e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d4", "5cb275b40fd4031ec1941ebfaa96d7bf", {"ac0ea900c400", "0667f5c2b37bbd83be6ba638018bb23c"}}}}}}}}, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 440.198446][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.205097][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.206536][T10866] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1557'. [ 441.262043][T10872] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1558'. [ 441.569947][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 442.080957][T10907] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1569'. [ 443.561897][T10933] netlink: 'syz.0.1576': attribute type 21 has an invalid length. [ 443.569965][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1576'. [ 443.926519][T10940] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1580'. [ 444.261207][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 444.920882][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 444.920902][ T30] audit: type=1326 audit(1748737314.778:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 444.969242][ T30] audit: type=1326 audit(1748737314.778:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 444.991451][ T30] audit: type=1326 audit(1748737314.838:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 445.018389][ T30] audit: type=1326 audit(1748737314.838:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 445.050003][ T30] audit: type=1326 audit(1748737314.838:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 445.075010][ T30] audit: type=1326 audit(1748737314.838:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 445.098312][ T30] audit: type=1326 audit(1748737314.838:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 445.122942][ T30] audit: type=1326 audit(1748737314.838:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 445.157899][ T30] audit: type=1326 audit(1748737314.838:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 445.299798][ T30] audit: type=1326 audit(1748737314.838:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10982 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 450.939589][T11120] futex_wake_op: syz.3.1634 tries to shift op by 32; fix this program [ 452.392614][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 452.392633][ T30] audit: type=1326 audit(1748737322.248:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 452.672574][ T30] audit: type=1326 audit(1748737322.288:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 452.729389][ T30] audit: type=1326 audit(1748737322.288:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 452.800850][ T30] audit: type=1326 audit(1748737322.288:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 452.841123][ T30] audit: type=1326 audit(1748737322.288:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 452.988582][ T30] audit: type=1326 audit(1748737322.288:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 453.015734][ T30] audit: type=1326 audit(1748737322.288:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 453.224676][ T30] audit: type=1326 audit(1748737322.298:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 453.339490][ T30] audit: type=1326 audit(1748737322.298:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 453.433293][ T30] audit: type=1326 audit(1748737322.298:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 453.510157][ T1329] tipc: Subscription rejected, illegal request [ 455.923956][T11177] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 456.145132][ T6135] tipc: Subscription rejected, illegal request [ 457.674589][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 457.674604][ T30] audit: type=1326 audit(1748737327.538:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 457.789521][ T30] audit: type=1326 audit(1748737327.578:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 457.872489][ T30] audit: type=1326 audit(1748737327.578:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 457.983484][ T30] audit: type=1326 audit(1748737327.588:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 458.030396][ T30] audit: type=1326 audit(1748737327.588:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 458.203431][ T30] audit: type=1326 audit(1748737327.588:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 458.232815][ T30] audit: type=1326 audit(1748737327.588:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 458.275400][ T30] audit: type=1326 audit(1748737327.588:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 458.883316][ T30] audit: type=1326 audit(1748737327.588:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 459.110396][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 459.187297][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 462.334701][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 462.923885][T11298] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 464.108735][T11322] syz_tun: entered promiscuous mode [ 464.228815][T11322] syz_tun: left promiscuous mode [ 468.956696][T11370] 9pnet_fd: Insufficient options for proto=fd [ 469.303029][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 473.192299][T11423] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 475.452606][T11451] syz_tun: entered promiscuous mode [ 475.569210][T11451] syz_tun: left promiscuous mode [ 476.558637][T11473] netlink: 'syz.2.1754': attribute type 72 has an invalid length. [ 477.042189][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 477.569565][ T30] audit: type=1326 audit(1748737347.428:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 477.811956][ T30] audit: type=1326 audit(1748737347.428:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 478.073330][ T30] audit: type=1326 audit(1748737347.428:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 478.252261][ T30] audit: type=1326 audit(1748737347.428:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 478.582904][ T30] audit: type=1326 audit(1748737347.428:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 478.616672][ T30] audit: type=1326 audit(1748737347.428:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 478.645113][ T30] audit: type=1326 audit(1748737347.428:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 478.700932][ T30] audit: type=1326 audit(1748737347.428:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 478.845265][T11523] netlink: 'syz.0.1768': attribute type 72 has an invalid length. [ 479.146655][ T30] audit: type=1326 audit(1748737349.008:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11531 comm="syz.2.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 479.227970][ T30] audit: type=1326 audit(1748737349.038:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11531 comm="syz.2.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 480.009356][T11556] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1784'. [ 480.018928][T11556] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1784'. [ 480.028849][T11556] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1784'. [ 480.266604][T11560] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1786'. [ 481.406406][T11590] futex_wake_op: syz.1.1794 tries to shift op by 32; fix this program [ 483.813200][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 483.813220][ T30] audit: type=1326 audit(1748737353.668:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 483.874100][ T30] audit: type=1326 audit(1748737353.668:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 483.982246][ T30] audit: type=1326 audit(1748737353.668:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.055548][ T30] audit: type=1326 audit(1748737353.668:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.137766][ T30] audit: type=1326 audit(1748737353.668:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.224727][ T30] audit: type=1326 audit(1748737353.668:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.293505][ T30] audit: type=1326 audit(1748737353.668:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.850668][ T30] audit: type=1326 audit(1748737353.668:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.873392][ T30] audit: type=1326 audit(1748737353.668:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.899745][ T30] audit: type=1326 audit(1748737353.668:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 484.933931][T11630] futex_wake_op: syz.4.1815 tries to shift op by 32; fix this program [ 487.356212][T11685] batadv0: left promiscuous mode [ 487.447007][T11692] overlayfs: failed to clone upperpath [ 487.779676][T11695] futex_wake_op: syz.0.1836 tries to shift op by 32; fix this program [ 489.021767][T11728] overlayfs: failed to clone upperpath [ 491.929770][T11767] futex_wake_op: syz.2.1855 tries to shift op by 32; fix this program [ 492.282569][T11774] fuse: Bad value for 'fd' [ 494.106034][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 494.106052][ T30] audit: type=1326 audit(1748737363.968:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.154727][ T30] audit: type=1326 audit(1748737363.968:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.177395][ T30] audit: type=1326 audit(1748737363.968:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.199822][ T30] audit: type=1326 audit(1748737363.998:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.221819][ T30] audit: type=1326 audit(1748737363.998:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.244078][ T30] audit: type=1326 audit(1748737363.998:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.270748][ T30] audit: type=1326 audit(1748737364.008:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.299444][ T30] audit: type=1326 audit(1748737364.008:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.321417][ T30] audit: type=1326 audit(1748737364.008:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 494.344819][ T30] audit: type=1326 audit(1748737364.008:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 496.280024][T11823] futex_wake_op: syz.4.1882 tries to shift op by 32; fix this program [ 496.516851][ T36] bond0: (slave bond_slave_0): interface is now down [ 496.539219][ T36] bond0: (slave bond_slave_1): interface is now down [ 496.568586][ T36] bond0: now running without any active interface! [ 497.456689][T11848] netlink: 'syz.2.1894': attribute type 29 has an invalid length. [ 498.716955][T11863] tipc: Enabling of bearer <ÔaB:t> rejected, media not registered [ 499.982340][T11880] netlink: 'syz.3.1904': attribute type 10 has an invalid length. [ 500.049977][T11885] futex_wake_op: syz.0.1901 tries to shift op by 32; fix this program [ 500.554287][T11882] lo speed is unknown, defaulting to 1000 [ 501.641932][ T5935] kworker/1:6 (5935) used greatest stack depth: 15928 bytes left [ 501.650676][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.660591][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.729535][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 504.045935][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 504.045956][ T30] audit: type=1326 audit(1748737373.908:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.160456][ T30] audit: type=1326 audit(1748737373.908:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.298913][ T30] audit: type=1326 audit(1748737373.938:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.379623][ T30] audit: type=1326 audit(1748737373.938:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.503169][ T30] audit: type=1326 audit(1748737373.938:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.579404][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'. [ 504.617502][ T30] audit: type=1326 audit(1748737373.938:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.658879][ T30] audit: type=1326 audit(1748737373.938:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.730482][ T30] audit: type=1326 audit(1748737373.938:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.768646][ T30] audit: type=1326 audit(1748737373.948:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 504.793202][ T30] audit: type=1326 audit(1748737373.948:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.1.