last executing test programs: 16m23.678830356s ago: executing program 32 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x80000) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = socket(0x22, 0x2, 0x3) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000140)=0xfffffffe, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x5, 0x8, 0xd7, 0x7}, {0x7, 0x5, 0xc, 0x86}, {0x2, 0x1, 0x9, 0x7a}]}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) 16m20.92536453s ago: executing program 33 (id=13): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001100)={0x80000000, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000080002000000000004000400"/58], 0x40}}, 0x2008040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/251, 0xfb}], 0x1}, 0x7fffffff}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000f00)}, 0x2}], 0x2, 0x1a000, 0x0) dup(r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) write$uinput_user_dev(r7, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5, 0x0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c53, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x4, 0x9, 0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2000], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15m13.790150557s ago: executing program 4 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 15m9.04003635s ago: executing program 34 (id=95): setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) setitimer(0x1, 0x0, 0x0) unshare(0x64000600) 15m5.772003851s ago: executing program 4 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r0, 0x0, &(0x7f0000db5000/0x3000)=nil, 0x3000, 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0xca03}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) 15m4.178157747s ago: executing program 4 (id=112): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 15m0.3841026s ago: executing program 4 (id=113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 14m59.411986374s ago: executing program 4 (id=114): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r6, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa0100fe}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8412060, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 14m54.501618549s ago: executing program 4 (id=118): socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00\x00\x00', 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) shutdown(r3, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) 14m38.67952977s ago: executing program 35 (id=118): socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00\x00\x00', 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) shutdown(r3, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) 12m44.109737489s ago: executing program 7 (id=232): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) 12m42.598733634s ago: executing program 7 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000240), 0x0}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d", 0x8c}], 0x1}}], 0x1, 0x4000000) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x34, 0x3a, 0x0, @private2, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @private1, @rand_addr=' \x01\x00', [], "1e520b4c"}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000540)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = epoll_create1(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0xb0000000}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff}, 0x0) write$binfmt_misc(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1, 0x80, 0x4, 0x10000, 0x0, 0x3}) 12m34.071557052s ago: executing program 7 (id=244): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x40000000) 12m31.727742381s ago: executing program 7 (id=247): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r1, 0x0, &(0x7f0000db5000/0x3000)=nil, 0x3000, 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0xca03}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) 12m12.14311846s ago: executing program 36 (id=247): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r1, 0x0, &(0x7f0000db5000/0x3000)=nil, 0x3000, 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0xca03}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) 8m39.580622746s ago: executing program 6 (id=527): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r0, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) 8m37.312397819s ago: executing program 6 (id=530): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) socket$inet6(0xa, 0x4, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) setrlimit(0xc, &(0x7f0000000280)={0x800, 0x3df}) r1 = syz_open_dev$vcsn(&(0x7f0000000400), 0xf166, 0x10000) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r1}, &(0x7f0000000200), &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000440), 0xf7f, 0x608101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) symlink(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000003c0)='./cgroup\x00') getpriority(0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setresgid(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003340)={{}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000003440)=0xe4) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) statx(r1, &(0x7f00000054c0)='./cgroup\x00', 0x100, 0x114, &(0x7f0000005500)) r3 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) 8m35.309355348s ago: executing program 6 (id=538): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500, 0x0, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) 8m34.253131949s ago: executing program 6 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='smaps\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x3ffc, 0x0) setregid(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) setgroups(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000036c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd3283d036b6269b1, 0x110, r2, 0x1372e000) fchdir(0xffffffffffffffff) inotify_init1(0x800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d00000000002010400000000ffffffff0a000000440001802c00018014000300fe800000000000000000000000000020145bd13b1951f0475f00000000000000000000030c000280050001009800000006000340000100003c0003800c00028005000100890000002c00018014000300000000000000000000ecb9ffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c00028005000100"], 0xd0}, 0x1, 0x0, 0x0, 0x24000801}, 0x40004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x48300, 0x60) 8m30.246262643s ago: executing program 6 (id=546): unshare(0x22020600) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m29.433439517s ago: executing program 6 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setresgid(0x0, r4, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x7ffff004) 8m14.086525556s ago: executing program 37 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setresgid(0x0, r4, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x7ffff004) 7m54.942861747s ago: executing program 9 (id=628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e29, @private=0xa010102}, 0x10, &(0x7f0000000d80)}, 0x2c004400) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x91, 0x4, 0x209, 0x2, 0x3ff, 0x2, 0x2ad, 0x1}, &(0x7f0000000300)=0x20) 7m54.566667532s ago: executing program 9 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 7m53.303936901s ago: executing program 9 (id=631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r0, 0x0, 0x0) 7m52.965544853s ago: executing program 9 (id=633): pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) socket(0xa, 0x3, 0x3a) syz_io_uring_setup(0x23a, 0x0, &(0x7f0000000040), &(0x7f0000000600)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r2, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0x10f}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x0, 0x3938700}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m51.90685522s ago: executing program 9 (id=637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e29, @private=0xa010102}, 0x10, &(0x7f0000000d80)}, 0x2c004400) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x91, 0x4, 0x209, 0x2, 0x3ff, 0x2, 0x2ad, 0x1}, &(0x7f0000000300)=0x20) 7m51.239432832s ago: executing program 9 (id=641): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000010, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) syz_clone(0x180, &(0x7f0000000300)="92040fb2be8b02b141614f77b5bd0e7eca52285f811f849fb37c66ca5e2a850e51460213ef8f0a714e07ca23ed7ab6dd0d0d363ba5ad5fc2052f23c9741cc2a16cca3e3e994fdb8da31a669c52eb515cd97d0eaa047f6ce8017c0c13a626481575faaf9d81f9fc2bdf00ef8ba418a1b8233b6123aee444e53199dd143998", 0x7e, &(0x7f00000003c0), 0x0, &(0x7f0000000500)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m35.670644067s ago: executing program 38 (id=641): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000010, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) syz_clone(0x180, &(0x7f0000000300)="92040fb2be8b02b141614f77b5bd0e7eca52285f811f849fb37c66ca5e2a850e51460213ef8f0a714e07ca23ed7ab6dd0d0d363ba5ad5fc2052f23c9741cc2a16cca3e3e994fdb8da31a669c52eb515cd97d0eaa047f6ce8017c0c13a626481575faaf9d81f9fc2bdf00ef8ba418a1b8233b6123aee444e53199dd143998", 0x7e, &(0x7f00000003c0), 0x0, &(0x7f0000000500)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m27.179286515s ago: executing program 1 (id=879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x29}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x80}, 0x0) 5m26.54522987s ago: executing program 1 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de, 0x10}, &(0x7f0000000140), &(0x7f0000000780)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 5m23.465861597s ago: executing program 1 (id=885): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x42040) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mknod$loop(0x0, 0x6000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x0, r1, 0x0, 0x80000}) 5m19.789088034s ago: executing program 1 (id=893): r0 = syz_io_uring_setup(0xec7, &(0x7f0000000d00)={0x0, 0x200045de, 0x800, 0xffffe, 0x126}, &(0x7f0000000bc0)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1, 0x132a, 0x3, 0x0, 0x0) 5m17.860142094s ago: executing program 1 (id=896): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x5b87, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r2, 0xd44, 0x44c1, 0x7, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) dup2(r0, r1) 5m16.524930782s ago: executing program 1 (id=899): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x58010}, 0x0) 5m0.96547214s ago: executing program 39 (id=899): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x58010}, 0x0) 14.495477514s ago: executing program 8 (id=1413): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) landlock_restrict_self(r0, 0x9) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100}, 0x0) landlock_restrict_self(r2, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 11.617243352s ago: executing program 8 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) 6.840500468s ago: executing program 8 (id=1449): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000900000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b9e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) 6.569431446s ago: executing program 5 (id=1451): r0 = socket$kcm(0x10, 0x2, 0x4) close(0x3) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="ca08", 0x2}], 0x1}, 0x400c881) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='i', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000002"], 0x20}, 0x50) 6.223613911s ago: executing program 8 (id=1454): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000000)={'bridge_slave_1\x00', @random="9e3151f24eb6"}) 5.836607709s ago: executing program 5 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.29565741s ago: executing program 8 (id=1459): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) 4.845451975s ago: executing program 5 (id=1460): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c1", 0x20}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2006c8c6f59bab50100d0c96ffc6010", 0x19}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4.426220338s ago: executing program 3 (id=1462): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001480)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x3}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000240)="75a529fdf0245d53fffe3df4006ec7f679564fa31aecc081dda06dab81673e52865f8fb16a7f8a17b28239b9a74be4b9a1666efc61d3f90247fa6c14726312db026066da6d76949cb24d276a8c4a0e38107714f440daad939ac5f4b0cc17184436355b8992379dfcea713221cb83a4c218efdf3a18a49f7210d2dfee2e52aa6f5b0c8bd0c2e2d9c6decfc58ecdf3d26da9603224b32e186d8ac794e728342df277bc9216123c28daf4ecd6b39941f269b988bb8b6872163310a74d2cf1bdbd4e502d2651e99053376d4cbbe3f491b3096ae87b4611477b4ccb8e679f2b44b938eac7b75ac6f7365aff569bd936bd868aecf9f17801d578f3a9", 0xf9}, {&(0x7f0000000080)="5f804f01a70aab7891d79cdf4a131f963610ec90653d5c554f0410653bb7bed5446d6dd1a6", 0x25}, {&(0x7f0000000100)="edc29c89c312f9de8bd1b92ce9817c4daae10f6f3f7752a066d455f7dfb152165811a333815d8dceecdfcdd286a8d6946ec02f109ff1617fee4f218f7880e3af285f0c4afc597e100b9a8bd99881d5157c9648543829413518cb753e1371e12fc5b50129cced", 0x66}, {&(0x7f0000000340)="00eb9e7a40f1fbe58fb66d83e4528a3e97c57c9c523669ad6afb669a73e8bdbb3840ea32b0aa8061fe447b3524bbd09a718ec99ace1dbc2a14e9e897c318388f2b3cfc706dffe03c12c0226bd07a63b1097f1934a23d129bf9b31d89acfb7c5d9c0012b15c4cd52e869a268b4cc72f15ce3cf46dbcf91c01890dc364cd6cacbc015a2e64fce64aac5665f52115e8ea81ca68a78ac29b479a0f074e976cd95d319147e994bd", 0xa5}, {&(0x7f0000000400)="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", 0xdc7}], 0x5}, 0x1000) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 4.062055975s ago: executing program 5 (id=1463): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42d}, {&(0x7f0000000740)="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", 0x631}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) 4.056047845s ago: executing program 2 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x18, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b9e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) 3.744594552s ago: executing program 3 (id=1466): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="ad16ab", 0x3}], 0x1}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x44000) 3.452583378s ago: executing program 5 (id=1467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000001040)="1e"}) 3.428957836s ago: executing program 2 (id=1468): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000d80)=""/4046, 0xfce}, {&(0x7f0000001d80)=""/4124, 0x101c}, {&(0x7f00000031c0)=""/204, 0xcc}], 0x4}, 0x120) 3.308591545s ago: executing program 0 (id=1469): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3.126638031s ago: executing program 3 (id=1470): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x80, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x112) 2.865958726s ago: executing program 5 (id=1471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0xffffffff, {0xa}}, 0x14}}, 0x20008080) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, 0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000009840), 0x60, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) inotify_init1(0x100800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_devices(r5, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) 2.703568513s ago: executing program 0 (id=1472): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4004081) 2.672262629s ago: executing program 2 (id=1473): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 2.48962014s ago: executing program 3 (id=1474): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 2.02052423s ago: executing program 0 (id=1475): socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00\x00\x00', 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) shutdown(r3, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x4d, 0x7, 0x800, 0x0, {0x80000001, 0xfff, 0x0, 0x6, 0x9, 0x9, 0x5, 0x100, 0xb, 0x80, 0x0, 0x40c, 0x5, 0x6, "4e80de46358e7f255a5d3f52e16f724fd04ef0eb3e6202d127cf9208f8a3226c"}}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) 2.006185348s ago: executing program 2 (id=1476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.52375261s ago: executing program 3 (id=1477): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="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", 0x584}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0xffffff6e}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.143457178s ago: executing program 0 (id=1478): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x18, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b9e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) 966.148177ms ago: executing program 2 (id=1479): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) 649.337753ms ago: executing program 3 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 521.157589ms ago: executing program 0 (id=1481): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000001040)="1e"}) 303.7083ms ago: executing program 2 (id=1482): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001400", 0x26}, {0x0}, {0x0}, {&(0x7f0000000380)="ff1ed8614d03ff1d", 0x8}], 0x4}, 0x0) 215.294395ms ago: executing program 8 (id=1483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70543", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1484): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) kernel console output (not intermixed with test programs): miscuous mode [ 778.865028][ T6104] veth0_vlan: left promiscuous mode [ 780.215150][ T6104] team0 (unregistering): Port device team_slave_1 removed [ 780.286335][ T6104] team0 (unregistering): Port device team_slave_0 removed [ 780.948235][ T8057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.015291][ T8057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.317276][ T8057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.395909][ T8057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.045879][ T9158] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 783.214279][ T9158] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 783.386046][ T9158] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 783.455820][ T9158] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 784.887512][ T9164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 784.955258][ T9164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.719444][ T9164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.888101][ T9433] lo speed is unknown, defaulting to 1000 [ 785.894378][ T9433] lo speed is unknown, defaulting to 1000 [ 785.901727][ T9433] lo speed is unknown, defaulting to 1000 [ 785.950855][ T9433] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 786.126629][ T9164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 786.278900][ T9433] lo speed is unknown, defaulting to 1000 [ 786.290723][ T9433] lo speed is unknown, defaulting to 1000 [ 786.299151][ T9433] lo speed is unknown, defaulting to 1000 [ 786.307693][ T9433] lo speed is unknown, defaulting to 1000 [ 786.315951][ T9433] lo speed is unknown, defaulting to 1000 [ 787.411384][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.637642][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.744189][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.751778][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.859695][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.930167][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.937756][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.334680][ T9164] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.404925][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.412501][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.533331][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.540931][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.398073][ T7900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.406087][ T7900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.704095][ T8057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.741498][ T8057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.918805][ T9500] tmpfs: Bad value for 'mpol' [ 790.974226][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.200166][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.863822][ T9164] veth0_vlan: entered promiscuous mode [ 792.011650][ T9164] veth1_vlan: entered promiscuous mode [ 792.312968][ T9513] cgroup: fork rejected by pids controller in /syz1 [ 792.535626][ T9164] veth0_macvtap: entered promiscuous mode [ 792.600164][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 792.617724][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 792.630344][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 792.664091][ T9164] veth1_macvtap: entered promiscuous mode [ 792.670725][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 792.701435][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.013620][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.174777][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.371041][ T9612] lo speed is unknown, defaulting to 1000 [ 793.371122][ T6104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.470829][ T6104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.652605][ T7900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.686950][ T4745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.797059][ T5775] Bluetooth: hci4: command tx timeout [ 794.967815][ T9158] veth0_vlan: entered promiscuous mode [ 795.111356][ T157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.302491][ T157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.394378][ T9158] veth1_vlan: entered promiscuous mode [ 795.634050][ T157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.810726][ T9612] chnl_net:caif_netlink_parms(): no params data found [ 795.991986][ T157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.869250][ T5775] Bluetooth: hci4: command tx timeout [ 796.941786][ T9158] veth0_macvtap: entered promiscuous mode [ 797.053471][ T9158] veth1_macvtap: entered promiscuous mode [ 797.252429][ T157] bridge_slave_1: left allmulticast mode [ 797.282370][ T157] bridge_slave_1: left promiscuous mode [ 797.328900][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.417540][ T157] bridge_slave_0: left allmulticast mode [ 797.423403][ T157] bridge_slave_0: left promiscuous mode [ 797.474246][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.837578][ T9717] capability: warning: `syz.8.775' uses deprecated v2 capabilities in a way that may be insecure [ 798.140379][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.180074][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.195346][ T157] bond0 (unregistering): Released all slaves [ 798.370974][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.575601][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.790318][ T7900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.895217][ T6104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.919450][ T6104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.949622][ T5775] Bluetooth: hci4: command tx timeout [ 800.086599][ T157] hsr_slave_0: left promiscuous mode [ 800.139086][ T157] hsr_slave_1: left promiscuous mode [ 800.207423][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.214978][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.366779][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.443439][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.664137][ T157] veth1_macvtap: left promiscuous mode [ 800.699287][ T157] veth0_macvtap: left promiscuous mode [ 800.752123][ T157] veth1_vlan: left promiscuous mode [ 800.773387][ T157] veth0_vlan: left promiscuous mode [ 801.026760][ T5775] Bluetooth: hci4: command tx timeout [ 801.816343][ T157] team0 (unregistering): Port device team_slave_1 removed [ 801.875417][ T157] team0 (unregistering): Port device team_slave_0 removed [ 802.139113][ T7900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.403570][ T9746] bond1: entered allmulticast mode [ 802.616930][ T9612] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.666880][ T9612] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.674545][ T9612] bridge_slave_0: entered allmulticast mode [ 802.739737][ T9612] bridge_slave_0: entered promiscuous mode [ 802.841684][ T9612] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.860073][ T9612] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.887322][ T9612] bridge_slave_1: entered allmulticast mode [ 802.907641][ T9612] bridge_slave_1: entered promiscuous mode [ 803.232386][ T9612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.302404][ T9612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.534528][ T9771] process 'syz.1.787' launched './file1' with NULL argv: empty string added [ 803.624970][ T9612] team0: Port device team_slave_0 added [ 803.708689][ T9612] team0: Port device team_slave_1 added [ 803.931929][ T9612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.940002][ T9612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.011511][ T9612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.068939][ T9612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.076053][ T9612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.181675][ T9612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.738765][ T9612] hsr_slave_0: entered promiscuous mode [ 805.749676][ T9612] hsr_slave_1: entered promiscuous mode [ 806.496869][ T9612] debugfs: 'hsr0' already exists in 'hsr' [ 806.502763][ T9612] Cannot create hsr debugfs directory [ 806.959808][ T7900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.009423][ T7900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.464994][ T4740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.516890][ T4740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.515076][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 808.990179][ T9612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 809.082124][ T9612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 809.210401][ T9612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 809.282443][ T9612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 809.644691][ T4740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.751922][ T4740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.120921][ T9822] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 810.177442][ T29] audit: type=1326 audit(1772042319.803:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.8.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 811.126701][ T29] audit: type=1326 audit(1772042319.803:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.8.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 811.167099][ T29] audit: type=1326 audit(1772042319.813:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.8.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 811.248947][ T29] audit: type=1326 audit(1772042319.813:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.8.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 811.281742][ T29] audit: type=1326 audit(1772042319.813:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.8.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 811.318069][ T9824] loop0: detected capacity change from 0 to 512 [ 811.433863][ T9824] EXT4-fs (loop0): 1 orphan inode deleted [ 811.446242][ T9824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.471107][ T9824] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.613374][ T4745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.688001][ T4745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.756331][ T9612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.089425][ T9612] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.339532][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.347216][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.452992][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.460611][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.952666][ T9164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.298619][ T40] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 818.046673][ T40] usb 6-1: Using ep0 maxpacket: 16 [ 818.457173][ T9857] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 819.000168][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.007601][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.028155][ T40] usb 6-1: device descriptor read/all, error -71 [ 820.286881][ T9860] mmap: syz.0.808 (9860) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 821.682606][ T9612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.500806][ T9612] veth0_vlan: entered promiscuous mode [ 823.333561][ T9612] veth1_vlan: entered promiscuous mode [ 823.561884][ T40] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 823.816791][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 823.892885][ T40] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 823.981827][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.055005][ T9612] veth0_macvtap: entered promiscuous mode [ 824.143004][ T40] usb 1-1: config 0 descriptor?? [ 824.255669][ T40] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 824.404094][ T9612] veth1_macvtap: entered promiscuous mode [ 824.729927][ T9885] loop0: detected capacity change from 0 to 256 [ 825.137608][ T9612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.283899][ T9612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.406773][ T9885] FAT-fs (loop0): Directory bread(block 64) failed [ 825.497699][ T9885] FAT-fs (loop0): Directory bread(block 65) failed [ 825.602296][ T9885] FAT-fs (loop0): Directory bread(block 66) failed [ 825.653360][ T9885] FAT-fs (loop0): Directory bread(block 67) failed [ 825.740985][ T9885] FAT-fs (loop0): Directory bread(block 68) failed [ 825.749542][ T7900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.127412][ T9885] FAT-fs (loop0): Directory bread(block 69) failed [ 826.138794][ T7900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.175546][ T9885] FAT-fs (loop0): Directory bread(block 70) failed [ 826.204237][ T9894] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 826.931255][ T9885] FAT-fs (loop0): Directory bread(block 71) failed [ 827.047689][ T9885] FAT-fs (loop0): Directory bread(block 72) failed [ 827.121637][ T9885] FAT-fs (loop0): Directory bread(block 73) failed [ 827.194878][ T999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.405597][ T157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.316178][ T40] usb 1-1: Detected FT232A [ 828.384414][ T40] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 828.592549][ T40] usb 1-1: USB disconnect, device number 2 [ 828.698942][ T40] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 828.833166][ T40] ftdi_sio 1-1:0.0: device disconnected [ 832.276863][ T9926] loop5: detected capacity change from 0 to 512 [ 834.528413][ T9926] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 834.528672][ T9926] EXT4-fs: failed to create workqueue [ 834.543937][ T9926] EXT4-fs (loop5): mount failed [ 837.091034][ T9957] loop7: detected capacity change from 0 to 16384 [ 837.281512][ T9957] loop7: detected capacity change from 16384 to 16383 [ 840.701642][ T9999] loop5: detected capacity change from 0 to 512 [ 842.236837][ T9999] EXT4-fs (loop5): 1 orphan inode deleted [ 842.265969][ T9999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.332335][ T9999] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.478745][ T9158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.137225][T10020] netlink: 'syz.5.848': attribute type 19 has an invalid length. [ 846.371435][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.431962][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.212164][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.226582][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.786171][T10068] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 854.688270][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 854.701887][ T5071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 854.713086][ T5071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 854.731466][ T5071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 854.744284][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 855.410314][T10094] lo speed is unknown, defaulting to 1000 [ 855.993190][T10106] loop0: detected capacity change from 0 to 512 [ 856.870589][ T5071] Bluetooth: hci0: command tx timeout [ 857.044106][T10106] EXT4-fs (loop0): 1 orphan inode deleted [ 857.062266][T10106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.138119][T10106] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.455432][ T9164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.723371][T10099] lo speed is unknown, defaulting to 1000 [ 858.967795][ T5071] Bluetooth: hci0: command tx timeout [ 860.994102][T10135] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 861.057843][ T5071] Bluetooth: hci0: command tx timeout [ 862.823986][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.106771][ T5071] Bluetooth: hci0: command tx timeout [ 863.212746][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.278977][T10094] chnl_net:caif_netlink_parms(): no params data found [ 863.415378][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.962049][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.871704][T10175] netlink: 'syz.0.891': attribute type 1 has an invalid length. [ 867.296248][ T34] bridge_slave_1: left allmulticast mode [ 867.302617][ T34] bridge_slave_1: left promiscuous mode [ 867.369054][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.437724][ T34] bridge_slave_0: left allmulticast mode [ 867.473006][ T34] bridge_slave_0: left promiscuous mode [ 867.498895][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.322980][T10186] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 871.163131][ T5828] IPVS: starting estimator thread 0... [ 871.277121][T10206] IPVS: using max 240 ests per chain, 12000 per kthread [ 871.790362][T10212] loop0: detected capacity change from 0 to 512 [ 872.789247][T10212] EXT4-fs (loop0): 1 orphan inode deleted [ 872.806214][T10212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.909895][T10212] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.859612][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.030798][T10219] loop5: detected capacity change from 0 to 128 [ 874.269044][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.529123][ T9164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.553391][ T34] bond0 (unregistering): Released all slaves [ 874.858216][T10197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.214425][T10197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.662287][T10197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.781946][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.817088][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.824788][T10094] bridge_slave_0: entered allmulticast mode [ 875.909343][T10094] bridge_slave_0: entered promiscuous mode [ 875.932398][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.989562][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.017762][T10094] bridge_slave_1: entered allmulticast mode [ 876.055968][T10094] bridge_slave_1: entered promiscuous mode [ 876.552066][T10197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.727062][T10247] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 878.924046][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.253476][ T34] hsr_slave_0: left promiscuous mode [ 879.321966][ T34] hsr_slave_1: left promiscuous mode [ 879.345300][ T8585] IPVS: starting estimator thread 0... [ 879.374698][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.407930][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.457082][T10254] IPVS: using max 240 ests per chain, 12000 per kthread [ 879.463119][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.503530][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.657887][ T34] veth1_macvtap: left promiscuous mode [ 879.663601][ T34] veth0_macvtap: left promiscuous mode [ 879.711555][ T34] veth1_vlan: left promiscuous mode [ 879.738368][ T34] veth0_vlan: left promiscuous mode [ 879.934145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.943937][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.824951][T10264] loop5: detected capacity change from 0 to 512 [ 882.067894][ T5071] Bluetooth: hci5: command 0x0406 tx