last executing test programs: 15m51.286784091s ago: executing program 0 (id=376): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) socket$packet(0x11, 0x2, 0x300) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r9 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000080)={0x3000000d}) 15m50.048014934s ago: executing program 0 (id=381): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 15m49.881756741s ago: executing program 0 (id=384): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m49.696105455s ago: executing program 0 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 15m49.400166261s ago: executing program 0 (id=391): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000000000000002"], 0x64}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef) 15m48.680929011s ago: executing program 0 (id=403): socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_io_uring_setup(0x49b, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x26}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 15m48.395164065s ago: executing program 32 (id=403): socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_io_uring_setup(0x49b, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x26}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 15m31.322198401s ago: executing program 3 (id=491): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c2, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 15m30.476296189s ago: executing program 3 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x2a0, r1, 0x507, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x148, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x568cf03934d6088a}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd6d55fc8ce228623}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8002}, 0x20000050) 15m30.176656673s ago: executing program 3 (id=496): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) io_submit(r0, 0x2, &(0x7f0000000180)=[0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x1, r1}]) 15m29.801661379s ago: executing program 3 (id=502): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r2, 0x0) 15m29.555587897s ago: executing program 3 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x2a0, r1, 0x507, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x148, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x568cf03934d6088a}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd6d55fc8ce228623}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8002}, 0x20000050) 15m29.254204849s ago: executing program 3 (id=508): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) syz_clone(0x40500, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 15m14.168907707s ago: executing program 33 (id=508): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) syz_clone(0x40500, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 8m43.575480471s ago: executing program 1 (id=3683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) 8m41.364215831s ago: executing program 1 (id=3693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x14, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) 8m37.044383586s ago: executing program 1 (id=3698): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0xffffffffffffffff, @ANYRES8=0xffffffffffffffff], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r13}, 0x10) r15 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[], [], 0x6b}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES64=r14, @ANYRESDEC=r4, @ANYRESHEX=r10, @ANYRESDEC=r7, @ANYRES16=r8, @ANYRESOCT=r1, @ANYRESHEX=r9, @ANYRES32=r7, @ANYRESOCT=r1, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000c2000000000000000025343ab57c00000000000000006fbe2f0a046d27e176aef6d308dd0f04c58692dc5fa456703e5c19e97d8d008864dfcef2ebe7792a0bae8e42e380cb772f4a3da27b092f830cae69a7b674f04c309c8f97820007c3ee99030b6fdce4c26640811dc3408e105cea0b3d3c261e26449867a92e06221abd5df18f", @ANYRES32=r16, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 8m34.793569199s ago: executing program 1 (id=3712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8m33.935717223s ago: executing program 1 (id=3718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a0001007265646972"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) 8m33.798238095s ago: executing program 1 (id=3719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000001ac0)=""/4093, 0xffd}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 8m18.619410763s ago: executing program 34 (id=3719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000001ac0)=""/4093, 0xffd}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 1m26.637939306s ago: executing program 4 (id=7247): openat$misdntimer(0xffffffffffffff9c, &(0x7f00000017c0), 0xc2800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) 1m26.55791027s ago: executing program 4 (id=7248): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x88, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdab9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x13}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 1m26.288666434s ago: executing program 4 (id=7252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYBLOB], 0x84}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="17b645e0", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="86d9806e98102979c98fa49ab1343f067d31d98b7970eddf1a1e85633715654de44fddabf79a9190b89b2463cd9c69f545f38c47c0fca0e05eb1e252b560450a09a4c481390a7e3dee5e851e53bb", 0x4e}, {0x0}], 0x2}}], 0x2, 0x4000044) 1m25.383016483s ago: executing program 4 (id=7257): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m25.307881359s ago: executing program 4 (id=7258): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x880) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xb2, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x22, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x7, 0x20, 0xffffffff, 0x0]}]}}}}}}}, 0x0) 1m24.429579098s ago: executing program 4 (id=7266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m24.128618166s ago: executing program 35 (id=7266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m23.595562453s ago: executing program 2 (id=7274): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m22.682280571s ago: executing program 2 (id=7278): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) mknod(0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000200)='-', 0xfffffe77}], 0x1, 0xa) 1m22.614192527s ago: executing program 2 (id=7280): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x13f4, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff3, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0x13c0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_FW_ACT={0x1390, 0x4, [@m_sample={0x18c, 0x1f, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x34, 0x3, 0x5, 0x9d, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6b, 0x6, 0x4, 0x4, 0x800}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0xf5, 0x6, "b78a1b5dd10518eb9ef4cd742a2307b75f64dd00ef8bb2a6debe7972605584a5b0dddd04b55215d4895fc769daad5e9fd1d974b98519d319330c8c1e2a8d487eaf5f1ef7c1155224ff5c9944ddef37a26592be41d2a3160839711a6a11f1453c582a363e049d657542da33d17599488421050738efc55216030015c97ff68790ac1281e1f4fdbb7e8d1d9c50c5aded5bfe503a50d332cae866cc5de40014b040806a0bc4c1a1a7371c826a05db3b975aafae74d1540a3ea1483cfd4415e6ce671ff19c20cae9d19d0e28b52a1ffc25b9b921ff9a1dc64399309c9fa7e9b4e3da3f60bf68c9d2022fc2c16ab8e69ad2da0a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x10ac, 0x12, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="039414f8ef7f"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x9, 0x20000000, 0x1, 0xff}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="c1e85b1e4e5e"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x401, 0x10000, 0x3, 0x5, 0xa}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x154, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xb, 0x7, 0x8}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x6, 0x3, 0x6, 0x7fffffff}}]}, {0xd9, 0x6, "c80d277c960f838a7343c21800c37522a8bf86c9a9fc24513192bf9b73b688f19c0358faf08c1c786c0f91da82f41287807f7bda6ba9b5eda53fc802bf99e9deeba1bfc2de18c0ff0b74181363613bdc1966d3b376bbaddfc105bb1e4004578d2d79c48544b97cf7f129485bee39aed789016e4b92360dec31a5426ede77f00f4b1d6893ef45642aa2fb0bed626219f5ebf64689cbda3045125ca9153967617411dc78fd888eefe9045572cb13c7188968e0de25ac22cceacc44c99934760beb507a044ac4f968dcf6574c89961a5f7a08ce21ecd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x908}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x8}}]}}]}, 0x13f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m22.266805872s ago: executing program 2 (id=7282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100}, 0x38, 0x40000003) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0xfd4}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) 1m22.158126236s ago: executing program 2 (id=7283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001a50000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1m20.906131413s ago: executing program 2 (id=7287): io_setup(0x7, &(0x7f0000005680)) r0 = socket$netlink(0x10, 0x3, 0x0) sync_file_range(r0, 0x200, 0x167, 0x6) syz_clone(0x48104200, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}) 1m5.499372956s ago: executing program 36 (id=7287): io_setup(0x7, &(0x7f0000005680)) r0 = socket$netlink(0x10, 0x3, 0x0) sync_file_range(r0, 0x200, 0x167, 0x6) syz_clone(0x48104200, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}) 16.200880647s ago: executing program 9 (id=7492): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0xffffffffffffffff, @ANYRES8=0xffffffffffffffff], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r13}, 0x10) r15 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[], [], 0x6b}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES64=r14, @ANYRESHEX=r10, @ANYRESDEC=r7, @ANYRES16=r8, @ANYRESOCT=r1, @ANYRESHEX=r9, @ANYRES32=r7, @ANYRESOCT=r1, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000c2000000000000000025343ab57c00000000000000006fbe2f0a046d27e176aef6d308dd0f04c58692dc5fa456703e5c19e97d8d008864dfcef2ebe7792a0bae8e42e380cb772f4a3da27b092f830cae69a7b674f04c309c8f97820007c3ee99030b6fdce4c26640811dc3408e105cea0b3d3c261e26449867a92e06221abd5df18f", @ANYRES32=r16, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 13.129911437s ago: executing program 9 (id=7506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) recvmmsg(r3, &(0x7f0000006a80)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=""/192, 0xc0}, 0xa}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f0000000280)=""/11, 0xb}], 0x4, &(0x7f00000008c0)=""/189, 0xbd}, 0xc9}, {{&(0x7f0000001a00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/249, 0xf9}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/86, 0x56}], 0x5, &(0x7f0000003d80)=""/242, 0xf2}, 0x5}, {{&(0x7f0000003e80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005040)=[{&(0x7f00000003c0)=""/47, 0x2f}, {&(0x7f0000003f00)=""/138, 0x8a}, {&(0x7f0000003fc0)=""/121, 0x79}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x5, &(0x7f00000050c0)=""/251, 0xfb}, 0x318}, {{&(0x7f00000051c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000005240)=""/199, 0xc7}, {&(0x7f0000000980)}, {&(0x7f0000005340)=""/135, 0x87}, {&(0x7f0000005400)=""/129, 0x81}, {&(0x7f00000054c0)=""/220, 0xdc}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/235, 0xeb}, {&(0x7f00000066c0)=""/246, 0xf6}, {&(0x7f00000067c0)=""/98, 0x62}, {&(0x7f0000006840)=""/108, 0x6c}], 0xa, &(0x7f0000006980)=""/213, 0xd5}, 0x4}], 0x5, 0x40000123, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) listen(0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000690e4890000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 12.249528558s ago: executing program 8 (id=7508): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 10.370499179s ago: executing program 8 (id=7513): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000002000)=""/4089, 0xff9}, {&(0x7f0000000800)=""/237, 0xed}, {&(0x7f0000000c00)=""/80, 0x50}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000001f40)=""/170, 0xaa}], 0x9}, 0x40010022) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=""/17, 0x11}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x80, @mcast1}, 0x1c) r9 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r9) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 8.218151747s ago: executing program 8 (id=7525): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) write$binfmt_script(r1, &(0x7f00000010c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0', [], 0xa, "123f26ce659316c4cf3c6d2314cabbeb5b1164990a453894d746146ca93e61ef9ff86c022b07b56c2041d73cbfbb5da390bacb448bdb96b1ced6efde9706e3a058dee5a98a5cecc491d5b0f85543043d0e8e2dd8e5fbe3d255ff512566f492cb3956d740db754f0da2a80a91d2c414ce5e9a3223470276aeb742c68f2a68bc87f9c5a2c0e78093e4d138c55e5b7e4a372da250e16b60ea3f457e8743eb9491819802f1d62df3a691eed5ad3f31e95946f55fd67d33236f038a44c9b920f6262fdd80964eeddf7a61946a061a55f66252ab64831d43fd1c419d083b49cdb8484d1038ed9529a45471205ac2f80459233256266886984f94fd4a79188057e19b4d1edce114126bcdf465b37f04a495052c87a99e1461a43b64205846260de5559b8ae4909aa1d408ce1c9e36ac385e89ecb20af9613b34a874afb92ecbb56caf27d76e1adf27bd5ef332b7e8c68e3295084823b84ac581e328eaf6adb3de69589b251c6a429c11f428388a02c2eb6ea7fc60a3380e9c6eb1a8b781b4c0a542baae7e24caf3e1850c2343a3d585e5419ebc7c5a4be48d486e0e2fd5093a388f083c06fb6d6a6dc032ff9b8d5b86a7995ab131a7e45e3fb12b57561dedac224b975435c8b9327a0be1917ea0a87f7b93e6dcfc7fb73c79cc13c443f2e30147f8db1a39d7d9fd579958817f4c0b44db262dbff1a04920b116f7e83db05a784fbb7138c9170a10077ccf94ab892ae88df825b3b9d034098a997897ed347d1fd1b35d9bb58d9745899eeb44410b8e8b064afd7a7c445aabdac5ecde0c7bdf7a6b4a9de5d5df0121859d274a36b1d272711a022c3c397c7983a4b4202f9921aed378eca8476ff21ddedc46b2645719c17e9955b4ad89b67488d4"}, 0x37c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x304}, "25a9ed68d4e2be5d", "24203b048e0c81c5dfa08cc54b07fdf2", "fea3efd7", "219971bc7e96b44a"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 5.48592813s ago: executing program 5 (id=7534): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x40, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x18}, {0x4, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.406821979s ago: executing program 6 (id=7536): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5.297848018s ago: executing program 5 (id=7537): socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000006800000000f533000000000000001811000021d86a3422f070d810aff993f0a7f37409d6d50b99dcb33be8f3d6613827c6763f557b075b3ff0605449db3ee1eba1c8b2a40a197ea3b815a913589be54dc7430d748c0dd29e63065b258e8a791f8d7c937d2b60182c429bb109c630800483bcbde6d191f075b40507ac7a2e6c5fecafe4698cccb6c1fe96a86dcfb200cc59", @ANYBLOB="79c79e8b82165aa4da3b7caa8bb790e6dc7dcc51df2341504d6f5e8b3fdeb0d7454b87c0734064a218e6e2ed525ce1819ca518007c3accc5872be7c3af75c179216910aa7f8aa8679ea1444e2acb3cf3c2a88c9584518118b3d80a6d65c6347103eee45b2ab359e0c2a2e23a984450e15387a95c2c8c3462d14ef02598a7d34c2fa9e3", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.098298648s ago: executing program 8 (id=7538): r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key(0x0, 0x0, &(0x7f00000002c0)="0000000000000002ff690000000500010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r2) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) syz_usb_connect(0x0, 0xe6, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003cb63b206d04b00827e5010203010902d400010000000009040400025a82e500052406000105240001000d240f01060000006e0040000406241a001214052415b4a97a"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) 4.128930982s ago: executing program 5 (id=7539): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r1, &(0x7f0000000040), 0x0, 0xa) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) 4.066181497s ago: executing program 6 (id=7540): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0xffffffffffffffff, @ANYRES8=0xffffffffffffffff], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r13}, 0x10) r14 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[], [], 