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 505.209045][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 506.347826][T11980] ip6tnl0: entered promiscuous mode [ 506.363228][T11979] ip6tnl0: left promiscuous mode [ 507.141714][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1938'. [ 508.959359][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 509.282635][T12049] syz_tun: entered promiscuous mode [ 509.288207][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 509.288225][ T30] audit: type=1326 audit(1748737379.138:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.353244][T12049] syz_tun: left promiscuous mode [ 509.411941][ T30] audit: type=1326 audit(1748737379.138:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.442127][ T30] audit: type=1326 audit(1748737379.208:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.472464][ T30] audit: type=1326 audit(1748737379.208:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.494695][ T30] audit: type=1326 audit(1748737379.208:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.522147][ T30] audit: type=1326 audit(1748737379.208:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.629902][ T30] audit: type=1326 audit(1748737379.208:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.658100][ T30] audit: type=1326 audit(1748737379.218:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.710015][ T30] audit: type=1326 audit(1748737379.218:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 509.764823][T12066] netlink: 'syz.4.1960': attribute type 27 has an invalid length. [ 509.886779][ T30] audit: type=1326 audit(1748737379.748:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12067 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 511.372212][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 514.301299][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 514.301379][ T30] audit: type=1326 audit(1748737384.158:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.335736][ T30] audit: type=1326 audit(1748737384.188:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.425185][ T30] audit: type=1326 audit(1748737384.188:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.497135][ T30] audit: type=1326 audit(1748737384.188:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.535488][T12141] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1986'. [ 514.555586][T12141] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 514.601667][ T30] audit: type=1326 audit(1748737384.188:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.672870][ T30] audit: type=1326 audit(1748737384.188:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.712368][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 514.728311][ T30] audit: type=1326 audit(1748737384.188:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.750880][ T30] audit: type=1326 audit(1748737384.188:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.802821][ T30] audit: type=1326 audit(1748737384.188:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 514.874626][ T30] audit: type=1326 audit(1748737384.188:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 516.310946][T12177] overlayfs: failed to clone lowerpath [ 516.322927][T12170] xt_CT: No such helper "netbios-ns" [ 517.243489][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 517.418426][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 517.718909][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 517.871265][T12224] openvswitch: netlink: Multiple metadata blocks provided [ 518.561800][T12230] cgroup: fork rejected by pids controller in /syz2 [ 518.659686][T12325] syz_tun: entered promiscuous mode [ 518.765400][T12325] syz_tun: left promiscuous mode [ 519.257463][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 519.307786][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 519.307805][ T30] audit: type=1326 audit(1748737389.168:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.444816][ T30] audit: type=1326 audit(1748737389.168:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.530367][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'. [ 519.551589][ T30] audit: type=1326 audit(1748737389.168:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.618733][ T30] audit: type=1326 audit(1748737389.168:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.681136][ T30] audit: type=1326 audit(1748737389.208:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.733345][ T30] audit: type=1326 audit(1748737389.208:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.763250][ T30] audit: type=1326 audit(1748737389.208:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.976307][ T30] audit: type=1326 audit(1748737389.208:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 519.998650][ T30] audit: type=1326 audit(1748737389.208:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 520.023472][ T30] audit: type=1326 audit(1748737389.208:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 522.397718][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 523.454394][T12764] overlayfs: failed to clone lowerpath [ 523.462438][T12769] overlayfs: failed to clone lowerpath [ 524.851922][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 524.851941][ T30] audit: type=1326 audit(1748737394.708:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 524.992381][ T30] audit: type=1326 audit(1748737394.848:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.016904][ T30] audit: type=1326 audit(1748737394.858:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.128333][ T30] audit: type=1326 audit(1748737394.858:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.180960][ T30] audit: type=1326 audit(1748737394.858:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.205498][ T30] audit: type=1326 audit(1748737394.858:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.228559][ T30] audit: type=1326 audit(1748737394.868:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.250666][ T30] audit: type=1326 audit(1748737394.868:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.277922][ T30] audit: type=1326 audit(1748737394.878:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.367523][ T30] audit: type=1326 audit(1748737394.978:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 525.930617][T12802] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 529.048173][T12832] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 529.225232][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 530.583960][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 530.583977][ T30] audit: type=1326 audit(1748737400.448:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 530.628994][ T30] audit: type=1326 audit(1748737400.468:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 530.667171][ T30] audit: type=1326 audit(1748737400.478:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 530.723563][ T30] audit: type=1326 audit(1748737400.478:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 530.798198][ T30] audit: type=1326 audit(1748737400.478:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 530.924544][ T30] audit: type=1326 audit(1748737400.478:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 530.946397][ T30] audit: type=1326 audit(1748737400.478:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 530.985022][ T30] audit: type=1326 audit(1748737400.478:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12858 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 531.412948][ T30] audit: type=1326 audit(1748737400.818:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12862 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 531.973274][ T30] audit: type=1326 audit(1748737400.818:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12862 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 532.547961][T12898] futex_wake_op: syz.4.2076 tries to shift op by 32; fix this program [ 532.604162][T12882] can: request_module (can-proto-0) failed. [ 534.201342][T12913] Cannot find del_set index 3 as target [ 534.286625][T12915] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 534.372169][T12920] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 535.262974][T12941] geneve3: entered allmulticast mode [ 535.515563][T12954] xt_cgroup: invalid path, errno=-2 [ 535.708485][T12961] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 536.679115][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 536.968546][T13005] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 537.086298][T13012] netlink: 'syz.4.2127': attribute type 9 has an invalid length. [ 537.106331][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 538.479187][T13031] futex_wake_op: syz.2.2132 tries to shift op by 32; fix this program [ 538.842543][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'. [ 541.216222][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 541.520864][T13090] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2148'. [ 541.548030][T13090] netlink: 'syz.4.2148': attribute type 178 has an invalid length. [ 542.266617][T13104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.954385][T13116] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.991265][T13116] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 544.831363][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2172'. [ 545.148964][T13146] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 545.243915][T13149] ip6erspan0: entered promiscuous mode [ 546.264579][T13172] overlayfs: failed to clone upperpath [ 547.557124][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 547.557142][ T30] audit: type=1326 audit(1748737417.418:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 547.711912][ T30] audit: type=1326 audit(1748737417.418:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 547.745767][ T30] audit: type=1326 audit(1748737417.418:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 547.767811][ T30] audit: type=1326 audit(1748737417.418:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 547.937003][ T30] audit: type=1326 audit(1748737417.418:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 547.959416][ T30] audit: type=1326 audit(1748737417.418:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 548.243137][ T30] audit: type=1326 audit(1748737417.418:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 548.306143][ T30] audit: type=1326 audit(1748737417.418:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 548.376607][ T30] audit: type=1326 audit(1748737417.418:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 548.398471][ T30] audit: type=1326 audit(1748737417.418:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 548.438851][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2190'. [ 548.659168][T13199] io-wq is not configured for unbound workers [ 548.700818][T13201] fuse: Unknown parameter 'Ï' [ 548.943353][T13218] syz_tun: entered allmulticast mode [ 548.965861][T13216] syz_tun: left allmulticast mode [ 550.189466][T13237] syz_tun: entered promiscuous mode [ 550.216916][T13237] syz_tun: left promiscuous mode [ 551.449605][T13255] netlink: 'syz.3.2209': attribute type 3 has an invalid length. [ 551.469279][T13255] overlayfs: failed to clone upperpath [ 552.322898][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2212'. [ 552.456285][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2215'. [ 552.481850][T13275] syz_tun: entered promiscuous mode [ 552.511937][T13275] syz_tun: left promiscuous mode [ 552.874815][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 553.924771][T13310] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 554.000757][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2231'. [ 554.163747][T13314] syz_tun: entered promiscuous mode [ 554.183911][T13314] syz_tun: left promiscuous mode [ 554.446641][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2237'. [ 554.459757][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 554.661997][T13331] bridge_slave_0: left allmulticast mode [ 554.701504][T13331] bridge_slave_0: left promiscuous mode [ 554.743106][T13331] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.818122][T13331] bridge_slave_1: left allmulticast mode [ 554.854072][T13331] bridge_slave_1: left promiscuous mode [ 554.864843][T13331] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.891807][T13331] bond0: (slave bond_slave_0): Releasing backup interface [ 554.968756][T13331] bond0: (slave bond_slave_1): Releasing backup interface [ 555.101193][T13331] team0: Port device team_slave_0 removed [ 555.132493][T13331] team0: Port device team_slave_1 removed [ 555.162908][T13331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.180766][T13331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.191175][T13331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.762467][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2239'. [ 