timeout [ 882.074520][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 882.687218][T10264] EXT4-fs (loop5): 1 orphan inode deleted [ 882.709250][T10264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.833234][T10264] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.616693][ T9158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.338231][T10279] loop5: detected capacity change from 0 to 4096 [ 884.461319][T10279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.709299][T10279] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.917: corrupted inode contents [ 884.786053][ T34] team0 (unregistering): Port device team_slave_1 removed [ 884.801040][T10279] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.917: mark_inode_dirty error [ 884.884181][T10279] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.917: corrupted inode contents [ 884.929098][ T34] team0 (unregistering): Port device team_slave_0 removed [ 884.952431][T10279] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.917: mark_inode_dirty error [ 885.022660][T10279] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.917: corrupted inode contents [ 885.128321][T10279] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.917: mark_inode_dirty error [ 885.182377][T10279] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.917: corrupted inode contents [ 885.276163][T10279] EXT4-fs error (device loop5): ext4_truncate:4587: inode #15: comm syz.5.917: mark_inode_dirty error [ 885.330473][T10279] EXT4-fs error (device loop5) in ext4_setattr:5983: Corrupt filesystem [ 885.692429][ T9158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.824729][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.509257][T10259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.607011][ T6103] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.750765][T10094] team0: Port device team_slave_0 added [ 886.849898][T10094] team0: Port device team_slave_1 added [ 886.945250][T10259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.983160][ T5828] IPVS: starting estimator thread 0... [ 887.030028][ T5071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 887.039612][ T5071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 887.050218][ T5071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 887.067455][ T5071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 887.094334][T10305] IPVS: using max 192 ests per chain, 9600 per kthread [ 887.137834][ T5071] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 887.241275][T10307] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 887.308421][ T4745] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.249108][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.301946][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.430963][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.562264][T10259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.676061][T10197] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.876325][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.883808][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.077881][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.335909][T10259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.348115][ T5071] Bluetooth: hci4: command tx timeout [ 889.451472][T10197] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.651012][T10317] syz_tun: entered promiscuous mode [ 889.701733][T10317] batadv0: entered promiscuous mode [ 889.790040][T10317] syz_tun: left promiscuous mode [ 889.818982][T10317] batadv0: left promiscuous mode [ 890.137579][T10303] lo speed is unknown, defaulting to 1000 [ 890.194149][T10094] hsr_slave_0: entered promiscuous mode [ 890.221280][T10094] hsr_slave_1: entered promiscuous mode [ 890.312618][T10094] debugfs: 'hsr0' already exists in 'hsr' [ 890.336237][T10094] Cannot create hsr debugfs directory [ 890.411744][ T34] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.698657][ T34] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.067256][ T6101] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.433131][ T5071] Bluetooth: hci4: command tx timeout [ 891.452669][ T4745] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.440277][T10347] netlink: 532 bytes leftover after parsing attributes in process `syz.8.935'. [ 894.657722][ T5071] Bluetooth: hci4: command tx timeout [ 894.867122][T10354] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 896.721510][ T5775] Bluetooth: hci4: command tx timeout [ 899.527733][T10303] chnl_net:caif_netlink_parms(): no params data found [ 899.940986][T10376] syz.8.942: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 899.998986][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.8.942 Not tainted syzkaller #0 PREEMPT(full) [ 899.999123][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 899.999212][T10376] Call Trace: [ 899.999274][T10376] [ 899.999321][T10376] __dump_stack+0x26/0x30 [ 899.999599][T10376] dump_stack_lvl+0x14c/0x1c0 [ 899.999754][T10376] dump_stack+0x1e/0x25 [ 899.999888][T10376] warn_alloc+0x46f/0x6a0 [ 900.000083][T10376] ? kmsan_get_metadata+0xf1/0x160 [ 900.000282][T10376] __vmalloc_node_range_noprof+0x142/0x2d80 [ 900.000450][T10376] ? should_fail_ex+0x45/0x8c0 [ 900.000602][T10376] ? kmsan_get_metadata+0xf1/0x160 [ 900.000773][T10376] ? kmsan_get_metadata+0xf1/0x160 [ 900.000943][T10376] ? kmsan_get_metadata+0xf1/0x160 [ 900.001116][T10376] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 900.001310][T10376] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 900.001440][T10376] ? kmsan_get_metadata+0xf1/0x160 [ 900.001615][T10376] vmalloc_user_noprof+0xce/0x140 [ 900.001753][T10376] ? xskq_create+0x11d/0x290 [ 900.001920][T10376] xskq_create+0x11d/0x290 [ 900.002055][T10376] xsk_init_queue+0xce/0x180 [ 900.002236][T10376] xsk_setsockopt+0x968/0xfe0 [ 900.002431][T10376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 900.002684][T10376] __sys_setsockopt+0x43e/0x580 [ 900.002927][T10376] __x64_sys_setsockopt+0xf4/0x1a0 [ 900.003121][T10376] x64_sys_call+0x2a65/0x3ea0 [ 900.003304][T10376] do_syscall_64+0x134/0xf80 [ 900.003511][T10376] ? clear_bhb_loop+0x50/0xa0 [ 900.003667][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.003815][T10376] RIP: 0033:0x7fdeb1d9c629 [ 900.003934][T10376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.004052][T10376] RSP: 002b:00007fdeb2d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 900.004174][T10376] RAX: ffffffffffffffda RBX: 00007fdeb2015fa0 RCX: 00007fdeb1d9c629 [ 900.004277][T10376] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 900.004358][T10376] RBP: 00007fdeb1e32b39 R08: 0000000000000004 R09: 0000000000000000 [ 900.004440][T10376] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 900.004521][T10376] R13: 00007fdeb2016038 R14: 00007fdeb2015fa0 R15: 00007ffdff6e71f8 [ 900.004649][T10376] [ 900.004707][T10376] Mem-Info: [ 900.367100][T10376] active_anon:7815 inactive_anon:0 isolated_anon:0 [ 900.367100][T10376] active_file:7056 inactive_file:41434 isolated_file:0 [ 900.367100][T10376] unevictable:768 dirty:156 writeback:0 [ 900.367100][T10376] slab_reclaimable:5518 slab_unreclaimable:22896 [ 900.367100][T10376] mapped:29979 shmem:1396 pagetables:1872 [ 900.367100][T10376] sec_pagetables:0 bounce:0 [ 900.367100][T10376] kernel_misc_reclaimable:0 [ 900.367100][T10376] free:289447 free_pcp:21182 free_cma:0 [ 900.501351][T10094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 900.535675][T10376] Node 0 active_anon:31240kB inactive_anon:0kB active_file:27908kB inactive_file:165528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119940kB dirty:620kB writeback:0kB shmem:4048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5696kB pagetables:7100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 900.670459][T10094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 900.694806][T10376] Node 1 active_anon:0kB inactive_anon:0kB active_file:316kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 900.791828][T10094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 900.862313][T10376] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.993207][T10094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 901.017103][T10376] lowmem_reserve[]: 0 927 1240 1240 1240 [ 901.023249][T10376] Node 0 DMA32 free:393708kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5272kB inactive_anon:0kB active_file:21356kB inactive_file:103096kB unevictable:0kB writepending:164kB zspages:0kB present:3129332kB managed:949856kB mlocked:0kB bounce:0kB free_pcp:39784kB local_pcp:18300kB free_cma:0kB [ 901.193301][T10376] lowmem_reserve[]: 0 0 313 313 313 [ 901.228405][T10376] Node 0 Normal free:16932kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25760kB inactive_anon:0kB active_file:6552kB inactive_file:62432kB unevictable:1536kB writepending:404kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:12996kB local_pcp:6840kB free_cma:0kB [ 901.387059][T10376] lowmem_reserve[]: 0 0 0 0 0 [ 901.392255][T10376] Node 1 Normal free:680548kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:316kB inactive_file:216kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986016kB mlocked:0kB bounce:0kB free_pcp:35012kB local_pcp:20752kB free_cma:0kB [ 901.590068][T10376] lowmem_reserve[]: 0 0 0 0 0 [ 901.612264][T10376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 901.720369][T10376] Node 0 DMA32: 736*4kB (UME) 523*8kB (UME) 512*16kB (UME) 350*32kB (UME) 241*64kB (UME) 215*128kB (UME) 150*256kB (UM) 110*512kB (UM) 85*1024kB (UME) 72*2048kB (UME) 2*4096kB (U) = 406872kB [ 901.895402][T10376] Node 0 Normal: 82*4kB (UME) 168*8kB (UM) 100*16kB (UM) 21*32kB (M) 43*64kB (UME) 18*128kB (UME) 13*256kB (UE) 7*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 15912kB [ 902.011310][T10376] Node 1 Normal: 21*4kB (UM) 26*8kB (UME) 20*16kB (UME) 18*32kB (UME) 19*64kB (UME) 10*128kB (UME) 14*256kB (UME) 9*512kB (UM) 9*1024kB (UME) 6*2048kB (UME) 158*4096kB (UM) = 680548kB [ 902.101555][T10303] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.116712][T10376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 902.175775][T10303] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.221039][T10395] netlink: 532 bytes leftover after parsing attributes in process `syz.5.946'. [ 902.231144][T10376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 902.241880][T10303] bridge_slave_0: entered allmulticast mode [ 902.258211][T10376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 902.280210][T10303] bridge_slave_0: entered promiscuous mode [ 902.357640][T10376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 902.399056][T10376] 52754 total pagecache pages [ 902.404379][T10376] 0 pages in swap cache [ 902.419006][T10376] Free swap = 124996kB [ 902.522398][T10398] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 902.751303][T10376] Total swap = 124996kB [ 902.823519][T10376] 2097051 pages RAM [ 902.868913][T10376] 0 pages HighMem/MovableOnly [ 902.912117][T10376] 1531846 pages reserved [ 902.919811][T10376] 0 pages cma reserved [ 903.394119][T10303] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.435965][T10303] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.503037][T10303] bridge_slave_1: entered allmulticast mode [ 903.600595][T10303] bridge_slave_1: entered promiscuous mode [ 904.579782][T10303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.791951][T10303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.262576][T10303] team0: Port device team_slave_0 added [ 905.424514][T10303] team0: Port device team_slave_1 added [ 905.797142][T10303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.804466][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.916596][T10303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.940580][ T6103] bridge_slave_1: left allmulticast mode [ 905.982199][ T6103] bridge_slave_1: left promiscuous mode [ 906.017539][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.087313][ T6103] bridge_slave_0: left allmulticast mode [ 906.093153][ T6103] bridge_slave_0: left promiscuous mode [ 906.137367][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.582941][T10432] EXT4-fs (nbd5): unable to read superblock [ 906.730351][T10434] netlink: 532 bytes leftover after parsing attributes in process `syz.8.956'. [ 907.078759][ T5830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 907.245399][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 907.298018][ T5830] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 907.335203][ T5830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 907.378034][ T5830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 907.433628][ T5830] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.477025][ T5830] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 907.516568][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.640372][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.769635][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.797033][ T5830] usb 6-1: GET_CAPABILITIES returned 2f [ 907.802895][ T5830] usbtmc 6-1:16.0: can't read capabilities [ 907.826272][ T6103] bond0 (unregistering): (slave team0): Releasing backup interface [ 907.901056][ T6103] bond0 (unregistering): Released all slaves [ 908.084490][T10303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.133754][ T5830] usb 6-1: USB disconnect, device number 4 [ 908.155222][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.439253][T10303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.599559][ T6103] tipc: Disabling bearer [ 908.649514][ T6103] tipc: Left network mode [ 908.778290][T10447] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 909.828556][T10303] hsr_slave_0: entered promiscuous mode [ 909.897373][T10303] hsr_slave_1: entered promiscuous mode [ 909.975388][T10303] debugfs: 'hsr0' already exists in 'hsr' [ 910.029952][T10303] Cannot create hsr debugfs directory [ 913.838956][ T6103] hsr_slave_0: left promiscuous mode [ 913.941725][ T6103] hsr_slave_1: left promiscuous mode [ 914.007498][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.100984][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.233486][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.262101][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.358645][ T6103] veth1_macvtap: left promiscuous mode [ 915.364438][ T6103] veth0_macvtap: left promiscuous mode [ 915.414340][ T6103] veth1_vlan: left promiscuous mode [ 915.435678][ T6103] veth0_vlan: left promiscuous mode [ 917.004446][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 917.208749][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 917.679118][T10495] netlink: 596 bytes leftover after parsing attributes in process `syz.0.966'. [ 918.219642][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 918.280621][ T5071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 918.291858][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 918.306051][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 918.325307][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 918.434529][T10500] lo speed is unknown, defaulting to 1000 [ 919.773402][T10510] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 920.209690][T10512] netlink: 'syz.0.970': attribute type 1 has an invalid length. [ 920.387347][ T5071] Bluetooth: hci1: command tx timeout [ 920.977265][T10512] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 922.466705][ T5071] Bluetooth: hci1: command tx timeout [ 923.399633][T10500] chnl_net:caif_netlink_parms(): no params data found [ 923.555808][T10543] netlink: 532 bytes leftover after parsing attributes in process `syz.5.978'. [ 923.889776][T10529] loop0: detected capacity change from 0 to 1764 [ 923.914893][T10529] iso9660: Unknown parameter 'wúÄî' [ 924.027429][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 924.546626][ T5071] Bluetooth: hci1: command tx timeout [ 925.328682][T10303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 925.483397][T10558] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 925.842838][T10560] loop0: detected capacity change from 0 to 1024 [ 925.874395][T10560] EXT4-fs: Ignoring removed orlov option [ 925.893461][T10303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 925.903929][T10560] EXT4-fs: Ignoring removed nobh option [ 925.968004][T10303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 926.162172][T10303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 926.233676][T10500] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.254846][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.274192][T10500] bridge_slave_0: entered allmulticast mode [ 926.291555][T10500] bridge_slave_0: entered promiscuous mode [ 926.626757][ T5071] Bluetooth: hci1: command tx timeout [ 927.344616][T10560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.392226][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.421541][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.458002][T10500] bridge_slave_1: entered allmulticast mode [ 927.537531][T10500] bridge_slave_1: entered promiscuous mode [ 927.925951][T10500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.977545][T10111] bridge_slave_1: left allmulticast mode [ 927.983782][T10111] bridge_slave_1: left promiscuous mode [ 927.993472][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.013924][T10111] bridge_slave_0: left allmulticast mode [ 928.021023][T10111] bridge_slave_0: left promiscuous mode [ 928.029631][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.085193][ T9164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.016119][T10111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.079601][T10111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.134800][T10111] bond0 (unregistering): Released all slaves [ 929.240375][T10500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.639089][T10111] hsr_slave_0: left promiscuous mode [ 929.722576][T10111] hsr_slave_1: left promiscuous mode [ 929.767107][T10111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.838847][T10111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.158946][T10598] EXT4-fs (nbd5): unable to read superblock [ 930.767042][ T8585] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 931.616600][ T8585] usb 6-1: Using ep0 maxpacket: 8 [ 932.557144][T10605] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 932.594158][ T8585] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.620655][ T8585] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 933.621689][ T8585] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.626561][ T8585] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.226648][ T8585] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 935.268315][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.978580][T10111] team0 (unregistering): Port device team_slave_1 removed [ 936.046994][ T8585] usb 6-1: can't set config #16, error -71 [ 936.098458][ T8585] usb 6-1: USB disconnect, device number 5 [ 936.128745][T10111] team0 (unregistering): Port device team_slave_0 removed [ 936.481732][T10614] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1001'. [ 936.665147][T10500] team0: Port device team_slave_0 added [ 936.968739][T10500] team0: Port device team_slave_1 added [ 937.299137][T10500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.339341][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.383206][T10500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.478452][T10500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.485573][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.529891][T10621] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1003'. [ 937.622533][T10500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.547751][T10630] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 938.636931][ T29] audit: type=1326 audit(1772042448.233:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 938.874515][ T29] audit: type=1326 audit(1772042448.233:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 938.991026][ T29] audit: type=1326 audit(1772042448.243:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 939.153713][ T29] audit: type=1326 audit(1772042448.243:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 939.294860][ T29] audit: type=1326 audit(1772042448.253:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 940.337558][T10636] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 940.389546][ T29] audit: type=1326 audit(1772042448.253:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 940.574656][ T29] audit: type=1326 audit(1772042448.253:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 940.712211][ T29] audit: type=1326 audit(1772042448.263:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2e99c629 code=0x7ffc0000 [ 940.830704][T10638] EXT4-fs (nbd5): unable to read superblock [ 940.905627][T10303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.095032][T10303] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.356698][ T1699] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 941.385403][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.392216][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.526807][ T1699] usb 6-1: Using ep0 maxpacket: 8 [ 941.552563][ T1699] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.602427][ T1699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 941.658117][ T1699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 941.707014][ T1699] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.817092][ T1699] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 941.877265][ T1699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.202564][ T1699] usb 6-1: GET_CAPABILITIES returned 2f [ 942.266875][ T1699] usbtmc 6-1:16.0: can't read capabilities [ 942.307018][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1012'. [ 942.395367][T10500] hsr_slave_0: entered promiscuous mode [ 942.462451][ T1699] usb 6-1: USB disconnect, device number 6 [ 942.471274][T10500] hsr_slave_1: entered promiscuous mode [ 942.535235][T10500] debugfs: 'hsr0' already exists in 'hsr' [ 942.571692][T10500] Cannot create hsr debugfs directory [ 942.692072][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.699713][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.724673][T10655] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 942.803300][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.810979][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.212466][T10655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 943.989018][T10673] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1017'. [ 944.982675][T10684] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 945.041001][ T29] audit: type=1326 audit(1772042454.663:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 945.331077][ T29] audit: type=1326 audit(1772042454.663:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 945.530462][ T29] audit: type=1326 audit(1772042454.673:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 945.761966][ T29] audit: type=1326 audit(1772042454.673:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 945.951055][ T29] audit: type=1326 audit(1772042454.673:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 946.041682][ T29] audit: type=1326 audit(1772042454.683:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 946.103408][ T29] audit: type=1326 audit(1772042454.683:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 946.176800][ T29] audit: type=1326 audit(1772042454.683:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 946.218019][ T1699] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 946.411969][ T1699] usb 6-1: config 1 interface 0 has no altsetting 0 [ 946.430993][ T1699] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 946.451373][ T1699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.481869][ T1699] usb 6-1: Product: syz [ 946.486229][ T1699] usb 6-1: Manufacturer: syz [ 946.519397][ T1699] usb 6-1: SerialNumber: syz [ 947.052172][ T1699] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 947.655475][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.809638][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.094173][T10704] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 