last executing test programs: 39m57.073870263s ago: executing program 32 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="20000000100001070000000000000000"], 0x20}}, 0x800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0xfffe, 0xd, 0x3d7a, 0x3}) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 39m41.472624084s ago: executing program 33 (id=207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x6, 0x4, 0xd, 0x1}) dup3(r3, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) 39m21.818365285s ago: executing program 34 (id=231): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 38m23.468814635s ago: executing program 35 (id=285): poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x1) fcntl$getown(r2, 0x9) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e8, 0x4}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0203", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x6, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x8, 0x0, 0x80}, {0x6, 0x0, 0x9, 0x5a2d}]}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 33m56.362491851s ago: executing program 36 (id=891): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 33m51.353272072s ago: executing program 5 (id=919): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x7, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0x9, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x8, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0xffb, 0xfffff811, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x9, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x7f, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0xffffffff, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x40000003, 0x9d86, 0xd, 0xfffffff7, 0xc, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 33m45.144178749s ago: executing program 5 (id=927): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) 33m43.055738046s ago: executing program 5 (id=931): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'hsr0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001cc0), 0x400000000000026, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x2c, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x7, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x9, 0x2}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) 33m40.469484253s ago: executing program 5 (id=935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000824000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000500)="a66a2c41a77e88e10e1e7a632c933460e1e39b64f85853a1b50959a19b9bfa4bdb9edf0cb9334de8d0a0d945bc7e806a3684327bb6bfe184ea7471941f81cb2f69a96add23d247cd50a6b72712637144aa37aae1a70d52a9c6ab2ff527023db9ac14ab59baf126dd680c1bb569e2c7b78c8cfbc524364fa83e04c97cef6a83bcb9c1d473011742c33dd48c66e2edbeae2e6312f8b10d2798a8ab9a86254c", 0x9e}]}, 0x4}, 0x1) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r2, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="dc510000d4b9f7cfce77a94e5107365c9439f6a0d2bd6e5ee9dd508f4a6c5cf999e70dc6ce6f132225f4fa6d101cd4ecdd43b8138daa5f4c32f5eb174f4c95f39d77bc7771e5b37eed55bd830e40e30c16a5a43003dd4707", @ANYBLOB="010029bd7000fcdbdf25090000000c0006000100"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_io_uring_setup(0xfeb, 0x0, &(0x7f00000006c0), &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x101, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x20000800) 33m33.756933087s ago: executing program 5 (id=943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x94) chdir(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 33m31.999190746s ago: executing program 5 (id=944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r2, &(0x7f0000001300)=""/112, 0x70) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000004000', @ANYRES64=r0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) lgetxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f00000006c0)=""/77, 0x4d) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) 33m14.312237615s ago: executing program 37 (id=944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r2, &(0x7f0000001300)=""/112, 0x70) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000004000', @ANYRES64=r0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) lgetxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f00000006c0)=""/77, 0x4d) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) 8m55.213489264s ago: executing program 9 (id=6902): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) 8m53.937368418s ago: executing program 9 (id=6913): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m53.706826039s ago: executing program 9 (id=6916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0x4}], 0x1}}], 0x2, 0x20004810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 8m53.525109243s ago: executing program 9 (id=6919): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, 0x0, 0x0}, 0x94) 8m53.264707551s ago: executing program 9 (id=6922): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x7ed6, 0x4, 0x2, 0x9, 0xffffffff, 0x1, 0x2020a}, 0x20) 8m53.032525962s ago: executing program 7 (id=6923): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe2, 0x0, 0x0, 0x8008000}, 0x28) 8m52.951971499s ago: executing program 9 (id=6925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c9a02, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000280)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 8m52.793187517s ago: executing program 7 (id=6927): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 8m52.361410126s ago: executing program 7 (id=6934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) setitimer(0x1, 0x0, 0x0) 8m52.102972914s ago: executing program 2 (id=6937): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe2, 0x0, 0x0, 0x8008000}, 0x28) 8m52.058432796s ago: executing program 7 (id=6939): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}, 0x0, 0x2}, 0x90) 8m51.863809345s ago: executing program 2 (id=6942): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x17, "0040001e1d113c812e5d6000"}) socket$packet(0x11, 0x2, 0x300) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCSETSF(r5, 0x5404, 0x0) 8m51.836434506s ago: executing program 7 (id=6944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)="f2", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x7ed6, 0x4, 0x2, 0x9, 0xffffffff, 0x1, 0x2020a}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0xff}}, 0x5, 0x2003, 0xf03, 0x3, 0x94, 0xfffffffd, 0x80}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 8m51.623444758s ago: executing program 7 (id=6946): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8m50.822466305s ago: executing program 2 (id=6949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x7fbb, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x401}}}}}}}, 0x0) 8m50.623497362s ago: executing program 2 (id=6952): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe2, 0x0, 0x0, 0x8008000}, 0x28) 8m50.417197692s ago: executing program 2 (id=6953): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)='s', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)='2', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x240}}], 0x2, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x5, 0x7fff}, &(0x7f0000000140)=0xc) 8m50.181332087s ago: executing program 2 (id=6956): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x1, @multicast}, 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7400fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="110a0500000800002c00128009000100626f6e64000000001c0002800500010004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 8m37.40295898s ago: executing program 38 (id=6925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c9a02, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000280)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 8m36.431246514s ago: executing program 39 (id=6946): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8m34.966207166s ago: executing program 40 (id=6956): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x1, @multicast}, 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7400fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="110a0500000800002c00128009000100626f6e64000000001c0002800500010004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 7m9.030894634s ago: executing program 1 (id=7532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x10}}}]}, 0x38}}, 0x0) 7m7.378311209s ago: executing program 1 (id=7543): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0xa00000, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 7m7.171802857s ago: executing program 1 (id=7545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 7m6.124258071s ago: executing program 1 (id=7550): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x5}, 0x18) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 7m5.805059938s ago: executing program 1 (id=7555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x23, @loopback, 0x23}, 0x1c) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2b7069647320ad888005bbe4d0faaa5b837a1036fa827bd6"], 0x6) 7m5.596808892s ago: executing program 1 (id=7558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x1, 0x80, 0x207, 0x80004, 0xe]}, &(0x7f0000000040)=0x54) 6m50.273289169s ago: executing program 41 (id=7558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x1, 0x80, 0x207, 0x80004, 0xe]}, &(0x7f0000000040)=0x54) 30.770873113s ago: executing program 4 (id=10418): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x515001, 0x102) mkdirat(0xffffffffffffff9c, 0x0, 0x81) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) memfd_create(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000380)={0x26b0, 0x1, 0xffffffff, 0x3, 0x16, "28c4d95d3933aabcf900"}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 27.882805015s ago: executing program 4 (id=10425): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x80, &(0x7f0000000940)=""/128}, {0x1, 0x1000, &(0x7f0000000a80)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 27.736380107s ago: executing program 4 (id=10427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) 27.504119889s ago: executing program 4 (id=10429): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x10000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x1, 0x0, {"15a82a35c72b55077ec82827906f7f19"}, 0x8001, 0x7, 0x7}}}, 0x118) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r6, 0x1) 26.401000723s ago: executing program 4 (id=10439): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) syz_usb_connect(0x0, 0x5e9, &(0x7f0000000cc0)={{0x12, 0x1, 0x201, 0x71, 0xbb, 0xa1, 0x40, 0x7ca, 0xb835, 0x8d5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d7, 0x1, 0x1, 0x9, 0x0, 0x4, [{{0x9, 0x4, 0xf5, 0x4, 0xf, 0x60, 0x99, 0x76, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0x101, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x204, 0x6, 0x1, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x3, 0x6}]}], [{{0x9, 0x5, 0xc, 0x10, 0x200, 0x40, 0x80, 0x91, [@generic={0x10, 0x7, "9aaf16fb58aa7a556d6b4121ffd2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x4, 0x3, 0x3, [@generic={0x4c, 0x21, "8976b6de85d7dcf2f5bc6a48eea5c8e63b7093e04b2476abd4e6f72dad5eb01f8991750bd27d992658aa1505f2e0c7eb8f2cc767a150a9a2c8d83e03da565f03e8dd6b7a112b1efa4d01"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x6, 0x24, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x9}, @generic={0xca, 0xe, "ddb457a9aebd5724d2dd721717f6c2e4a87b1d8f8a3e67ce21fb664acc2ecb085418b3b2986239b2c352820f6fb6668e65cc6bcfd1a88f5ff11ff3d0c76203003a4144564a462016ae596f34c5688c00267e5da388f7c34b05153a6a9bc0d952fd9d1d0bf52381a9bee21b96eca32e90026159ebb9dae9da71ea76700855524ff2041971ade1f2986bbefacdf3c948e6beb8fd002afc82582cb80e5398b17648a789bfc7ee13d8329151149404880572d7ddb59ab588fd00c49ddf55a19e382c3c64af507b09102f"}]}}, {{0x9, 0x5, 0x37603f9c5fd82941, 0x10, 0x40, 0x6, 0x7f, 0x0, [@generic={0x68, 0xf, "739bde412722eb949284aaf161fb640a2fb08c4c8f493b3366fb005d7179c4913f411ba824a75981c5be4e5f81ecddf6db1a942b2b9b468c8d23c154c36296b8ca2100c372396b585c7f3b7c15d2dd2e56fe0715fe533b20b5ee06e26a5e36bed84838bfe697"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x10, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x6}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x4, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x60, 0x69, 0x1d, 0x7, [@generic={0x66, 0x3, "d1ff72d34e7e10d0d4d99bcf333829cb9d1158493303c8a6a8c97294375b5ce9f43b51c30d188ef8c7a174592eb4fd53319484805367a8ec6d138b5afc3404c75f89ff74610c01f5930d5d23c8a37a07c4cf780c5b7bdc22d393447b6f56b6dfa42ba9f0"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xed}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x40, 0x6, 0x6, [@generic={0x74, 0x2, "972c05d79fb66c25bed86dde6ade7ff9a927a7d50e65d188667e16ca062a288f9edd40baec7019e36cd9b49625037a8a1c1aae2efdaa7d528086215aca5800451128bb423f714e1aa29c3783ed2c0aec1ab3fc8b97681f076b8b94197e27c4cce0a8588b6ace54cb37d06c2598244a962699"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x1, 0x20, 0xfc, [@generic={0x16, 0x23, "5db8990ce4936bff1a119d9ac8dbc28b62d856db"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x8, 0x4, 0xa8, [@generic={0x22, 0x30, "0b2a63b950507e3906876351547f47d28f57ebee8262accf3a05bc9fde5cae69"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x8, 0x4, 0x0, [@generic={0x5f, 0x2, "b691928cd646a991725454367cb70e1e92387d6886f81a84197c05442ad5af2e49fa0cd0bc7b8a60df19f6c91f053e0794b03eb3ffe59bef4f98781b3c0a2044ad01cb56b50d9f23aff60bd0e102361845635bafc6d043c72649a01697"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xfd, 0x9, 0x7, [@generic={0x8d, 0x6, "e2ae994e77ca49d9aad8904bee70e065cdb7535e335c033d542ccd43f12f32b4e396e4f7effa8453904a0f987dc5fae75e20cb0e3f2f2a18da4ff29a138858e461dc6a9a32d2f3b352dab82bb5e1df7271a12ad9362f4fac097e4864eb15a7a42a5342271a2fbfd2dd0d7e90144ca5ce2004c3a89d30bc57d4bdf8a56cd275739a556ba651cd1ea84fed4c"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x56, 0xb, 0x6, [@generic={0x36, 0x21, "6e86800e9286c3c4cbd180de9c3d01efb1f741fbe6a3f2f9f981b2415b60e2d4789dc014c3f1d28ee922ec0611023ec3756d63f6"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x7, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff9}, @generic={0x43, 0x6, "21dacdff144e55a793913823b60fb28f6295b039e256711885069a9244e556e9916bae7c1a0c186e6c73f96bc6606672e5243199792af37e482ab53f57e99ed857"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xda, 0x7, 0x6, [@generic={0xf6, 0x21, "91405081541f2751ff7365040bf767b7cf6956081a3b4e995410b60b27e8ea24fe322617a52cecb83697d4d54e02c9e16749185550a1182a6f0e9255262daf4f1a78db6f628079cdc674dce719a27370430debdf5ea59d7666f11c348d9472a2fe6f7e1fe2b4b167fbb7cbd835377fb7a83fe98ce1d4b03249f365a39d094a71065d66cfdc96bfb668c3e33d34de1bcd8c20d09dbd118baaf4fafb442e510cde2a8f85356d88ac35769bb3ff08118a91844cacb8fc999c44fe272b3f024a86affa32c3dc55f099b7e7e394741a47ca92d76147164c8ab7b5d146d7b2dc84f8ac87f7bb9c5782824818d18d3b6014ea7d38dd91bb"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x6, 0x4, 0xd7, 0x6}, 0xe2, &(0x7f0000000a40)={0x5, 0xf, 0xe2, 0x4, [@ptm_cap={0x3}, @generic={0x4, 0x10, 0x2, "11"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xf3, 0x6, 0xa6, 0x0, 0x3}, @generic={0xcb, 0x10, 0x3, "395eb545113d6c03b45e62b34c6f4ae3169bdf053014f85760508fd71a164a985cdaf5f2dfbe5fafb9bfa9179cac32bd71b19248e7ac0abe3a0139931367d6b5ae749f761c7946d8cb5b8ebfe1b395f353873d389fb26e5f92cbc89136518401da1f77887fd31c8a53d60668a97ee88280fe8e6a8fffdec542cd744c018e3aab5a3b74634024cc6ec9de87806e31c32e262e3c61b368a33d09eea1acfec19acd5105ec32208502f8ed0e226db14f170317701e61c51c2f49cb9fde4b3e1307c6e5d4eda868417e44"}]}, 0x2, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xa, &(0x7f00000012c0)=@string={0xa, 0x3, "eaffb6bd933175fa"}}]}) 24.470142774s ago: executing program 4 (id=10447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0xa4, 0x4) listen(r0, 0x2) 14.672861625s ago: executing program 3 (id=10481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfec7, 0x400, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x117, &(0x7f0000000880)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) 8.502193501s ago: executing program 3 (id=10485): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0, 0x3}, 0x20) pipe2$9p(&(0x7f00000000c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="cfbd7c161790", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) 6.125156314s ago: executing program 3 (id=10492): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x26) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x48040) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000012c0)=0xe) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r4, 0x11, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) 4.990837473s ago: executing program 3 (id=10496): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.868647023s ago: executing program 6 (id=10498): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) 4.808134903s ago: executing program 6 (id=10499): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 2.598892674s ago: executing program 0 (id=10506): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 2.374903956s ago: executing program 8 (id=10507): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 2.16652584s ago: executing program 0 (id=10508): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4041) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.096856933s ago: executing program 0 (id=10509): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.095508833s ago: executing program 6 (id=10510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0xa4, 0x4) listen(r0, 0x2) 2.025980394s ago: executing program 8 (id=10511): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x2000000, 0x0, {0x9}}, 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1be7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f0000000240)={0x0, 