556.067611][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2243'. [ 556.253322][T13336] lo speed is unknown, defaulting to 1000 [ 556.329404][T13362] syz_tun: entered promiscuous mode [ 556.338301][T13362] syz_tun: left promiscuous mode [ 556.790971][T13369] netlink: 'syz.0.2248': attribute type 1 has an invalid length. [ 557.082243][T13369] bond2: entered promiscuous mode [ 557.107692][T13369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.837883][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2250'. [ 557.888863][T13381] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 557.924664][T13384] netlink: 'syz.2.2252': attribute type 5 has an invalid length. [ 558.234781][T13395] syz_tun: entered promiscuous mode [ 558.241733][T13395] syz_tun: left promiscuous mode [ 560.876516][T13427] syz_tun: entered promiscuous mode [ 560.899453][T13427] syz_tun: left promiscuous mode [ 562.058172][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 562.124530][T13448] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 562.583454][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 563.125424][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.137146][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.269468][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 563.269488][ T30] audit: type=1326 audit(1748737433.118:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 563.574622][ T30] audit: type=1326 audit(1748737433.188:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 563.597096][ T30] audit: type=1326 audit(1748737433.188:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 563.643107][ T30] audit: type=1326 audit(1748737433.188:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 563.729507][ T30] audit: type=1326 audit(1748737433.188:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 563.820355][T13477] ipvlan1: entered promiscuous mode [ 563.837904][ T30] audit: type=1326 audit(1748737433.188:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 563.855348][T13477] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 563.919342][ T30] audit: type=1326 audit(1748737433.188:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 564.015914][ T30] audit: type=1326 audit(1748737433.188:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 564.119756][ T30] audit: type=1326 audit(1748737433.188:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 564.148178][ T30] audit: type=1326 audit(1748737433.188:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13461 comm="syz.3.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 564.233488][T13478] syz_tun: entered promiscuous mode [ 564.977302][T13478] syz_tun: left promiscuous mode [ 565.034708][ T5874] IPVS: starting estimator thread 0... [ 565.133224][T13485] IPVS: using max 29 ests per chain, 69600 per kthread [ 565.201839][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 565.212855][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 565.243624][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 565.256528][T13496] CIFS: iocharset name too long [ 565.292259][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 565.321268][T13490] ceph: No mds server is up or the cluster is laggy [ 565.584897][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 565.652735][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 566.243355][T13514] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 566.324083][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2290'. [ 567.719917][T13533] syz_tun: entered promiscuous mode [ 567.728029][T13533] syz_tun: left promiscuous mode [ 567.810346][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.600814][T13551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2303'. [ 568.667441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 569.243639][T13554] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 569.584334][ T3077] libceph: connect (1)[c::]:6789 error -101 [ 569.593911][ T3077] libceph: mon0 (1)[c::]:6789 connect error [ 569.687703][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 569.864707][ T3077] libceph: connect (1)[c::]:6789 error -101 [ 569.870093][T13573] vlan2: entered promiscuous mode [ 569.874377][ T3077] libceph: mon0 (1)[c::]:6789 connect error [ 569.876268][T13573] gretap0: entered promiscuous mode [ 569.889151][T13573] vlan2: entered allmulticast mode [ 569.895932][T13573] gretap0: entered allmulticast mode [ 569.964810][T13577] syz_tun: entered promiscuous mode [ 569.976764][T13577] syz_tun: left promiscuous mode [ 570.505872][ T3077] libceph: connect (1)[c::]:6789 error -101 [ 570.515981][ T3077] libceph: mon0 (1)[c::]:6789 connect error [ 570.534056][T13561] ceph: No mds server is up or the cluster is laggy [ 573.417144][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 573.856365][T13626] syz_tun: entered promiscuous mode [ 573.864345][T13626] syz_tun: left promiscuous mode [ 574.023241][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 574.023262][ T30] audit: type=1326 audit(1748737443.858:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 574.130690][ T30] audit: type=1326 audit(1748737443.858:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 574.267783][ T30] audit: type=1326 audit(1748737443.858:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 574.290609][ T30] audit: type=1326 audit(1748737443.858:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 574.312875][ T30] audit: type=1326 audit(1748737443.858:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 574.373531][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2328'. [ 574.969891][ T30] audit: type=1326 audit(1748737443.858:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 574.991701][ T30] audit: type=1326 audit(1748737443.858:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 575.013524][ T30] audit: type=1326 audit(1748737443.858:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 575.046791][ T30] audit: type=1326 audit(1748737443.858:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 575.070810][ T30] audit: type=1326 audit(1748737443.858:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 577.234050][T13668] overlayfs: failed to clone upperpath [ 577.574932][T13674] syz_tun: entered promiscuous mode [ 577.582075][T13674] syz_tun: left promiscuous mode [ 579.182192][T13703] syz_tun: entered promiscuous mode [ 579.197526][T13703] syz_tun: left promiscuous mode [ 580.913756][T13730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2357'. [ 583.516411][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2363'. [ 584.304022][T13760] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.325950][ T3077] libceph: connect (1)[c::]:6789 error -22 [ 584.345555][ T3077] libceph: mon0 (1)[c::]:6789 connect error [ 584.549769][T13760] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.606979][ T3077] libceph: connect (1)[c::]:6789 error -22 [ 584.793321][ T3077] libceph: mon0 (1)[c::]:6789 connect error [ 584.908000][T13760] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.936429][T13781] netlink: 'syz.3.2374': attribute type 3 has an invalid length. [ 585.019751][T13766] ceph: No mds server is up or the cluster is laggy [ 585.220897][T13760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.372709][T13760] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.446470][T13760] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.515873][T13760] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.584604][T13760] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.934839][T13793] netlink: 'syz.1.2375': attribute type 1 has an invalid length. [ 586.730329][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 587.249441][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 592.079305][T13853] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.119510][T13852] xt_CT: No such helper "snmp" [ 592.135131][T13853] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.191442][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 592.252017][T13853] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.364693][T13853] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.516265][T13853] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.532831][T13853] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.548392][T13853] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.563904][T13853] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.263431][T13875] overlayfs: failed to clone upperpath [ 594.562644][T13878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 595.359369][T13900] syz_tun: entered promiscuous mode [ 595.375373][T13900] syz_tun: left promiscuous mode [ 595.451215][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 595.451235][ T30] audit: type=1326 audit(1748737465.308:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 595.660203][ T30] audit: type=1326 audit(1748737465.308:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 595.729754][ T30] audit: type=1326 audit(1748737465.448:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 595.779638][ T30] audit: type=1326 audit(1748737465.448:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 595.850323][ T30] audit: type=1326 audit(1748737465.458:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 598.063160][ T30] audit: type=1326 audit(1748737465.458:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 599.189013][ T30] audit: type=1326 audit(1748737465.458:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 599.211465][ T30] audit: type=1326 audit(1748737465.458:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 599.428514][ T30] audit: type=1326 audit(1748737465.458:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 599.450848][ T30] audit: type=1326 audit(1748737465.458:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x7ffc0000 [ 600.526865][T13938] syz_tun: entered promiscuous mode [ 600.692044][T13938] syz_tun: left promiscuous mode [ 601.292364][T13956] tipc: Can't bind to reserved service type 0 [ 602.538633][T13979] 9pnet_fd: Insufficient options for proto=fd [ 603.258228][T13986] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2433'. [ 603.571207][T13957] futex_wake_op: syz.0.2427 tries to shift op by 32; fix this program [ 603.749731][T13998] syz_tun: entered promiscuous mode [ 603.795271][T13998] syz_tun: left promiscuous mode [ 606.322241][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 606.322261][ T30] audit: type=1326 audit(1748737475.938:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 606.495859][ T30] audit: type=1326 audit(1748737475.938:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 606.518206][ T30] audit: type=1326 audit(1748737475.948:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 606.540469][ T30] audit: type=1326 audit(1748737475.948:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 606.562589][ T30] audit: type=1326 audit(1748737475.948:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 606.613179][ T30] audit: type=1326 audit(1748737475.948:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 606.660187][ T30] audit: type=1326 audit(1748737475.948:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 606.713272][ T30] audit: type=1326 audit(1748737475.948:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 607.637727][ T30] audit: type=1326 audit(1748737475.948:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 607.698536][ T30] audit: type=1326 audit(1748737475.948:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x7ffc0000 [ 609.156116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.848909][T14126] team0: No ports can be present during mode change [ 614.985858][T14125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2472'. [ 616.524586][T14155] overlayfs: failed to clone upperpath [ 616.839214][T14157] futex_wake_op: syz.2.2477 tries to shift op by 32; fix this program [ 619.159575][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 622.236035][T14215] overlayfs: failed to clone upperpath [ 623.931964][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 623.979242][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2513'. [ 624.527652][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.543189][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.826417][T14256] overlayfs: failed to clone upperpath [ 625.263169][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 