0x6b}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r10, @ANYRESDEC=r7, @ANYRES16=r8, @ANYRESOCT=r1, @ANYRESHEX=r9, @ANYRES32=r7, @ANYRESOCT=r1, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000c2000000000000000025343ab57c00000000000000006fbe2f0a046d27e176aef6d308dd0f04c58692dc5fa456703e5c19e97d8d008864dfcef2ebe7792a0bae8e42e380cb772f4a3da27b092f830cae69a7b674f04c309c8f97820007c3ee99030b6fdce4c26640811dc3408e105cea0b3d3c261e26449867a92e06221abd5df18f", @ANYRES32=r15, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 3.938204094s ago: executing program 7 (id=7541): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x88, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdab9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x13}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 3.662625884s ago: executing program 7 (id=7542): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x400, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 3.322388641s ago: executing program 7 (id=7543): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 3.094196135s ago: executing program 5 (id=7544): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) 3.036296777s ago: executing program 7 (id=7545): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r2}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x1, 0xffffffff, 0x40, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x205}) r4 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x11, "a605f8d99a3afbe978d7d9b6d127462916"}, &(0x7f00000001c0)=0x19) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSETELEM={0x45c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x41c, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "30153653553e00a5d894735f0e1257ad5742525b9e88663bc9b6c3f0923d462b1e3fb2f824b211f2310d28d4c0417f872d1f87311fb4b8e875e6dfc69a69caedecbf483693d471e3b1c26bb2e78f98ffea677ff9cb78ee65913b7f923e3c8015704e05941eb9a0"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x4}, {0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "cb564ff7e2fce9f21258ba"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xa5775413f27ee768}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf, 0x1, "96ab6596da69946abfa9cb"}, @NFTA_DATA_VALUE={0x54, 0x1, "7798a02fb6e44cb5d6c6d9a1a7efd7ad8fcf934ca7812bc34288022156c097e8bf08a9c28b039de03323e275cd2eb6174ce3fa47ee50f042c61eee941444c6c3505f5c8d46a117f8b2a54b75a18e83a2"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "744451983329699374f51821466d0136b48ce52bf71391537634f0b49271ac64a9811683bd6cbbfcf3f824c9c903c67b3b2aacb7a8ac02076cd086ebbbd5a4ffe2ad0bfa8839fb1f2b7b6fe397923c02e7d7e9995aa95bb47543c22e2dd8a9e3196c26cfb1b1b187937c946030f242405e70812bf69bede345642043853352a772aec3a87d0756175bd2e8ce61c1"}, @NFTA_DATA_VALUE={0xe8, 0x1, "a836745402ca8578e5b98b705b29d56769a6960ed0b9105cba6021c62a62d3e18e91b0a6513ed26f1fb7e327706f1521a2855f21923f160cb4ea004bd2c0d4ff30b7648c2d4743414645355caa692be92a28a79941a2410182306951df9ea13359620fb0ab8dc9da29b35311e4349d01c689a1962147ee8a7904987958adbdcc0dc1af42946d957e1ab50c9965dc41f3fafd622e98fc67aae53b7d78bbf879f87fa75ecd54ad8e8695141627a44f29ea2d777b1977c91cb4ca67d3534e7f623d5c7be079d5b0bc9c2ea352f15a1f038108a829664b20a95908966c14a3c237f0702acd52"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0x500, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b6f39d1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2d268097}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x456bb20d}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9300}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x328, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x308, 0x3, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x158, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x102, 0x1, "7323cdefac0d8765903db62ada6e2e7dda5869b722e8daf1f875ae057ed96580495f2c4060a94008feb9451465986a3ee623ea066c2b786d15e6ce2c646f7ecff286e680c5e35b4173ba809df442d42c7f7810fddd48558019c50553970c922656c1c588570e6f719c10dcbe8fa575c430cfd78aa773f2f1e5d44f26fc5d5787c933f210bfb2a35c43b4a7c28b024a84bbe469be9991eaa312d8a1e14ff52201dc75db0b59db57aba689cb7402a377d19fc18988ef343e42ff317c18fde50bd82581e5a14ef5556c25571708a3c2046cecb716c93fe3bf3344f9f6c9959c02e6ba77482db70e10b2c59cbbf97c6fda8369f34f7e0661e28c1a5783e91bc0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "c47d5ae51fca62234200dd88ef9b102f36bb3695e09bd59b440aa53bcc1ece14d8687221613e37e9aebb2c804b1060df4b1d1d9119ee9be91fab0943f054ec53828cb0ff8f1a7d97b06325b725ff1056c3fe4734168ec9cd3010088a06645b8fca533f6d0bd169faddecbcfdee1dd58d5e"}, @NFTA_DATA_VALUE={0x6d, 0x1, "8ca62010409d0a094866883eb340091358a0f563189183a59ea388a8e8e9d5d7bec7321756b58fc502f88d65bf778d32049b9a5a79f954caea6ed670ab0852af5ab5d310e637a3a04ea63e88facb6f2d8c0649a994f7475874f185e32f5a376d89f3d1a774e5e8b9e0"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x41, 0x1, "8b386f5f3c9723a8873c15480ee196a972c8ec874596377fb8da20b73726425c3bcde0a3bc0d24a6155defe1e92a9a63e46d1c821a4544d1943459cf18"}, @NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xaa, 0x7, 0x1, 0x0, "1e3aa44748a6acd5a8ee18c33bad66e2926f89f430c1453c71d2658b945553acd22c7ab62c26499f96f8cdb8892211b08d1886d27691970060ae0958e0f7120966f352c2a84c2ec0efd92bb5bf03f8d8009534de53395a7005a7f54460aeb1f07f7bd1ee27f64f3e07696e2eada6235317c485e0def1767629f0cd0d0b291a563e6ee795e5cfd650e681b54a053a71d9ad772d827365733bee924bf3107cb137e8c4d26ed14f"}, @NFTA_RULE_USERDATA={0x38, 0x7, 0x1, 0x0, "10b2bf876c154c2aae0b87a2d0ceabfbebbc9e587d10a900660e7c1ed5c548a3c837ae3108ebd22d54c2b2846baf2a2a6cebe70c"}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x184, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x312}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb7142ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5d1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0xdd, 0xc, "cff7663cde44a167100da71542d1275c574d3ec9f075c2aac3edcc764c5ed950efcf8fcb73dd463c20dbccbfc53a22c809b5bb55611d48f36ebf247f0582862e451b6d799a2b4d81ddb85a0fabf8656ae09fafef7b4da50af92ea192fd4620610bc2f18a8f49997c224de930f7832860354ddd42e13ce1d24f4eb1e7cd350a3fa85b6169bf499fb1d9ba1e97ca8ac40bd761eb444ec408cd57454024ff5a6593065b54488a505f94ed3c284ba8ab407d144bc1ba76eee02de45c5882df35b0d5889610090864e5827036ec84a3e39b187d737c4abb80e48941"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbe8}, 0x1, 0x0, 0x0, 0x10}, 0x20000440) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) accept4(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000877eddfa785cf3f0927ade403b9f784c5aed6fa15aacfd6c18082dcd8d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000180), 0x80) 2.763275283s ago: executing program 9 (id=7546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2b3d}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x68}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000500ff"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="270100df00"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa", @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r4], 0x7) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) close(r5) 2.753499874s ago: executing program 8 (id=7547): socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="79c79e8b82165aa4da3b7caa8bb790e6dc7dcc51df2341504d6f5e8b3fdeb0d7454b87c0734064a218e6e2ed525ce1819ca518007c3accc5872be7c3af75c179216910aa7f8aa8679ea1444e2acb3cf3c2a88c9584518118b3d80a6d65c6347103eee45b2ab359e0c2a2e23a984450e15387a95c2c8c3462d14ef02598a7d34c2fa9e3", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000200)='./file1\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000580)=""/174, 0xae) 2.512253988s ago: executing program 6 (id=7548): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x40, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x18}, {0x4, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.686547093s ago: executing program 9 (id=7549): socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000006800000000f533000000000000001811000021d86a3422f070d810aff993f0a7f37409d6d50b99dcb33be8f3d6613827c6763f557b075b3ff0605449db3ee1eba1c8b2a40a197ea3b815a913589be54dc7430d748c0dd29e63065b258e8a791f8d7c937d2b60182c429bb1", @ANYBLOB="79c79e8b82165aa4da3b7caa8bb790e6dc7dcc51df2341504d6f5e8b3fdeb0d7454b87c0734064a218e6e2ed525ce1819ca518007c3accc5872be7c3af75c179216910aa7f8aa8679ea1444e2acb3cf3c2a88c9584518118b3d80a6d65c6347103eee45b2ab359e0c2a2e23a984450e15387a95c2c8c3462d14ef02598a7d34c2fa9e3", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.682577741s ago: executing program 5 (id=7550): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.609923962s ago: executing program 8 (id=7551): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000002000)=""/4089, 0xff9}, {&(0x7f0000000800)=""/237, 0xed}, {&(0x7f0000000c00)=""/80, 0x50}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000001f40)=""/170, 0xaa}], 0x9}, 0x40010022) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=""/17, 0x11}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x80, @mcast1}, 0x1c) r9 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r9) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 1.56553427s ago: executing program 6 (id=7552): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write(r0, &(0x7f00000008c0)="b2e211322c064e63b520f77c46b5083ce36f071265", 0x15) 1.555926666s ago: executing program 7 (id=7553): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) 1.360741609s ago: executing program 6 (id=7554): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x400, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 523.952331ms ago: executing program 6 (id=7555): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r1, &(0x7f0000000040), 0x0, 0xa) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) 427.63381ms ago: executing program 9 (id=7556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) recvmmsg(r3, &(0x7f0000006a80)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=""/192, 0xc0}, 0xa}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f0000000280)=""/11, 0xb}], 0x4, &(0x7f00000008c0)=""/189, 0xbd}, 0xc9}, {{&(0x7f0000001a00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/249, 0xf9}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/86, 0x56}], 0x5, &(0x7f0000003d80)=""/242, 0xf2}, 0x5}, {{&(0x7f0000003e80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005040)=[{&(0x7f00000003c0)=""/47, 0x2f}, {&(0x7f0000003f00)=""/138, 0x8a}, {&(0x7f0000003fc0)=""/121, 0x79}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x5, &(0x7f00000050c0)=""/251, 0xfb}, 0x318}, {{&(0x7f00000051c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000005240)=""/199, 0xc7}, {&(0x7f0000000980)}, {&(0x7f0000005340)=""/135, 0x87}, {&(0x7f0000005400)=""/129, 0x81}, {&(0x7f00000054c0)=""/220, 0xdc}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/235, 0xeb}, {&(0x7f00000066c0)=""/246, 0xf6}, {&(0x7f00000067c0)=""/98, 0x62}, {&(0x7f0000006840)=""/108, 0x6c}], 0xa, &(0x7f0000006980)=""/213, 0xd5}, 0x4}], 0x5, 0x40000123, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) listen(0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000690e4890000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 390.551039ms ago: executing program 5 (id=7557): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/vlan/config\x00') setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="142200", @ANYRES16=0x0, @ANYBLOB="020026bd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x20000806) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\xd2\xdc\xf7\xf5\x84\x954\xff\x8f\xde\vso\\I\x00\x00R\x9b\x17\xc3\x19\xcdTXG$n\x03\xf2\x01\x82\xfe\x00'/48, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[], 0x0, 0x1a}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_open_dev$mouse(0x0, 0x0, 0x2042) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="f3", 0x1}], 0xf) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x20200) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0xb, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000005ec0)) keyctl$dh_compute(0x10, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000900)={0x2020}, 0x2033) 120.516157ms ago: executing program 7 (id=7558): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0xffffffffffffffff, @ANYRES8=0xffffffffffffffff], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r13}, 0x10) r15 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[], [], 0x6b}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES64=r14, @ANYRESDEC=r4, @ANYRESHEX=r10, @ANYRESDEC=r7, @ANYRES16=r8, @ANYRESOCT=r1, @ANYRESHEX=r9, @ANYRES32=r7, @ANYRESOCT=r1, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=r4], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 0s ago: executing program 9 (id=7559): r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key(0x0, 0x0, &(0x7f00000002c0)="0000000000000002ff690000000500010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r2) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) syz_usb_connect(0x0, 0xe6, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003cb63b206d04b00827e5010203010902d400010000000009040400025a82e500052406000105240001000d240f01060000006e0040000406241a001214052415b4a97a"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) kernel console output (not intermixed with test programs): ecutor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 863.510343][ T37] audit: type=1326 audit(1766372249.214:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23549 comm="syz.4.6031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 863.510479][ T37] audit: type=1326 audit(1766372249.214:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23549 comm="syz.4.6031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 863.510656][ T37] audit: type=1326 audit(1766372249.214:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23549 comm="syz.4.6031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 863.869613][T23562] siw: device registration error -23 [ 863.872444][ T7627] veth1_macvtap: left promiscuous mode [ 863.872545][ T7627] veth0_macvtap: left promiscuous mode [ 863.872788][ T7627] veth1_vlan: left promiscuous mode [ 863.872954][ T7627] veth0_vlan: left promiscuous mode [ 864.606579][ T7627] pimreg (unregistering): left allmulticast mode [ 865.758892][T23598] "syz.5.6052" (23598) uses obsolete ecb(arc4) skcipher [ 867.136808][ T7627] team0 (unregistering): Port device team_slave_1 removed [ 867.399075][ T7627] team0 (unregistering): Port device team_slave_0 removed [ 869.830441][T23565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 869.830988][T23587] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6047'. [ 869.836883][T23608] bridge0: port 3(syz_tun) entered blocking state [ 869.860034][T23608] bridge0: port 3(syz_tun) entered disabled state [ 869.864770][T23608] syz_tun: entered promiscuous mode [ 869.975754][T23612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6059'. [ 869.975778][T23612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6059'. [ 869.975794][T23612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6059'. [ 869.996854][T23613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6057'. [ 870.176073][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.176129][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.733912][T23296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 870.815462][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 870.815480][ T37] audit: type=1326 audit(1766372256.514:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23624 comm="syz.5.6063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b347f749 code=0x0 [ 870.832958][T23296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 870.872742][T23296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 871.007965][T23296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.048733][T23632] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6066'. [ 871.054047][ T7627] IPVS: stop unused estimator thread 0... [ 871.458471][T23296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.529676][T23296] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.560179][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.560387][ T8998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.596909][T21128] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.597078][T21128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.842499][T23648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6070'. [ 