0x35, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.944993487s ago: executing program 8 (id=10512): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x3c, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35b09c8913d4e54116b80106a24c0986"}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) listen(r3, 0xfffffffd) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 1.927591416s ago: executing program 6 (id=10513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2119, &(0x7f0000000400)={0x0, 0x6c85, 0x1408, 0x0, 0x5e5, 0x0, r2}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x18, &(0x7f0000000140)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 1.827628027s ago: executing program 0 (id=10514): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x7, 0x20002f3}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) 1.797394681s ago: executing program 3 (id=10515): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x0) 900.943557ms ago: executing program 0 (id=10516): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 900.673507ms ago: executing program 3 (id=10517): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 897.955547ms ago: executing program 8 (id=10518): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4041) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 803.078198ms ago: executing program 6 (id=10519): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 786.855338ms ago: executing program 8 (id=10520): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0xd57, 0x3, 0xe7, 0xbaf, 0x6, 0x6, 0x4804, 0xf9c, 0x8, 0x6, 0x0, 0x9, 0x5, 0x10000, 0x7, 0x1], 0x3000, 0x80000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000004c0), 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000053c0)=""/109, 0xfffffffffffffeab}], 0x4}, 0x90f3}, {{&(0x7f0000000500)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x7}, 0x473}, {{&(0x7f0000000940)=@phonet, 0x80, &(0x7f0000004000)=[{&(0x7f00000009c0)=""/135, 0x87}, {&(0x7f0000000a80)=""/225, 0xe1}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f0000003d40)=""/207, 0xcf}, {&(0x7f0000003e40)=""/186, 0xba}, {&(0x7f0000003f00)=""/229, 0xe5}, {&(0x7f0000000c80)=""/124, 0x7c}], 0x7}, 0x9}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000004080)=""/168, 0xa8}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x2, &(0x7f0000005180)=""/216, 0xd8}, 0x6}, {{&(0x7f0000005280)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005300)=""/184, 0xb8}, {&(0x7f0000005f00)=""/159, 0x92}, {&(0x7f0000005480)=""/110, 0x6e}, {&(0x7f0000005500)=""/76, 0x4c}, {&(0x7f0000005580)=""/237, 0xed}, {&(0x7f0000005680)=""/40, 0x28}, {&(0x7f00000056c0)=""/221, 0xdd}, {&(0x7f00000057c0)=""/4, 0x4}, {&(0x7f0000005800)=""/73, 0x49}, {&(0x7f0000005880)=""/204, 0xcc}], 0xa, &(0x7f0000005a40)=""/96, 0x60}, 0x5}, {{&(0x7f0000005ac0)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005b40)=""/66, 0x42}, {&(0x7f0000005bc0)=""/168, 0xa8}, {&(0x7f0000007b00)=""/17, 0x11}, {&(0x7f0000005cc0)=""/69, 0x45}], 0x4, &(0x7f0000005d80)=""/80, 0x50}, 0x8}, {{&(0x7f0000005e00)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005e80)=""/81, 0x51}, {&(0x7f0000007b40)=""/149, 0x95}], 0x2, &(0x7f0000006000)=""/49, 0x31}, 0xaeb}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000006040)=""/84, 0x54}, {&(0x7f00000060c0)=""/126, 0x7e}, {&(0x7f0000006140)=""/24, 0x18}, {&(0x7f0000006180)=""/176, 0xb0}, {&(0x7f0000006240)=""/116, 0x74}, {&(0x7f00000062c0)=""/181, 0xb5}, {&(0x7f0000006380)=""/87, 0x57}], 0x7, &(0x7f0000006480)=""/255, 0xff}, 0x7}, {{&(0x7f0000006580)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000007800)=[{&(0x7f0000006600)=""/238, 0xee}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/93, 0x5d}, {&(0x7f0000007780)=""/21, 0x15}, {&(0x7f0000005c80)=""/15, 0xf}], 0x5, &(0x7f0000007880)=""/14, 0xe}, 0xffffff29}], 0x9, 0x2, 0x0) pipe(&(0x7f0000000d00)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 95.984519ms ago: executing program 0 (id=10521): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x2000000, 0x0, {0x9}}, 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1be7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f0000000240)={0x0, 0x35, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 39.297626ms ago: executing program 6 (id=10522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0xa4, 0x4) listen(r0, 0x2) 0s ago: executing program 8 (id=10523): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x9, {{0x8, 0x9, 0x1, r2}}}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000c80)=""/135, 0x87) kernel console output (not intermixed with test programs): up backlog [ 2200.590984][T29045] fuse: Unknown parameter 'use00000000000000000000' [ 2201.038446][T21591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.175501][T29067] binder: BINDER_SET_CONTEXT_MGR already set [ 2201.175517][T29067] binder: 29066:29067 ioctl 4018620d 200000004a80 returned -16 [ 2201.485040][T29072] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7481'. [ 2202.058208][T29079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2202.081490][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.423700][T29085] fuse: Unknown parameter 'use00000000000000000000' [ 2202.555555][T29088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7486'. [ 2203.071852][T29103] overlayfs: missing 'lowerdir' [ 2203.118606][T21591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.128200][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.350093][T29110] fuse: Bad value for 'user_id' [ 2203.350114][T29110] fuse: Bad value for 'user_id' [ 2203.606606][T29116] fuse: Unknown parameter 'use00000000000000000000' [ 2204.053232][T29129] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7501'. [ 2204.158247][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.365645][T29136] overlayfs: missing 'lowerdir' [ 2204.618314][T29144] binder: 29143:29144 ioctl c0306201 200000000240 returned -11 [ 2204.725401][T29151] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.7511'. [ 2204.811988][T29148] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2204.812007][T29148] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2204.812033][T29148] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2205.197826][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.417793][T29166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7518'. [ 2205.795981][T29174] overlayfs: missing 'lowerdir' [ 2206.159227][T18932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.238706][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.278047][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.282931][ T7902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.284457][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.291241][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.694975][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.161246][T18932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.228690][T29223] overlayfs: missing 'lowerdir' [ 2208.321399][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.509119][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.038345][T29237] fuse: Unknown parameter '0x0000000000000004' [ 2209.095147][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.200967][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2209.372541][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2209.377858][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2209.391802][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2209.392876][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2209.393594][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2209.821769][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.035461][T29258] overlayfs: missing 'lowerdir' [ 2210.081847][T29244] lo speed is unknown, defaulting to 1000 [ 2210.397938][T21592] net_ratelimit: 1 callbacks suppressed [ 2210.397956][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.536362][T29270] fuse: Unknown parameter '0x0000000000000004' [ 2211.537844][ T5817] Bluetooth: hci0: command tx timeout [ 2211.858861][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2211.859599][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 2211.909889][T29294] lo speed is unknown, defaulting to 1000 [ 2212.079332][ T10] usb 2-1: config 0 has no interfaces? [ 2212.079372][ T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2212.079397][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.084467][ T10] usb 2-1: config 0 descriptor?? [ 2212.120293][T29282] lo speed is unknown, defaulting to 1000 [ 2212.120891][T29244] chnl_net:caif_netlink_parms(): no params data found [ 2212.184205][T29297] overlayfs: missing 'lowerdir' [ 2212.237270][T18932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2212.538020][T29307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7566'. [ 2212.538484][T29307] IPVS: length: 24 != 12792 [ 2212.898148][T21590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.382994][T29319] loop3: detected capacity change from 0 to 7 [ 2213.463321][T29319] Dev loop3: unable to read RDB block 7 [ 2213.463378][T29319] loop3: unable to read partition table [ 2213.463597][T29319] loop3: partition table beyond EOD, truncated [ 2213.463617][T29319] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2213.687103][ T5817] Bluetooth: hci0: command tx timeout [ 2213.938954][T21590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2214.830091][ T12] bond0 (unregistering): Released all slaves [ 2214.841011][ T12] bond1 (unregistering): Released all slaves [ 2214.851083][ T12] bond2 (unregistering): Released all slaves [ 2214.860697][ T12] bond3 (unregistering): Released all slaves [ 2215.000864][T21590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.192183][T29330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2215.192253][T29330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2215.277230][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.565663][T29335] fuse: Unknown parameter '0x0000000000000009' [ 2215.757044][ T5817] Bluetooth: hci0: command tx timeout [ 2216.054115][T29345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7576'. [ 2216.054586][T29345] IPVS: length: 24 != 12792 [ 2216.078331][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.624029][T29358] binder: 29357:29358 ioctl c0306201 200000000240 returned -11 [ 2217.117460][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.378403][T29244] bridge0: port 1(bridge_slave_0) entered blocking state [ 2217.378539][T29244] bridge0: port 1(bridge_slave_0) entered disabled state [ 2217.378797][T29244] bridge_slave_0: entered allmulticast mode [ 2217.381791][T29244] bridge_slave_0: entered promiscuous mode [ 2217.487416][T29244] bridge0: port 2(bridge_slave_1) entered blocking state [ 2217.487554][T29244] bridge0: port 2(bridge_slave_1) entered disabled state [ 2217.487803][T29244] bridge_slave_1: entered allmulticast mode [ 2217.499505][T29244] bridge_slave_1: entered promiscuous mode [ 2217.762476][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.836731][ T5817] Bluetooth: hci0: command tx timeout [ 2218.157531][T21590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.205275][T29244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2218.319518][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.386809][ T12] hsr_slave_0: left promiscuous mode [ 2218.455410][ T12] hsr_slave_1: left promiscuous mode [ 2218.761610][ T12] veth1_macvtap: left promiscuous mode [ 2218.761684][ T12] veth0_macvtap: left promiscuous mode [ 2218.765551][ T12] veth1_vlan: left promiscuous mode [ 2218.782670][ T12] veth0_vlan: left promiscuous mode [ 2219.197383][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2220.238001][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.240509][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7594'. [ 2221.241016][T29405] IPVS: length: 24 != 12792 [ 2221.311474][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.380276][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.644503][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.644574][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.323466][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2223.367209][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.397469][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.444333][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.482415][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2226.083578][T29244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2226.084376][T21590] lo speed is unknown, defaulting to 1000 [ 2226.084403][T21590] infiniband syz2: ib_query_port failed (-19) [ 2226.500518][T21268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2226.506099][T21268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2226.511500][T21268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2226.532121][T21268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2226.533793][T21268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2226.558955][T21591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2226.585751][T29244] team0: Port device team_slave_0 added [ 2226.638232][T29244] team0: Port device team_slave_1 added [ 2226.972840][T29434] loop2: detected capacity change from 0 to 7 [ 2226.995491][T29434] Dev loop2: unable to read RDB block 7 [ 2226.995525][T29434] loop2: AHDI p1 p2 p3 [ 2226.995553][T29434] loop2: partition table partially beyond EOD, truncated [ 2226.995667][T29434] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2226.995686][T29434] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2227.051843][T29244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2227.051860][T29244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2227.051885][T29244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2227.067956][T29244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2227.067973][T29244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2227.067999][T29244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2227.376462][T10983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2227.530002][T10983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2227.596798][T21590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2228.131978][T29244] hsr_slave_0: entered promiscuous mode [ 2228.132910][T29244] hsr_slave_1: entered promiscuous mode [ 2228.133701][T29244] debugfs: 'hsr0' already exists in 'hsr' [ 2228.133717][T29244] Cannot create hsr debugfs directory [ 2228.162807][T10983] usb 2-1: USB disconnect, device number 3 [ 2228.659174][T21592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2228.716470][T21268] Bluetooth: hci2: command tx timeout [ 2228.757580][ T12] IPVS: stop unused estimator thread 0... [ 2228.954579][T29471] loop3: detected capacity change from 0 to 7 [ 2228.965768][T29471] Dev loop3: unable to read RDB block 7 [ 2228.965811][T29471] loop3: unable to read partition table [ 2228.966031][T29471] loop3: partition table beyond EOD, truncated [ 2228.966049][T29471] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2229.514987][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.707855][T29488] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.7621'. [ 2229.913758][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.014210][T29426] chnl_net:caif_netlink_parms(): no params data found [ 2230.256285][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.749572][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.796463][T21268] Bluetooth: hci2: command tx timeout [ 2230.934089][T29509] fuse: Unknown parameter '0x0000000000000003' [ 2231.185091][T29426] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.189342][T29426] bridge0: port 1(bridge_slave_0) entered disabled state [ 2231.189602][T29426] bridge_slave_0: entered allmulticast mode [ 2231.195649][T29426] bridge_slave_0: entered promiscuous mode [ 2231.223725][T29426] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.227551][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.227783][T29426] bridge_slave_1: entered allmulticast mode [ 2231.239193][T29426] bridge_slave_1: entered promiscuous mode [ 2231.484456][T29426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2231.496810][T29426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2231.784797][T29426] team0: Port device team_slave_0 added [ 2231.828174][T29426] team0: Port device team_slave_1 added [ 2232.105177][T29426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2232.105189][T29426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2232.105204][T29426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2232.153263][T29426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2232.153274][T29426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2232.153289][T29426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2232.455499][ T12] bridge_slave_1: left allmulticast mode [ 2232.455521][ T12] bridge_slave_1: left promiscuous mode [ 2232.455687][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2232.567040][ T12] bridge_slave_0: left allmulticast mode [ 2232.567060][ T12] bridge_slave_0: left promiscuous mode [ 2232.571351][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.664259][T29538] fuse: Unknown parameter 'use00000000000000000000' [ 2232.886105][T21268] Bluetooth: hci2: command tx timeout [ 2233.282136][ C0] vkms_vblank_simulate: vblank timer overrun [ 2233.391181][T29550] loop2: detected capacity change from 0 to 7 [ 2233.396148][T29550] Dev loop2: unable to read RDB block 7 [ 2233.399053][T29550] loop2: AHDI p1 p2 p3 [ 2233.399093][T29550] loop2: partition table partially beyond EOD, truncated [ 2233.399221][T29550] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2233.399240][T29550] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2233.474834][ C0] vkms_vblank_simulate: vblank timer overrun [ 2233.549721][ C0] vkms_vblank_simulate: vblank timer overrun [ 2233.610679][ C0] vkms_vblank_simulate: vblank timer overrun [ 2233.780839][ C0] vkms_vblank_simulate: vblank timer overrun [ 2233.868740][ C0] vkms_vblank_simulate: vblank timer overrun [ 2233.955924][ C0] vkms_vblank_simulate: vblank timer overrun [ 2234.044206][ C0] vkms_vblank_simulate: vblank timer overrun [ 2234.151190][ C0] vkms_vblank_simulate: vblank timer overrun [ 2234.986381][ C0] vkms_vblank_simulate: vblank timer overrun [ 2235.000427][T21268] Bluetooth: hci2: command tx timeout [ 2235.160523][ C0] vkms_vblank_simulate: vblank timer overrun [ 2235.354270][T29584] binder: BINDER_SET_CONTEXT_MGR already set [ 2235.354286][T29584] binder: 29582:29584 ioctl 4018620d 200000000040 returned -16 [ 2235.355284][T29584] binder: 29582:29584 ioctl c0306201 200000000240 returned -11 [ 2235.508856][ C0] vkms_vblank_simulate: vblank timer overrun [ 2235.595947][ C0] vkms_vblank_simulate: vblank timer overrun [ 2235.683376][ C0] vkms_vblank_simulate: vblank timer overrun [ 2235.750730][ C0] vkms_vblank_simulate: vblank timer overrun [ 2235.892208][ C0] vkms_vblank_simulate: vblank timer overrun [ 2235.962784][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.038891][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.121196][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.189482][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.260538][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.329827][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.485194][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.541939][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.596551][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.666365][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2236.727971][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2236.772739][ T12] bond0 (unregistering): Released all slaves [ 2236.907012][ C0] vkms_vblank_simulate: vblank timer overrun [ 2236.987861][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.140365][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.275113][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.336965][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.412772][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.610036][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.729767][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.801138][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.840652][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.877788][ T12] bond1 (unregistering): Released all slaves [ 2238.409101][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 2238.868531][ T12] bond2 (unregistering): Released all slaves [ 2239.870841][ T12] bond3 (unregistering): Released all slaves [ 2240.930051][ T12] bond4 (unregistering): Released all slaves [ 2240.989864][T29568] lo speed is unknown, defaulting to 1000 [ 2241.201310][T29568] lo speed is unknown, defaulting to 1000 [ 2241.598212][T29568] lo speed is unknown, defaulting to 1000 [ 2241.681901][T29568] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2241.746555][T29635] fuse: Unknown parameter 'user_i00000000000000000000' [ 2241.827890][T29568] lo speed is unknown, defaulting to 1000 [ 2241.831941][T29639] binder: 29638:29639 ioctl 4018620d 0 returned -22 [ 2241.986946][T29426] hsr_slave_0: entered promiscuous mode [ 2241.988215][T29426] hsr_slave_1: entered promiscuous mode [ 2241.989135][T29426] debugfs: 'hsr0' already exists in 'hsr' [ 2241.989156][T29426] Cannot create hsr debugfs directory [ 2242.018994][T29568] lo speed is unknown, defaulting to 1000 [ 2242.024534][T29568] lo speed is unknown, defaulting to 1000 [ 2242.069659][T29568] lo speed is unknown, defaulting to 1000 [ 2242.072076][T29568] lo speed is unknown, defaulting to 1000 [ 2242.625205][T29568] lo speed is unknown, defaulting to 1000 [ 2242.777528][T29568] lo speed is unknown, defaulting to 1000 [ 2242.944352][T29568] lo speed is unknown, defaulting to 1000 [ 2243.818362][T29664] binder: 29662:29664 ioctl c0306201 200000000240 returned -11 [ 2243.905757][ T12] hsr_slave_0: left promiscuous mode [ 2243.945581][ T12] hsr_slave_1: left promiscuous mode [ 2243.946179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2243.946196][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2244.016824][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2244.016843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2244.231424][T29671] netlink: 134788 bytes leftover after parsing attributes in process `syz.8.7698'. [ 2244.441027][ T12] veth1_vlan: left promiscuous mode [ 2244.445290][ T12] veth0_vlan: left promiscuous mode [ 2244.883571][T29682] loop2: detected capacity change from 0 to 7 [ 2244.884705][T29682] Dev loop2: unable to read RDB block 7 [ 2244.884733][T29682] loop2: AHDI p1 p2 p3 [ 2244.884767][T29682] loop2: partition table partially beyond EOD, truncated [ 2244.884873][T29682] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2244.884891][T29682] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2245.331991][T29687] netlink: 'syz.8.7704': attribute type 13 has an invalid length. [ 2247.326527][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2247.667553][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2249.275573][T21268] Bluetooth: hci7: command 0x0406 tx timeout [ 2251.156968][T29687] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.158078][T29687] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.761054][T29687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2251.773458][T29687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2252.890385][ T7902] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.175013][ T7902] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.234212][ T7902] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.317371][ T7902] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.373206][T29244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2253.423655][T29244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2253.736772][T29728] netlink: 'syz.3.7718': attribute type 13 has an invalid length. [ 2253.793108][T29244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2254.304579][T29728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.309669][T29728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.822018][T29728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2254.836886][T29728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2256.125325][T29244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2256.181676][ T7902] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.401231][ T7902] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.437811][ T7902] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.450989][ T7902] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.027179][T29244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2257.125967][T29776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7732'. [ 2257.640840][T29780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7734'. [ 2257.640887][T29783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7734'. [ 2257.724908][T29244] 8021q: adding VLAN 0 to HW filter on device team0 [ 2257.794488][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2257.798326][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2257.871340][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.871444][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2257.999554][T29789] fuse: Unknown parameter '0x0000000000000003' [ 2258.247556][T29426] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2258.314004][T29426] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2258.352316][T29426] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2258.415766][T29426] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2258.453165][T29799] binder: 29798:29799 ioctl 4018620d 0 returned -22 [ 2258.470389][T29799] binder: 29798:29799 ioctl c0306201 200000000240 returned -11 [ 2258.822362][T29818] fuse: Unknown parameter '0x0000000000000003' [ 2258.969037][T29426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2259.073465][T29426] 8021q: adding VLAN 0 to HW filter on device team0 [ 2259.111907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2259.112045][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2259.183519][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2259.183737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2259.319836][T29244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2259.623106][T29841] binder: BINDER_SET_CONTEXT_MGR already set [ 2259.623122][T29841] binder: 29840:29841 ioctl 4018620d 200000000040 returned -16 [ 2259.624153][T29841] binder: 29840:29841 ioctl c0306201 200000000240 returned -11 [ 2259.830581][T29847] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7755'. [ 2259.877829][T29426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2260.057573][T29855] netlink: 134788 bytes leftover after parsing attributes in process `syz.8.7757'. [ 2260.101068][T29244] veth0_vlan: entered promiscuous mode [ 2260.117138][T29244] veth1_vlan: entered promiscuous mode [ 2260.177193][T29244] veth0_macvtap: entered promiscuous mode [ 2260.197637][T29244] veth1_macvtap: entered promiscuous mode [ 2260.221034][T29244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2260.250885][T29244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2260.330225][ T7902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.334057][ T7902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.334492][ T7902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.368628][ T7902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2261.078068][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2261.078089][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2261.174304][T28807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2261.174326][T28807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2261.312527][T29874] binder: BINDER_SET_CONTEXT_MGR already set [ 2261.312544][T29874] binder: 29873:29874 ioctl 4018620d 200000000040 returned -16 [ 2261.333237][T29874] binder: 29873:29874 ioctl c0306201 200000000240 returned -11 [ 2261.388545][T29426] veth0_vlan: entered promiscuous mode [ 2261.423867][T29426] veth1_vlan: entered promiscuous mode [ 2261.943530][T29426] veth0_macvtap: entered promiscuous mode [ 2261.986416][T29426] veth1_macvtap: entered promiscuous mode [ 2262.010798][T29426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2262.022570][T29426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2262.044060][T17876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.048672][T17876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.048716][T17876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.048751][T17876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.911040][T21263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2262.911060][T21263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2263.141167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2263.141244][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2263.305853][T29906] IPVS: Scheduler module ip_vs_ not found [ 2263.693740][T29921] binder: 29920:29921 ioctl c0306201 200000000240 returned -11 [ 2264.660421][T29939] binder: 29938:29939 ioctl c0306201 0 returned -14 [ 2265.163708][T29939] binder: 29938:29939 ioctl c0306201 200000000240 returned -11 [ 2265.237349][T21585] Dead loop on virtual device wlan0, fix it urgently! [ 2265.472913][T29951] fuse: Unknown parameter 'fd0x0000000000000003' [ 2265.796092][T29959] binder: 29958:29959 ioctl c0306201 200000000240 returned -11 [ 2265.961274][T29971] netlink: 'syz.3.7795': attribute type 13 has an invalid length. [ 2266.040261][T29974] overlayfs: failed to resolve './file1': -2 [ 2266.150845][T29978] binder: 29977:29978 ioctl c0306201 0 returned -14 [ 2266.155160][T29978] binder: 29977:29978 ioctl c0306201 200000000240 returned -11 [ 2266.367365][T29985] No control pipe specified [ 2266.456966][ T37] audit: type=1400 audit(1766435146.085:1513): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=29987 comm="syz.3.7802" dest=2 [ 2266.595793][T29990] binder: 29989:29990 ioctl c0306201 200000000240 returned -11 [ 2266.914510][T29866] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 2267.086198][T29866] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2267.086230][T29866] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2267.086276][T29866] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2267.086302][T29866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.087547][T30008] binder: 30007:30008 ioctl c0306201 0 returned -14 [ 2267.093409][T30008] binder: 30007:30008 ioctl c0306201 200000000240 returned -11 [ 2267.300341][T29866] usb 4-1: GET_CAPABILITIES returned 0 [ 2267.300371][T29866] usbtmc 4-1:16.0: can't read capabilities [ 2267.505795][ T44] usb 4-1: USB disconnect, device number 5 [ 2268.146295][T30030] binder: 30029:30030 ioctl c0306201 200000000240 returned -11 [ 2268.424639][T30043] binder: 30039:30043 ioctl c0306201 200000000240 returned -11 [ 2268.888159][T30063] netlink: 134788 bytes leftover after parsing attributes in process `syz.6.7824'. [ 2269.143849][T30065] binder: 30064:30065 ioctl c0306201 0 returned -14 [ 2272.301151][T30134] netlink: 'syz.4.7851': attribute type 72 has an invalid length. [ 2272.301175][T30134] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7851'. [ 2272.552471][T30142] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.7852'. [ 2272.578313][T30138] netlink: 'syz.8.7853': attribute type 13 has an invalid length. [ 2273.384222][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2273.544209][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 2273.547286][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2273.547307][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2273.547322][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2273.547335][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2273.547360][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2273.548507][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.807819][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 2273.807874][ T10] usbtmc 7-1:16.0: can't read capabilities [ 2274.020105][ T10] usb 7-1: USB disconnect, device number 3 [ 2274.578195][T30171] netlink: 'syz.6.7863': attribute type 72 has an invalid length. [ 2274.578209][T30171] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7863'. [ 2281.732849][T30189] No control pipe specified [ 2281.878010][T30192] overlay: filesystem on ./bus not supported as upperdir [ 2282.263921][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2282.283190][T30211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2282.434502][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 2282.436351][ T44] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 2282.439282][ T44] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2282.439300][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.439312][ T44] usb 4-1: Product: syz [ 2282.439320][ T44] usb 4-1: Manufacturer: syz [ 2282.439328][ T44] usb 4-1: SerialNumber: syz [ 2282.491306][ T44] usb 4-1: config 0 descriptor?? [ 2282.518900][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2282.518936][ T44] usb 4-1: setting power ON [ 2282.518949][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 2282.564922][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2282.568934][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2282.568995][ T44] usb 4-1: media controller created [ 2282.661861][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2282.727696][ T44] usb 4-1: selecting invalid altsetting 6 [ 2282.727711][ T44] usb 4-1: digital interface selection failed (-22) [ 2282.727724][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2282.732107][ T44] usb 4-1: setting power OFF [ 2282.732123][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 2282.732133][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2282.732140][ T44] (NULL device *): no alternate interface [ 2282.949734][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2283.038003][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.038090][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.656092][T30237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2285.678557][T30267] netlink: 134788 bytes leftover after parsing attributes in process `syz.8.7901'. [ 2286.213666][ C1] vkms_vblank_simulate: vblank timer overrun [ 2286.997034][ C1] vkms_vblank_simulate: vblank timer overrun [ 2287.216903][T10983] usb 4-1: USB disconnect, device number 6 [ 2287.516096][T30291] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7910'. [ 2287.596202][T30295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7913'. [ 2288.792433][T30321] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.7920'. [ 2290.005845][T30342] binder: BINDER_SET_CONTEXT_MGR already set [ 2290.005861][T30342] binder: 30341:30342 ioctl 4018620d 200000000040 returned -16 [ 2290.006918][T30342] binder: 30341:30342 ioctl c0306201 200000000240 returned -11 [ 2291.611659][T30368] No control pipe specified [ 2292.037125][ T37] audit: type=1400 audit(1766435171.666:1514): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30372 comm="syz.6.7938" dest=2 [ 2292.401195][ C1] vkms_vblank_simulate: vblank timer overrun [ 2293.599276][ T37] audit: type=1400 audit(1766435173.206:1515): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30381 comm="syz.4.7941" daddr=::ffff:172.20.20.0 [ 2298.884110][T30379] lo speed is unknown, defaulting to 1000 [ 2299.007817][T30408] binder: 30406:30408 ioctl c0306201 0 returned -14 [ 