625.263189][ T30] audit: type=1326 audit(1748737495.008:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 625.936899][ T30] audit: type=1326 audit(1748737495.008:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.053229][ T30] audit: type=1326 audit(1748737495.008:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.107101][ T30] audit: type=1326 audit(1748737495.008:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.136133][ T30] audit: type=1326 audit(1748737495.008:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.179596][ T30] audit: type=1326 audit(1748737495.008:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.347705][T14268] 9pnet_fd: Insufficient options for proto=fd [ 626.408771][ T30] audit: type=1326 audit(1748737495.008:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.431190][ T30] audit: type=1326 audit(1748737495.008:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.454428][ T30] audit: type=1326 audit(1748737495.008:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 626.493092][ T30] audit: type=1326 audit(1748737495.008:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14251 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 627.252457][T14277] netlink: 'syz.2.2527': attribute type 2 has an invalid length. [ 627.293120][T14277] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 627.574414][T14281] futex_wake_op: syz.1.2516 tries to shift op by 32; fix this program [ 627.976138][T14291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2533'. [ 630.124960][T14319] No control pipe specified [ 630.997762][T14332] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 631.560494][T14339] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 633.143583][T14352] futex_wake_op: syz.3.2550 tries to shift op by 32; fix this program [ 633.764008][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 633.773124][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 634.553188][T14370] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2556'. [ 634.562105][T14370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.576241][T14370] overlayfs: failed to clone lowerpath [ 634.608910][T14362] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 634.634307][T14376] overlayfs: failed to clone upperpath [ 636.595631][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 637.436674][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 637.443157][ T30] audit: type=1326 audit(1748737507.028:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14397 comm="syz.3.2566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c98e969 code=0x0 [ 641.405255][T14445] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 641.761023][T14448] lo speed is unknown, defaulting to 1000 [ 642.141740][T14469] tmpfs: Unknown parameter 'usrquota€' [ 643.325585][T14482] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2593'. [ 643.337030][T14482] 9pnet_fd: Insufficient options for proto=fd [ 644.286422][T14498] 9pnet_fd: Insufficient options for proto=fd [ 644.582630][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2599'. [ 644.699770][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2599'. [ 644.941977][T14508] netlink: 'syz.3.2600': attribute type 30 has an invalid length. [ 645.017689][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2599'. [ 645.202476][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2603'. [ 646.933721][ T30] audit: type=1326 audit(1748737516.758:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 646.976967][ T30] audit: type=1326 audit(1748737516.758:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 647.042065][ T30] audit: type=1326 audit(1748737516.758:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 647.090294][ T30] audit: type=1326 audit(1748737516.758:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 647.147056][ T30] audit: type=1326 audit(1748737516.768:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 647.201103][ T30] audit: type=1326 audit(1748737516.768:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 647.270378][ T30] audit: type=1326 audit(1748737516.768:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 647.539184][ T30] audit: type=1326 audit(1748737516.768:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 647.664772][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 647.673940][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 648.319436][ T30] audit: type=1326 audit(1748737516.768:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 648.386966][ T30] audit: type=1326 audit(1748737516.768:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14534 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 655.010808][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 655.010825][ T30] audit: type=1326 audit(1748737524.868:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 655.050066][T14652] tc_dump_action: action bad kind [ 655.079786][ T30] audit: type=1326 audit(1748737524.868:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5da398d2d0 code=0x7ffc0000 [ 655.126432][ T30] audit: type=1326 audit(1748737524.868:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 655.158730][ T30] audit: type=1326 audit(1748737524.908:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 655.199961][ T30] audit: type=1326 audit(1748737524.908:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 655.245227][ T30] audit: type=1326 audit(1748737524.908:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 655.339004][ T30] audit: type=1326 audit(1748737524.908:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 655.366487][ T30] audit: type=1326 audit(1748737524.908:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 655.456641][ T30] audit: type=1326 audit(1748737524.908:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 656.241351][ T30] audit: type=1326 audit(1748737524.908:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5da398e969 code=0x7ffc0000 [ 656.482245][T14675] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 656.731480][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 659.149366][T14726] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 665.701712][T14804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2686'. [ 665.972389][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 667.458945][T14837] netlink: 'syz.3.2695': attribute type 1 has an invalid length. [ 667.543526][T14841] C: renamed from team_slave_0 (while UP) [ 667.565073][T14841] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2697'. [ 670.064742][T14868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2703'. [ 670.431082][T14880] netlink: 'syz.1.2709': attribute type 1 has an invalid length. [ 670.475295][T14882] netlink: 'syz.0.2712': attribute type 10 has an invalid length. [ 670.514042][T14882] batman_adv: batadv0: Adding interface: wlan0 [ 670.543186][T14882] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.618588][T14882] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 670.656093][T14888] 9pnet_virtio: no channels available for device syz [ 672.572003][T14917] netlink: 'syz.3.2723': attribute type 1 has an invalid length. [ 675.698399][T14951] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 678.092492][T14999] netlink: 'syz.1.2747': attribute type 1 has an invalid length. [ 678.124324][T14997] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 678.512538][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2754'. [ 680.058211][T15041] netlink: 'syz.3.2760': attribute type 1 has an invalid length. [ 680.406322][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 681.143192][T15048] Illegal XDP return value 2487607904 on prog (id 538) dev N/A, expect packet loss! [ 683.178988][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 683.225457][T15077] netlink: 'syz.2.2774': attribute type 1 has an invalid length. [ 683.384204][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2775'. [ 685.048746][T15098] 9pnet_virtio: no channels available for device syz [ 686.033724][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.040084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.277013][T15108] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 689.891217][T15189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2810'. [ 693.928538][T15222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 693.939571][T15222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 693.948404][T15222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 693.957630][T15222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 693.976333][T15222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 694.004099][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.032109][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.152238][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 694.164908][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 694.183456][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 694.191777][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 694.209773][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 694.517299][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.533492][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.673258][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.711031][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.941664][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.984188][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.261883][T15221] lo speed is unknown, defaulting to 1000 [ 695.495334][T15261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2832'. [ 695.608672][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 696.176293][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 696.185418][T15278] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2835'. [ 696.363980][ T5835] Bluetooth: hci3: command tx timeout [ 696.965631][ T36] bond0 (unregistering): Released all slaves [ 697.112143][ T36] tipc: Disabling bearer [ 697.135748][ T36] tipc: Left network mode [ 697.162241][ T36] IPVS: stopping master sync thread 10242 ... [ 698.034283][T15323] rdma_rxe: rxe_newlink: failed to add lo [ 698.443601][ T5835] Bluetooth: hci3: command tx timeout [ 698.873688][T15332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2853'. [ 698.888752][T15221] chnl_net:caif_netlink_parms(): no params data found [ 698.983915][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 699.729869][ T36] hsr_slave_0: left promiscuous mode [ 699.788598][ T36] hsr_slave_1: left promiscuous mode [ 699.903548][ T36] veth1_macvtap: left promiscuous mode [ 699.912989][ T36] veth0_macvtap: left promiscuous mode [ 699.918910][ T36] veth1_vlan: left promiscuous mode [ 699.926706][ T36] veth0_vlan: left promiscuous mode [ 700.588005][ T5835] Bluetooth: hci3: command tx timeout [ 702.104654][T15358] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 702.114071][T15358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 702.123686][T15358] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 702.422636][T15221] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.542188][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.552543][T15221] bridge_slave_0: entered allmulticast mode [ 702.560981][T15221] bridge_slave_0: entered promiscuous mode [ 702.570081][T15221] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.584401][T15221] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.591798][T15221] bridge_slave_1: entered allmulticast mode [ 702.659821][T15380] rdma_rxe: rxe_newlink: failed to add lo [ 702.677386][ T5835] Bluetooth: hci3: command tx timeout [ 703.360639][T15221] bridge_slave_1: entered promiscuous mode [ 703.568005][T15221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.598668][T15221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.809272][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2867'. [ 703.905327][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 704.004077][T15221] team0: Port device team_slave_0 added [ 704.019766][T15221] team0: Port device team_slave_1 added [ 704.258522][T15221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.274155][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.333059][T15221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.352617][T15221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.373032][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.420704][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 