871.842522][T23648] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6070'. [ 871.842539][T23648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6070'. [ 872.055781][T23654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6073'. [ 872.136262][T23658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.578759][T23296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.294952][T23296] veth0_vlan: entered promiscuous mode [ 873.346807][T23296] veth1_vlan: entered promiscuous mode [ 874.565813][T23296] veth0_macvtap: entered promiscuous mode [ 874.580410][T23296] veth1_macvtap: entered promiscuous mode [ 874.690528][T23296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.720135][T23296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.755458][T18401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.755703][T18401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.755733][T18401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.755766][T18401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.762757][T23700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.009876][T23706] netlink: 'syz.5.6092': attribute type 10 has an invalid length. [ 875.021688][T23705] bond0: entered promiscuous mode [ 875.040753][T23705] batadv0: entered promiscuous mode [ 875.044586][T23706] bridge0: port 3(syz_tun) entered disabled state [ 875.096919][T23708] __nla_validate_parse: 7 callbacks suppressed [ 875.096934][T23708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6093'. [ 875.096942][T23708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6093'. [ 875.096951][T23708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6093'. [ 875.096974][T23708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6093'. [ 875.190307][T23706] $Hÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 876.759351][T23729] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6099'. [ 876.919667][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6103'. [ 876.967985][ T7627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.968008][ T7627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.011356][ T37] audit: type=1326 audit(1766372262.714:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23732 comm="syz.6.6102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x0 [ 877.186521][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.186544][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.506532][T23739] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6104'. [ 877.506553][T23739] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6104'. [ 877.506569][T23739] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6104'. [ 877.506607][T23739] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6104'. [ 877.876763][T23750] netlink: 'syz.2.6107': attribute type 4 has an invalid length. [ 879.586905][T23774] bridge0: port 3(syz_tun) entered blocking state [ 879.587078][T23774] bridge0: port 3(syz_tun) entered disabled state [ 879.623651][T23774] syz_tun: entered promiscuous mode [ 879.624909][T23774] bridge0: port 3(syz_tun) entered blocking state [ 879.625090][T23774] bridge0: port 3(syz_tun) entered forwarding state [ 879.705095][T23779] netlink: 'syz.7.6119': attribute type 10 has an invalid length. [ 879.816577][T23779] bridge0: port 3(syz_tun) entered disabled state [ 879.817770][T23779] bridge0: port 3(syz_tun) entered disabled state [ 880.849621][T23779] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 881.068087][T23805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.102383][T23807] __nla_validate_parse: 1 callbacks suppressed [ 881.102402][T23807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6132'. [ 881.134765][T23808] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6130'. [ 881.134790][T23808] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6130'. [ 881.134807][T23808] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6130'. [ 881.134845][T23808] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6130'. [ 881.803049][T23818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.043960][T23835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6143'. [ 883.977921][T23864] bond0: (slave syz_tun): Releasing backup interface [ 883.981902][T23876] netlink: 'syz.7.6151': attribute type 10 has an invalid length. [ 884.152988][T23878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6156'. [ 884.876727][ T37] audit: type=1326 audit(1766372270.584:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 884.876783][ T37] audit: type=1326 audit(1766372270.584:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 884.877286][ T37] audit: type=1326 audit(1766372270.584:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 884.877564][ T37] audit: type=1326 audit(1766372270.584:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 884.877931][ T37] audit: type=1326 audit(1766372270.584:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 884.976420][ T37] audit: type=1326 audit(1766372270.684:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f397a2d2005 code=0x7ffc0000 [ 884.977750][ T37] audit: type=1326 audit(1766372270.684:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f397a2d2005 code=0x7ffc0000 [ 884.979154][ T37] audit: type=1326 audit(1766372270.684:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f397a2d2005 code=0x7ffc0000 [ 884.980520][ T37] audit: type=1326 audit(1766372270.684:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f397a2d2005 code=0x7ffc0000 [ 884.981922][ T37] audit: type=1326 audit(1766372270.684:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23884 comm="syz.6.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f397a2d2005 code=0x7ffc0000 [ 884.993286][T23864] bond0: (slave dummy0): Releasing backup interface [ 885.160547][T23864] bridge_slave_0: left allmulticast mode [ 885.160569][T23864] bridge_slave_0: left promiscuous mode [ 885.160711][T23864] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.318308][T23864] bridge_slave_1: left allmulticast mode [ 885.318336][T23864] bridge_slave_1: left promiscuous mode [ 885.318574][T23864] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.498269][T23864] bond0: (slave bond_slave_0): Releasing backup interface [ 885.582394][T23907] netlink: 'syz.6.6164': attribute type 10 has an invalid length. [ 885.596189][T23864] bond0: (slave bond_slave_1): Releasing backup interface [ 885.671283][T23864] team0: Port device team_slave_0 removed [ 885.671985][T23864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.672010][T23864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.723582][T23864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 886.883730][T23876] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 887.012902][T23906] bond0: entered promiscuous mode [ 887.012925][T23906] bond_slave_0: entered promiscuous mode [ 887.013156][T23906] bond_slave_1: entered promiscuous mode [ 887.013362][T23906] dummy0: entered promiscuous mode [ 887.014837][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6170'. [ 887.020802][T23906] batadv0: entered promiscuous mode [ 887.027217][T23906] debugfs: 'hsr1' already exists in 'hsr' [ 887.027243][T23906] Cannot create hsr debugfs directory [ 887.092678][T23907] syz_tun: entered promiscuous mode [ 887.136513][T23907] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 887.138970][T23927] siw: device registration error -23 [ 888.651379][ T5899] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 888.895175][ T5899] usb 7-1: Using ep0 maxpacket: 32 [ 888.914728][ T5899] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 888.914756][ T5899] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 888.914775][ T5899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.914793][ T5899] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 888.914812][ T5899] usb 7-1: config 0 has no interface number 0 [ 888.914826][ T5899] usb 7-1: config 0 has no interface number 1 [ 888.914879][ T5899] usb 7-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.914903][ T5899] usb 7-1: config 0 interface 255 has no altsetting 0 [ 888.948297][ T5899] usb 7-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 888.948326][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.948352][ T5899] usb 7-1: Product: syz [ 888.948365][ T5899] usb 7-1: Manufacturer: syz [ 888.948379][ T5899] usb 7-1: SerialNumber: syz [ 888.960595][ T5899] usb 7-1: config 0 descriptor?? [ 889.226113][ T5899] usb 7-1: USB disconnect, device number 4 [ 889.572792][T23998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6199'. [ 890.829983][T24026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6211'. [ 891.955761][ T37] kauditd_printk_skb: 98 callbacks suppressed [ 891.955780][ T37] audit: type=1326 audit(1766372277.654:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 891.956612][ T37] audit: type=1326 audit(1766372277.654:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.007365][ T37] audit: type=1326 audit(1766372277.714:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.012058][ T37] audit: type=1326 audit(1766372277.714:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.012104][ T37] audit: type=1326 audit(1766372277.714:6355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.012142][ T37] audit: type=1326 audit(1766372277.714:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.012175][ T37] audit: type=1326 audit(1766372277.714:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.012343][ T37] audit: type=1326 audit(1766372277.714:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.012490][ T37] audit: type=1326 audit(1766372277.714:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24059 comm="syz.5.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc8b347f749 code=0x7ffc0000 [ 892.395098][T24074] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6229'. [ 892.395123][T24074] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6229'. [ 892.395140][T24074] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6229'. [ 892.395178][T24074] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6229'. [ 893.665582][T24112] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6241'. [ 893.665604][T24112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6241'. [ 893.665618][T24112] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6241'. [ 893.706311][T24112] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6241'. [ 893.965160][ T37] audit: type=1326 audit(1766372279.664:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24119 comm="syz.2.6245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 895.159916][T24136] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6249'. [ 896.765112][T24166] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6260'. [ 897.705563][ T37] audit: type=1326 audit(1766372283.404:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24182 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 897.705932][ T37] audit: type=1326 audit(1766372283.404:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24182 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 897.753908][ T37] audit: type=1326 audit(1766372283.414:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24182 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 897.754066][ T37] audit: type=1326 audit(1766372283.454:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24182 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 897.754166][ T37] audit: type=1326 audit(1766372283.454:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24182 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 897.754373][ T37] audit: type=1326 audit(1766372283.454:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24182 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 897.754499][ T37] audit: type=1326 audit(1766372283.454:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24182 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcf2879f749 code=0x7ffc0000 [ 898.086125][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 898.236092][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 898.251713][ T31] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 898.251740][ T31] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 898.251758][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.251776][ T31] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 898.251789][ T31] usb 7-1: config 0 has no interface number 0 [ 898.251797][ T31] usb 7-1: config 0 has no interface number 1 [ 898.251828][ T31] usb 7-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 898.251842][ T31] usb 7-1: config 0 interface 255 has no altsetting 0 [ 898.253918][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 898.253938][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.253948][ T31] usb 7-1: Product: syz [ 898.253955][ T31] usb 7-1: Manufacturer: syz [ 898.253962][ T31] usb 7-1: SerialNumber: syz [ 898.260036][ T31] usb 7-1: config 0 descriptor?? [ 898.350448][T24194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6272'. [ 898.350682][T24194] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6272'. [ 898.350700][T24194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6272'. [ 898.350739][T24194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6272'. [ 898.513659][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 898.653071][ T5899] usb 7-1: USB disconnect, device number 5 [ 898.701933][T24120] Set syz1 is full, maxelem 65536 reached [ 898.784976][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6278'. [ 898.844136][ T37] audit: type=1326 audit(1766372284.544:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24203 comm="syz.4.6277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x0 [ 899.022745][ T37] audit: type=1326 audit(1766372284.724:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24213 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 899.022803][ T37] audit: type=1326 audit(1766372284.724:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24213 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 899.715065][T24240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6290'. [ 899.892697][T24249] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6295'. [ 900.551049][T24275] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6307'. [ 900.684873][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 901.225313][T24308] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6323'. [ 901.467598][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6327'. [ 902.760719][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 902.760736][ T37] audit: type=1326 audit(1766372288.464:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24356 comm="syz.6.6341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x0 [ 903.775942][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 903.791639][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 903.792911][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 903.795149][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 903.795904][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.949496][T24397] lo speed is unknown, defaulting to 1000 [ 904.002709][T24402] __nla_validate_parse: 3 callbacks suppressed [ 904.002728][T24402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6361'. [ 904.996194][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 905.003650][T16207] syz_tun (unregistering): left allmulticast mode [ 905.036761][T16207] $Hÿ: (slave syz_tun): Releasing backup interface [ 905.156752][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 905.158863][ T5890] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 905.158887][ T5890] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 905.158906][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.158923][ T5890] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 905.158940][ T5890] usb 3-1: config 0 has no interface number 0 [ 905.158956][ T5890] usb 3-1: config 0 has no interface number 1 [ 905.158987][ T5890] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 905.159001][ T5890] usb 3-1: config 0 interface 255 has no altsetting 0 [ 905.183538][T24397] chnl_net:caif_netlink_parms(): no params data found [ 