2299.008434][T30408] binder: 30406:30408 ioctl c0306201 200000000240 returned -11 [ 2299.078126][T30409] bridge_slave_0: left allmulticast mode [ 2299.078153][T30409] bridge_slave_0: left promiscuous mode [ 2299.078381][T30409] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.135674][T30409] bridge_slave_1: left allmulticast mode [ 2299.135706][T30409] bridge_slave_1: left promiscuous mode [ 2299.136002][T30409] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.204083][T30409] bond0: (slave bond_slave_0): Releasing backup interface [ 2299.256696][T30409] bond0: (slave bond_slave_1): Releasing backup interface [ 2299.296916][T30409] team0: Port device team_slave_0 removed [ 2299.317428][T30409] team0: Port device team_slave_1 removed [ 2299.318132][T30409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2299.318149][T30409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2299.358852][T30409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2299.358871][T30409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2299.375971][T30409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2299.551046][ T37] audit: type=1400 audit(1766435179.137:1516): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30413 comm="syz.3.7952" daddr=::ffff:172.20.20.0 [ 2299.809923][T30425] binder: 30423:30425 ioctl c0306201 200000000240 returned -11 [ 2300.803814][T30447] binder: 30444:30447 ioctl c0306201 0 returned -14 [ 2300.806790][T30447] binder: 30444:30447 ioctl c0306201 200000000240 returned -11 [ 2301.000023][T30454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2301.340966][T30478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2301.411295][T30482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7975'. [ 2301.451096][T30485] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.7976'. [ 2301.822018][ T37] audit: type=1400 audit(1766435181.447:1517): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30479 comm="syz.3.7977" daddr=::ffff:172.20.20.0 [ 2302.015695][T30492] binder: 30491:30492 ioctl c0306201 0 returned -14 [ 2302.017906][T30492] binder: 30491:30492 ioctl c0306201 200000000240 returned -11 [ 2302.339965][T30494] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 2302.552683][T30501] bridge_slave_0: left allmulticast mode [ 2302.552711][T30501] bridge_slave_0: left promiscuous mode [ 2302.553156][T30501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2302.694237][T30501] bridge_slave_1: left allmulticast mode [ 2302.694255][T30501] bridge_slave_1: left promiscuous mode [ 2302.700150][T30501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2302.826406][T30501] bond0: (slave bond_slave_0): Releasing backup interface [ 2302.920972][T30501] bond0: (slave bond_slave_1): Releasing backup interface [ 2302.997389][T30501] team0: Port device team_slave_0 removed [ 2303.050214][T30501] team0: Port device team_slave_1 removed [ 2303.050437][T30501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2303.098389][T30501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2303.115630][ T44] Process accounting resumed [ 2303.143989][T30501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2303.244205][T30522] autofs: Unknown parameter '0x0000000000000000' [ 2303.250734][T30523] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.7988'. [ 2303.844625][ C1] vkms_vblank_simulate: vblank timer overrun [ 2304.029393][T30536] Invalid ELF header type: 3 != 1 [ 2304.037059][ C1] vkms_vblank_simulate: vblank timer overrun [ 2304.682797][ C1] vkms_vblank_simulate: vblank timer overrun [ 2304.911561][T30525] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7990'. [ 2304.973463][ T37] audit: type=1400 audit(1766435184.607:1518): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30532 comm="syz.6.7991" dest=2 [ 2305.110092][T30543] loop2: detected capacity change from 0 to 7 [ 2305.133197][T30543] Dev loop2: unable to read RDB block 7 [ 2305.133234][T30543] loop2: AHDI p1 p2 p3 [ 2305.133264][T30543] loop2: partition table partially beyond EOD, truncated [ 2305.133388][T30543] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2305.133407][T30543] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2305.521921][ T37] audit: type=1400 audit(1766435185.147:1519): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30555 comm="syz.3.7999" daddr=::ffff:172.20.20.0 [ 2305.912087][T30565] autofs: Unknown parameter '0x0000000000000000' [ 2306.073523][ C1] vkms_vblank_simulate: vblank timer overrun [ 2306.846155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2307.134197][ T37] audit: type=1400 audit(1766435186.767:1520): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30573 comm="syz.8.8006" dest=2 [ 2307.573587][T30591] netlink: 'syz.4.8012': attribute type 28 has an invalid length. [ 2307.573613][T30591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8012'. [ 2307.659040][T30593] loop2: detected capacity change from 0 to 7 [ 2307.668691][T30593] Dev loop2: unable to read RDB block 7 [ 2307.668722][T30593] loop2: AHDI p1 p2 p3 [ 2307.668750][T30593] loop2: partition table partially beyond EOD, truncated [ 2307.668858][T30593] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2307.668876][T30593] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2307.700645][T30598] autofs: Unknown parameter '0x0000000000000000' [ 2307.790469][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8018'. [ 2308.207623][ T37] audit: type=1400 audit(1766435187.837:1521): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30608 comm="syz.6.8020" dest=2 [ 2308.366323][T30618] fuse: Bad value for 'fd' [ 2308.651095][T30632] autofs: Unknown parameter '0x0000000000000000' [ 2308.781550][T30634] netlink: 'syz.0.8029': attribute type 13 has an invalid length. [ 2308.839927][T30636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2308.921650][T30641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8030'. [ 2308.975630][T30643] loop2: detected capacity change from 0 to 7 [ 2309.002600][T30643] Dev loop2: unable to read RDB block 7 [ 2309.002635][T30643] loop2: AHDI p1 p2 p3 [ 2309.002669][T30643] loop2: partition table partially beyond EOD, truncated [ 2309.008373][T30643] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2309.008398][T30643] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2309.473229][T30634] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.475981][T30634] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.823245][ T37] audit: type=1400 audit(1766435189.457:1522): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30646 comm="syz.3.8033" dest=2 [ 2310.133765][T30651] fuse: Bad value for 'fd' [ 2310.447238][T30661] autofs: Unknown parameter '0x0000000000000000' [ 2310.465055][T21268] Bluetooth: hci7: unexpected event for opcode 0x0809 [ 2310.470305][T21268] Bluetooth: hci7: unexpected event for opcode 0x0419 [ 2310.749901][T30634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2310.782946][T30634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2312.531385][T30683] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8048'. [ 2312.578022][T30684] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.8047'. [ 2312.698691][ T10] lo speed is unknown, defaulting to 1000 [ 2312.698715][ T10] syz2: Port: 1 Link DOWN [ 2312.890486][ T7902] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.891929][T30675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8044'. [ 2312.891943][T30675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8044'. [ 2312.942606][ T7902] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.944047][ T7902] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.944090][ T7902] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.039557][T30675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8044'. [ 2313.039572][T30675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8044'. [ 2313.451913][ T37] audit: type=1400 audit(1766435193.077:1523): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30705 comm="syz.3.8055" dest=2 [ 2314.041174][T30727] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8063'. [ 2314.041567][T30727] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8063'. [ 2314.472507][ T5817] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 2314.477948][ T5817] Bluetooth: hci7: Injecting HCI hardware error event [ 2314.481923][ T5817] Bluetooth: hci7: hardware error 0x00 [ 2315.868128][T30783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2315.893931][T30783] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8087'. [ 2316.152273][T30745] Bluetooth: hci2: command 0x0406 tx timeout [ 2316.553345][ T5817] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 2316.718001][T30807] overlay: filesystem on ./bus not supported as upperdir [ 2317.696365][T30824] autofs: Unknown parameter '0x0000000000000000' [ 2318.119126][T30839] overlay: filesystem on ./bus not supported as upperdir [ 2318.148488][ T37] audit: type=1400 audit(1766435197.777:1524): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30840 comm="syz.8.8110" dest=2 [ 2319.038953][ T5817] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 2319.048751][ T5817] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 2320.536939][T30919] netlink: 'syz.8.8140': attribute type 13 has an invalid length. [ 2321.798094][ T37] audit: type=1400 audit(1766435201.428:1525): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=30943 comm="syz.6.8150" dest=2 [ 2322.166641][T30964] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2322.250525][ T5817] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 2322.259907][ T5817] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 2323.115880][ T5817] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2323.122091][ T5817] Bluetooth: hci2: Injecting HCI hardware error event [ 2323.127551][ T5817] Bluetooth: hci2: hardware error 0x00 [ 2325.388593][ T5817] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2325.809899][T31017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2325.889040][T31022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8176'. [ 2326.315548][ T5817] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2326.315867][ T5817] Bluetooth: hci1: Injecting HCI hardware error event [ 2326.320208][T21268] Bluetooth: hci1: hardware error 0x00 [ 2326.435531][T31038] autofs: Unknown parameter 'fd0x0000000000000000' [ 2328.001366][T31066] autofs: Unknown parameter 'fd0x0000000000000000' [ 2328.715346][T21268] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2329.528523][T31065] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2329.528639][T31065] block device autoloading is deprecated and will be removed. [ 2329.896294][T31091] traps: syz.0.8205[31091] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002 [ 2330.434063][T31097] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 2331.640945][T31116] lo speed is unknown, defaulting to 1000 [ 2331.750702][T31125] binder: 31123:31125 ioctl 4018620d 0 returned -22 [ 2331.771185][T31125] binder: 31123:31125 ioctl c0306201 200000000240 returned -11 [ 2332.709478][T31153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8227'. [ 2334.244256][T31181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8239'. [ 2334.244475][T31181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8239'. [ 2334.580798][T31201] binder: 31200:31201 ioctl c0306201 200000000240 returned -11 [ 2334.633388][T31196] lo speed is unknown, defaulting to 1000 [ 2335.049085][T31223] netlink: 'syz.0.8257': attribute type 13 has an invalid length. [ 2335.196053][ T37] audit: type=1400 audit(1766435214.828:1526): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31226 comm="syz.6.8256" dest=20000 [ 2335.394841][ T37] audit: type=1400 audit(1766435215.018:1527): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31234 comm="syz.3.8260" [ 2335.444403][T31240] loop2: detected capacity change from 0 to 7 [ 2335.445668][T31240] Dev loop2: unable to read RDB block 7 [ 2335.445703][T31240] loop2: AHDI p1 p2 p3 [ 2335.445732][T31240] loop2: partition table partially beyond EOD, truncated [ 2335.445840][T31240] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2335.445860][T31240] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2335.643379][T31247] lo speed is unknown, defaulting to 1000 [ 2335.832366][T31257] kernel profiling enabled (shift: 17) [ 2335.836703][T31258] syzkaller0: entered promiscuous mode [ 2335.836729][T31258] syzkaller0: entered allmulticast mode [ 2336.068824][T31268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2336.316867][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 2336.789202][T31263] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2336.789233][T31263] block device autoloading is deprecated and will be removed. [ 2336.812281][T31285] lo speed is unknown, defaulting to 1000 [ 2336.939989][T31293] loop2: detected capacity change from 0 to 7 [ 2336.951100][T31293] Dev loop2: unable to read RDB block 7 [ 2336.951132][T31293] loop2: AHDI p1 p2 p3 [ 2336.961882][T31293] loop2: partition table partially beyond EOD, truncated [ 2336.962007][T31293] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2336.962027][T31293] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2337.541535][T31315] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2338.395346][T31342] loop2: detected capacity change from 0 to 7 [ 2338.407921][T31342] Dev loop2: unable to read RDB block 7 [ 2338.407956][T31342] loop2: AHDI p1 p2 p3 [ 2338.407987][T31342] loop2: partition table partially beyond EOD, truncated [ 2338.408101][T31342] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2338.408120][T31342] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2340.161603][T31381] syzkaller0: entered promiscuous mode [ 2340.161630][T31381] syzkaller0: entered allmulticast mode [ 2340.566730][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2340.576994][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2340.584669][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2340.585895][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2340.586620][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2341.073535][T31397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2341.086721][T31397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8323'. [ 2341.425110][T31389] lo speed is unknown, defaulting to 1000 [ 2341.579802][T31406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8325'. [ 2341.579898][T31406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8325'. [ 2342.711068][T21268] Bluetooth: hci3: command tx timeout [ 2342.824421][T31446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2342.829496][T31446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8338'. [ 2343.081274][T31444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2344.301631][T31389] chnl_net:caif_netlink_parms(): no params data found [ 2344.479205][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.479306][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.810962][T21268] Bluetooth: hci3: command tx timeout [ 2345.248714][T31389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2345.248923][T31389] bridge0: port 1(bridge_slave_0) entered disabled state [ 2345.249182][T31389] bridge_slave_0: entered allmulticast mode [ 2345.277093][T31389] bridge_slave_0: entered promiscuous mode [ 2345.288391][T31389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2345.288617][T31389] bridge0: port 2(bridge_slave_1) entered disabled state [ 2345.288841][T31389] bridge_slave_1: entered allmulticast mode [ 2345.314900][T31389] bridge_slave_1: entered promiscuous mode [ 2345.551234][T31389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2345.588446][T31389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2345.666685][T31531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2345.724269][T31532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8370'. [ 2346.144100][T31389] team0: Port device team_slave_0 added [ 2346.186751][T31389] team0: Port device team_slave_1 added [ 2347.012929][T21268] Bluetooth: hci3: command tx timeout [ 2349.034540][T21268] Bluetooth: hci3: command tx timeout [ 2350.613512][ T12] bond0 (unregistering): Released all slaves [ 2350.652216][T31389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2350.652234][T31389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2350.652262][T31389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2350.788930][T31617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8402'. [ 2350.789690][T31618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8402'. [ 2350.803165][T31389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2350.803182][T31389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2350.803208][T31389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2351.806743][T31640] autofs: Bad value for 'fd' [ 2352.404537][T31389] hsr_slave_0: entered promiscuous mode [ 2352.405768][T31389] hsr_slave_1: entered promiscuous mode [ 2352.406593][T31389] debugfs: 'hsr0' already exists in 'hsr' [ 2352.406615][T31389] Cannot create hsr debugfs directory [ 2352.821856][ T12] hsr_slave_0: left promiscuous mode [ 2352.854806][ T12] hsr_slave_1: left promiscuous mode [ 2354.753488][T31682] fuse: Bad value for 'fd' [ 2355.141815][T31689] fuse: Bad value for 'fd' [ 2355.901540][T31701] fuse: Bad value for 'fd' [ 2356.827313][ T37] audit: type=1400 audit(1766435236.459:1528): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31722 comm="syz.3.8446" daddr=::ffff:172.30.0.4 dest=20002 [ 2357.337904][T31727] fuse: Bad value for 'fd' [ 2364.757544][T31821] overlay: filesystem on ./bus not supported as upperdir [ 2364.884704][ T37] audit: type=1400 audit(1766435244.520:1529): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31824 comm="syz.4.8485" daddr=::ffff:0.0.0.0 