704.430454][T15221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.607666][T15221] hsr_slave_0: entered promiscuous mode [ 704.616135][T15221] hsr_slave_1: entered promiscuous mode [ 704.622714][T15221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.633347][T15221] Cannot create hsr debugfs directory [ 705.058998][T15388] lo speed is unknown, defaulting to 1000 [ 705.415299][T15441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2882'. [ 705.517995][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 706.752062][T15452] lo speed is unknown, defaulting to 1000 [ 707.905382][T15221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.931911][T15221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.990701][T15221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.047469][T15221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.634334][T15221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.382837][T15477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2894'. [ 709.498554][T15221] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.554235][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 709.583336][T15483] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 709.608043][T14015] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.615277][T14015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.677666][T14015] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.684941][T14015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.488610][T15221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.656907][T15221] veth0_vlan: entered promiscuous mode [ 710.754761][T15221] veth1_vlan: entered promiscuous mode [ 710.947230][T15514] cgroup: No subsys list or none specified [ 711.664170][T15221] veth0_macvtap: entered promiscuous mode [ 711.715509][T15221] veth1_macvtap: entered promiscuous mode [ 712.348906][T15535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2907'. [ 712.409922][T15221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.472119][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 712.491124][T15221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.522306][T15221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.574205][T15221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.604117][T15221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.614164][T15221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.954222][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.983267][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 713.004984][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.266790][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.294938][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.712015][T15576] FAULT_INJECTION: forcing a failure. [ 713.712015][T15576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.732233][T15576] CPU: 0 UID: 0 PID: 15576 Comm: syz.1.2914 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 713.732266][T15576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.732284][T15576] Call Trace: [ 713.732296][T15576] [ 713.732306][T15576] dump_stack_lvl+0x189/0x250 [ 713.732343][T15576] ? __pfx____ratelimit+0x10/0x10 [ 713.732377][T15576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.732406][T15576] ? __pfx__printk+0x10/0x10 [ 713.732427][T15576] ? __might_fault+0xb0/0x130 [ 713.732478][T15576] should_fail_ex+0x414/0x560 [ 713.732506][T15576] _copy_from_iter+0x1db/0x16f0 [ 713.732538][T15576] ? rcu_is_watching+0x15/0xb0 [ 713.732564][T15576] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 713.732597][T15576] ? __pfx__copy_from_iter+0x10/0x10 [ 713.732625][T15576] ? __build_skb_around+0x257/0x3e0 [ 713.732654][T15576] ? netlink_sendmsg+0x642/0xb30 [ 713.732679][T15576] ? skb_put+0x11b/0x210 [ 713.732710][T15576] netlink_sendmsg+0x6b2/0xb30 [ 713.732746][T15576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.732782][T15576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.732801][T15576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.732829][T15576] __sock_sendmsg+0x219/0x270 [ 713.732853][T15576] ____sys_sendmsg+0x505/0x830 [ 713.732887][T15576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.732925][T15576] ? import_iovec+0x74/0xa0 [ 713.732966][T15576] ___sys_sendmsg+0x21f/0x2a0 [ 713.732996][T15576] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.733060][T15576] ? __fget_files+0x2a/0x420 [ 713.733078][T15576] ? __fget_files+0x3a0/0x420 [ 713.733108][T15576] __x64_sys_sendmsg+0x19b/0x260 [ 713.733139][T15576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.733176][T15576] ? __pfx_ksys_write+0x10/0x10 [ 713.733202][T15576] ? rcu_is_watching+0x15/0xb0 [ 713.733230][T15576] ? do_syscall_64+0xbe/0x3b0 [ 713.733255][T15576] do_syscall_64+0xfa/0x3b0 [ 713.733273][T15576] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.733292][T15576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.733312][T15576] ? clear_bhb_loop+0x60/0xb0 [ 713.733336][T15576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.733356][T15576] RIP: 0033:0x7fc45c98e969 [ 713.733375][T15576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.733393][T15576] RSP: 002b:00007fc45d7e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.733415][T15576] RAX: ffffffffffffffda RBX: 00007fc45cbb5fa0 RCX: 00007fc45c98e969 [ 713.733431][T15576] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 713.733450][T15576] RBP: 00007fc45d7e9090 R08: 0000000000000000 R09: 0000000000000000 [ 713.733463][T15576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.733475][T15576] R13: 0000000000000000 R14: 00007fc45cbb5fa0 R15: 00007fff88f89928 [ 713.733508][T15576] [ 714.491670][T15585] FAULT_INJECTION: forcing a failure. [ 714.491670][T15585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.505489][T15589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2920'. [ 714.573134][T15585] CPU: 1 UID: 0 PID: 15585 Comm: syz.1.2918 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 714.573166][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.573179][T15585] Call Trace: [ 714.573188][T15585] [ 714.573197][T15585] dump_stack_lvl+0x189/0x250 [ 714.573233][T15585] ? __pfx____ratelimit+0x10/0x10 [ 714.573266][T15585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.573296][T15585] ? __pfx__printk+0x10/0x10 [ 714.573316][T15585] ? __might_fault+0xb0/0x130 [ 714.573360][T15585] should_fail_ex+0x414/0x560 [ 714.573386][T15585] _copy_from_iter+0x1db/0x16f0 [ 714.573426][T15585] ? rcu_is_watching+0x15/0xb0 [ 714.573452][T15585] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 714.573485][T15585] ? __pfx__copy_from_iter+0x10/0x10 [ 714.573513][T15585] ? __build_skb_around+0x257/0x3e0 [ 714.573543][T15585] ? netlink_sendmsg+0x642/0xb30 [ 714.573568][T15585] ? skb_put+0x11b/0x210 [ 714.573597][T15585] netlink_sendmsg+0x6b2/0xb30 [ 714.573634][T15585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.573668][T15585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 714.573687][T15585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.573715][T15585] __sock_sendmsg+0x219/0x270 [ 714.573740][T15585] ____sys_sendmsg+0x505/0x830 [ 714.573774][T15585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 714.573812][T15585] ? import_iovec+0x74/0xa0 [ 714.573845][T15585] ___sys_sendmsg+0x21f/0x2a0 [ 714.573876][T15585] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.573943][T15585] ? __fget_files+0x2a/0x420 [ 714.573961][T15585] ? __fget_files+0x3a0/0x420 [ 714.573991][T15585] __x64_sys_sendmsg+0x19b/0x260 [ 714.574023][T15585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 714.574061][T15585] ? __pfx_ksys_write+0x10/0x10 [ 714.574087][T15585] ? rcu_is_watching+0x15/0xb0 [ 714.574116][T15585] ? do_syscall_64+0xbe/0x3b0 [ 714.574145][T15585] do_syscall_64+0xfa/0x3b0 [ 714.574164][T15585] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.574184][T15585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.574204][T15585] ? clear_bhb_loop+0x60/0xb0 [ 714.574229][T15585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.574249][T15585] RIP: 0033:0x7fc45c98e969 [ 714.574267][T15585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.574285][T15585] RSP: 002b:00007fc45d7e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.574307][T15585] RAX: ffffffffffffffda RBX: 00007fc45cbb5fa0 RCX: 00007fc45c98e969 [ 714.574322][T15585] RDX: 0000000004040004 RSI: 0000200000000280 RDI: 0000000000000003 [ 714.574336][T15585] RBP: 00007fc45d7e9090 R08: 0000000000000000 R09: 0000000000000000 [ 714.574348][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.574361][T15585] R13: 0000000000000000 R14: 00007fc45cbb5fa0 R15: 00007fff88f89928 [ 714.574393][T15585] [ 714.963709][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 715.123395][T15222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 715.135780][T15222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 715.162316][T15222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 715.172070][T15222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 715.180621][T15222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 715.324101][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 715.335682][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 715.480313][T15601] netlink: 'syz.0.2923': attribute type 11 has an invalid length. [ 716.301317][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 716.301337][ T30] audit: type=1326 audit(1748737586.158:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 716.377841][ T30] audit: type=1326 audit(1748737586.198:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 716.400805][ T30] audit: type=1326 audit(1748737586.218:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 716.536607][ T30] audit: type=1326 audit(1748737586.218:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 716.846230][ T30] audit: type=1326 audit(1748737586.218:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 717.053273][ T30] audit: type=1326 audit(1748737586.218:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 717.109944][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2927'. [ 717.233834][ T5835] Bluetooth: hci5: command tx timeout [ 717.251711][ T30] audit: type=1326 audit(1748737586.218:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 717.277167][ T30] audit: type=1326 audit(1748737586.218:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 717.302470][ T30] audit: type=1326 audit(1748737586.218:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815398e969 code=0x7ffc0000 [ 717.436247][T14015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.509736][ T30] audit: type=1326 audit(1748737586.218:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f815392ab39 code=0x7ffc0000 [ 717.533052][ T5873] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 717.773759][T15596] lo speed is unknown, defaulting to 1000 [ 717.779724][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 718.488260][ T5873] usb 2-1: config 128 has an invalid interface number: 172 but max is 0 [ 718.521987][ T5873] usb 2-1: config 128 has no interface number 0 [ 718.553232][ T5873] usb 2-1: config 128 interface 172 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 718.601434][ T5873] usb 2-1: config 128 interface 172 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 718.662913][T14015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.672439][ T5873] usb 2-1: string descriptor 0 read error: -22 [ 718.724719][ T5873] usb 2-1: New USB device found, idVendor=0c88, idProduct=180a, bcdDevice=8d.8b [ 718.734650][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.811140][ T5873] option 2-1:128.172: GSM modem (1-port) converter detected [ 719.016976][ T5873] usb 2-1: USB disconnect, device number 14 [ 719.069184][T14015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.083577][ T5873] option 2-1:128.172: device disconnected [ 719.232470][T14015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.313086][ T5835] Bluetooth: hci5: command tx timeout [ 719.474205][T15659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2934'. [ 719.573673][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'. [ 719.837450][T15596] chnl_net:caif_netlink_parms(): no params data found [ 720.845159][T14015] bridge_slave_1: left allmulticast mode [ 720.859533][T14015] bridge_slave_1: left promiscuous mode [ 720.905189][T14015] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.927126][T14015] bridge_slave_0: left allmulticast mode [ 720.932843][T14015] bridge_slave_0: left promiscuous mode [ 720.957746][T14015] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.393195][ T5835] Bluetooth: hci5: command tx timeout [ 722.121596][T14015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.142114][T14015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.161740][T14015] bond0 (unregistering): Released all slaves [ 722.192747][T14962] syz2: Port: 1 Link DOWN [ 722.261939][T15696] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 722.360823][T15713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2945'. [ 722.398931][T14015] IPVS: stopping master sync thread 6477 ... [ 722.649567][T15596] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.659964][T15596] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.669885][T15596] bridge_slave_0: entered allmulticast mode [ 722.679129][T15596] bridge_slave_0: entered promiscuous mode [ 722.840439][T15596] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.862118][T15596] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.891045][T15596] bridge_slave_1: entered allmulticast mode [ 722.932260][T15723] tipc: Trying to set illegal importance in message [ 722.995438][T15596] bridge_slave_1: entered promiscuous mode [ 723.420095][T15596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.446729][T15596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.483066][ T5835] Bluetooth: hci5: command tx timeout [ 723.518744][T15728] Bluetooth: MGMT ver 1.23 [ 723.917855][T15596] team0: Port device team_slave_0 added [ 723.948761][T15596] team0: Port device team_slave_1 added [ 724.318834][T15596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.350913][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.493554][T15596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.582438][T15596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.608658][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.667179][T15596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.869064][T14015] hsr_slave_0: left promiscuous mode [ 724.913768][T14015] hsr_slave_1: left promiscuous mode [ 724.920024][T14015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.942559][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 724.955657][T14015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.064641][T14015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.072134][T14015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.187251][T14015] veth1_macvtap: left promiscuous mode [ 725.196697][T14015] veth0_macvtap: left promiscuous mode [ 725.226125][T14015] veth1_vlan: left promiscuous mode [ 725.241881][T14015] veth0_vlan: left promiscuous mode [ 726.017520][T15778] fuse: Bad value for 'rootmode' [ 727.561769][T14015] team0 (unregistering): Port device team_slave_1 removed [ 727.651466][T14015] team0 (unregistering): Port device team_slave_0 removed [ 727.860282][ T967] smc: removing ib device syz2 [ 729.061754][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 729.061769][ T30] audit: type=1326 audit(1748737598.918:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.132136][ T30] audit: type=1326 audit(1748737598.918:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.189468][T15596] hsr_slave_0: entered promiscuous mode [ 729.218122][ T30] audit: type=1326 audit(1748737598.958:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.290984][ T30] audit: type=1326 audit(1748737598.958:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.314372][T15596] hsr_slave_1: entered promiscuous mode [ 729.419480][ T30] audit: type=1326 audit(1748737598.958:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.529891][ T30] audit: type=1326 audit(1748737598.958:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.604771][ T30] audit: type=1326 audit(1748737598.958:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.652303][ T30] audit: type=1326 audit(1748737598.958:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 729.724393][ T30] audit: type=1326 audit(1748737598.958:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a23b8d2d0 code=0x7ffc0000 [ 729.749898][ T30] audit: type=1326 audit(1748737598.958:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.2.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a23b8e969 code=0x7ffc0000 [ 732.910368][T14015] IPVS: stop unused estimator thread 0... [ 734.024996][T15596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 734.099337][T15596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 734.230730][T15596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 734.296233][T15596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 734.473734][T14957] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 734.580326][T15596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.637953][T15596] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.645013][T14957] usb 2-1: Using ep0 maxpacket: 16 [ 734.666576][T14957] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 734.680199][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.687448][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.700246][T14957] usb 2-1: config 8 has no interface number 0 [ 734.713154][T14957] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 734.735885][T14957] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 734.754772][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.761956][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.800511][T14957] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 734.822600][T14957] usb 2-1: config 8 interface 39 has no altsetting 0 [ 734.840089][T14957] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 734.859554][T14957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.920076][T14957] usb 2-1: Product: syz [ 734.937310][T14957] usb 2-1: Manufacturer: syz [ 734.959792][T14957] usb 2-1: SerialNumber: syz [ 736.193150][T15222] Bluetooth: hci5: command 0x0405 tx timeout [ 736.211824][T14957] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -110 [ 736.233367][T14957] ipheth 2-1:8.39: probe with driver ipheth failed with error -110 [ 736.589086][T15596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.612048][T15899] IPVS: Error joining to the multicast group [ 736.729982][T15596] veth0_vlan: entered promiscuous mode [ 736.896345][T15596] veth1_vlan: entered promiscuous mode [ 737.029816][T15596] veth0_macvtap: entered promiscuous mode [ 737.054436][T15596] veth1_macvtap: entered promiscuous mode [ 737.121048][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 737.121067][ T30] audit: type=1326 audit(1748737606.978:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15909 comm="syz.4.2995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd816f8e969 code=0x0 [ 737.141432][T15596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.180656][T15911] lo speed is unknown, defaulting to 1000 [ 737.197254][T15596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.449541][T15596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.493276][T15596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.531394][T15596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.550738][T15596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.682103][T14962] usb 2-1: USB disconnect, device number 15 [ 738.420887][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.466893][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.815528][T15942] 9pnet_fd: Insufficient options for proto=fd [ 738.822545][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.840611][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.603716][T15956] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 740.223790][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3005'. [ 741.268652][T15973] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3008'. [ 741.339906][T15973] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3008'. [ 741.380997][T15973] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3008'. [ 741.851993][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 741.862091][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 741.870734][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 741.881612][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 741.890920][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 743.194343][T15985] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 743.309560][T15977] lo speed is unknown, defaulting to 1000 [ 743.361345][T15987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3011'. [ 744.396060][T15996] FAULT_INJECTION: forcing a failure. [ 744.396060][T15996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.409563][T15996] CPU: 1 UID: 0 PID: 15996 Comm: syz.3.3013 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 744.409592][T15996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.409605][T15996] Call Trace: [ 744.409613][T15996] [ 744.409622][T15996] dump_stack_lvl+0x189/0x250 [ 744.409658][T15996] ? __pfx____ratelimit+0x10/0x10 [ 744.409692][T15996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.409721][T15996] ? __pfx__printk+0x10/0x10 [ 744.409742][T15996] ? __might_fault+0xb0/0x130 [ 744.409786][T15996] should_fail_ex+0x414/0x560 [ 744.409815][T15996] _copy_from_user+0x2d/0xb0 [ 744.409844][T15996] ip6_tnl_siocdevprivate+0x4b5/0xad0 [ 744.409877][T15996] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 744.409900][T15996] ? rcu_is_watching+0x15/0xb0 [ 744.409937][T15996] ? rcu_is_watching+0x15/0xb0 [ 744.409974][T15996] ? full_name_hash+0x92/0xe0 [ 744.410000][T15996] ? netdev_name_node_lookup+0xdf/0x120 [ 744.410038][T15996] dev_ifsioc+0xb57/0xf00 [ 744.410072][T15996] dev_ioctl+0x84c/0x1150 [ 744.410099][T15996] sock_ioctl+0x719/0x790 [ 744.410133][T15996] ? __pfx_sock_ioctl+0x10/0x10 [ 744.410167][T15996] ? security_file_ioctl+0x19/0x2d0 [ 744.410195][T15996] ? bpf_lsm_file_ioctl+0x9/0x20 [ 744.410218][T15996] ? __pfx_sock_ioctl+0x10/0x10 [ 744.410249][T15996] __se_sys_ioctl+0xf9/0x170 [ 744.410279][T15996] do_syscall_64+0xfa/0x3b0 [ 744.410301][T15996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.410321][T15996] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 744.410341][T15996] ? clear_bhb_loop+0x60/0xb0 [ 744.410366][T15996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.410386][T15996] RIP: 0033:0x7f8213b8e969 [ 744.410405][T15996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.410422][T15996] RSP: 002b:00007f82119b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.410444][T15996] RAX: ffffffffffffffda RBX: 00007f8213db6160 RCX: 00007f8213b8e969 [ 744.410460][T15996] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000007 [ 744.410472][T15996] RBP: 00007f82119b4090 R08: 0000000000000000 R09: 0000000000000000 [ 744.410485][T15996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.410497][T15996] R13: 0000000000000000 R14: 00007f8213db6160 R15: 00007ffc87806138 [ 744.410529][T15996] [ 745.074788][ T5835] Bluetooth: hci1: command tx timeout [ 745.645985][T16005] FAULT_INJECTION: forcing a failure. [ 745.645985][T16005] name failslab, interval 1, probability 0, space 0, times 0 [ 745.687066][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.3.3016 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 745.687099][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.687112][T16005] Call Trace: [ 745.687120][T16005] [ 745.687130][T16005] dump_stack_lvl+0x189/0x250 [ 745.687165][T16005] ? __pfx____ratelimit+0x10/0x10 [ 745.687197][T16005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.687226][T16005] ? __pfx__printk+0x10/0x10 [ 745.687242][T16005] ? __lock_acquire+0xab9/0xd20 [ 745.687280][T16005] should_fail_ex+0x414/0x560 [ 745.687308][T16005] should_failslab+0xa8/0x100 [ 745.687343][T16005] kmem_cache_alloc_noprof+0x73/0x3c0 [ 745.687373][T16005] ? xfrm_state_alloc+0x24/0x2f0 [ 745.687398][T16005] xfrm_state_alloc+0x24/0x2f0 [ 745.687419][T16005] xfrm_state_find+0x380d/0x5450 [ 745.687440][T16005] ? __lock_acquire+0xab9/0xd20 [ 745.687474][T16005] ? __lock_acquire+0xab9/0xd20 [ 745.687502][T16005] ? xfrm_state_find+0x229/0x5450 [ 745.687530][T16005] ? __pfx_xfrm_state_find+0x10/0x10 [ 745.687562][T16005] ? __lock_acquire+0xab9/0xd20 [ 745.687590][T16005] xfrm_resolve_and_create_bundle+0x768/0x2f90 [ 745.687654][T16005] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 745.687682][T16005] ? __lock_acquire+0xab9/0xd20 [ 745.687726][T16005] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 745.687767][T16005] ? rt_is_expired+0x1c/0x2d0 [ 