905.246369][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 905.246397][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.246416][ T5890] usb 3-1: Product: syz [ 905.246429][ T5890] usb 3-1: Manufacturer: syz [ 905.246443][ T5890] usb 3-1: SerialNumber: syz [ 905.299794][ T5890] usb 3-1: config 0 descriptor?? [ 905.312747][T24429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6371'. [ 905.534458][ T31] usb 3-1: USB disconnect, device number 2 [ 905.598240][T24397] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.599282][T24397] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.599576][T24397] bridge_slave_0: entered allmulticast mode [ 905.602435][T24397] bridge_slave_0: entered promiscuous mode [ 905.609379][T24397] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.609951][T24397] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.610196][T24397] bridge_slave_1: entered allmulticast mode [ 905.613009][T24397] bridge_slave_1: entered promiscuous mode [ 905.832047][T24397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.846334][ T5816] Bluetooth: hci1: command tx timeout [ 905.851197][T24397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.068873][T24397] team0: Port device team_slave_0 added [ 906.091842][T24397] team0: Port device team_slave_1 added [ 906.320456][T24397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.320473][T24397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.320499][T24397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.323092][T24397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.323107][T24397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.323133][T24397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.582817][T24397] hsr_slave_0: entered promiscuous mode [ 906.583908][T24397] hsr_slave_1: entered promiscuous mode [ 906.907405][T24480] bridge0: port 3(syz_tun) entered blocking state [ 906.907718][T24480] bridge0: port 3(syz_tun) entered disabled state [ 906.907932][T24480] syz_tun: entered allmulticast mode [ 906.912790][T24480] syz_tun: entered promiscuous mode [ 906.913217][T24480] bridge0: port 3(syz_tun) entered blocking state [ 906.913747][T24480] bridge0: port 3(syz_tun) entered forwarding state [ 907.106087][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 907.153365][T24491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6399'. [ 907.153385][T24491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6399'. [ 907.153400][T24491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6399'. [ 907.153436][T24491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6399'. [ 907.256118][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 907.259275][ T31] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 907.259300][ T31] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 907.259319][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.259336][ T31] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 907.259355][ T31] usb 8-1: config 0 has no interface number 0 [ 907.259369][ T31] usb 8-1: config 0 has no interface number 1 [ 907.259421][ T31] usb 8-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 907.259444][ T31] usb 8-1: config 0 interface 255 has no altsetting 0 [ 907.261613][ T31] usb 8-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 907.261638][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.261656][ T31] usb 8-1: Product: syz [ 907.261665][ T31] usb 8-1: Manufacturer: syz [ 907.261672][ T31] usb 8-1: SerialNumber: syz [ 907.275335][ T31] usb 8-1: config 0 descriptor?? [ 907.523202][T24497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.535162][ T31] usb 8-1: USB disconnect, device number 4 [ 907.927930][ T5816] Bluetooth: hci1: command tx timeout [ 908.396336][T24525] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6410'. [ 908.396358][T24525] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6410'. [ 908.396375][T24525] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6410'. [ 908.396412][T24525] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6410'. [ 908.653013][T24397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 908.675461][T24397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 908.711451][T24397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 908.732058][T24397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 908.883968][T24397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.908507][T24397] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.924476][T21123] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.924598][T21123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.944817][T21123] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.944910][T21123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.342438][T24542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.380463][T24397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.452014][T24551] netlink: 'syz.4.6417': attribute type 4 has an invalid length. [ 909.705868][T24561] siw: device registration error -23 [ 909.777016][T24397] veth0_vlan: entered promiscuous mode [ 909.790537][T24397] veth1_vlan: entered promiscuous mode [ 909.866381][T24397] veth0_macvtap: entered promiscuous mode [ 909.882606][T24397] veth1_macvtap: entered promiscuous mode [ 909.918758][T24397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.006938][ T5816] Bluetooth: hci1: command tx timeout [ 910.025700][T24397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.058038][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.089058][ T7627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.089269][ T7627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.089702][ T7627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.442435][T18401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.442465][T18401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.653808][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.653830][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.922076][ T37] audit: type=1326 audit(1766372296.624:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24580 comm="syz.2.6428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 911.147371][T24586] siw: device registration error -23 [ 912.086548][ T5816] Bluetooth: hci1: command tx timeout [ 912.207961][T24610] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6438'. [ 912.886561][ T37] audit: type=1326 audit(1766372298.594:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24629 comm="syz.7.6446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe80549f749 code=0x0 [ 913.196508][ T37] audit: type=1326 audit(1766372298.904:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.196663][ T37] audit: type=1326 audit(1766372298.904:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.197265][ T37] audit: type=1326 audit(1766372298.904:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.197738][ T37] audit: type=1326 audit(1766372298.904:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.199870][ T37] audit: type=1326 audit(1766372298.904:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.206311][ T37] audit: type=1326 audit(1766372298.914:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.232825][ T37] audit: type=1326 audit(1766372298.914:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.257777][ T37] audit: type=1326 audit(1766372298.934:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24635 comm="syz.2.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 913.824577][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6452'. [ 913.900894][T24651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6454'. [ 915.184543][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6465'. [ 917.582235][ T37] kauditd_printk_skb: 158 callbacks suppressed [ 917.582251][ T37] audit: type=1326 audit(1766372303.284:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24745 comm="syz.2.6487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 918.280140][T24765] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6492'. [ 919.187108][T24783] random: crng reseeded on system resumption [ 919.436290][ T37] audit: type=1326 audit(1766372305.134:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.436617][ T37] audit: type=1326 audit(1766372305.144:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.436883][ T37] audit: type=1326 audit(1766372305.144:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.436926][ T37] audit: type=1326 audit(1766372305.144:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.437016][ T37] audit: type=1326 audit(1766372305.144:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.453380][ T37] audit: type=1326 audit(1766372305.154:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.458266][ T37] audit: type=1326 audit(1766372305.154:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.458315][ T37] audit: type=1326 audit(1766372305.154:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.458357][ T37] audit: type=1326 audit(1766372305.154:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.5.6502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 919.738382][T24801] veth0: entered promiscuous mode [ 919.766504][T24801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6507'. [ 921.149190][T24835] binfmt_misc: register: failed to install interpreter file ./file1 [ 921.167724][T24620] Set syz1 is full, maxelem 65536 reached [ 921.360347][T24843] netlink: 'syz.5.6522': attribute type 10 has an invalid length. [ 921.382659][T24843] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 921.516749][T24845] veth0: entered promiscuous mode [ 921.570898][T24846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6525'. [ 922.947641][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6538'. [ 923.322880][ T37] kauditd_printk_skb: 100 callbacks suppressed [ 923.322897][ T37] audit: type=1326 audit(1766372309.024:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24886 comm="syz.5.6541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x0 [ 924.052527][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6549'. [ 924.375602][T24919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.484020][ T37] audit: type=1326 audit(1766372311.184:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24940 comm="syz.2.6563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 925.789766][T24703] Set syz1 is full, maxelem 65536 reached [ 927.230818][T24964] netlink: 'syz.2.6571': attribute type 2 has an invalid length. [ 928.789759][ T37] audit: type=1326 audit(1766372314.494:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24994 comm="syz.2.6582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 929.129337][T25013] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 929.129509][T25013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.258345][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6588'. [ 929.515257][T25013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.991053][ T37] audit: type=1326 audit(1766372316.694:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25053 comm="syz.2.6604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 931.240961][ T37] audit: type=1326 audit(1766372316.934:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25062 comm="syz.6.6608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x0 [ 932.183743][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.183811][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.929825][T16210] Bluetooth: hci4: command 0x0406 tx timeout [ 933.955315][T25103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6621'. [ 934.097013][ T37] audit: type=1326 audit(1766372319.794:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25104 comm="syz.4.6622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x0 [ 935.496616][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6632'. [ 935.513704][T25139] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6629'. [ 935.513726][T25139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6629'. [ 935.513752][T25139] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6629'. [ 935.513791][T25139] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6629'. [ 936.279254][T25158] fuse: Bad value for 'fd' [ 937.501123][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6644'. [ 937.984797][T25195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6651'. [ 937.984828][T25195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6651'. [ 937.984846][T25195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6651'. [ 937.984885][T25195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6651'. [ 938.084152][T25199] kAFS: No cell specified [ 938.832166][T25225] netlink: 'syz.5.6667': attribute type 2 has an invalid length. [ 938.925517][T25236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.999717][T25241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.093217][T25249] kernel read not supported for file /file1 (pid: 25249 comm: syz.7.6676) [ 939.119707][ T37] audit: type=1800 audit(1766372324.794:6680): pid=25249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.6676" name="file1" dev="mqueue" ino=75588 res=0 errno=0 [ 939.645845][T25270] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 940.596346][T25296] veth0: entered promiscuous mode [ 940.702805][T25295] veth0: left promiscuous mode [ 940.724842][T25307] binfmt_misc: register: failed to install interpreter file ./file1 [ 940.801792][T25306] __nla_validate_parse: 1 callbacks suppressed [ 940.801811][T25306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6701'. [ 941.597288][T25348] binfmt_misc: register: failed to install interpreter file ./file1 [ 942.072701][ T37] audit: type=1326 audit(1766372327.774:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.073164][ T37] audit: type=1326 audit(1766372327.774:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.073683][ T37] audit: type=1326 audit(1766372327.774:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.073731][ T37] audit: type=1326 audit(1766372327.774:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.073923][ T37] audit: type=1326 audit(1766372327.774:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.075567][ T37] audit: type=1326 audit(1766372327.774:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.075613][ T37] audit: type=1326 audit(1766372327.774:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.076100][ T37] audit: type=1326 audit(1766372327.774:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.076142][ T37] audit: type=1326 audit(1766372327.774:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25366 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x7ffc0000 [ 942.360437][T25372] veth0: entered promiscuous mode [ 942.393680][T25377] netlink: 'syz.2.6727': attribute type 2 has an invalid length. [ 942.594175][T25371] veth0: left promiscuous mode [ 943.781872][T25384] syz.5.6731 (25384): drop_caches: 2 [ 944.226331][T25423] veth0: entered promiscuous mode [ 944.235526][T25427] netlink: 'syz.2.6741': attribute type 10 has an invalid length. [ 944.277697][T25427] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 944.277791][T25421] veth0: left promiscuous mode [ 944.613803][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614007][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614036][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614061][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614086][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614112][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614138][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614172][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614197][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.614221][ T5976] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 944.661926][ T5976] hid-generic 0000:0000:0004.000C: hidraw0: HID v0.03 Device [syz1] on syz1 [ 944.712568][ T37] kauditd_printk_skb: 100 callbacks suppressed [ 944.712587][ T37] audit: type=1326 audit(1766372330.414:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.712633][ T37] audit: type=1326 audit(1766372330.414:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.712915][ T37] audit: type=1326 audit(1766372330.414:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.713190][ T37] audit: type=1326 audit(1766372330.414:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.713497][ T37] audit: type=1326 audit(1766372330.414:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.713797][ T37] audit: type=1326 audit(1766372330.414:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.715484][ T37] audit: type=1326 audit(1766372330.414:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.881728][ T37] audit: type=1326 audit(1766372330.414:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.881780][ T37] audit: type=1326 audit(1766372330.564:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 944.881822][ T37] audit: type=1326 audit(1766372330.584:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25446 comm="syz.6.