dest=20002 [ 2365.067405][ T12] IPVS: stop unused estimator thread 0... [ 2365.458470][T31851] netlink: 'syz.4.8494': attribute type 13 has an invalid length. [ 2365.494861][ T37] audit: type=1400 audit(1766435245.130:1530): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31848 comm="syz.0.8496" daddr=::ffff:0.0.0.0 dest=20002 [ 2366.485070][ T37] audit: type=1400 audit(1766435246.120:1531): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31881 comm="syz.0.8510" daddr=::ffff:172.30.0.1 dest=20002 [ 2368.293773][T17876] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.293910][T17876] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.293949][T17876] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.293985][T17876] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.327367][T31877] lo speed is unknown, defaulting to 1000 [ 2368.377498][T31887] lo speed is unknown, defaulting to 1000 [ 2369.801755][ T37] audit: type=1400 audit(1766435249.440:1532): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31910 comm="syz.4.8520" daddr=::ffff:172.30.0.5 dest=20002 [ 2369.845704][T31913] fuse: Bad value for 'fd' [ 2369.966141][T31389] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2370.015050][T31389] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2370.084893][T31389] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2370.117057][T31925] netlink: 'syz.6.8526': attribute type 13 has an invalid length. [ 2370.487325][T31925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.488290][T31925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2371.015404][ T37] audit: type=1400 audit(1766435250.650:1533): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=31939 comm="syz.4.8534" daddr=::ffff:172.30.0.5 dest=20002 [ 2371.028989][T31925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2371.061646][T31925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2372.266062][T31389] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2372.314787][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.393515][T31980] loop2: detected capacity change from 0 to 7 [ 2372.399539][T31980] Dev loop2: unable to read RDB block 7 [ 2372.401727][T31980] loop2: AHDI p1 p2 p3 [ 2372.401756][T31980] loop2: partition table partially beyond EOD, truncated [ 2372.401969][T31980] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2372.401990][T31980] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2372.669831][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.673481][T31973] syzkaller0: entered promiscuous mode [ 2372.673498][T31973] syzkaller0: entered allmulticast mode [ 2372.820197][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.828647][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2374.113031][T32006] fuse: Bad value for 'fd' [ 2374.247167][T32006] block device autoloading is deprecated and will be removed. [ 2374.344735][T31389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2374.394792][T31389] 8021q: adding VLAN 0 to HW filter on device team0 [ 2374.426174][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 2374.426320][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2374.468967][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 2374.469140][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2376.394050][T31389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2377.642498][T31389] veth0_vlan: entered promiscuous mode [ 2377.648508][T31389] veth1_vlan: entered promiscuous mode [ 2377.696196][T31389] veth0_macvtap: entered promiscuous mode [ 2377.718032][T31389] veth1_macvtap: entered promiscuous mode [ 2377.780129][T31389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2377.797872][T31389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2377.818937][T17876] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.819163][T17876] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.826619][ T7900] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.826667][ T7900] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2378.168820][T32107] pim6reg1: tun_chr_ioctl cmd 35111 [ 2378.307324][T32105] pim6reg1: tun_chr_ioctl cmd 1074025680 [ 2378.535891][ T7875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2378.535912][ T7875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2378.777376][ T7875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2378.777392][ T7875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2379.213442][T32130] netlink: 'syz.0.8596': attribute type 13 has an invalid length. [ 2380.291696][T32170] netlink: 'syz.3.8610': attribute type 13 has an invalid length. [ 2383.139320][T32214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8629'. [ 2383.568733][T32214] bridge_slave_0 (unregistering): left allmulticast mode [ 2383.568766][T32214] bridge_slave_0 (unregistering): left promiscuous mode [ 2383.568885][T32214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.167806][ T37] audit: type=1400 audit(1766435263.800:1534): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=32256 comm="syz.8.8643" daddr=::ffff:224.0.0.1 dest=20000 [ 2384.447921][T32254] gre1: entered promiscuous mode [ 2384.467552][T32253] lo speed is unknown, defaulting to 1000 [ 2384.767596][T32270] bond1: down delay (65664) is not a multiple of miimon (7), value rounded to 65660 ms [ 2384.767622][T32270] bond1: entered allmulticast mode [ 2385.098277][T32258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8641'. [ 2386.426602][T32322] lo speed is unknown, defaulting to 1000 [ 2388.259762][T32351] fuse: Bad value for 'fd' [ 2388.367408][T32348] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8667'. [ 2389.335504][T32380] lo speed is unknown, defaulting to 1000 [ 2390.611504][T32410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8700'. [ 2390.790498][T21268] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2390.790993][T21268] Bluetooth: hci3: Injecting HCI hardware error event [ 2390.798310][T21268] Bluetooth: hci3: hardware error 0x00 [ 2390.949213][T32429] overlayfs: overlapping lowerdir path [ 2391.212794][T32399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8694'. [ 2392.132709][T32466] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2392.133372][T32466] bridge1: entered allmulticast mode [ 2392.165955][T32470] overlayfs: overlapping lowerdir path [ 2392.399902][T32477] fuse: Bad value for 'fd' [ 2393.109358][T21268] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2394.508956][ T37] audit: type=1400 audit(1766435274.151:1535): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=32529 comm="syz.0.8746" daddr=::ffff:172.30.0.1 dest=20002 [ 2394.845274][T32514] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8739'. [ 2394.980203][T32567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8761'. [ 2394.989865][T32567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2394.995324][T32567] team0: Port device bond0 added [ 2395.000861][T32567] team0: Failed to send port change of device bond0 via netlink (err -105) [ 2395.900490][T32597] netlink: 'syz.8.8773': attribute type 13 has an invalid length. [ 2395.900514][T32597] netlink: 'syz.8.8773': attribute type 27 has an invalid length. [ 2397.318656][T32615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8781'. [ 2397.580972][ T37] audit: type=1400 audit(1766435277.221:1536): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=32629 comm="syz.6.8786" daddr=::ffff:172.30.0.7 dest=20002 [ 2397.729679][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8790'. [ 2397.889972][T32640] bridge2: port 1(veth3) entered blocking state [ 2397.890186][T32640] bridge2: port 1(veth3) entered disabled state [ 2397.890397][T32640] veth3: entered allmulticast mode [ 2397.897600][T32640] veth3: entered promiscuous mode [ 2398.012647][T32654] fuse: Bad value for 'fd' [ 2398.090547][T32636] bridge2: port 2(veth5) entered blocking state [ 2398.090698][T32636] bridge2: port 2(veth5) entered disabled state [ 2398.090947][T32636] veth5: entered allmulticast mode [ 2398.095029][T32636] veth5: entered promiscuous mode [ 2398.124251][T32657] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2398.255331][T32645] lo speed is unknown, defaulting to 1000 [ 2398.701603][ T37] audit: type=1400 audit(1766435278.341:1537): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=32672 comm="syz.3.8805" daddr=::ffff:172.30.0.4 dest=20002 [ 2399.054919][T32685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2400.477327][T32719] autofs: Unknown parameter 'fd0x0000000000000000' [ 2403.562689][ T362] gre1: entered promiscuous mode [ 2404.242350][ T398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8886'. [ 2404.521079][ T37] audit: type=1400 audit(1766435284.161:1538): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=411 comm="syz.8.8892" daddr=::ffff:224.0.0.1 dest=20000 [ 2405.912894][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.912993][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.001611][ T464] overlay: filesystem on ./bus not supported as upperdir [ 2406.364587][ T37] audit: type=1400 audit(1766435286.001:1539): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=472 comm="syz.6.8918" daddr=::ffff:0.0.0.0 dest=20002 [ 2406.409376][ T37] audit: type=1400 audit(1766435286.051:1540): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=473 comm="syz.0.8919" daddr=::ffff:0.0.0.0 dest=20002 [ 2406.690044][ T485] netlink: 'syz.8.8923': attribute type 13 has an invalid length. [ 2407.277206][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2407.278081][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2407.690506][ T485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2407.697197][ T485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2408.718387][ T7875] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.908161][ T7875] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.922020][ T7875] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.924724][ T7875] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.948872][ T540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2408.953906][ T540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8940'. [ 2409.157208][ T550] fuse: Bad value for 'fd' [ 2409.259931][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8948'. [ 2410.174916][ T580] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.8958'. [ 2410.541552][ T602] overlayfs: failed to clone lowerpath [ 2410.848439][ T616] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8972'. [ 2411.412372][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8984'. [ 2411.898778][ T37] audit: type=1400 audit(1766435291.542:1541): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=651 comm="syz.8.8987" daddr=::ffff:0.0.0.0 dest=20002 [ 2412.164231][ T665] fuse: Bad value for 'fd' [ 2412.448523][ T37] audit: type=1400 audit(1766435292.092:1542): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=677 comm="syz.0.8999" daddr=::ffff:0.0.0.0 dest=20002 [ 2413.200035][ T702] overlay: filesystem on ./bus not supported as upperdir [ 2413.539225][ T706] fuse: Bad value for 'group_id' [ 2413.539246][ T706] fuse: Bad value for 'group_id' [ 2413.798480][ T37] audit: type=1400 audit(1766435293.442:1543): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=712 comm="syz.8.9014" daddr=::ffff:0.0.0.0 dest=20002 [ 2413.863565][ T719] netlink: 'syz.3.9016': attribute type 13 has an invalid length. [ 2414.349811][ T37] audit: type=1400 audit(1766435293.992:1544): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=748 comm="syz.4.9028" daddr=::ffff:0.0.0.0 dest=20002 [ 2414.376121][ T752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2414.382288][ T752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9029'. [ 2415.023134][ T37] audit: type=1400 audit(1766435294.662:1545): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=785 comm="syz.3.9041" daddr=::ffff:0.0.0.0 dest=20002 [ 2415.962349][ T37] audit: type=1400 audit(1766435295.602:1546): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=818 comm="syz.3.9052" daddr=::ffff:0.0.0.0 dest=20002 [ 2416.524797][ T807] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9044'. [ 2416.679620][ T842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2416.688560][ T842] 8021q: adding VLAN 0 to HW filter on device team0 [ 2416.751617][ T842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2417.058806][ T848] No control pipe specified [ 2417.820138][ T876] fuse: Bad value for 'user_id' [ 2417.820157][ T876] fuse: Bad value for 'user_id' [ 2418.604140][ T905] fuse: Bad value for 'user_id' [ 2418.604160][ T905] fuse: Bad value for 'user_id' [ 2420.524097][ T37] audit: type=1400 audit(1766435300.132:1547): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=948 comm="syz.0.9099" daddr=::ffff:224.0.0.1 dest=20000 [ 2421.354849][ T37] audit: type=1400 audit(1766435300.992:1548): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=990 comm="syz.3.9114" daddr=::ffff:224.0.0.1 dest=20000 [ 2421.607444][ T37] audit: type=1800 audit(1766435301.212:1549): pid=967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.9103" name="/" dev="fuse" ino=9 res=0 errno=0 [ 2422.807592][ T37] audit: type=1400 audit(1766435302.442:1550): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1065 comm="syz.0.9138" daddr=::ffff:224.0.0.1 dest=20000 [ 2423.595264][ T37] audit: type=1400 audit(1766435303.232:1551): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1103 comm="syz.4.9151" daddr=::ffff:224.0.0.1 dest=20000 [ 2424.613282][ T1166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9175'. [ 2425.242946][ T1201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9187'. [ 2425.257658][ T1203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9188'. [ 2425.429101][ T1213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2425.432287][ T1213] 8021q: adding VLAN 0 to HW filter on device team0 [ 2425.480652][ T1213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2427.294841][ T1223] lo speed is unknown, defaulting to 1000 [ 2429.108819][ T1332] lo speed is unknown, defaulting to 1000 [ 2429.252604][ T1336] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9232'. [ 2429.865534][ T1351] fuse: Bad value for 'fd' [ 2430.643218][ T1389] fuse: Bad value for 'fd' [ 2431.067449][ T1392] lo speed is unknown, defaulting to 1000 [ 2432.557030][ T37] audit: type=1400 audit(1766435312.193:1552): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1441 comm="syz.4.9271" daddr=::ffff:0.0.0.0 dest=20002 [ 2434.321895][ T37] audit: type=1400 audit(1766435313.963:1553): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1477 comm="syz.0.9282" daddr=::ffff:0.0.0.0 dest=20002 [ 2436.173487][ T1504] fuse: Invalid rootmode [ 2436.342832][ T37] audit: type=1400 audit(1766435315.983:1554): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1512 comm="syz.4.9295" daddr=::ffff:0.0.0.0 dest=20002 [ 2437.906055][ T37] audit: type=1400 audit(1766435317.543:1555): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1549 comm="syz.6.9309" daddr=::ffff:0.0.0.0 dest=20002 [ 2439.505807][ T1590] fuse: Bad value for 'user_id' [ 2439.505829][ T1590] fuse: Bad value for 'user_id' [ 2439.631051][ T1595] lo speed is unknown, defaulting to 1000 [ 2440.401149][ T37] audit: type=1400 audit(1766435320.043:1556): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1626 comm="syz.8.9342" daddr=::ffff:0.0.0.0 dest=20002 [ 2441.139378][ T37] audit: type=1400 audit(1766435320.783:1557): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1660 comm="syz.8.9354" daddr=::ffff:0.0.0.0 dest=20002 [ 2441.333608][ T1666] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9356'. [ 2441.481228][ T1675] fuse: Bad value for 'user_id' [ 2441.481250][ T1675] fuse: Bad value for 'user_id' [ 2441.644898][ T37] audit: type=1400 audit(1766435321.283:1558): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1681 comm="syz.3.9365" daddr=::ffff:224.0.0.1 dest=20000 [ 2441.710897][ T37] audit: type=1400 audit(1766435321.353:1559): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1687 comm="syz.3.9366" daddr=::ffff:0.0.0.0 dest=20002 [ 2441.997004][ T1702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9371'. [ 2442.034442][ T37] audit: type=1400 audit(1766435321.673:1560): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1703 comm="syz.8.9373" dest=20000 [ 2442.286869][ T37] audit: type=1400 audit(1766435321.933:1561): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1714 comm="syz.4.9378" daddr=::ffff:0.0.0.0 dest=20002 [ 2442.400505][ T1722] fuse: Bad value for 'fd' [ 2442.887171][ T37] audit: type=1400 audit(1766435322.533:1562): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1747 comm="syz.3.9393" daddr=::ffff:0.0.0.0 dest=20002 [ 2443.411810][ T37] audit: type=1400 audit(1766435323.053:1563): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1783 comm="syz.3.9409" daddr=::ffff:0.0.0.0 dest=20002 [ 2443.508261][ T1790] program syz.3.9411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2443.606731][ T1785] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2444.182599][ T1807] netlink: 'syz.6.9417': attribute type 13 has an invalid length. [ 2444.561260][ T37] audit: type=1400 audit(1766435324.203:1564): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1816 comm="syz.0.9421" daddr=::ffff:0.0.0.0 dest=20002 [ 2445.945203][ T37] audit: type=1400 audit(1766435325.583:1565): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1843 comm="syz.8.9432" daddr=::ffff:0.0.0.0 dest=20002 [ 2446.650052][ T1866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9439'. [ 2448.489316][ T1889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9447'. [ 2448.521268][ T1891] fuse: Bad value for 'fd' [ 2449.045913][ T1916] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9458'. [ 2449.245263][ T1923] fuse: Bad value for 'fd' [ 2450.155224][ T37] audit: type=1400 audit(1766435329.793:1566): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1927 comm="syz.3.9463" daddr=::ffff:172.20.20.0 [ 2450.288799][ T1943] fuse: Unknown parameter 'user_id00000000000000000000' [ 2450.518788][ T37] audit: type=1400 audit(1766435330.163:1567): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1950 comm="syz.6.9472" daddr=::ffff:0.0.0.0 dest=20002 [ 2450.771407][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9474'. [ 2451.511137][ T1963] fuse: Invalid rootmode [ 2451.870550][ T37] audit: type=1400 audit(1766435331.514:1568): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1975 comm="syz.8.9484" daddr=::ffff:172.20.20.187 [ 2451.974542][ T1981] fuse: Invalid rootmode [ 2452.436842][ T2001] fuse: Invalid rootmode [ 2452.451718][ T37] audit: type=1400 audit(1766435332.074:1569): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=1982 comm="syz.4.9486" daddr=::ffff:172.20.20.0 [ 2452.843137][ T2011] bond0: option resend_igmp: invalid value (256) [ 2452.843166][ T2011] bond0: option resend_igmp: allowed values 0 - 255 [ 2453.790677][ T2033] fuse: Invalid rootmode [ 2454.176185][ T2036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2455.160344][ T2065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9518'. [ 2455.639407][ T2091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2455.718458][ T37] audit: type=1326 audit(1766435335.364:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.751271][ T37] audit: type=1326 audit(1766435335.364:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.751330][ T37] audit: type=1326 audit(1766435335.364:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.751616][ T37] audit: type=1326 audit(1766435335.394:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.751913][ T37] audit: type=1326 audit(1766435335.394:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.752196][ T37] audit: type=1326 audit(1766435335.394:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.752811][ T37] audit: type=1326 audit(1766435335.394:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.752856][ T37] audit: type=1326 audit(1766435335.394:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2455.753204][ T37] audit: type=1326 audit(1766435335.394:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2092 comm="syz.4.