745.687804][T16005] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 745.687838][T16005] ? xfrm_expand_policies+0x41f/0x6a0 [ 745.687872][T16005] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 745.687902][T16005] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 745.687939][T16005] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 745.687964][T16005] ? rcuref_put+0x1b7/0x210 [ 745.687994][T16005] ? __pfx_rcuref_put+0x10/0x10 [ 745.688024][T16005] ? tomoyo_check_inet_address+0x275/0x8c0 [ 745.688060][T16005] xfrm_lookup_route+0x3c/0x1c0 [ 745.688090][T16005] __ip4_datagram_connect+0x99d/0x1260 [ 745.688147][T16005] __ip6_datagram_connect+0x9f0/0x1150 [ 745.688189][T16005] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 745.688216][T16005] ? __local_bh_enable_ip+0x12d/0x1c0 [ 745.688238][T16005] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 745.688271][T16005] ip6_datagram_connect_v6_only+0x63/0xa0 [ 745.688302][T16005] __sys_connect+0x313/0x440 [ 745.688326][T16005] ? __fget_files+0x3a0/0x420 [ 745.688347][T16005] ? __pfx___sys_connect+0x10/0x10 [ 745.688385][T16005] ? __pfx_ksys_write+0x10/0x10 [ 745.688410][T16005] ? rcu_is_watching+0x15/0xb0 [ 745.688443][T16005] __x64_sys_connect+0x7a/0x90 [ 745.688468][T16005] do_syscall_64+0xfa/0x3b0 [ 745.688488][T16005] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.688507][T16005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.688527][T16005] ? clear_bhb_loop+0x60/0xb0 [ 745.688552][T16005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.688571][T16005] RIP: 0033:0x7f8213b8e969 [ 745.688590][T16005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.688607][T16005] RSP: 002b:00007f82119f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 745.688630][T16005] RAX: ffffffffffffffda RBX: 00007f8213db5fa0 RCX: 00007f8213b8e969 [ 745.688644][T16005] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 745.688658][T16005] RBP: 00007f82119f6090 R08: 0000000000000000 R09: 0000000000000000 [ 745.688670][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.688682][T16005] R13: 0000000000000000 R14: 00007f8213db5fa0 R15: 00007ffc87806138 [ 745.688715][T16005] [ 745.723348][T15977] chnl_net:caif_netlink_parms(): no params data found [ 746.606335][T16018] netlink: 'syz.1.3018': attribute type 10 has an invalid length. [ 747.163050][ T5835] Bluetooth: hci1: command tx timeout [ 747.351354][T16023] ucma_write: process 17 (syz.3.3020) changed security contexts after opening file descriptor, this is not allowed. [ 747.442299][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.522584][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.531786][T16009] 9pnet_fd: Insufficient options for proto=fd [ 747.708286][T16018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.721384][T16018] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 748.811985][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.224837][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.236784][ T5835] Bluetooth: hci1: command tx timeout [ 749.276927][ T5873] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 749.486977][ T5873] usb 4-1: device descriptor read/64, error -71 [ 749.763591][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 750.023222][ T5873] usb 4-1: device descriptor read/64, error -71 [ 750.045593][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.096830][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.119673][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.143803][T15977] bridge_slave_0: entered allmulticast mode [ 750.144136][ T5873] usb usb4-port1: attempt power cycle [ 750.152019][T15977] bridge_slave_0: entered promiscuous mode [ 750.205483][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.285436][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.294679][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.311259][T15977] bridge_slave_1: entered allmulticast mode [ 750.319317][T15977] bridge_slave_1: entered promiscuous mode [ 750.519584][T16057] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 750.560118][T15977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.595796][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 750.828120][ T5873] usb 4-1: device descriptor read/8, error -71 [ 751.075928][T15977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.313124][ T5835] Bluetooth: hci1: command tx timeout [ 751.436823][T15977] team0: Port device team_slave_0 added [ 751.445935][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 751.488818][ T5873] usb 4-1: device descriptor read/8, error -71 [ 751.488824][T15977] team0: Port device team_slave_1 added [ 751.613814][ T5873] usb usb4-port1: unable to enumerate USB device [ 751.623244][T15977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.631513][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.658766][T15977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.694343][T15977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.707551][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.734781][T15977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.750613][ T59] bridge_slave_1: left allmulticast mode [ 751.757834][ T59] bridge_slave_1: left promiscuous mode [ 751.786851][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.825396][ T59] bridge_slave_0: left allmulticast mode [ 751.838864][ T59] bridge_slave_0: left promiscuous mode [ 751.914014][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.197855][T16078] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 752.855922][T16082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 753.133716][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.179131][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.196966][ T59] bond0 (unregistering): Released all slaves [ 753.217042][ T59] bond1 (unregistering): Released all slaves [ 753.671445][ T59] tipc: Disabling bearer [ 753.716499][ T59] tipc: Left network mode [ 753.780901][T15977] hsr_slave_0: entered promiscuous mode [ 753.792312][ T59] IPVS: stopping master sync thread 6611 ... [ 753.858125][T15977] hsr_slave_1: entered promiscuous mode [ 753.881422][T15977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.917570][T15977] Cannot create hsr debugfs directory [ 754.560749][T16114] virtio-fs: tag not found [ 754.859040][ T59] hsr_slave_0: left promiscuous mode [ 754.880389][ T59] hsr_slave_1: left promiscuous mode [ 754.894588][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.916960][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.944146][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.962248][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.030693][ T59] veth1_macvtap: left promiscuous mode [ 755.208265][ T59] veth0_macvtap: left promiscuous mode [ 755.227104][ T59] veth1_vlan: left promiscuous mode [ 755.232471][ T59] veth0_vlan: left promiscuous mode [ 756.309420][ T59] pimreg (unregistering): left allmulticast mode [ 757.138654][ T59] team0 (unregistering): Port device team_slave_1 removed [ 757.191525][ T59] team0 (unregistering): Port device team_slave_0 removed [ 758.029854][T16164] CIFS mount error: No usable UNC path provided in device string! [ 758.029854][T16164] [ 758.069207][ T5873] lo speed is unknown, defaulting to 1000 [ 758.075253][T16164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 758.099781][ T5873] infiniband syz0: ib_query_port failed (-19) [ 758.193001][ T30] audit: type=1326 audit(1748737628.038:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8213b8e969 code=0x7ffc0000 [ 758.296839][ T30] audit: type=1326 audit(1748737628.038:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8213b8e969 code=0x7ffc0000 [ 758.367481][ T30] audit: type=1326 audit(1748737628.038:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8213b8e969 code=0x7ffc0000 [ 758.485100][ T30] audit: type=1326 audit(1748737628.048:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8213b8e969 code=0x7ffc0000 [ 758.571776][ T30] audit: type=1326 audit(1748737628.048:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8213b8e969 code=0x7ffc0000 [ 758.598978][ T30] audit: type=1326 audit(1748737628.048:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8213b8e969 code=0x7ffc0000 [ 758.628014][ T30] audit: type=1326 audit(1748737628.048:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8213b8e969 code=0x7ffc0000 [ 758.654764][ T30] audit: type=1326 audit(1748737628.048:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8213b85927 code=0x7ffc0000 [ 758.681997][ T30] audit: type=1326 audit(1748737628.048:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8213b2ab39 code=0x7ffc0000 [ 758.714070][ T30] audit: type=1326 audit(1748737628.048:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16165 comm="syz.3.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8213b85927 code=0x7ffc0000 [ 758.988297][T16176] FAULT_INJECTION: forcing a failure. [ 758.988297][T16176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.006511][T16176] CPU: 0 UID: 0 PID: 16176 Comm: syz.1.3067 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 759.006542][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.006554][T16176] Call Trace: [ 759.006562][T16176] [ 759.006579][T16176] dump_stack_lvl+0x189/0x250 [ 759.006614][T16176] ? __pfx____ratelimit+0x10/0x10 [ 759.006647][T16176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.006677][T16176] ? __pfx__printk+0x10/0x10 [ 759.006698][T16176] ? __might_fault+0xb0/0x130 [ 759.006742][T16176] should_fail_ex+0x414/0x560 [ 759.006771][T16176] _copy_from_user+0x2d/0xb0 [ 759.006800][T16176] ip6_tnl_siocdevprivate+0x1b6/0xad0 [ 759.006834][T16176] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 759.006857][T16176] ? rcu_is_watching+0x15/0xb0 [ 759.006902][T16176] ? full_name_hash+0x92/0xe0 [ 759.006929][T16176] ? netdev_name_node_lookup+0xdf/0x120 [ 759.006966][T16176] dev_ifsioc+0xb57/0xf00 [ 759.007000][T16176] dev_ioctl+0x84c/0x1150 [ 759.007027][T16176] sock_ioctl+0x719/0x790 [ 759.007061][T16176] ? __pfx_sock_ioctl+0x10/0x10 [ 759.007095][T16176] ? __fget_files+0x3a0/0x420 [ 759.007114][T16176] ? __fget_files+0x2a/0x420 [ 759.007137][T16176] ? bpf_lsm_file_ioctl+0x9/0x20 [ 759.007161][T16176] ? __pfx_sock_ioctl+0x10/0x10 [ 759.007191][T16176] __se_sys_ioctl+0xf9/0x170 [ 759.007221][T16176] do_syscall_64+0xfa/0x3b0 [ 759.007241][T16176] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.007260][T16176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.007281][T16176] ? clear_bhb_loop+0x60/0xb0 [ 759.007306][T16176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.007325][T16176] RIP: 0033:0x7fc45c98e969 [ 759.007342][T16176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.007359][T16176] RSP: 002b:00007fc45d7e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.007379][T16176] RAX: ffffffffffffffda RBX: 00007fc45cbb5fa0 RCX: 00007fc45c98e969 [ 759.007393][T16176] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000003 [ 759.007407][T16176] RBP: 00007fc45d7e9090 R08: 0000000000000000 R09: 0000000000000000 [ 759.007420][T16176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.007431][T16176] R13: 0000000000000000 R14: 00007fc45cbb5fa0 R15: 00007fff88f89928 [ 759.007464][T16176] [ 759.498918][ T59] IPVS: stop unused estimator thread 0... [ 760.110739][T16187] overlayfs: failed to clone upperpath [ 760.215017][T15977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 760.238102][T15977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 760.246626][T16196] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3075'. [ 760.277384][T15977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 760.327869][T15977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 760.519757][T16204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.551773][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3080'. [ 760.571609][T16206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3080'. [ 760.619273][T15977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.695944][T16206] bond3: entered promiscuous mode [ 760.701474][T16206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.750690][T16211] netlink: 'syz.2.3082': attribute type 4 has an invalid length. [ 760.791003][T16211] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3082'. [ 760.795461][T15977] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.848539][T14015] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.855917][T14015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.885920][T14015] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.893133][T14015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.953540][T16216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3083'. [ 