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a29f749 code=0x7ffc0000 [ 945.188753][T25455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6754'. [ 945.334670][T16210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 945.358488][T16210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 945.360002][T16210] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 945.361742][T16210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 945.362556][T16210] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 945.723005][T25466] lo speed is unknown, defaulting to 1000 [ 945.756881][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 947.089963][T25504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6771'. [ 947.449952][T25466] chnl_net:caif_netlink_parms(): no params data found [ 947.527770][T16210] Bluetooth: hci2: command tx timeout [ 948.064535][T25545] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 948.409705][T21860] syz_tun (unregistering): left allmulticast mode [ 948.487700][T25466] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.487905][T25466] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.488151][T25466] bridge_slave_0: entered allmulticast mode [ 948.490924][T25466] bridge_slave_0: entered promiscuous mode [ 948.524074][T25466] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.524197][T25466] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.524462][T25466] bridge_slave_1: entered allmulticast mode [ 948.557567][T25466] bridge_slave_1: entered promiscuous mode [ 949.045432][T25466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.057608][T25466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.332187][T18401] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.332221][T18401] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.332244][T18401] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 949.482793][T25589] netlink: 'syz.5.6798': attribute type 10 has an invalid length. [ 949.626137][T16210] Bluetooth: hci2: command tx timeout [ 949.670795][T18401] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.670830][T18401] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.670856][T18401] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 949.912973][T25466] team0: Port device team_slave_0 added [ 950.288056][T18401] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.288092][T18401] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.288118][T18401] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 950.399450][T25466] team0: Port device team_slave_1 added [ 950.863349][T18401] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.863385][T18401] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.863411][T18401] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 951.208710][T25626] netlink: 'syz.5.6810': attribute type 2 has an invalid length. [ 951.209930][T25466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.209943][T25466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.209968][T25466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.692438][T16210] Bluetooth: hci2: command tx timeout [ 952.358778][T25466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.358795][T25466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.358822][T25466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.540064][T25652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6820'. [ 952.597025][T25643] veth0: entered promiscuous mode [ 952.710608][T25642] veth0: left promiscuous mode [ 952.751554][T25466] hsr_slave_0: entered promiscuous mode [ 952.762369][T25466] hsr_slave_1: entered promiscuous mode [ 952.769540][T25466] debugfs: 'hsr0' already exists in 'hsr' [ 952.769567][T25466] Cannot create hsr debugfs directory [ 953.766364][T16210] Bluetooth: hci2: command tx timeout [ 954.046187][T25671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6827'. [ 954.229295][T25679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6831'. [ 954.639242][T18401] batman_adv: batadv0: Interface deactivated: vxlan0 [ 955.695541][T25715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6845'. [ 956.138386][T25743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6854'. [ 959.209539][T25815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.518006][T18401] dvmrp6 (unregistering): left allmulticast mode [ 959.619246][T18401] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 959.898916][T18401] batman_adv: batadv0: Removing interface: vxlan0 [ 961.246642][T18401] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 961.372267][T18401] bond0 (unregistering): Released all slaves [ 961.384906][T18401] bond1 (unregistering): Released all slaves [ 961.396883][T18401] bond2 (unregistering): Released all slaves [ 962.048011][ T37] kauditd_printk_skb: 118 callbacks suppressed [ 962.048029][ T37] audit: type=1326 audit(1766372347.754:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25874 comm="syz.2.6907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 962.049124][T25873] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 962.313128][T25883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.604035][T25901] syz_tun: entered allmulticast mode [ 963.615912][T25903] dvmrp6: entered allmulticast mode [ 963.626222][T25904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6914'. [ 963.761770][T25911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6920'. [ 963.761793][T25911] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6920'. [ 963.761808][T25911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6920'. [ 963.761844][T25911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6920'. [ 964.255422][T25931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.338693][T18401] hsr_slave_0: left promiscuous mode [ 964.378637][T18401] hsr_slave_1: left promiscuous mode [ 964.472457][T18401] veth1_macvtap: left promiscuous mode [ 964.472558][T18401] veth0_macvtap: left promiscuous mode [ 964.472797][T18401] veth1_vlan: left promiscuous mode [ 964.472983][T18401] veth0_vlan: left promiscuous mode [ 964.624575][T25949] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6935'. [ 964.624597][T25949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6935'. [ 964.624612][T25949] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6935'. [ 964.624645][T25949] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6935'. [ 964.937397][T18401] pim6reg (unregistering): left allmulticast mode [ 965.007975][T18401] pimreg (unregistering): left allmulticast mode [ 965.133754][ T37] audit: type=1326 audit(1766372350.834:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25960 comm="syz.2.6939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 970.180183][T25979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.242198][T25984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.298601][ T37] audit: type=1326 audit(1766372356.004:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25985 comm="syz.4.6949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2879f749 code=0x0 [ 970.766802][T26000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6955'. [ 970.766823][T26000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6955'. [ 970.766832][T26000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6955'. [ 970.766856][T26000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6955'. [ 971.064579][T25466] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 971.123256][T25466] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 971.167262][T25466] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 971.228459][T25466] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 971.541333][T26017] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 971.774259][T26028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.844245][T26029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.883533][T25466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.912072][T25466] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.939963][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.940254][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.968737][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.984657][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.323857][T25466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.560109][T26057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.607980][T26058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6971'. [ 972.608001][T26058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6971'. [ 972.608014][T26058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6971'. [ 972.608050][T26058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6971'. [ 973.123377][T25466] veth0_vlan: entered promiscuous mode [ 973.182367][T25466] veth1_vlan: entered promiscuous mode [ 973.257958][T25466] veth0_macvtap: entered promiscuous mode [ 973.267612][T25466] veth1_macvtap: entered promiscuous mode [ 973.301894][T25466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.330141][T25466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.360400][T18401] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.360459][T18401] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.360495][T18401] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.360528][T18401] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.873492][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.873513][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.048696][T26098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.105998][T26102] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6988'. [ 974.106027][T26102] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6988'. [ 974.301136][ T8998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.301157][ T8998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.544830][T26115] netlink: 'syz.5.6991': attribute type 10 has an invalid length. [ 974.650213][T16210] Bluetooth: hci0: command 0x0406 tx timeout [ 974.776445][T26129] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 974.846355][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 975.016155][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 975.018397][ T5890] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 975.018425][ T5890] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 975.018443][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.018460][ T5890] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 975.018479][ T5890] usb 3-1: config 0 has no interface number 0 [ 975.018493][ T5890] usb 3-1: config 0 has no interface number 1 [ 975.018548][ T5890] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 975.018574][ T5890] usb 3-1: config 0 interface 255 has no altsetting 0 [ 975.051112][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 975.051141][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.051158][ T5890] usb 3-1: Product: syz [ 975.051171][ T5890] usb 3-1: Manufacturer: syz [ 975.051183][ T5890] usb 3-1: SerialNumber: syz [ 975.070260][ T5890] usb 3-1: config 0 descriptor?? [ 975.218936][T16210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 975.240661][T16210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 975.250131][T16210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 975.260277][T16210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 975.273914][T16210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 975.327771][T21186] usb 3-1: USB disconnect, device number 3 [ 975.442511][T26138] lo speed is unknown, defaulting to 1000 [ 976.278366][T26138] chnl_net:caif_netlink_parms(): no params data found [ 976.617598][T26180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 976.640224][T21186] hid_parser_main: 91 callbacks suppressed [ 976.640245][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640275][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640300][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640331][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640360][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640386][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640411][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640437][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640462][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.640488][T21186] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 976.651856][T21186] hid-generic 0000:0000:0004.000D: hidraw0: HID v0.03 Device [syz1] on syz1 [ 977.216246][T26138] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.226221][T26138] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.226476][T26138] bridge_slave_0: entered allmulticast mode [ 977.246195][T26138] bridge_slave_0: entered promiscuous mode [ 977.255237][T26138] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.255433][T26138] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.255647][T26138] bridge_slave_1: entered allmulticast mode [ 977.276823][T26138] bridge_slave_1: entered promiscuous mode [ 977.286636][T16210] Bluetooth: hci5: command tx timeout [ 977.671780][ T5890] hid-generic 0000:0000:0004.000E: hidraw0: HID v0.03 Device [syz1] on syz1 [ 977.703271][T17011] syz_tun (unregistering): left allmulticast mode [ 977.767528][T17011] bond0: (slave syz_tun): Releasing backup interface [ 977.940571][T26234] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 978.025203][T26138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.053282][T26138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.372609][T26138] team0: Port device team_slave_0 added [ 978.383666][T26138] team0: Port device team_slave_1 added [ 978.436418][ T37] audit: type=1326 audit(1766372364.144:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.5.7039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x0 [ 978.638115][T26138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.638128][T26138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.638142][T26138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.639542][T26138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.639551][T26138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.639565][T26138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.037899][T26138] hsr_slave_0: entered promiscuous mode [ 979.039397][T26138] hsr_slave_1: entered promiscuous mode [ 979.040377][T26138] debugfs: 'hsr0' already exists in 'hsr' [ 979.040400][T26138] Cannot create hsr debugfs directory [ 979.392098][T16210] Bluetooth: hci5: command tx timeout [ 979.618716][T26296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 980.917859][T26326] overlayfs: overlapping lowerdir path [ 981.446074][T16210] Bluetooth: hci5: command tx timeout [ 982.549639][T26341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 983.108692][T26138] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.108727][T26138] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.373655][ T37] audit: type=1326 audit(1766372369.074:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26362 comm="syz.5.7074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x0 [ 983.526614][ T5816] Bluetooth: hci5: command tx timeout [ 983.622723][T26138] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.622747][T26138] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.660608][T26375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.670235][T26375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.920304][T26138] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.920326][T26138] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.251095][T26138] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.251131][T26138] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.284172][T26404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.577773][T26138] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 