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa3071bf6c9 code=0x7ffc0000 [ 2456.353357][ T37] audit: type=1400 audit(1766435335.994:1579): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=2121 comm="syz.3.9543" daddr=::ffff:172.20.20.187 [ 2456.807786][ T2139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9547'. [ 2456.891568][ T2141] fuse: Bad value for 'rootmode' [ 2457.676452][ T2170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9559'. [ 2458.841303][ T2202] fuse: Unknown parameter 'grou00000000000000000000' [ 2461.033145][ T2233] lo speed is unknown, defaulting to 1000 [ 2462.145360][ T2261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9592'. [ 2464.770318][ T2318] lo speed is unknown, defaulting to 1000 [ 2466.547798][ T2343] binder: BINDER_SET_CONTEXT_MGR already set [ 2466.547814][ T2343] binder: 2342:2343 ioctl 4018620d 200000000040 returned -16 [ 2466.550819][ T2343] binder: 2342:2343 ioctl c0306201 200000000240 returned -11 [ 2467.350221][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.350320][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.829323][ T2394] lo speed is unknown, defaulting to 1000 [ 2468.402235][ T2409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9650'. [ 2468.458111][ T2408] fuse: Unknown parameter 'user_id00000000000000000000' [ 2470.006008][ T2418] fuse: Unknown parameter 'user_id00000000000000000000' [ 2470.216281][ T2421] netlink: 'syz.0.9652': attribute type 13 has an invalid length. [ 2470.556228][ T2431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9660'. [ 2470.690340][ T5817] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 2471.376936][ T2433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9657'. [ 2471.566192][ T2454] fuse: Unknown parameter 'user_id00000000000000000000' [ 2471.951736][ T2471] fuse: Unknown parameter 'user_id00000000000000000000' [ 2473.203586][ T2480] fuse: Bad value for 'fd' [ 2474.500073][ T37] audit: type=1326 audit(1766435354.125:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.500125][ T37] audit: type=1326 audit(1766435354.135:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.555511][ T37] audit: type=1326 audit(1766435354.195:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.559982][ T37] audit: type=1326 audit(1766435354.195:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.560033][ T37] audit: type=1326 audit(1766435354.195:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.563122][ T37] audit: type=1326 audit(1766435354.195:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.575310][ T37] audit: type=1326 audit(1766435354.195:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.575358][ T37] audit: type=1326 audit(1766435354.215:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.705283][ T5817] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2474.705767][ T5817] Bluetooth: hci0: Injecting HCI hardware error event [ 2474.714697][T21268] Bluetooth: hci0: hardware error 0x00 [ 2474.736804][ T37] audit: type=1326 audit(1766435354.375:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2474.736854][ T37] audit: type=1326 audit(1766435354.375:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2535 comm="syz.0.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2475.185030][ T2567] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9690'. [ 2475.185059][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9690'. [ 2475.836445][ T2592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2475.838411][ T2592] 8021q: adding VLAN 0 to HW filter on device team0 [ 2475.867873][ T2592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2475.867941][T21592] lo speed is unknown, defaulting to 1000 [ 2475.867968][T21592] syz2: Port: 1 Link ACTIVE [ 2475.990943][ T2612] team0: Device ipvlan1 failed to register rx_handler [ 2476.285572][ T2625] fuse: Unknown parameter '0x0000000000000004' [ 2476.549926][ T2640] fuse: Bad value for 'fd' [ 2476.608038][ T2635] lo speed is unknown, defaulting to 1000 [ 2476.865021][T21268] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2477.577517][ T2679] fuse: Bad value for 'fd' [ 2478.769214][ T2759] fuse: Bad value for 'group_id' [ 2478.769236][ T2759] fuse: Bad value for 'group_id' [ 2479.536585][ T2812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2479.541872][ T2812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9771'. [ 2483.848170][ T37] audit: type=1804 audit(1766435363.485:1590): pid=2923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.9809" name="file1" dev="tmpfs" ino=1622 res=1 errno=0 [ 2485.168718][ T2951] overlay: filesystem on ./bus not supported as upperdir [ 2485.423206][ T2958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9820'. [ 2485.627936][ T2961] usb usb8: usbfs: process 2961 (syz.3.9821) did not claim interface 0 before use [ 2486.745699][ T2959] bridge3: port 1(veth7) entered blocking state [ 2486.745839][ T2959] bridge3: port 1(veth7) entered disabled state [ 2486.746046][ T2959] veth7: entered allmulticast mode [ 2486.748920][ T2959] veth7: entered promiscuous mode [ 2487.023445][ T2975] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9826'. [ 2488.560826][ T2997] fuse: Invalid rootmode [ 2488.873219][ T3009] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9838'. [ 2491.388642][ T3049] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9851'. [ 2494.958813][ T3086] lo speed is unknown, defaulting to 1000 [ 2496.236250][ T3106] fuse: Unknown parameter 'grou00000000000000000000' [ 2496.764645][ T3117] fuse: Unknown parameter 'user_i00000000000000000000' [ 2497.191765][ T3131] lo speed is unknown, defaulting to 1000 [ 2500.780454][ T37] audit: type=1326 audit(1766435380.416:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.780615][ T37] audit: type=1326 audit(1766435380.416:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.911755][ T37] audit: type=1326 audit(1766435380.546:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.937255][ T37] audit: type=1326 audit(1766435380.546:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.938036][ T37] audit: type=1326 audit(1766435380.576:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.939952][ T37] audit: type=1326 audit(1766435380.576:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.940872][ T37] audit: type=1326 audit(1766435380.576:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.941464][ T37] audit: type=1326 audit(1766435380.576:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.941822][ T37] audit: type=1326 audit(1766435380.576:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2500.942200][ T37] audit: type=1326 audit(1766435380.576:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3190 comm="syz.0.9901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4c5f6c9 code=0x7ffc0000 [ 2501.163666][ T3196] fuse: Unknown parameter 'use00000000000000000000' [ 2501.299505][ T3201] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9906'. [ 2504.227432][ T3228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2504.243941][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9914'. [ 2504.436754][ T3240] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9918'. [ 2504.537261][ T3243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9920'. [ 2504.539376][ T3243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2506.134931][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 2506.134950][ T37] audit: type=1400 audit(1766435385.776:1608): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3259 comm="syz.3.9925" daddr=::ffff:224.0.0.1 dest=20002 [ 2506.180118][ T3260] misc userio: No port type given on /dev/userio [ 2506.296188][ T3271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9930'. [ 2506.871384][ T3279] fuse: Unknown parameter 'user_i00000000000000000000' [ 2508.072223][ T3287] tmpfs: Bad value for 'mpol' [ 2508.184715][ T37] audit: type=1400 audit(1766435387.826:1609): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3291 comm="syz.0.9933" daddr=::ffff:172.20.20.187 [ 2508.552289][ T3308] fuse: Unknown parameter 'group_id00000000000000000000' [ 2508.624235][ T37] audit: type=1400 audit(1766435388.266:1610): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3311 comm="syz.4.9944" daddr=::ffff:224.0.0.1 dest=20002 [ 2508.632622][ T3314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9945'. [ 2508.632660][ T3314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9945'. [ 2508.804767][ T3325] fuse: Unknown parameter 'user_id00000000000000000000' [ 2510.181550][ T37] audit: type=1400 audit(1766435389.816:1611): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3353 comm="syz.0.9957" daddr=::ffff:224.0.0.1 dest=20002 [ 2511.404618][ T37] audit: type=1400 audit(1766435391.046:1612): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3382 comm="syz.6.9971" daddr=::ffff:224.0.0.1 dest=20002 [ 2511.472963][ T3386] misc userio: No port type given on /dev/userio [ 2515.063641][ T3453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9994'. [ 2515.063666][ T3453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9994'. [ 2515.859016][ T3477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10001'. [ 2515.859731][ T3477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10001'. [ 2516.323243][T21590] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 2516.473497][T21590] usb 7-1: device descriptor read/64, error -71 [ 2516.713151][T21590] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 2516.863155][T21590] usb 7-1: device descriptor read/64, error -71 [ 2517.160083][T21590] usb usb7-port1: attempt power cycle [ 2519.293035][T21590] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 2520.167856][T21590] usb 7-1: device not accepting address 6, error -71 [ 2520.209597][ T37] audit: type=1400 audit(1766435399.837:1613): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3528 comm="syz.6.10023" daddr=::ffff:224.0.0.1 dest=20002 [ 2520.290190][ T3530] misc userio: No port type given on /dev/userio [ 2523.569502][ T3586] 9pnet_fd: Insufficient options for proto=fd [ 2524.199181][ T3593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10042'. [ 2524.474203][ T37] audit: type=1400 audit(1766435404.117:1614): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3599 comm="syz.3.10046" daddr=::ffff:224.0.0.1 dest=20002 [ 2524.591176][ T3605] misc userio: No port type given on /dev/userio [ 2525.005599][ T3617] fuse: Unknown parameter '0x0000000000000003' [ 2526.506747][ T3625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10053'. [ 2528.909546][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.909615][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.719527][ T3681] trusted_key: encrypted_key: insufficient parameters specified [ 2529.803759][ T37] audit: type=1400 audit(1766435409.447:1615): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3683 comm="syz.3.10070" daddr=::ffff:224.0.0.1 dest=20002 [ 2529.851429][ T3684] misc userio: No port type given on /dev/userio [ 2532.271753][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10085'. [ 2532.271780][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10085'. [ 2532.383655][ T37] audit: type=1400 audit(1766435412.027:1616): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=3727 comm="syz.3.10086" daddr=::ffff:224.0.0.1 dest=20002 [ 2532.430044][ T3728] misc userio: No port type given on /dev/userio [ 2532.431516][ T3734] 9pnet_fd: Insufficient options for proto=fd [ 2536.241419][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10123'. [ 2536.290716][ T37] audit: type=1326 audit(1766435415.927:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.290858][ T37] audit: type=1326 audit(1766435415.927:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.353868][ T37] audit: type=1326 audit(1766435415.997:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.353921][ T37] audit: type=1326 audit(1766435415.997:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.353961][ T37] audit: type=1326 audit(1766435415.997:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.354715][ T37] audit: type=1326 audit(1766435415.997:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.355043][ T37] audit: type=1326 audit(1766435415.997:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.355183][ T37] audit: type=1326 audit(1766435415.997:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.355476][ T37] audit: type=1326 audit(1766435415.997:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.355727][ T37] audit: type=1326 audit(1766435415.997:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3832 comm="syz.8.10128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e79cdf6c9 code=0x7ffc0000 [ 2536.742581][ T3826] bridge_slave_0: left allmulticast mode [ 2536.742609][ T3826] bridge_slave_0: left promiscuous mode [ 2536.773280][ T3826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2536.884799][ T3826] bridge_slave_1: left allmulticast mode [ 2536.884828][ T3826] bridge_slave_1: left promiscuous mode [ 2536.885097][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2537.101990][ T3826] bond0: (slave bond_slave_0): Releasing backup interface [ 2539.774461][ T3826] bond0: (slave bond_slave_1): Releasing backup interface [ 2539.941396][ T3826] team0: Port device team_slave_0 removed [ 2539.962945][ T3826] team0: Port device team_slave_1 removed [ 2539.963303][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2540.110804][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2540.311822][ T3826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2542.659758][ T3906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2542.728732][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2542.744963][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2542.746796][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2542.747902][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2542.749600][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2542.878498][ T3904] lo speed is unknown, defaulting to 1000 [ 2542.897595][ T3913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10148'. [ 2543.344828][ T3923] No control pipe specified [ 2545.567905][T21268] Bluetooth: hci1: command tx timeout [ 2547.604310][T21268] Bluetooth: hci1: command tx timeout [ 2547.738648][ T3976] fuse: Unknown parameter 'group_i00000000000000000000' [ 2548.394987][ T3904] chnl_net:caif_netlink_parms(): no params data found [ 2548.599517][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 2548.599536][ T37] audit: type=1400 audit(1766435428.238:1633): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=4007 comm="syz.8.10173" daddr=::ffff:224.0.0.1 dest=20002 [ 2549.316901][ T4028] 9pnet_fd: Insufficient options for proto=fd [ 2549.490906][ T3904] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.491050][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.491270][ T3904] bridge_slave_0: entered allmulticast mode [ 2549.504438][ T3904] bridge_slave_0: entered promiscuous mode [ 2549.661763][T21268] Bluetooth: hci1: command tx timeout [ 2549.789064][ T3904] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.789216][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.789416][ T3904] bridge_slave_1: entered allmulticast mode [ 2549.815026][ T3904] bridge_slave_1: entered promiscuous mode [ 2549.917265][ T4033] trusted_key: encrypted_key: insufficient parameters specified [ 2551.883320][ T3904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2552.804442][T21268] Bluetooth: hci1: command tx timeout [ 2552.814377][ T3904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2553.384285][ T37] audit: type=1400 audit(1766435433.028:1634): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=4043 comm="syz.0.10186" daddr=::ffff:224.0.0.1 dest=20002 [ 2553.703705][ T4041] bond0: option resend_igmp: invalid value (256) [ 2553.703731][ T4041] bond0: option resend_igmp: allowed values 0 - 255 [ 2553.704105][ T12] bridge_slave_1: left allmulticast mode [ 2553.704128][ T12] bridge_slave_1: left promiscuous mode [ 2553.708596][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.815298][ T12] veth5: left allmulticast mode [ 2553.815326][ T12] veth5: left promiscuous mode [ 2553.815601][ T12] bridge2: port 2(veth5) entered disabled state [ 2554.053824][ T12] veth3: left allmulticast mode [ 2554.053853][ T12] veth3: left promiscuous mode [ 2554.054099][ T12] bridge2: port 1(veth3) entered disabled state [ 2554.251418][T10983] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 2554.466974][T10983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2554.467014][T10983] usb 7-1: can't read configurations, error -61 [ 2554.597036][T10983] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 2554.763890][T10983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2554.763929][T10983] usb 7-1: can't read configurations, error -61 [ 2554.817621][T10983] usb usb7-port1: attempt power cycle [ 2555.271448][T10983] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 2556.080856][T10983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2556.080897][T10983] usb 7-1: can't read configurations, error -61 [ 2556.120157][ T37] audit: type=1400 audit(1766435435.758:1635): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=4074 comm="syz.8.10199" daddr=::ffff:224.0.0.1 dest=20002 [ 2556.231324][T10983] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 2556.254144][T10983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2556.254182][T10983] usb 7-1: can't read configurations, error -61 [ 2556.254519][T10983] usb usb7-port1: unable to enumerate USB device [ 2557.062965][ T4080] 9pnet_fd: Insufficient options for proto=fd [ 2557.349134][ T4082] trusted_key: encrypted_key: insufficient parameters specified [ 2558.796787][ T12] team0: Port device bond0 removed [ 2558.811805][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2558.871825][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2558.912191][ T12] bond0 (unregistering): Released all slaves [ 2559.592184][ T3904] team0: Port device team_slave_0 added [ 2559.855524][ T3904] team0: Port device team_slave_1 added [ 2560.154413][ T3904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2560.154431][ T3904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2560.154459][ T3904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2560.160215][ T3904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2560.160231][ T3904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2560.160258][ T3904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2560.386072][ T37] audit: type=1400 audit(1766435440.028:1636): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=4126 comm="syz.4.10217" daddr=::ffff:224.0.0.1 dest=20002 [ 2560.607869][ T3904] hsr_slave_0: entered promiscuous mode [ 2560.609124][ T3904] hsr_slave_1: entered promiscuous mode [ 2560.610126][ T3904] debugfs: 'hsr0' already exists in 'hsr' [ 2560.610161][ T3904] Cannot create hsr debugfs directory [ 2561.491418][ T4159] 9pnet_fd: Insufficient options for proto=fd [ 2561.692643][ T37] audit: type=1400 audit(1766435441.339:1637): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=4161 comm="syz.6.10229" daddr=::ffff:224.0.0.1 dest=20002 [ 2561.812745][ T4165] misc userio: No port type given on /dev/userio [ 2564.915930][ T4211] trusted_key: encrypted_key: insufficient parameters specified [ 2566.034151][ T4217] fuse: Bad value for 'fd' [ 2566.103536][ T12] hsr_slave_0: left promiscuous mode [ 2566.141217][ T12] hsr_slave_1: left promiscuous mode [ 2566.141897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2566.186610][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2567.604128][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10257'. [ 2569.612428][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2569.906858][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2572.854288][ T4247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2575.686382][ T3904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2575.769609][ T3904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2575.811721][ T3904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2575.857716][ T3904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2575.990922][ T4344] 9pnet_fd: Insufficient options for proto=fd [ 2576.262067][ T4348] trusted_key: encrypted_key: insufficient parameters specified [ 2577.354965][ T3904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2577.439746][ T3904] 8021q: adding VLAN 0 to HW filter on device team0 [ 2577.458237][T17876] bridge0: port 1(bridge_slave_0) entered blocking state [ 2577.458362][T17876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2577.481097][T28807] bridge0: port 2(bridge_slave_1) entered blocking state [ 2577.481298][T28807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2577.879434][ T4359] 9pnet_fd: Insufficient options for proto=fd [ 2578.020708][ T4365] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10293'. [ 2578.601258][ T3904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2578.715890][ T3904] veth0_vlan: entered promiscuous mode [ 2578.743178][ T3904] veth1_vlan: entered promiscuous mode [ 2578.780337][T21592] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2578.958201][ T3904] veth0_macvtap: entered promiscuous mode [ 2578.968953][ T3904] veth1_macvtap: entered promiscuous mode [ 2578.993584][ T3904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2579.017236][ T3904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2579.030248][T21592] usb 7-1: Using ep0 maxpacket: 16 [ 2579.032460][T21592] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2579.032485][T21592] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2579.038262][T21592] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2579.038289][T21592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.038311][T21592] usb 7-1: Product: syz [ 2579.038326][T21592] usb 7-1: Manufacturer: syz [ 2579.038342][T21592] usb 7-1: SerialNumber: syz [ 2579.066697][ T7907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2579.066913][ T7907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2579.066952][ T7907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2579.066987][ T7907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2579.440078][ T37] audit: type=1400 audit(1766435459.079:1638): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=4378 comm="syz.6.10297" dest=2 [ 2579.691691][T21592] usb 7-1: 0:2 : does not exist [ 2579.765872][T21592] usb 7-1: USB disconnect, device number 12 [ 2579.815284][ T7900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2579.815306][ T7900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2579.820569][ T4398] 9pnet_fd: Insufficient options for proto=fd [ 2579.874263][ T7900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2579.874284][ T7900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.172548][ T4410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10306'. [ 2581.579351][ T4422] autofs: Unknown parameter '00000000000000000000' [ 2582.678893][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2582.703293][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2582.706945][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2582.828704][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2582.829625][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2582.980342][ T4440] 9pnet_fd: Insufficient options for proto=fd [ 2584.253712][ T4440] trusted_key: encrypted_key: insufficient parameters specified [ 2584.413325][ T4429] lo speed is unknown, defaulting to 1000 [ 2585.980119][T21268] Bluetooth: hci4: command tx timeout [ 2586.022820][ T4474] autofs: Unknown parameter '00000000000000000000' [ 2586.115419][ T4429] chnl_net:caif_netlink_parms(): no params data found [ 2588.803683][T21268] Bluetooth: hci4: command tx timeout [ 2589.041227][ T4504] autofs: Unknown parameter '00000000000000000000' [ 2589.183721][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 2589.188618][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.188883][ T4429] bridge_slave_0: entered allmulticast mode [ 2589.212105][ T4429] bridge_slave_0: entered promiscuous mode [ 2589.227199][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10335'. [ 2589.227288][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 2589.227500][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.227761][ T4429] bridge_slave_1: entered allmulticast mode [ 2589.262281][ T4429] bridge_slave_1: entered promiscuous mode [ 2590.513569][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.513642][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.939834][T21268] Bluetooth: hci4: command tx timeout [ 2591.472755][ T4533] autofs: Unknown parameter 'fd00000000000000000000' [ 2592.871678][ T4552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10346'. [ 2592.954337][ T4429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2592.972195][ T4429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2593.023648][T21268] Bluetooth: hci4: command tx timeout [ 2593.629250][ T4563] autofs: Unknown parameter 'fd00000000000000000000' [ 2593.658779][ T4429] team0: Port device team_slave_0 added [ 2593.672976][ T4429] team0: Port device team_slave_1 added [ 2594.440352][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2594.440370][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2594.440397][ T4429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2594.464601][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2594.464617][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2594.464644][ T4429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2594.967982][ T4429] hsr_slave_0: entered promiscuous mode [ 2594.978380][ T4429] hsr_slave_1: entered promiscuous mode [ 2595.146848][ T4429] debugfs: 'hsr0' already exists in 'hsr' [ 2595.146878][ T4429] Cannot create hsr debugfs directory [ 2596.816559][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10370'. [ 2596.960959][ T4624] fuse: Bad value for 'rootmode' [ 2599.752897][ T4658] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10384'. [ 2599.972079][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10387'. [ 2600.037526][ T4668] netlink: 'syz.3.10388': attribute type 8 has an invalid length. [ 2601.834418][ T4429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2601.905844][ T4429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2601.989597][ T4429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2602.061305][ T4429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2602.373096][ T4730] tmpfs: Bad value for 'mpol' [ 2602.394622][ T4429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2602.577984][ T4429] 8021q: adding VLAN 0 to HW filter on device team0 [ 2602.715817][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 2603.558100][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 2603.592296][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2603.651097][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 2603.651245][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2603.848562][ T4743] netlink: 'syz.3.10410': attribute type 8 has an invalid length. [ 2605.578706][ T4429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2605.639660][ T4429] veth0_vlan: entered promiscuous mode [ 2605.648543][ T4429] veth1_vlan: entered promiscuous mode [ 2605.699547][ T4429] veth0_macvtap: entered promiscuous mode [ 2605.705259][ T4429] veth1_macvtap: entered promiscuous mode [ 2605.739693][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2605.745749][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2606.194951][ T7875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2606.721367][ T7875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2606.728139][ T7875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.680899][ T7875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2608.067523][ T4790] netlink: 'syz.3.10423': attribute type 8 has an invalid length. [ 2608.481523][ T7907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2608.481544][ T7907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2608.608153][T21432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2608.608175][T21432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2608.905155][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10430'. [ 2611.846265][ T4848] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10443'. [ 2611.999798][ T37] audit: type=1400 audit(1766435491.651:1639): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=4850 comm="syz.6.10446" daddr=::ffff:224.0.0.1 dest=20002 [ 2612.147273][ T4852] misc userio: No port type given on /dev/userio [ 2612.208809][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2612.368902][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 2612.374695][ T10] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 2612.374723][ T10] usb 4-1: config 0 has no interface number 0 [ 2612.374771][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2612.374797][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2612.374824][ T10] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2612.374852][ T10] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2612.377231][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 2612.377259][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.377280][ T10] usb 4-1: Product: syz [ 2612.377295][ T10] usb 4-1: Manufacturer: syz [ 2612.377311][ T10] usb 4-1: SerialNumber: syz [ 2612.491165][ T10] usb 4-1: config 0 descriptor?? [ 2612.752272][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2612.768581][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2612.780374][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2612.789796][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2612.811028][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2612.811538][ T10] iowarrior 4-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 2612.963249][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10452'. [ 2613.043527][T21588] usb 4-1: USB disconnect, device number 7 [ 2613.370573][ T4872] bond0: (slave veth3): Enslaving as an active interface with an up link [ 2614.163800][ T4864] lo speed is unknown, defaulting to 1000 [ 2615.388626][T21268] Bluetooth: hci5: command tx timeout [ 2617.053283][ T4864] chnl_net:caif_netlink_parms(): no params data found [ 2617.077034][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10465'. [ 2617.216848][ T37] audit: type=1400 audit(1766435496.861:1640): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=4920 comm="syz.6.10466" name="raw-gadget" dev="devtmpfs" ino=815 [ 2617.418829][T21268] Bluetooth: hci5: command tx timeout [ 2617.883101][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10469'. [ 2619.065806][ T4948] bridge_slave_0: left allmulticast mode [ 2619.065836][ T4948] bridge_slave_0: left promiscuous mode [ 2619.066088][ T4948] bridge0: port 1(bridge_slave_0) entered disabled state [ 2619.103933][ T4932] ieee802154 phy0 wpan0: encryption failed: -22 [ 2620.025361][T21268] Bluetooth: hci5: command tx timeout [ 2620.040016][ T4948] bridge_slave_1: left allmulticast mode [ 2620.040044][ T4948] bridge_slave_1: left promiscuous mode [ 2620.040279][ T4948] bridge0: port 2(bridge_slave_1) entered disabled state [ 2620.359211][ T4948] bond0: (slave bond_slave_0): Releasing backup interface [ 2620.419400][ T4948] bond0: (slave bond_slave_1): Releasing backup interface [ 2620.484784][ T4948] team0: Port device team_slave_0 removed [ 2620.522551][ T4948] team0: Port device team_slave_1 removed [ 2620.523172][ T4948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2620.523195][ T4948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2620.559904][ T4948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2620.559922][ T4948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2620.601081][ T4948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2620.721646][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2620.721846][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state [ 2620.722068][ T4864] bridge_slave_0: entered allmulticast mode [ 2620.725041][ T4864] bridge_slave_0: entered promiscuous mode [ 2620.727481][ T4964] syz_tun: entered allmulticast mode [ 2620.752231][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10477'. [ 2620.909939][ T4963] syz_tun (unregistering): left allmulticast mode [ 2621.109084][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2621.109887][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state [ 2621.110120][ T4864] bridge_slave_1: entered allmulticast mode [ 2621.123412][ T4864] bridge_slave_1: entered promiscuous mode [ 2621.531512][ T4864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2621.539098][ T4864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2622.058658][T21268] Bluetooth: hci5: command tx timeout [ 2627.874917][ T4984] IPVS: length: 24 != 12792 [ 2627.910863][ T4864] team0: Port device team_slave_0 added [ 2627.920237][ T4864] team0: Port device team_slave_1 added [ 2628.205182][ T4991] lo: entered allmulticast mode [ 2628.278831][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10485'. [ 2628.726103][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10488'. [ 