761.924473][T15977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.478615][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3090'. [ 762.559055][T16249] openvswitch: netlink: IPv4 tun info is not correct [ 762.568216][T15977] veth0_vlan: entered promiscuous mode [ 762.601098][T15977] veth1_vlan: entered promiscuous mode [ 762.670727][T15977] veth0_macvtap: entered promiscuous mode [ 762.692306][T15977] veth1_macvtap: entered promiscuous mode [ 762.720818][T15977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.757201][T15977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.807780][T15977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.883193][T15977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.892036][T15977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.943114][T15977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.433036][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.473403][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.104703][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.112588][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.165131][T15977] ================================================================== [ 764.173253][T15977] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 764.181006][T15977] Write of size 8 at addr ffff88802f3bb408 by task syz-executor/15977 [ 764.189157][T15977] [ 764.191494][T15977] CPU: 1 UID: 0 PID: 15977 Comm: syz-executor Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 764.191513][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.191523][T15977] Call Trace: [ 764.191529][T15977] [ 764.191536][T15977] dump_stack_lvl+0x189/0x250 [ 764.191560][T15977] ? __virt_addr_valid+0x1c8/0x5c0 [ 764.191580][T15977] ? rcu_is_watching+0x15/0xb0 [ 764.191596][T15977] ? __kasan_check_byte+0x12/0x40 [ 764.191618][T15977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.191638][T15977] ? rcu_is_watching+0x15/0xb0 [ 764.191654][T15977] ? lock_release+0x4b/0x3e0 [ 764.191670][T15977] ? __virt_addr_valid+0x1c8/0x5c0 [ 764.191688][T15977] ? __virt_addr_valid+0x4a5/0x5c0 [ 764.191708][T15977] print_report+0xd2/0x2b0 [ 764.191726][T15977] ? binder_add_device+0x5f/0xa0 [ 764.191746][T15977] kasan_report+0x118/0x150 [ 764.191768][T15977] ? binder_add_device+0x5f/0xa0 [ 764.191790][T15977] binder_add_device+0x5f/0xa0 [ 764.191810][T15977] binderfs_binder_device_create+0x9e7/0xc40 [ 764.191835][T15977] ? __pfx_binderfs_binder_device_create+0x10/0x10 [ 764.191860][T15977] ? do_raw_spin_unlock+0x122/0x240 [ 764.191882][T15977] binderfs_fill_super+0xa0e/0xe90 [ 764.191904][T15977] ? __pfx_binderfs_fill_super+0x10/0x10 [ 764.191933][T15977] ? shrinker_register+0x16b/0x230 [ 764.191951][T15977] ? sget_fc+0x962/0xa40 [ 764.191969][T15977] ? __pfx_set_anon_super_fc+0x10/0x10 [ 764.191988][T15977] ? __pfx_binderfs_fill_super+0x10/0x10 [ 764.192007][T15977] get_tree_nodev+0xbb/0x150 [ 764.192028][T15977] vfs_get_tree+0x92/0x2b0 [ 764.192049][T15977] do_new_mount+0x24a/0xa40 [ 764.192075][T15977] __se_sys_mount+0x317/0x410 [ 764.192091][T15977] ? __pfx___se_sys_mount+0x10/0x10 [ 764.192107][T15977] ? do_syscall_64+0xbe/0x3b0 [ 764.192122][T15977] ? __x64_sys_mount+0x20/0xc0 [ 764.192135][T15977] do_syscall_64+0xfa/0x3b0 [ 764.192150][T15977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.192164][T15977] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.192179][T15977] ? clear_bhb_loop+0x60/0xb0 [ 764.192195][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.192209][T15977] RIP: 0033:0x7f02c079010a [ 764.192223][T15977] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.192236][T15977] RSP: 002b:00007ffea8136568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 764.192251][T15977] RAX: ffffffffffffffda RBX: 00007f02c0810e74 RCX: 00007f02c079010a [ 764.192263][T15977] RDX: 00007f02c08208cb RSI: 00007f02c0810e74 RDI: 00007f02c08208cb [ 764.192273][T15977] RBP: 00007f02c08110bd R08: 0000000000000000 R09: 00007f02c09b6738 [ 764.192284][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02c07ec1a8 [ 764.192293][T15977] R13: 00007f02c07ec180 R14: 0000000000000009 R15: 0000000000000000 [ 764.192309][T15977] [ 764.192314][T15977] [ 764.476085][T15977] Allocated by task 15221: [ 764.480492][T15977] kasan_save_track+0x3e/0x80 [ 764.485188][T15977] __kasan_kmalloc+0x93/0xb0 [ 764.489790][T15977] __kmalloc_cache_noprof+0x230/0x3d0 [ 764.495201][T15977] binderfs_binder_device_create+0x1eb/0xc40 [ 764.501205][T15977] binderfs_fill_super+0xa0e/0xe90 [ 764.506332][T15977] get_tree_nodev+0xbb/0x150 [ 764.510928][T15977] vfs_get_tree+0x92/0x2b0 [ 764.515349][T15977] do_new_mount+0x24a/0xa40 [ 764.519865][T15977] __se_sys_mount+0x317/0x410 [ 764.524546][T15977] do_syscall_64+0xfa/0x3b0 [ 764.529064][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.534968][T15977] [ 764.537286][T15977] Freed by task 14962: [ 764.541348][T15977] kasan_save_track+0x3e/0x80 [ 764.546118][T15977] kasan_save_free_info+0x46/0x50 [ 764.551226][T15977] __kasan_slab_free+0x62/0x70 [ 764.556255][T15977] kfree+0x18e/0x440 [ 764.560152][T15977] binder_proc_dec_tmpref+0x228/0x4f0 [ 764.565545][T15977] binder_deferred_func+0x13a5/0x1520 [ 764.571272][T15977] process_scheduled_works+0xade/0x17b0 [ 764.576941][T15977] worker_thread+0x8a0/0xda0 [ 764.581535][T15977] kthread+0x711/0x8a0 [ 764.585740][T15977] ret_from_fork+0x3fc/0x770 [ 764.590335][T15977] ret_from_fork_asm+0x1a/0x30 [ 764.595102][T15977] [ 764.597425][T15977] The buggy address belongs to the object at ffff88802f3bb400 [ 764.597425][T15977] which belongs to the cache kmalloc-512 of size 512 [ 764.611483][T15977] The buggy address is located 8 bytes inside of [ 764.611483][T15977] freed 512-byte region [ffff88802f3bb400, ffff88802f3bb600) [ 764.625294][T15977] [ 764.627618][T15977] The buggy address belongs to the physical page: [ 764.634118][T15977] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f3bb800 pfn:0x2f3b8 [ 764.644182][T15977] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 764.652705][T15977] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 764.661216][T15977] page_type: f5(slab) [ 764.665286][T15977] raw: 00fff00000000240 ffff88801a441c80 ffffea0000d36e10 ffffea0000bdf010 [ 764.673918][T15977] raw: ffff88802f3bb800 000000000010000f 00000000f5000000 0000000000000000 [ 764.682596][T15977] head: 00fff00000000240 ffff88801a441c80 ffffea0000d36e10 ffffea0000bdf010 [ 764.691355][T15977] head: ffff88802f3bb800 000000000010000f 00000000f5000000 0000000000000000 [ 764.700156][T15977] head: 00fff00000000002 ffffea0000bcee01 00000000ffffffff 00000000ffffffff [ 764.708935][T15977] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 764.717611][T15977] page dumped because: kasan: bad access detected [ 764.724039][T15977] page_owner tracks the page as allocated [ 764.729748][T15977] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3440, tgid 3440 (kworker/u8:8), ts 96693698667, free_ts 96157434961 [ 764.751461][T15977] post_alloc_hook+0x240/0x2a0 [ 764.756237][T15977] get_page_from_freelist+0x21d1/0x22b0 [ 764.761793][T15977] __alloc_frozen_pages_noprof+0x181/0x370 [ 764.767693][T15977] alloc_pages_mpol+0x232/0x4a0 [ 764.772573][T15977] allocate_slab+0x8a/0x3b0 [ 764.777076][T15977] ___slab_alloc+0xbfc/0x1480 [ 764.781750][T15977] __kmalloc_cache_noprof+0x296/0x3d0 [ 764.787355][T15977] __ipv6_dev_mc_inc+0x420/0xaf0 [ 764.792507][T15977] addrconf_dad_work+0x3d0/0x14b0 [ 764.797566][T15977] process_scheduled_works+0xade/0x17b0 [ 764.803124][T15977] worker_thread+0x8a0/0xda0 [ 764.807739][T15977] kthread+0x711/0x8a0 [ 764.811854][T15977] ret_from_fork+0x3fc/0x770 [ 764.816557][T15977] ret_from_fork_asm+0x1a/0x30 [ 764.821364][T15977] page last free pid 5876 tgid 5876 stack trace: [ 764.827698][T15977] __free_frozen_pages+0xc65/0xe50 [ 764.832810][T15977] __slab_free+0x326/0x400 [ 764.837237][T15977] qlist_free_all+0x97/0x140 [ 764.841930][T15977] kasan_quarantine_reduce+0x148/0x160 [ 764.847490][T15977] __kasan_slab_alloc+0x22/0x80 [ 764.853250][T15977] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 764.859287][T15977] __alloc_skb+0x112/0x2d0 [ 764.863713][T15977] mld_newpack+0x13c/0xc40 [ 764.868134][T15977] add_grhead+0x5a/0x2a0 [ 764.872374][T15977] add_grec+0x13b2/0x1670 [ 764.876704][T15977] mld_ifc_work+0x6e6/0xde0 [ 764.881209][T15977] process_scheduled_works+0xade/0x17b0 [ 764.886759][T15977] worker_thread+0x8a0/0xda0 [ 764.891356][T15977] kthread+0x711/0x8a0 [ 764.895436][T15977] ret_from_fork+0x3fc/0x770 [ 764.900022][T15977] ret_from_fork_asm+0x1a/0x30 [ 764.904785][T15977] [ 764.907105][T15977] Memory state around the buggy address: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 764.912836][T15977] ffff88802f3bb300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 764.920898][T15977] ffff88802f3bb380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 764.928962][T15977] >ffff88802f3bb400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 764.937111][T15977] ^ [ 764.941431][T15977] ffff88802f3bb480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 764.949510][T15977] ffff88802f3bb500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 764.957746][T15977] ================================================================== [ 765.363547][T15977] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 765.370818][T15977] CPU: 1 UID: 0 PID: 15977 Comm: syz-executor Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 765.382744][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 765.393018][T15977] Call Trace: [ 765.396330][T15977] [ 765.399266][T15977] dump_stack_lvl+0x99/0x250 [ 765.403876][T15977] ? __asan_memcpy+0x40/0x70 [ 765.408476][T15977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.413690][T15977] ? __pfx__printk+0x10/0x10 [ 765.418297][T15977] panic+0x2db/0x790 [ 765.422224][T15977] ? __pfx_panic+0x10/0x10 [ 765.426763][T15977] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 765.432670][T15977] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 765.439012][T15977] ? print_memory_metadata+0x314/0x400 [ 765.444487][T15977] ? binder_add_device+0x5f/0xa0 [ 765.449438][T15977] check_panic_on_warn+0x89/0xb0 [ 765.454397][T15977] ? binder_add_device+0x5f/0xa0 [ 765.459358][T15977] end_report+0x78/0x160 [ 765.463619][T15977] kasan_report+0x129/0x150 [ 765.468153][T15977] ? binder_add_device+0x5f/0xa0 [ 765.473108][T15977] binder_add_device+0x5f/0xa0 [ 765.477888][T15977] binderfs_binder_device_create+0x9e7/0xc40 [ 765.483888][T15977] ? __pfx_binderfs_binder_device_create+0x10/0x10 [ 765.490400][T15977] ? do_raw_spin_unlock+0x122/0x240 [ 765.495710][T15977] binderfs_fill_super+0xa0e/0xe90 [ 765.500844][T15977] ? __pfx_binderfs_fill_super+0x10/0x10 [ 765.506502][T15977] ? shrinker_register+0x16b/0x230 [ 765.511624][T15977] ? sget_fc+0x962/0xa40 [ 765.515875][T15977] ? __pfx_set_anon_super_fc+0x10/0x10 [ 765.521380][T15977] ? __pfx_binderfs_fill_super+0x10/0x10 [ 765.527024][T15977] get_tree_nodev+0xbb/0x150 [ 765.531631][T15977] vfs_get_tree+0x92/0x2b0 [ 765.536060][T15977] do_new_mount+0x24a/0xa40 [ 765.540582][T15977] __se_sys_mount+0x317/0x410 [ 765.545267][T15977] ? __pfx___se_sys_mount+0x10/0x10 [ 765.550472][T15977] ? do_syscall_64+0xbe/0x3b0 [ 765.555184][T15977] ? __x64_sys_mount+0x20/0xc0 [ 765.559960][T15977] do_syscall_64+0xfa/0x3b0 [ 765.564483][T15977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.570645][T15977] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.576809][T15977] ? clear_bhb_loop+0x60/0xb0 [ 765.581496][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.587486][T15977] RIP: 0033:0x7f02c079010a [ 765.591909][T15977] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.611522][T15977] RSP: 002b:00007ffea8136568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 765.620033][T15977] RAX: ffffffffffffffda RBX: 00007f02c0810e74 RCX: 00007f02c079010a [ 765.628015][T15977] RDX: 00007f02c08208cb RSI: 00007f02c0810e74 RDI: 00007f02c08208cb [ 765.635994][T15977] RBP: 00007f02c08110bd R08: 0000000000000000 R09: 00007f02c09b6738 [ 765.643980][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02c07ec1a8 [ 765.651970][T15977] R13: 00007f02c07ec180 R14: 0000000000000009 R15: 0000000000000000 [ 765.659982][T15977] [ 765.663383][T15977] Kernel Offset: disabled [ 765.667722][T15977] Rebooting in 86400 seconds..