985.600093][T26138] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 985.636008][T26138] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 985.667556][T26138] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 985.875179][T26138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.949745][T26138] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.970199][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.970680][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.016832][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.016978][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.072549][T26447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.321427][T26449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.370433][T26138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.701087][T26138] veth0_vlan: entered promiscuous mode [ 987.712724][T26138] veth1_vlan: entered promiscuous mode [ 987.742151][T26138] veth0_macvtap: entered promiscuous mode [ 987.745399][T26138] veth1_macvtap: entered promiscuous mode [ 987.765005][T26138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.784490][T26138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.804120][ T1230] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.805037][ T1230] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.805078][ T1230] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.805186][ T1230] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.310393][ T2134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.310415][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.417488][T21123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.417510][T21123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.155730][T26492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.181693][T26494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.106430][T26514] overlayfs: upper fs does not support file handles, falling back to index=off. [ 991.310949][T26542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.337249][T26543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.116995][T26555] overlayfs: upper fs does not support file handles, falling back to index=off. [ 993.051398][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.051500][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.768400][T26597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 993.797745][T26599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 993.949902][ T37] audit: type=1326 audit(1766372379.654:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26600 comm="syz.7.7161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x0 [ 994.445975][T26609] overlayfs: upper fs does not support file handles, falling back to index=off. [ 996.043398][T26651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.426687][ T37] audit: type=1326 audit(1766372382.134:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26652 comm="syz.6.7179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x0 [ 997.038758][T26680] overlayfs: failed to resolve './file0': -2 [ 997.781529][T26689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.224787][T26711] overlayfs: failed to resolve './file0': -2 [ 998.282163][ T37] audit: type=1326 audit(1766372383.984:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26715 comm="syz.5.7202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x0 [ 998.740537][T26740] syz_tun: entered allmulticast mode [ 998.755520][T26740] dvmrp6: entered allmulticast mode [ 999.352161][T26758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.700175][ T37] audit: type=1326 audit(1766372385.404:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26759 comm="syz.6.7220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x0 [ 1000.044806][T26765] netlink: 'syz.7.7221': attribute type 10 has an invalid length. [ 1000.075380][T26765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1000.183425][T26769] overlayfs: failed to resolve './file0': -2 [ 1000.354813][ T37] audit: type=1326 audit(1766372386.054:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.354869][ T37] audit: type=1326 audit(1766372386.054:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.355397][ T37] audit: type=1326 audit(1766372386.054:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.355447][ T37] audit: type=1326 audit(1766372386.054:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.355469][ T37] audit: type=1326 audit(1766372386.054:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.359623][ T37] audit: type=1326 audit(1766372386.064:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.359668][ T37] audit: type=1326 audit(1766372386.064:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.376750][ T37] audit: type=1326 audit(1766372386.084:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1000.377422][ T37] audit: type=1326 audit(1766372386.084:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26772 comm="syz.5.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1001.673060][T26791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.276422][T26800] overlayfs: failed to resolve './file1': -2 [ 1002.597182][T26810] syz_tun: entered allmulticast mode [ 1002.623734][T26810] dvmrp6: entered allmulticast mode [ 1002.691833][T26819] netlink: 'syz.2.7240': attribute type 10 has an invalid length. [ 1002.742652][T26824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.965467][T22561] bridge0: port 3(syz_tun) entered disabled state [ 1005.160973][T22561] syz_tun (unregistering): left allmulticast mode [ 1005.161000][T22561] syz_tun (unregistering): left promiscuous mode [ 1005.161091][T22561] bridge0: port 3(syz_tun) entered disabled state [ 1005.202707][T26871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.714419][T26861] syz.7.7259 (26861): drop_caches: 2 [ 1006.040503][T26371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1006.069456][T21124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.075473][T26371] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1006.077401][T26371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1006.096445][T26371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1006.106858][T26371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1006.166664][T26887] "syz.5.7270" (26887) uses obsolete ecb(arc4) skcipher [ 1006.300330][T26882] lo speed is unknown, defaulting to 1000 [ 1006.435080][ T37] kauditd_printk_skb: 227 callbacks suppressed [ 1006.435099][ T37] audit: type=1326 audit(1766372392.134:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26900 comm="syz.2.7274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 1006.535808][T21124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.815427][T21124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.179880][T21124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.337956][T26882] chnl_net:caif_netlink_parms(): no params data found [ 1007.361496][T26920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.663505][T26882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.663748][T26882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.663989][T26882] bridge_slave_0: entered allmulticast mode [ 1007.688943][T26882] bridge_slave_0: entered promiscuous mode [ 1007.703841][T26882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.716447][T26882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.716682][T26882] bridge_slave_1: entered allmulticast mode [ 1007.718127][T26930] "syz.2.7282" (26930) uses obsolete ecb(arc4) skcipher [ 1007.719209][T26882] bridge_slave_1: entered promiscuous mode [ 1007.965859][T26882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.999374][T26882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.999661][T26934] netlink: 'syz.7.7284': attribute type 2 has an invalid length. [ 1008.249591][T26371] Bluetooth: hci3: command tx timeout [ 1009.206104][ T37] audit: type=1326 audit(1766372394.904:7164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26941 comm="syz.2.7287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c500f749 code=0x0 [ 1009.239692][T26953] netlink: 'syz.5.7288': attribute type 10 has an invalid length. [ 1009.371523][T26882] team0: Port device team_slave_0 added [ 1009.376976][T26882] team0: Port device team_slave_1 added [ 1009.457381][T26942] lo speed is unknown, defaulting to 1000 [ 1009.553182][T26882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.553197][T26882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.553216][T26882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.566414][T26882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.566431][T26882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.566457][T26882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.712688][T21124] bridge_slave_1: left allmulticast mode [ 1009.712708][T21124] bridge_slave_1: left promiscuous mode [ 1009.712865][T21124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.767296][T21124] bridge_slave_0: left allmulticast mode [ 1009.767316][T21124] bridge_slave_0: left promiscuous mode [ 1009.767474][T21124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.331878][T26371] Bluetooth: hci3: command tx timeout [ 1011.161370][T26968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.406124][T26371] Bluetooth: hci3: command tx timeout [ 1013.998228][T21124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.058325][T21124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.098548][T21124] bond0 (unregistering): Released all slaves [ 1014.504296][T26371] Bluetooth: hci3: command tx timeout [ 1015.365672][T26882] hsr_slave_0: entered promiscuous mode [ 1015.368381][T26882] hsr_slave_1: entered promiscuous mode [ 1015.369083][T26882] debugfs: 'hsr0' already exists in 'hsr' [ 1015.369102][T26882] Cannot create hsr debugfs directory [ 1015.684753][ T37] audit: type=1326 audit(1766372401.384:7165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26995 comm="syz.7.7304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x0 [ 1016.590364][T27006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.817000][ T37] audit: type=1326 audit(1766372402.524:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.817500][ T37] audit: type=1326 audit(1766372402.524:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.817542][ T37] audit: type=1326 audit(1766372402.524:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.817580][ T37] audit: type=1326 audit(1766372402.524:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.817618][ T37] audit: type=1326 audit(1766372402.524:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.819376][ T37] audit: type=1326 audit(1766372402.524:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.819426][ T37] audit: type=1326 audit(1766372402.524:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.819464][ T37] audit: type=1326 audit(1766372402.524:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1016.819502][ T37] audit: type=1326 audit(1766372402.524:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27007 comm="syz.7.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1017.757756][T27027] netlink: 'syz.5.7312': attribute type 10 has an invalid length. [ 1018.806260][T21124] hsr_slave_0: left promiscuous mode [ 1018.892450][T21124] hsr_slave_1: left promiscuous mode [ 1018.893417][T21124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.893440][T21124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.008862][T21124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.008886][T21124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.867152][T27045] "syz.6.7318" (27045) uses obsolete ecb(arc4) skcipher [ 1019.928671][T27047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.933090][T21124] veth1_macvtap: left promiscuous mode [ 1019.933203][T21124] veth0_macvtap: left promiscuous mode [ 1019.933370][T21124] veth1_vlan: left promiscuous mode [ 1019.933462][T21124] veth0_vlan: left promiscuous mode [ 1022.596531][T21124] team0 (unregistering): Port device team_slave_1 removed [ 1022.866610][T21124] team0 (unregistering): Port device team_slave_0 removed [ 1024.655318][T16210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1024.669559][T16210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1024.670895][T16210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1024.673459][T16210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1024.676933][T16210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1025.713420][T27056] netlink: 'syz.6.7323': attribute type 2 has an invalid length. [ 1026.811977][T26371] Bluetooth: hci4: command tx timeout [ 1027.023349][T27072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.134301][T27057] lo speed is unknown, defaulting to 1000 [ 1027.937069][T27076] netlink: 'syz.6.7326': attribute type 10 has an invalid length. [ 1028.038512][T27076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1028.917528][T26371] Bluetooth: hci4: command tx timeout [ 1028.987435][T26942] syz_tun (unregistering): left allmulticast mode [ 1029.277287][T27057] chnl_net:caif_netlink_parms(): no params data found [ 1029.325850][T26882] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1030.325750][T27104] "syz.7.7337" (27104) uses obsolete ecb(arc4) skcipher [ 1030.357529][T26882] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1030.489939][T27108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.506353][T26882] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1030.556842][T26882] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1030.966102][T27093] Bluetooth: hci4: command tx timeout [ 1030.966237][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 1031.356489][T27057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.356681][T27057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.356929][T27057] bridge_slave_0: entered allmulticast mode [ 1031.359106][T27057] bridge_slave_0: entered promiscuous mode [ 1031.364525][T27057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.364657][T27057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.364844][T27057] bridge_slave_1: entered allmulticast mode [ 1031.368615][T27057] bridge_slave_1: entered promiscuous mode [ 1031.898534][T21124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.962271][T27057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.027010][T27135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.130638][T27057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.048835][T26371] Bluetooth: hci4: command tx timeout [ 1033.109684][T27145] "syz.6.7350" (27145) uses obsolete ecb(arc4) skcipher [ 1033.255020][T21124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.422927][T27057] team0: Port device team_slave_0 added [ 1033.644105][T21124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.800397][T27057] team0: Port device team_slave_1 added [ 1033.972752][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 1033.972770][ T37] audit: type=1326 audit(1766372419.674:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27163 comm="syz.7.7357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x0 [ 1033.981196][T27166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.250507][T21124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.293903][T27057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.293915][T27057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.293929][T27057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.344707][T27057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.344717][T27057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.344732][T27057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.645990][ T37] audit: type=1326 audit(1766372421.324:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646046][ T37] audit: type=1326 audit(1766372421.324:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646087][ T37] audit: type=1326 audit(1766372421.324:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646129][ T37] audit: type=1326 audit(1766372421.324:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646169][ T37] audit: type=1326 audit(1766372421.334:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646208][ T37] audit: type=1326 audit(1766372421.334:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646255][ T37] audit: type=1326 audit(1766372421.334:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646294][ T37] audit: type=1326 audit(1766372421.334:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.646339][ T37] audit: type=1326 audit(1766372421.334:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27177 comm="syz.6.