2628.948708][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2628.948719][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2628.948734][ T4864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2628.950229][ T5006] bridge_slave_0: left allmulticast mode [ 2628.950255][ T5006] bridge_slave_0: left promiscuous mode [ 2628.950534][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2629.614129][ T5000] ieee802154 phy0 wpan0: encryption failed: -22 [ 2629.668933][ T5006] bridge_slave_1: left allmulticast mode [ 2629.668967][ T5006] bridge_slave_1: left promiscuous mode [ 2629.669145][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2629.779197][ T5006] bond0: (slave bond_slave_0): Releasing backup interface [ 2629.818850][ T5006] bond0: (slave bond_slave_1): Releasing backup interface [ 2629.878847][ T5006] team0: Port device team_slave_0 removed [ 2629.899289][ T5006] team0: Port device team_slave_1 removed [ 2629.899778][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2629.942018][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2629.962146][ T5006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2630.023618][ T4986] lo: left allmulticast mode [ 2630.026486][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2630.026502][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2630.026529][ T4864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2631.260116][ T37] audit: type=1400 audit(1766435510.912:1641): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=5021 comm="syz.0.10495" name="raw-gadget" dev="devtmpfs" ino=815 [ 2631.480278][ T4864] hsr_slave_0: entered promiscuous mode [ 2631.482070][ T4864] hsr_slave_1: entered promiscuous mode [ 2631.483355][ T4864] debugfs: 'hsr0' already exists in 'hsr' [ 2631.483382][ T4864] Cannot create hsr debugfs directory [ 2631.587921][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2631.738163][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 2631.746915][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2631.746947][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.746968][ T10] usb 4-1: Product: syz [ 2631.746984][ T10] usb 4-1: Manufacturer: syz [ 2631.746999][ T10] usb 4-1: SerialNumber: syz [ 2631.787626][ T10] usb 4-1: config 0 descriptor?? [ 2632.056931][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2633.873454][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2633.881409][ T10] usb 4-1: USB disconnect, device number 8 [ 2634.036260][ T5056] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10507'. [ 2636.167012][ T5088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2636.306341][T21268] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 2636.306370][T21268] CPU: 1 UID: 0 PID: 21268 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2636.306396][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2636.306410][T21268] Workqueue[ 2636.306410][T21268] Workqueue: hci4 hci_rx_work [ 2636.306436][T21268] Call Trace: [ 2636.306446][T21268] [ 2636.306456][T21268] dump_stack_lvl+0x189/0x250 [ 2636.306496][T21268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2636.306528][T21268] ? __pfx__printk+0x10/0x10 [ 2636.306567][T21268] ? kernfs_path_from_node+0x2c/0x280 [ 2636.306591][T21268] ? kernfs_path_from_node+0x243/0x280 [ 2636.306613][T21268] ? kernfs_path_from_node+0x2c/0x280 [ 2636.306638][T21268] sysfs_create_dir_ns+0x259/0x280 [ 2636.306660][T21268] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2636.306685][T21268] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2636.306711][T21268] ? rt_spin_unlock+0x161/0x200 [ 2636.306738][T21268] kobject_add_internal+0x5a5/0xb50 [ 2636.306779][T21268] kobject_add+0x155/0x220 [ 2636.306813][T21268] ? __pfx_kobject_add+0x10/0x10 [ 2636.306853][T21268] ? get_device_parent+0x370/0x3a0 [ 2636.306884][T21268] device_add+0x408/0xb50 [ 2636.306924][T21268] hci_conn_add_sysfs+0xd5/0x1e0 [ 2636.306951][T21268] le_conn_complete_evt+0xf39/0x1500 [ 2636.306995][T21268] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2636.307024][T21268] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2636.307052][T21268] ? lockdep_hardirqs_on+0x9c/0x150 [ 2636.307085][T21268] ? skb_pull_data+0xfb/0x200 [ 2636.307120][T21268] hci_le_conn_complete_evt+0x187/0x450 [ 2636.307156][T21268] hci_event_packet+0x78f/0x1200 [ 2636.307182][T21268] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2636.307211][T21268] ? __pfx_hci_event_packet+0x10/0x10 [ 2636.307242][T21268] ? hci_send_to_monitor+0xe2/0x570 [ 2636.307271][T21268] hci_rx_work+0x46a/0xe80 [ 2636.307302][T21268] ? process_scheduled_works+0x9ef/0x17b0 [ 2636.307330][T21268] process_scheduled_works+0xae1/0x17b0 [ 2636.307387][T21268] ? __pfx_process_scheduled_works+0x10/0x10 [ 2636.307433][T21268] worker_thread+0x8a0/0xda0 [ 2636.307474][T21268] ? __kthread_parkme+0x7b/0x200 [ 2636.307513][T21268] kthread+0x711/0x8a0 [ 2636.307546][T21268] ? __pfx_worker_thread+0x10/0x10 [ 2636.307573][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.307600][T21268] ? rt_spin_unlock+0x150/0x200 [ 2636.307626][T21268] ? rt_spin_unlock+0x161/0x200 [ 2636.307645][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.307676][T21268] ret_from_fork+0x4bc/0x870 [ 2636.307705][T21268] ? __pfx_ret_from_fork+0x10/0x10 [ 2636.307737][T21268] ? __switch_to_asm+0x39/0x70 [ 2636.307759][T21268] ? __switch_to_asm+0x33/0x70 [ 2636.307778][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.307809][T21268] ret_from_fork_asm+0x1a/0x30 [ 2636.307851][T21268] [ 2636.327636][T21268] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2636.327689][T21268] Bluetooth: hci4: failed to register connection device [ 2636.367624][T21268] ================================================================== [ 2636.367641][T21268] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040 [ 2636.367678][T21268] Read of size 8 at addr ffff88807b517500 by task kworker/u9:0/21268 [ 2636.367697][T21268] [ 2636.367709][T21268] CPU: 1 UID: 0 PID: 21268 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2636.367734][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2636.367748][T21268] Workqueue: hci4 hci_rx_work [ 2636.367771][T21268] Call Trace: [ 2636.367780][T21268] [ 2636.367789][T21268] dump_stack_lvl+0x189/0x250 [ 2636.367820][T21268] ? __kasan_check_byte+0x12/0x40 [ 2636.367847][T21268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2636.367876][T21268] ? lock_release+0x4b/0x3e0 [ 2636.367913][T21268] ? __virt_addr_valid+0x4a5/0x5c0 [ 2636.367941][T21268] print_report+0xca/0x240 [ 2636.367966][T21268] ? l2cap_connect_cfm+0x6e4/0x1040 [ 2636.367992][T21268] kasan_report+0x118/0x150 [ 2636.368019][T21268] ? l2cap_connect_cfm+0x6e4/0x1040 [ 2636.368047][T21268] l2cap_connect_cfm+0x6e4/0x1040 [ 2636.368075][T21268] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2636.368104][T21268] ? mutex_lock_nested+0x154/0x1d0 [ 2636.368122][T21268] ? hci_connect_cfm+0x2c/0x140 [ 2636.368146][T21268] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2636.368172][T21268] hci_connect_cfm+0x95/0x140 [ 2636.368207][T21268] le_conn_complete_evt+0xfb8/0x1500 [ 2636.368241][T21268] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2636.368267][T21268] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2636.368295][T21268] ? lockdep_hardirqs_on+0x9c/0x150 [ 2636.368321][T21268] ? skb_pull_data+0xfb/0x200 [ 2636.368349][T21268] hci_le_conn_complete_evt+0x187/0x450 [ 2636.368378][T21268] hci_event_packet+0x78f/0x1200 [ 2636.368401][T21268] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2636.368427][T21268] ? __pfx_hci_event_packet+0x10/0x10 [ 2636.368454][T21268] ? hci_send_to_monitor+0xe2/0x570 [ 2636.368487][T21268] hci_rx_work+0x46a/0xe80 [ 2636.368511][T21268] ? process_scheduled_works+0x9ef/0x17b0 [ 2636.368538][T21268] process_scheduled_works+0xae1/0x17b0 [ 2636.368575][T21268] ? __pfx_process_scheduled_works+0x10/0x10 [ 2636.368607][T21268] worker_thread+0x8a0/0xda0 [ 2636.368638][T21268] ? __kthread_parkme+0x7b/0x200 [ 2636.368667][T21268] kthread+0x711/0x8a0 [ 2636.368699][T21268] ? __pfx_worker_thread+0x10/0x10 [ 2636.368723][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.368750][T21268] ? rt_spin_unlock+0x150/0x200 [ 2636.368774][T21268] ? rt_spin_unlock+0x161/0x200 [ 2636.368795][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.368824][T21268] ret_from_fork+0x4bc/0x870 [ 2636.368850][T21268] ? __pfx_ret_from_fork+0x10/0x10 [ 2636.368878][T21268] ? __switch_to_asm+0x39/0x70 [ 2636.368898][T21268] ? __switch_to_asm+0x33/0x70 [ 2636.368927][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.368956][T21268] ret_from_fork_asm+0x1a/0x30 [ 2636.368987][T21268] [ 2636.368996][T21268] [ 2636.369010][T21268] Allocated by task 21268: [ 2636.369022][T21268] kasan_save_track+0x3e/0x80 [ 2636.369048][T21268] __kasan_kmalloc+0x93/0xb0 [ 2636.369073][T21268] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 2636.369099][T21268] l2cap_chan_create+0x50/0x780 [ 2636.369117][T21268] l2cap_sock_new_connection_cb+0x182/0x2b0 [ 2636.369137][T21268] l2cap_connect_cfm+0x37a/0x1040 [ 2636.369164][T21268] hci_connect_cfm+0x95/0x140 [ 2636.369186][T21268] le_conn_complete_evt+0xfb8/0x1500 [ 2636.369211][T21268] hci_le_conn_complete_evt+0x187/0x450 [ 2636.369234][T21268] hci_event_packet+0x78f/0x1200 [ 2636.369274][T21268] hci_rx_work+0x46a/0xe80 [ 2636.369294][T21268] process_scheduled_works+0xae1/0x17b0 [ 2636.369318][T21268] worker_thread+0x8a0/0xda0 [ 2636.369340][T21268] kthread+0x711/0x8a0 [ 2636.369368][T21268] ret_from_fork+0x4bc/0x870 [ 2636.369389][T21268] ret_from_fork_asm+0x1a/0x30 [ 2636.369410][T21268] [ 2636.369414][T21268] Freed by task 5099: [ 2636.369424][T21268] kasan_save_track+0x3e/0x80 [ 2636.369445][T21268] __kasan_save_free_info+0x46/0x50 [ 2636.369464][T21268] __kasan_slab_free+0x5c/0x80 [ 2636.369488][T21268] kfree+0x197/0x950 [ 2636.369510][T21268] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 2636.369538][T21268] l2cap_sock_teardown_cb+0x1b8/0x460 [ 2636.369556][T21268] l2cap_chan_close+0x2ec/0x980 [ 2636.369591][T21268] l2cap_sock_shutdown+0xae8/0x1130 [ 2636.369620][T21268] l2cap_sock_release+0x8e/0x230 [ 2636.369649][T21268] sock_close+0xc3/0x240 [ 2636.369673][T21268] __fput+0x45b/0xa80 [ 2636.369690][T21268] task_work_run+0x1d4/0x260 [ 2636.369707][T21268] do_exit+0x6b5/0x2300 [ 2636.369733][T21268] do_group_exit+0x21c/0x2d0 [ 2636.369749][T21268] get_signal+0x125d/0x1310 [ 2636.369772][T21268] arch_do_signal_or_restart+0xa0/0x790 [ 2636.369792][T21268] exit_to_user_mode_loop+0x72/0x130 [ 2636.369816][T21268] do_syscall_64+0x2bd/0xfa0 [ 2636.369842][T21268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.369861][T21268] [ 2636.369867][T21268] The buggy address belongs to the object at ffff88807b517000 [ 2636.369867][T21268] which belongs to the cache kmalloc-2k of size 2048 [ 2636.369887][T21268] The buggy address is located 1280 bytes inside of [ 2636.369887][T21268] freed 2048-byte region [ffff88807b517000, ffff88807b517800) [ 2636.369916][T21268] [ 2636.369922][T21268] The buggy address belongs to the physical page: [ 2636.369933][T21268] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807b515000 pfn:0x7b510 [ 2636.369955][T21268] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2636.369974][T21268] flags: 0x80000000000040(head|node=0|zone=1) [ 2636.370002][T21268] page_type: f5(slab) [ 2636.370022][T21268] raw: 0080000000000040 ffff88813ff27000 ffffea0000aec400 dead000000000002 [ 2636.370041][T21268] raw: ffff88807b515000 0000000080080007 00000000f5000000 0000000000000000 [ 2636.370061][T21268] head: 0080000000000040 ffff88813ff27000 ffffea0000aec400 dead000000000002 [ 2636.370080][T21268] head: ffff88807b515000 0000000080080007 00000000f5000000 0000000000000000 [ 2636.370100][T21268] head: 0080000000000003 ffffea0001ed4401 00000000ffffffff 00000000ffffffff [ 2636.370117][T21268] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 2636.370128][T21268] page dumped because: kasan: bad access detected [ 2636.370144][T21268] page_owner tracks the page as allocated [ 2636.370152][T21268] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10365, tgid 10365 (kworker/u8:1), ts 1926321532530, free_ts 1926095087103 [ 2636.370191][T21268] post_alloc_hook+0x240/0x2a0 [ 2636.370217][T21268] get_page_from_freelist+0x28c0/0x2960 [ 2636.370245][T21268] __alloc_frozen_pages_noprof+0x181/0x370 [ 2636.370275][T21268] alloc_pages_mpol+0xd1/0x380 [ 2636.370300][T21268] allocate_slab+0x96/0x350 [ 2636.370319][T21268] ___slab_alloc+0xb12/0x13f0 [ 2636.370336][T21268] __slab_alloc+0xc6/0x1f0 [ 2636.370352][T21268] __kmalloc_node_track_caller_noprof+0x2a8/0x7e0 [ 2636.370378][T21268] kmalloc_reserve+0x136/0x290 [ 2636.370397][T21268] __alloc_skb+0x142/0x2d0 [ 2636.370413][T21268] rtmsg_ifinfo_build_skb+0x84/0x260 [ 2636.370436][T21268] unregister_netdevice_many_notify+0x18df/0x2380 [ 2636.370464][T21268] ops_undo_list+0x3dc/0x990 [ 2636.370478][T21268] cleanup_net+0x4de/0x820 [ 2636.370492][T21268] process_scheduled_works+0xae1/0x17b0 [ 2636.370510][T21268] worker_thread+0x8a0/0xda0 [ 2636.370528][T21268] page last free pid 22074 tgid 22074 stack trace: [ 2636.370539][T21268] __free_frozen_pages+0xfb6/0x1140 [ 2636.370559][T21268] __put_partials+0x149/0x170 [ 2636.370572][T21268] __slab_free+0x29e/0x370 [ 2636.370587][T21268] qlist_free_all+0x97/0x140 [ 2636.370604][T21268] kasan_quarantine_reduce+0x148/0x160 [ 2636.370622][T21268] __kasan_slab_alloc+0x22/0x80 [ 2636.370641][T21268] kmem_cache_alloc_noprof+0x181/0x6b0 [ 2636.370660][T21268] vm_area_dup+0x2b/0x670 [ 2636.370673][T21268] __split_vma+0x1ad/0x9e0 [ 2636.370689][T21268] vma_modify+0x122c/0x1880 [ 2636.370703][T21268] vma_modify_flags+0x1e8/0x230 [ 2636.370719][T21268] mprotect_fixup+0x407/0x9c0 [ 2636.370736][T21268] do_mprotect_pkey+0x8c5/0xcd0 [ 2636.370753][T21268] __x64_sys_mprotect+0x80/0x90 [ 2636.370768][T21268] do_syscall_64+0xfa/0xfa0 [ 2636.370790][T21268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.370809][T21268] [ 2636.370814][T21268] Memory state around the buggy address: [ 2636.370826][T21268] ffff88807b517400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2636.370840][T21268] ffff88807b517480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2636.370854][T21268] >ffff88807b517500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2636.370864][T21268] ^ [ 2636.370875][T21268] ffff88807b517580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2636.370887][T21268] ffff88807b517600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2636.370897][T21268] ================================================================== [ 2636.370928][T21268] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2636.370943][T21268] CPU: 1 UID: 0 PID: 21268 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2636.370966][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2636.370979][T21268] Workqueue: hci4 hci_rx_work [ 2636.371001][T21268] Call Trace: [ 2636.371009][T21268] [ 2636.371018][T21268] dump_stack_lvl+0x99/0x250 [ 2636.371045][T21268] ? __asan_memcpy+0x40/0x70 [ 2636.371064][T21268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2636.371092][T21268] ? __pfx__printk+0x10/0x10 [ 2636.371118][T21268] vpanic+0x237/0x6d0 [ 2636.371137][T21268] ? __pfx_vpanic+0x10/0x10 [ 2636.371157][T21268] panic+0xb9/0xc0 [ 2636.371173][T21268] ? __pfx_panic+0x10/0x10 [ 2636.371189][T21268] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2636.371217][T21268] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2636.371243][T21268] ? l2cap_connect_cfm+0x6e4/0x1040 [ 2636.371267][T21268] check_panic_on_warn+0x89/0xb0 [ 2636.371285][T21268] ? l2cap_connect_cfm+0x6e4/0x1040 [ 2636.371312][T21268] end_report+0x78/0x160 [ 2636.371335][T21268] kasan_report+0x129/0x150 [ 2636.371361][T21268] ? l2cap_connect_cfm+0x6e4/0x1040 [ 2636.371391][T21268] l2cap_connect_cfm+0x6e4/0x1040 [ 2636.371420][T21268] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2636.371447][T21268] ? mutex_lock_nested+0x154/0x1d0 [ 2636.371467][T21268] ? hci_connect_cfm+0x2c/0x140 [ 2636.371488][T21268] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2636.371512][T21268] hci_connect_cfm+0x95/0x140 [ 2636.371536][T21268] le_conn_complete_evt+0xfb8/0x1500 [ 2636.371567][T21268] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2636.371591][T21268] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2636.371615][T21268] ? lockdep_hardirqs_on+0x9c/0x150 [ 2636.371638][T21268] ? skb_pull_data+0xfb/0x200 [ 2636.371664][T21268] hci_le_conn_complete_evt+0x187/0x450 [ 2636.371691][T21268] hci_event_packet+0x78f/0x1200 [ 2636.371712][T21268] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2636.371735][T21268] ? __pfx_hci_event_packet+0x10/0x10 [ 2636.371757][T21268] ? hci_send_to_monitor+0xe2/0x570 [ 2636.371782][T21268] hci_rx_work+0x46a/0xe80 [ 2636.371802][T21268] ? process_scheduled_works+0x9ef/0x17b0 [ 2636.371825][T21268] process_scheduled_works+0xae1/0x17b0 [ 2636.371856][T21268] ? __pfx_process_scheduled_works+0x10/0x10 [ 2636.371883][T21268] worker_thread+0x8a0/0xda0 [ 2636.371915][T21268] ? __kthread_parkme+0x7b/0x200 [ 2636.371941][T21268] kthread+0x711/0x8a0 [ 2636.371965][T21268] ? __pfx_worker_thread+0x10/0x10 [ 2636.371986][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.372008][T21268] ? rt_spin_unlock+0x150/0x200 [ 2636.372027][T21268] ? rt_spin_unlock+0x161/0x200 [ 2636.372043][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.372066][T21268] ret_from_fork+0x4bc/0x870 [ 2636.372088][T21268] ? __pfx_ret_from_fork+0x10/0x10 [ 2636.372112][T21268] ? __switch_to_asm+0x39/0x70 [ 2636.372131][T21268] ? __switch_to_asm+0x33/0x70 [ 2636.372148][T21268] ? __pfx_kthread+0x10/0x10 [ 2636.372174][T21268] ret_from_fork_asm+0x1a/0x30 [ 2636.372202][T21268] [ 2636.373591][T21268] Kernel Offset: disabled