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1035.876123][ T7606] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1035.885620][T27057] hsr_slave_0: entered promiscuous mode [ 1035.905749][T27057] hsr_slave_1: entered promiscuous mode [ 1035.912589][T27057] debugfs: 'hsr0' already exists in 'hsr' [ 1035.912615][T27057] Cannot create hsr debugfs directory [ 1036.086374][ T7606] usb 8-1: Using ep0 maxpacket: 32 [ 1036.088343][ T7606] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 1036.088366][ T7606] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.088382][ T7606] usb 8-1: config 0 has no interface number 0 [ 1036.088419][ T7606] usb 8-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1036.091031][ T7606] usb 8-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1036.091056][ T7606] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.091075][ T7606] usb 8-1: Product: syz [ 1036.091088][ T7606] usb 8-1: Manufacturer: syz [ 1036.091101][ T7606] usb 8-1: SerialNumber: syz [ 1036.118081][ T7606] usb 8-1: config 0 descriptor?? [ 1036.337373][ T10] usb 8-1: USB disconnect, device number 5 [ 1036.435036][T27188] "syz.6.7366" (27188) uses obsolete ecb(arc4) skcipher [ 1036.481390][T26882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.579002][T21124] bridge_slave_1: left allmulticast mode [ 1036.579031][T21124] bridge_slave_1: left promiscuous mode [ 1036.579191][T21124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.650151][T21124] bridge_slave_0: left allmulticast mode [ 1036.650172][T21124] bridge_slave_0: left promiscuous mode [ 1036.650366][T21124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.725833][T21124] bridge_slave_1: left allmulticast mode [ 1036.725857][T21124] bridge_slave_1: left promiscuous mode [ 1036.739192][T21124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.787095][T21124] bridge_slave_0: left allmulticast mode [ 1036.787132][T21124] bridge_slave_0: left promiscuous mode [ 1036.787317][T21124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.998738][T21124] batman_adv: batadv0: Interface deactivated: vxlan0 [ 1037.891561][T27200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.376581][T21124] dvmrp6 (unregistering): left allmulticast mode [ 1039.606719][T21124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.667250][T21124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.736550][T21124] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1039.758299][T21124] bond0 (unregistering): Released all slaves [ 1040.496436][T21124] dvmrp6 (unregistering): left allmulticast mode [ 1040.677587][T21124] batman_adv: batadv0: Removing interface: vxlan0 [ 1041.746238][T21124] bond0 (unregistering): left promiscuous mode [ 1041.746256][T21124] bond_slave_0: left promiscuous mode [ 1041.746430][T21124] bond_slave_1: left promiscuous mode [ 1041.746538][T21124] dummy0: left promiscuous mode [ 1041.778719][T21124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.836670][T21124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.896662][T21124] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1041.937347][T21124] bond0 (unregistering): Released all slaves [ 1041.945616][T21124] bond1 (unregistering): Released all slaves [ 1042.180281][T27216] "syz.6.7377" (27216) uses obsolete ecb(arc4) skcipher [ 1042.180604][T26882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.230983][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.231121][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.265083][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.270474][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.539210][ T37] kauditd_printk_skb: 99 callbacks suppressed [ 1042.539228][ T37] audit: type=1326 audit(1766372428.244:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27220 comm="syz.7.7379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x0 [ 1043.214006][ T37] audit: type=1326 audit(1766372428.914:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.214057][ T37] audit: type=1326 audit(1766372428.914:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.214535][ T37] audit: type=1326 audit(1766372428.914:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.214771][ T37] audit: type=1326 audit(1766372428.914:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.215221][ T37] audit: type=1326 audit(1766372428.914:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.215271][ T37] audit: type=1326 audit(1766372428.914:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.400887][T27233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.406117][ T37] audit: type=1326 audit(1766372429.104:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.406163][ T37] audit: type=1326 audit(1766372429.104:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.406202][ T37] audit: type=1326 audit(1766372429.104:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.6.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1043.700070][T27057] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1043.787686][T27057] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1043.989919][T27246] "syz.5.7388" (27246) uses obsolete ecb(arc4) skcipher [ 1044.109859][T27057] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1044.134167][T27243] __nla_validate_parse: 6 callbacks suppressed [ 1044.134186][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7387'. [ 1044.239431][T27057] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1045.360962][T27280] netlink: 'syz.6.7394': attribute type 10 has an invalid length. [ 1045.936448][T21124] hsr_slave_0: left promiscuous mode [ 1045.978261][T21124] hsr_slave_1: left promiscuous mode [ 1045.979130][T21124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.979147][T21124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.027208][T21124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.027236][T21124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.106111][ T5918] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1046.123899][T21124] batadv0: left promiscuous mode [ 1046.257371][ T5918] usb 8-1: Using ep0 maxpacket: 32 [ 1046.259161][ T5918] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 1046.259191][ T5918] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.259210][ T5918] usb 8-1: config 0 has no interface number 0 [ 1046.259250][ T5918] usb 8-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1046.268753][ T5918] usb 8-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1046.268782][ T5918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.268801][ T5918] usb 8-1: Product: syz [ 1046.268814][ T5918] usb 8-1: Manufacturer: syz [ 1046.268828][ T5918] usb 8-1: SerialNumber: syz [ 1046.278390][ T5918] usb 8-1: config 0 descriptor?? [ 1046.281639][T21124] hsr_slave_0: left promiscuous mode [ 1046.316191][T21124] hsr_slave_1: left promiscuous mode [ 1046.325531][T21124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.325557][T21124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.412382][T21124] veth1_macvtap: left promiscuous mode [ 1046.412444][T21124] veth0_macvtap: left promiscuous mode [ 1046.412575][T21124] veth1_vlan: left promiscuous mode [ 1046.412665][T21124] veth0_vlan: left promiscuous mode [ 1046.506354][T21124] veth1_macvtap: left promiscuous mode [ 1046.506417][T21124] veth0_macvtap: left promiscuous mode [ 1046.506547][T21124] veth1_vlan: left promiscuous mode [ 1046.506656][T21124] veth0_vlan: left promiscuous mode [ 1046.543246][T21168] usb 8-1: USB disconnect, device number 6 [ 1047.112263][T27292] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1047.191031][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7400'. [ 1049.296277][T21124] team0 (unregistering): Port device team_slave_1 removed [ 1049.556525][T21124] team0 (unregistering): Port device team_slave_0 removed [ 1052.366567][T21124] pim6reg (unregistering): left allmulticast mode [ 1052.437890][T21124] pimreg (unregistering): left allmulticast mode [ 1054.493455][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.493554][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.627193][T21124] team0 (unregistering): Port device team_slave_1 removed [ 1054.908545][T21124] team0 (unregistering): Port device team_slave_0 removed [ 1057.347763][T27290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7399'. [ 1057.353113][ T5918] lo speed is unknown, defaulting to 1000 [ 1057.353154][ T5918] infiniband syz2: ib_query_port failed (-19) [ 1057.547531][T26882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.591331][ T37] kauditd_printk_skb: 106 callbacks suppressed [ 1057.591347][ T37] audit: type=1326 audit(1766372443.294:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.591390][ T37] audit: type=1326 audit(1766372443.294:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.591430][ T37] audit: type=1326 audit(1766372443.294:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.591470][ T37] audit: type=1326 audit(1766372443.294:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.591767][ T37] audit: type=1326 audit(1766372443.294:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.592052][ T37] audit: type=1326 audit(1766372443.294:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.593787][ T37] audit: type=1326 audit(1766372443.294:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.594258][ T37] audit: type=1326 audit(1766372443.294:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.594641][ T37] audit: type=1326 audit(1766372443.294:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1057.594685][ T37] audit: type=1326 audit(1766372443.294:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27302 comm="syz.7.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1058.395321][T27057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.446472][T27057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.454639][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.454839][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.491479][T18402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.491666][T18402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.733307][T27321] overlayfs: missing 'lowerdir' [ 1059.184738][T27338] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1059.213886][T27338] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1059.327878][T26882] veth0_vlan: entered promiscuous mode [ 1059.340538][T26882] veth1_vlan: entered promiscuous mode [ 1059.468388][T26882] veth0_macvtap: entered promiscuous mode [ 1059.473388][T26882] veth1_macvtap: entered promiscuous mode [ 1059.656550][T26882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.662577][T26882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.694380][ T175] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.709121][ T175] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.732568][ T175] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.733995][ T175] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.982375][T27057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.083650][ T6015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.083670][ T6015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.357424][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.357445][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.548881][T27363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.665971][T27366] overlayfs: missing 'workdir' [ 1060.891500][T21124] IPVS: stop unused estimator thread 0... [ 1061.396915][T27057] veth0_vlan: entered promiscuous mode [ 1061.405309][T27057] veth1_vlan: entered promiscuous mode [ 1061.613629][T27057] veth0_macvtap: entered promiscuous mode [ 1061.622903][T27057] veth1_macvtap: entered promiscuous mode [ 1061.643716][T27057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.657114][T27057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.682218][T21130] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.690401][T21130] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.690662][T21130] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.690697][T21130] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.717198][T27385] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1061.768110][T27389] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7427'. [ 1061.768131][T27389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7427'. [ 1061.768147][T27389] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7427'. [ 1061.804479][T27385] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1061.862609][T27390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7428'. [ 1062.196227][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.196248][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.319345][ T8997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.319365][ T8997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.201148][ T37] kauditd_printk_skb: 154 callbacks suppressed [ 1063.201165][ T37] audit: type=1326 audit(1766372448.904:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.201420][ T37] audit: type=1326 audit(1766372448.904:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.211356][ T37] audit: type=1326 audit(1766372448.914:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.211844][ T37] audit: type=1326 audit(1766372448.914:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.212295][ T37] audit: type=1326 audit(1766372448.914:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.212339][ T37] audit: type=1326 audit(1766372448.914:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.336329][ T37] audit: type=1326 audit(1766372449.044:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.336651][ T37] audit: type=1326 audit(1766372449.044:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.337454][ T37] audit: type=1326 audit(1766372449.044:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.337616][ T37] audit: type=1326 audit(1766372449.044:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27412 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd2a9cef749 code=0x7ffc0000 [ 1063.629447][T27426] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7440'. [ 1064.005996][ T5976] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1064.155978][ T5976] usb 10-1: Using ep0 maxpacket: 32 [ 1064.158662][ T5976] usb 10-1: config 0 has an invalid interface number: 4 but max is 0 [ 1064.158688][ T5976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.158706][ T5976] usb 10-1: config 0 has no interface number 0 [ 1064.158771][ T5976] usb 10-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1064.162365][ T5976] usb 10-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1064.162393][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.162412][ T5976] usb 10-1: Product: syz [ 1064.162427][ T5976] usb 10-1: Manufacturer: syz [ 1064.162551][ T5976] usb 10-1: SerialNumber: syz [ 1064.288726][ T5976] usb 10-1: config 0 descriptor?? [ 1064.300998][T27434] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7443'. [ 1064.526456][T21168] usb 10-1: USB disconnect, device number 2 [ 1065.258276][T27455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7451'. [ 1067.066402][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7463'. [ 1067.376399][ T5988] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1067.526010][ T5988] usb 8-1: Using ep0 maxpacket: 32 [ 1067.543699][ T5988] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 1067.543724][ T5988] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.543741][ T5988] usb 8-1: config 0 has no interface number 0 [ 1067.543788][ T5988] usb 8-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1067.602824][ T5988] usb 8-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1067.602862][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.602881][ T5988] usb 8-1: Product: syz [ 1067.602894][ T5988] usb 8-1: Manufacturer: syz [ 1067.602908][ T5988] usb 8-1: SerialNumber: syz [ 1067.629495][ T5988] usb 8-1: config 0 descriptor?? [ 1067.860128][ T7607] usb 8-1: USB disconnect, device number 7 [ 1069.667182][ T37] kauditd_printk_skb: 159 callbacks suppressed [ 1069.667201][ T37] audit: type=1326 audit(1766372455.364:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.667245][ T37] audit: type=1326 audit(1766372455.364:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.667516][ T37] audit: type=1326 audit(1766372455.374:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.667775][ T37] audit: type=1326 audit(1766372455.374:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.667962][ T37] audit: type=1326 audit(1766372455.374:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.669449][ T37] audit: type=1326 audit(1766372455.374:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.670011][ T37] audit: type=1326 audit(1766372455.374:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.670484][ T37] audit: type=1326 audit(1766372455.374:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.670643][ T37] audit: type=1326 audit(1766372455.374:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.670810][ T37] audit: type=1326 audit(1766372455.374:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27510 comm="syz.9.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65670f749 code=0x7ffc0000 [ 1069.783079][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7476'. [ 1071.752934][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7484'. [ 1071.955008][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 1072.511669][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7488'. [ 1073.115077][T27561] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1074.844002][T27431] Set syz1 is full, maxelem 65536 reached [ 1075.027440][T27579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.116985][ T7606] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1075.161966][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 1075.161984][ T37] audit: type=1326 audit(1766372460.864:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.164718][ T37] audit: type=1326 audit(1766372460.864:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.164766][ T37] audit: type=1326 audit(1766372460.864:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.165398][ T37] audit: type=1326 audit(1766372460.864:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.165661][ T37] audit: type=1326 audit(1766372460.864:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.171399][ T37] audit: type=1326 audit(1766372460.874:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.171444][ T37] audit: type=1326 audit(1766372460.874:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.172602][ T37] audit: type=1326 audit(1766372460.874:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.172643][ T37] audit: type=1326 audit(1766372460.874:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.172680][ T37] audit: type=1326 audit(1766372460.874:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.6.7498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x7ffc0000 [ 1075.366782][ T7606] usb 8-1: Using ep0 maxpacket: 32 [ 1075.407591][ T7606] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 1075.407616][ T7606] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.407634][ T7606] usb 8-1: config 0 has no interface number 0 [ 1075.407677][ T7606] usb 8-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1076.477882][ T7606] usb 8-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1076.477911][ T7606] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.477929][ T7606] usb 8-1: Product: syz [ 1076.477942][ T7606] usb 8-1: Manufacturer: syz [ 1076.477956][ T7606] usb 8-1: SerialNumber: syz [ 1076.497821][ T7606] usb 8-1: config 0 descriptor?? [ 1076.732118][ T10] usb 8-1: USB disconnect, device number 8 [ 1076.985894][T27604] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1079.475958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1079.477791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1079.699304][T27625] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1079.699366][T27625] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1079.743824][T27628] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7513'. [ 1079.744478][T27627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.379276][T27639] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1081.257115][ T37] kauditd_printk_skb: 104 callbacks suppressed [ 1081.257134][ T37] audit: type=1326 audit(1766372466.964:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27648 comm="syz.5.7523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x0 [ 1081.286486][ T5918] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1081.446081][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 1081.451210][ T5918] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 1081.451236][ T5918] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1081.451253][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.451269][ T5918] usb 7-1: config 0 has no interface number 0 [ 1081.451314][ T5918] usb 7-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1081.454176][ T5918] usb 7-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1081.454202][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.454220][ T5918] usb 7-1: Product: syz [ 1081.454233][ T5918] usb 7-1: Manufacturer: syz [ 1081.454246][ T5918] usb 7-1: SerialNumber: syz [ 1081.559164][ T5918] usb 7-1: config 0 descriptor?? [ 1081.776518][T18397] usb 7-1: USB disconnect, device number 6 [ 1082.775915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1082.775949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1083.113799][T27665] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1083.113858][T27665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1083.318587][T27673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.722681][T27677] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1084.551426][T27682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7535'. [ 1084.636656][ T37] audit: type=1326 audit(1766372470.334:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27683 comm="syz.6.7536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385756f749 code=0x0 [ 1085.004029][T27696] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1085.996626][ T804] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1086.110389][ T37] audit: type=1326 audit(1766372471.814:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.110665][ T37] audit: type=1326 audit(1766372471.814:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.114323][ T37] audit: type=1326 audit(1766372471.814:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.114807][ T37] audit: type=1326 audit(1766372471.814:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.115376][ T37] audit: type=1326 audit(1766372471.814:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.115482][ T37] audit: type=1326 audit(1766372471.814:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.117725][ T37] audit: type=1326 audit(1766372471.824:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.123931][ T37] audit: type=1326 audit(1766372471.824:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27704 comm="syz.7.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202615f749 code=0x7ffc0000 [ 1086.165962][ T804] usb 9-1: Using ep0 maxpacket: 32 [ 1086.304458][ T804] usb 9-1: config 0 has an invalid interface number: 4 but max is 0 [ 1086.304485][ T804] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1086.304503][ T804] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.304520][ T804] usb 9-1: config 0 has no interface number 0 [ 1086.304564][ T804] usb 9-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1086.352733][ T804] usb 9-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1086.352761][ T804] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.352778][ T804] usb 9-1: Product: syz [ 1086.352791][ T804] usb 9-1: Manufacturer: syz [ 1086.352804][ T804] usb 9-1: SerialNumber: syz [ 1086.393216][ T804] usb 9-1: config 0 descriptor?? [ 1086.616278][ T804] usb 9-1: USB disconnect, device number 2 [ 1086.884861][T27714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.149425][T27603] Set syz1 is full, maxelem 65536 reached [ 1087.701461][T27726] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1088.405663][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 1088.405680][ T37] audit: type=1326 audit(1766372474.104:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27730 comm="syz.5.7550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9cef749 code=0x0 [ 1088.968911][T27742] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1089.669489][T27745] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1090.287476][ T5988] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1090.331920][ C0] ------------[ cut here ]------------ [ 1090.331936][ C0] ODEBUG: free active (active state 0) object: ffff8880277fb8d0 object type: timer_list hint: rose_t0timer_expiry+0x0/0x360 [ 1090.331999][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: ktimers/0/16 [ 1090.332046][ C0] Modules linked in: [ 1090.332067][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1090.332092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1090.332106][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1090.332135][ C0] Code: 89 44 24 20 e8 b7 65 9a fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 5e 3f 8b 48 c7 c2 40 63 3f 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1090.332154][ C0] RSP: 0018:ffffc90000157890 EFLAGS: 00010246 [ 1090.332173][ C0] RAX: ffffffff89c27ba0 RBX: ffffffff98f164a8 RCX: 0000000000000000 [ 1090.332190][ C0] RDX: ffffffff8b3f6340 RSI: ffffffff8b3f5e20 RDI: ffffffff8ee50bf0 [ 1090.332207][ C0] RBP: ffffffff8aed24e0 R08: ffff8880277fb8d0 R09: ffffffff8aed3660 [ 1090.332224][ C0] R10: dffffc0000000000 R11: ffffffff81acb190 R12: ffff8880277fba00 [ 1090.332241][ C0] R13: ffffffff8ee50bf0 R14: ffff8880277fb000 R15: ffff8880277fb8d0 [ 1090.332259][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1090.332278][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.332294][ C0] CR2: 0000200000037030 CR3: 00000000515b0000 CR4: 00000000003526f0 [ 1090.332313][ C0] Call Trace: [ 1090.332322][ C0] [ 1090.332331][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1090.332366][ C0] ? rt_spin_lock+0x1f4/0x3e0 [ 1090.332401][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1090.332426][ C0] kfree+0x136/0x900 [ 1090.332462][ C0] rose_timer_expiry+0x4cb/0x600 [ 1090.332483][ C0] ? call_timer_fn+0x159/0x590 [ 1090.332520][ C0] call_timer_fn+0x16e/0x590 [ 1090.332551][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.332574][ C0] ? call_timer_fn+0xbe/0x590 [ 1090.332605][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1090.332650][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1090.332679][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.332704][ C0] __run_timer_base+0x648/0x970 [ 1090.332753][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1090.332793][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1090.332826][ C0] run_timer_softirq+0xb7/0x180 [ 1090.332855][ C0] handle_softirqs+0x1df/0x650 [ 1090.332891][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1090.332918][ C0] run_ktimerd+0x69/0x100 [ 1090.332945][ C0] smpboot_thread_fn+0x542/0xa60 [ 1090.332974][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1090.333012][ C0] kthread+0x711/0x8a0 [ 1090.333047][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1090.333074][ C0] ? __pfx_kthread+0x10/0x10 [ 1090.333101][ C0] ? rt_spin_unlock+0x150/0x200 [ 1090.333136][ C0] ? rt_spin_unlock+0x161/0x200 [ 1090.333162][ C0] ? __pfx_kthread+0x10/0x10 [ 1090.333194][ C0] ret_from_fork+0x510/0xa50 [ 1090.333222][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1090.333244][ C0] ? __switch_to+0xc9e/0x1480 [ 1090.333282][ C0] ? __pfx_kthread+0x10/0x10 [ 1090.333314][ C0] ret_from_fork_asm+0x1a/0x30 [ 1090.333366][ C0] [ 1090.333386][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1090.333401][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1090.333426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1090.333439][ C0] Call Trace: [ 1090.333447][ C0] [ 1090.333456][ C0] vpanic+0x1e0/0x670 [ 1090.333490][ C0] panic+0xb9/0xc0 [ 1090.333519][ C0] ? __pfx_panic+0x10/0x10 [ 1090.333560][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1090.333599][ C0] __warn+0x317/0x4b0 [ 1090.333627][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1090.333660][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1090.333693][ C0] __report_bug+0x288/0x500 [ 1090.333728][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1090.333754][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1090.333790][ C0] ? __pfx___report_bug+0x10/0x10 [ 1090.333845][ C0] report_bug_entry+0x19a/0x290 [ 1090.333879][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 1090.333905][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 1090.333931][ C0] handle_bug+0xca/0x200 [ 1090.333957][ C0] exc_invalid_op+0x1a/0x50 [ 1090.333982][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1090.334003][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1090.334030][ C0] Code: 89 44 24 20 e8 b7 65 9a fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 5e 3f 8b 48 c7 c2 40 63 3f 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1090.334049][ C0] RSP: 0018:ffffc90000157890 EFLAGS: 00010246 [ 1090.334066][ C0] RAX: ffffffff89c27ba0 RBX: ffffffff98f164a8 RCX: 0000000000000000 [ 1090.334082][ C0] RDX: ffffffff8b3f6340 RSI: ffffffff8b3f5e20 RDI: ffffffff8ee50bf0 [ 1090.334098][ C0] RBP: ffffffff8aed24e0 R08: ffff8880277fb8d0 R09: ffffffff8aed3660 [ 1090.334115][ C0] R10: dffffc0000000000 R11: ffffffff81acb190 R12: ffff8880277fba00 [ 1090.334132][ C0] R13: ffffffff8ee50bf0 R14: ffff8880277fb000 R15: ffff8880277fb8d0 [ 1090.334155][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 1090.334188][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1090.334226][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1090.334259][ C0] ? rt_spin_lock+0x1f4/0x3e0 [ 1090.334292][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1090.334316][ C0] kfree+0x136/0x900 [ 1090.334350][ C0] rose_timer_expiry+0x4cb/0x600 [ 1090.334371][ C0] ? call_timer_fn+0x159/0x590 [ 1090.334406][ C0] call_timer_fn+0x16e/0x590 [ 1090.334438][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.334460][ C0] ? call_timer_fn+0xbe/0x590 [ 1090.334491][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1090.334536][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1090.334556][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.334582][ C0] __run_timer_base+0x648/0x970 [ 1090.334629][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1090.334674][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1090.334706][ C0] run_timer_softirq+0xb7/0x180 [ 1090.334737][ C0] handle_softirqs+0x1df/0x650 [ 1090.334772][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1090.334798][ C0] run_ktimerd+0x69/0x100 [ 1090.334826][ C0] smpboot_thread_fn+0x542/0xa60 [ 1090.334854][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1090.334891][ C0] kthread+0x711/0x8a0 [ 1090.334925][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1090.334952][ C0] ? __pfx_kthread+0x10/0x10 [ 1090.334979][ C0] ? rt_spin_unlock+0x150/0x200 [ 1090.335013][ C0] ? rt_spin_unlock+0x161/0x200 [ 1090.335039][ C0] ? __pfx_kthread+0x10/0x10 [ 1090.335071][ C0] ret_from_fork+0x510/0xa50 [ 1090.335098][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1090.335120][ C0] ? __switch_to+0xc9e/0x1480 [ 1090.335158][ C0] ? __pfx_kthread+0x10/0x10 [ 1090.335189][ C0] ret_from_fork_asm+0x1a/0x30 [ 1090.335241][ C0] [ 1090.335583][ C0] Kernel Offset: disabled