948.279304][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.367866][T10699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1022'. [ 948.398579][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.710793][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.884514][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.260469][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.474728][T10708] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 949.495445][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.821565][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 949.841951][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 949.854223][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 949.875951][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 949.912867][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 950.050501][T10708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 950.121531][T10500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 950.272267][T10500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 950.347485][T10500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 950.452996][T10500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 950.653486][ T1699] usb 6-1: USB disconnect, device number 7 [ 950.679868][T10712] lo speed is unknown, defaulting to 1000 [ 951.067058][ T40] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 951.277702][ T40] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 951.306893][ T40] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 951.364751][ T40] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 951.427393][ T40] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 951.461883][ T40] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 951.492598][ T40] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 951.516998][ T40] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 951.528394][ T40] usb 1-1: Product: syz [ 951.532739][ T40] usb 1-1: Manufacturer: syz [ 951.564890][ T40] cdc_wdm 1-1:1.0: skipping garbage [ 951.571506][ T40] cdc_wdm 1-1:1.0: skipping garbage [ 951.592569][ T40] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 951.623241][ T40] cdc_wdm 1-1:1.0: Unknown control protocol [ 951.996608][ T5071] Bluetooth: hci0: command tx timeout [ 952.491530][ T40] usb 1-1: USB disconnect, device number 3 [ 952.864460][T10712] chnl_net:caif_netlink_parms(): no params data found [ 953.378791][T10700] usblp0: removed [ 953.445906][T10500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.553440][T10743] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1028'. [ 954.053455][T10500] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.066824][ T5071] Bluetooth: hci0: command tx timeout [ 954.106692][ T5830] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 954.322318][ T5830] usb 6-1: config 1 interface 0 has no altsetting 0 [ 954.327448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.336591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.416888][ T5830] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 954.432599][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.440198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.457609][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.516788][ T5830] usb 6-1: Product: syz [ 954.521176][ T5830] usb 6-1: Manufacturer: syz [ 954.525944][ T5830] usb 6-1: SerialNumber: syz [ 955.045447][ T5830] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 955.371572][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 955.607072][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.661361][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.793443][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.872506][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.170155][ T5071] Bluetooth: hci0: command tx timeout [ 956.349255][T10712] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.421631][T10712] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.468785][T10712] bridge_slave_0: entered allmulticast mode [ 956.552017][T10712] bridge_slave_0: entered promiscuous mode [ 956.722931][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.849495][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.905702][T10765] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 957.090505][ T29] audit: type=1326 audit(1772042466.743:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 957.377059][ T29] audit: type=1326 audit(1772042466.743:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 957.400970][ T29] audit: type=1326 audit(1772042466.993:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 957.883876][ T29] audit: type=1326 audit(1772042466.993:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 958.730566][ T5775] Bluetooth: hci0: command tx timeout [ 958.873404][ T29] audit: type=1326 audit(1772042466.993:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.8.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 958.905717][T10712] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.913595][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.926663][T10712] bridge_slave_1: entered allmulticast mode [ 958.935868][T10712] bridge_slave_1: entered promiscuous mode [ 959.990558][ T6808] usb 6-1: USB disconnect, device number 8 [ 960.990969][ T6808] usblp0: removed [ 961.083538][T10712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.472697][T10712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.608839][T10771] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 961.647179][ T4745] bridge_slave_1: left allmulticast mode [ 961.653023][ T4745] bridge_slave_1: left promiscuous mode [ 961.692968][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.740246][ T4745] bridge_slave_0: left allmulticast mode [ 961.766933][ T4745] bridge_slave_0: left promiscuous mode [ 961.784365][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.769372][ T4745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.838749][ T4745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.873231][ T4745] bond0 (unregistering): Released all slaves [ 962.994408][T10771] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 963.327229][T10712] team0: Port device team_slave_0 added [ 963.440522][T10712] team0: Port device team_slave_1 added [ 963.536727][ T4745] hsr_slave_0: left promiscuous mode [ 963.688979][ T4745] hsr_slave_1: left promiscuous mode [ 963.734237][ T4745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.847003][ T4745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.312272][ T4745] team0 (unregistering): Port device team_slave_1 removed [ 967.338024][ T4745] team0 (unregistering): Port device team_slave_0 removed [ 968.076566][ T1699] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 968.175956][T10712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.205559][T10712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.284826][ T1699] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.329979][T10712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.331006][ T1699] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 968.403717][T10712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.427049][ T1699] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 968.438898][T10712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.467363][ T1699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.531070][ T1699] usb 6-1: config 0 descriptor?? [ 968.542150][T10712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.570246][ T1699] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 969.181097][T10712] hsr_slave_0: entered promiscuous mode [ 969.210695][T10712] hsr_slave_1: entered promiscuous mode [ 969.239593][T10712] debugfs: 'hsr0' already exists in 'hsr' [ 969.245558][T10712] Cannot create hsr debugfs directory [ 969.323314][T10500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.132358][ T6808] usb 6-1: USB disconnect, device number 9 [ 971.326939][ T1699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 971.512158][T10823] netlink: 'syz.5.1044': attribute type 1 has an invalid length. [ 971.556560][ T1699] usb 1-1: Using ep0 maxpacket: 32 [ 971.604530][ T1699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 971.634239][ T1699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.674468][ T1699] usb 1-1: config 0 has no interfaces? [ 971.731189][ T1699] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 971.805787][ T1699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.856487][ T1699] usb 1-1: Product: syz [ 971.882563][ T1699] usb 1-1: Manufacturer: syz [ 971.908103][T10823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 971.915448][ T1699] usb 1-1: SerialNumber: syz [ 971.945933][ T1699] usb 1-1: config 0 descriptor?? [ 972.269370][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.310275][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.335516][ T1699] usb 1-1: USB disconnect, device number 4 [ 972.480407][T10500] veth0_vlan: entered promiscuous mode [ 972.857184][ T1699] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 973.084470][ T1699] usb 1-1: config index 0 descriptor too short (expected 441, got 149) [ 973.116922][ T1699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.186973][ T1699] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 973.225593][ T1699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.279828][ T1699] usb 1-1: config 0 descriptor?? [ 973.381363][T10500] veth1_vlan: entered promiscuous mode [ 973.452895][ T1699] pwc: Askey VC010 type 2 USB webcam detected. [ 976.944864][T10840] lo speed is unknown, defaulting to 1000 [ 978.227935][ T1699] pwc: send_video_command error -71 [ 978.233320][ T1699] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 978.257659][ T1699] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 978.392016][ T1699] usb 1-1: 0:2 : does not exist [ 978.425017][ T1699] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 978.604598][ T1699] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 978.633229][T10712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 978.744426][ T1699] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 978.902185][T10712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 978.918484][ T1699] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 979.236032][T10712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 979.278658][ T1699] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 979.406898][ T1699] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 979.438478][T10712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 980.029488][ T1699] usb 1-1: USB disconnect, device number 5 [ 980.186257][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.214770][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.234189][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.255140][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.279050][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 981.388804][T10857] lo speed is unknown, defaulting to 1000 [ 982.387322][ T5071] Bluetooth: hci4: command tx timeout [ 982.603459][T10712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.579203][T10877] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 984.507776][ T5071] Bluetooth: hci4: command tx timeout [ 984.757448][T10883] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1055'. [ 985.341808][T10712] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.794406][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.801983][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.547672][ T5071] Bluetooth: hci4: command tx timeout [ 987.112384][T10878] syz.8.1054 (10878) used greatest stack depth: 2032 bytes left [ 987.162927][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.170583][T10111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.304764][T10857] chnl_net:caif_netlink_parms(): no params data found [ 988.627613][ T5071] Bluetooth: hci4: command tx timeout [ 988.636240][ T34] bridge_slave_1: left allmulticast mode [ 988.648472][ T34] bridge_slave_1: left promiscuous mode [ 988.655017][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.763007][ T34] bridge_slave_0: left allmulticast mode [ 988.796519][ T34] bridge_slave_0: left promiscuous mode [ 988.819484][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.892475][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.967222][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.995767][ T34] bond0 (unregistering): Released all slaves [ 990.405666][ T34] hsr_slave_0: left promiscuous mode [ 990.429183][ T34] hsr_slave_1: left promiscuous mode [ 990.459502][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.491147][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.573826][ T34] veth1_vlan: left promiscuous mode [ 990.601076][ T34] veth0_vlan: left promiscuous mode [ 992.105455][T10919] loop5: detected capacity change from 0 to 512 [ 992.228390][T10919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.286244][ T34] team0 (unregistering): Port device team_slave_1 removed [ 992.412681][ T34] team0 (unregistering): Port device team_slave_0 removed [ 992.639217][ T9158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.142582][T10926] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1064'. [ 994.062864][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.136872][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.144607][T10857] bridge_slave_0: entered allmulticast mode [ 994.280380][T10857] bridge_slave_0: entered promiscuous mode [ 994.427560][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.501003][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.566773][T10857] bridge_slave_1: entered allmulticast mode [ 994.579644][T10857] bridge_slave_1: entered promiscuous mode [ 994.596094][T10934] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 995.234984][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.388127][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.489885][T10942] netlink: 'syz.5.1067': attribute type 1 has an invalid length. [ 995.874080][T10942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 996.068812][T10857] team0: Port device team_slave_0 added [ 996.204526][T10857] team0: Port device team_slave_1 added [ 997.547755][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.604458][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.846833][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.997861][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.083198][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.347152][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.425324][T10712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.052190][T10857] hsr_slave_0: entered promiscuous mode [ 999.060936][T10969] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1073'. [ 999.082684][T10857] hsr_slave_1: entered promiscuous mode [ 999.101356][T10857] debugfs: 'hsr0' already exists in 'hsr' [ 999.121805][T10857] Cannot create hsr debugfs directory [ 1000.087740][T10712] veth0_vlan: entered promiscuous mode [ 1000.617830][T10712] veth1_vlan: entered promiscuous mode [ 1001.579199][T10979] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1002.661780][T10712] veth0_macvtap: entered promiscuous mode [ 1002.817391][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.831334][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.868130][T10712] veth1_macvtap: entered promiscuous mode [ 1002.958970][T10987] netlink: 'syz.5.1077': attribute type 1 has an invalid length. [ 1003.264152][T10987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1003.741222][T10712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.904068][T10712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.207339][ T4745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.328142][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.561499][T10857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1005.709620][T10857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1005.824030][T10857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1005.952621][T10857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1006.467144][ T4745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.538967][ T4745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.601948][ T4745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.877243][T11015] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1082'. [ 1008.169792][T10857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.389367][T11028] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1008.745339][T10857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.012512][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.020088][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.326163][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.333702][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.927394][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1009.947414][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1009.956680][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1009.978034][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1009.992428][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1010.647940][T11036] lo speed is unknown, defaulting to 1000 [ 1011.745927][ T29] audit: type=1326 audit(1772042521.393:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.8.1088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x0 [ 1012.107871][ T5071] Bluetooth: hci1: command tx timeout [ 1014.146571][ T5071] Bluetooth: hci1: command tx timeout [ 1014.482196][T10857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.994582][T11067] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1092'. [ 1014.994709][T11036] chnl_net:caif_netlink_parms(): no params data found [ 1015.255524][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.971112][T11076] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1095'. [ 1016.227704][ T5071] Bluetooth: hci1: command tx timeout [ 1016.253623][T11077] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1016.267083][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.912659][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.033007][ T5071] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1017.139018][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.270183][T11080] loop0: detected capacity change from 0 to 4096 [ 1017.702563][T11087] loop5: detected capacity change from 0 to 256 [ 1017.808031][T11087] vfat: Bad value for 'shortname' [ 1017.881761][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.921746][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.979385][T11036] bridge_slave_0: entered allmulticast mode [ 1018.043140][T11036] bridge_slave_0: entered promiscuous mode [ 1018.136816][T11036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.144382][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.237288][T11036] bridge_slave_1: entered allmulticast mode [ 1018.277120][T11036] bridge_slave_1: entered promiscuous mode [ 1018.308088][ T5071] Bluetooth: hci1: command tx timeout [ 1019.067870][T11036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.173798][T11036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.259746][T10857] veth0_vlan: entered promiscuous mode [ 1019.784620][ T34] bridge_slave_1: left allmulticast mode [ 1019.821351][ T34] bridge_slave_1: left promiscuous mode [ 1019.857712][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.965463][ T34] bridge_slave_0: left allmulticast mode [ 1019.975658][ T34] bridge_slave_0: left promiscuous mode [ 1020.014826][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.114753][ T5071] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1021.123740][ T5071] Bluetooth: hci3: Injecting HCI hardware error event [ 1021.131340][ T5071] Bluetooth: hci3: hardware error 0x00 [ 1021.963499][T11127] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1022.208452][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.520350][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.582294][ T34] bond0 (unregistering): Released all slaves [ 1022.732683][T11036] team0: Port device team_slave_0 added [ 1022.897269][T11036] team0: Port device team_slave_1 added [ 1022.905062][T10857] veth1_vlan: entered promiscuous mode [ 1023.018727][ T40] libceph: connect (1)[c::]:6789 error -101 [ 1023.043620][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 1023.177808][T11135] ceph: No mds server is up or the cluster is laggy [ 1023.186731][ T5071] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1023.383964][ T34] hsr_slave_0: left promiscuous mode [ 1023.807040][ T40] libceph: connect (1)[c::]:6789 error -101 [ 1023.843346][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 1023.871136][ T34] hsr_slave_1: left promiscuous mode [ 1024.011619][T11147] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1024.067288][ T29] audit: type=1326 audit(1772042533.693:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1024.896758][ T29] audit: type=1326 audit(1772042533.693:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1025.328675][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.356656][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.401053][ T29] audit: type=1326 audit(1772042533.693:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1025.419636][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.466002][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.490375][ T29] audit: type=1326 audit(1772042533.703:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1025.582206][ T34] veth1_macvtap: left promiscuous mode [ 1025.594410][ T29] audit: type=1326 audit(1772042533.703:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1025.626860][ T34] veth0_macvtap: left promiscuous mode [ 1025.632754][ T34] veth1_vlan: left promiscuous mode [ 1025.671220][ T34] veth0_vlan: left promiscuous mode [ 1025.701752][ T29] audit: type=1326 audit(1772042533.703:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1025.811105][ T29] audit: type=1326 audit(1772042533.713:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1025.846170][T11152] loop0: detected capacity change from 0 to 128 [ 1025.902415][ T29] audit: type=1326 audit(1772042533.713:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.8.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1026.051764][ T29] audit: type=1800 audit(1772042535.623:67): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="file1" dev="loop0" ino=1048657 res=0 errno=0 [ 1027.551686][T11163] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1028.105417][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1028.134285][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1028.639887][T11158] batman_adv: batadv0: Adding interface: dummy0 [ 1028.679025][T11158] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.772051][T11158] batman_adv: batadv0: Interface activated: dummy0 [ 1028.838719][T11159] batadv0: mtu less than device minimum [ 1028.846799][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.859816][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.872702][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.885658][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.898683][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.911572][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.924465][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.937553][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.950431][T11159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.079551][T11036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.089479][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.149603][T11036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.177346][T11036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.195059][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.232888][T11036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.339465][T11178] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1030.414787][ T29] audit: type=1326 audit(1772042540.023:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1031.091961][ T29] audit: type=1326 audit(1772042540.023:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1031.248514][ T29] audit: type=1326 audit(1772042540.043:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1031.444826][ T29] audit: type=1326 audit(1772042540.043:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1031.649858][ T29] audit: type=1326 audit(1772042540.043:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1031.828313][ T29] audit: type=1326 audit(1772042540.053:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1032.067122][ T29] audit: type=1326 audit(1772042540.053:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1032.177045][ T29] audit: type=1326 audit(1772042540.063:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28119c629 code=0x7ffc0000 [ 1032.272237][T11036] hsr_slave_0: entered promiscuous mode [ 1032.625750][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 1032.904498][T11036] hsr_slave_1: entered promiscuous mode [ 1032.965350][T11036] debugfs: 'hsr0' already exists in 'hsr' [ 1032.971370][T11036] Cannot create hsr debugfs directory [ 1033.023582][T11195] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1033.318937][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1033.537028][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1033.911845][T11196] ceph: No mds server is up or the cluster is laggy [ 1034.426927][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1034.487388][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1034.531316][T11187] vlan2: entered promiscuous mode [ 1034.551938][T11187] veth0_virt_wifi: entered promiscuous mode [ 1034.611170][T11187] vlan2: entered allmulticast mode [ 1034.657985][T11187] veth0_virt_wifi: entered allmulticast mode [ 1034.870641][T11191] hsr_slave_1 (unregistering): left promiscuous mode [ 1035.359808][T10857] veth0_macvtap: entered promiscuous mode [ 1035.503328][T10857] veth1_macvtap: entered promiscuous mode [ 1036.049769][T10857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.355563][T10857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.831900][ T6103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.855734][ T6103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.982974][ T6103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.006740][ T6103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.249196][T11223] loop5: detected capacity change from 0 to 128 [ 1038.324795][T11225] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1038.388791][ T29] audit: type=1326 audit(1772042548.003:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1038.677465][ T29] audit: type=1326 audit(1772042548.013:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1038.817276][ T29] audit: type=1326 audit(1772042548.013:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1038.940895][ T29] audit: type=1326 audit(1772042548.013:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1039.065766][ T29] audit: type=1326 audit(1772042548.023:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1039.128565][T11036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1039.236914][ T29] audit: type=1326 audit(1772042548.023:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1039.335760][T11036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1039.499414][ T29] audit: type=1326 audit(1772042548.023:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1039.731301][ T29] audit: type=1326 audit(1772042548.033:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.8.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x7ffc0000 [ 1039.769533][T11036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1040.020934][ T29] audit: type=1800 audit(1772042548.863:84): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1134" name="file1" dev="loop5" ino=1048658 res=0 errno=0 [ 1040.079308][T11036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1040.726918][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.915550][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.997002][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.202918][T11243] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1041.348105][T11238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.155515][T11240] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1043.363760][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1043.395870][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1043.405403][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1043.418930][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1043.430493][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1043.631621][T11036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.649557][T11255] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1138'. [ 1043.699114][T11248] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1138'. [ 1044.331822][T11253] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1138'. [ 1044.617965][T11036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.671495][T11249] lo speed is unknown, defaulting to 1000 [ 1044.948810][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.956420][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.003550][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.011133][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.506824][ T5775] Bluetooth: hci0: command tx timeout [ 1045.600584][T10111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.910102][T10111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.153408][T10111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.383368][T10111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.603648][T11281] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1047.617486][ T5775] Bluetooth: hci0: command tx timeout [ 1048.611264][T10111] bridge_slave_1: left allmulticast mode [ 1048.655966][T10111] bridge_slave_1: left promiscuous mode [ 1048.688294][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.842333][T10111] bridge_slave_0: left allmulticast mode [ 1048.862903][T10111] bridge_slave_0: left promiscuous mode [ 1048.917510][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.675528][ T5775] Bluetooth: hci0: command tx timeout [ 1049.978453][T11297] ceph: No mds server is up or the cluster is laggy [ 1049.997765][ T8585] libceph: connect (1)[c::]:6789 error -101 [ 1050.004130][ T8585] libceph: mon0 (1)[c::]:6789 connect error [ 1050.350972][ T6808] libceph: connect (1)[c::]:6789 error -101 [ 1050.381205][ T6808] libceph: mon0 (1)[c::]:6789 connect error [ 1050.603108][T10111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.718580][T10111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.748702][T10111] bond0 (unregistering): Released all slaves [ 1050.781025][T11272] lo speed is unknown, defaulting to 1000 [ 1050.797187][T11249] chnl_net:caif_netlink_parms(): no params data found [ 1051.328955][T10111] hsr_slave_0: left promiscuous mode [ 1051.435567][T10111] hsr_slave_1: left promiscuous mode [ 1051.449177][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.477046][T10111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.498949][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.521801][T10111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.578390][T10111] veth1_macvtap: left promiscuous mode [ 1051.584084][T10111] veth0_macvtap: left promiscuous mode [ 1051.616708][T10111] veth1_vlan: left promiscuous mode [ 1051.622265][T10111] veth0_vlan: left promiscuous mode [ 1051.747140][ T5775] Bluetooth: hci0: command tx timeout [ 1055.325886][T10111] team0 (unregistering): Port device team_slave_1 removed [ 1055.374495][T10111] team0 (unregistering): Port device team_slave_0 removed [ 1056.742671][T11036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.271077][T11343] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1058.095884][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 1058.384664][T11249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.414205][T11249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.441082][T11249] bridge_slave_0: entered allmulticast mode [ 1058.486876][T11249] bridge_slave_0: entered promiscuous mode [ 1058.533654][T11249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.564372][T11249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.596200][T11249] bridge_slave_1: entered allmulticast mode [ 1058.637462][T11249] bridge_slave_1: entered promiscuous mode [ 1058.898617][T11249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.973926][T11249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.253749][T11249] team0: Port device team_slave_0 added [ 1059.390173][T11249] team0: Port device team_slave_1 added [ 1059.682468][T11249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.714838][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.830139][T11249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.877256][T11249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.896843][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.954290][T11249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.032292][T11036] veth0_vlan: entered promiscuous mode [ 1060.497837][T11036] veth1_vlan: entered promiscuous mode [ 1061.175393][T11249] hsr_slave_0: entered promiscuous mode [ 1061.185529][T11249] hsr_slave_1: entered promiscuous mode [ 1061.195805][T11249] debugfs: 'hsr0' already exists in 'hsr' [ 1061.202723][T11249] Cannot create hsr debugfs directory [ 1061.808079][T11361] lo speed is unknown, defaulting to 1000 [ 1063.480283][T11036] veth0_macvtap: entered promiscuous mode [ 1063.652902][T11036] veth1_macvtap: entered promiscuous mode [ 1064.101234][T11036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.257873][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.267542][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.422099][T11036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.908522][T11389] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 1065.053086][T11389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.281503][ T6105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.338342][ T6105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.396846][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.569076][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.802606][T11249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1066.885084][T11249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1066.996962][T11249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1067.060070][T11249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1067.663126][T11413] fuse: Bad value for 'fd' [ 1070.212546][T11249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.413458][T11249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.557706][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.565168][ T8057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.701198][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.708801][T10111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.914834][ T5071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1070.930789][ T5071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1070.947846][ T5071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1070.972714][ T5071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1070.988422][ T5071] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1071.126656][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 1071.555972][T11427] lo speed is unknown, defaulting to 1000 [ 1073.123532][ T5775] Bluetooth: hci4: command tx timeout [ 1075.206697][ T5775] Bluetooth: hci4: command tx timeout [ 1077.029332][T11249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.317227][ T5775] Bluetooth: hci4: command tx timeout [ 1077.827443][ T2948] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.028062][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1194'. [ 1078.082249][T11489] vlan3: entered promiscuous mode [ 1078.097126][T11489] veth0_virt_wifi: entered promiscuous mode [ 1078.115664][T11489] vlan3: entered allmulticast mode [ 1078.130611][T11489] veth0_virt_wifi: entered allmulticast mode [ 1078.168870][T11249] veth0_vlan: entered promiscuous mode [ 1078.247984][ T2948] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.354056][T11427] chnl_net:caif_netlink_parms(): no params data found [ 1078.533764][T11493] hsr_slave_1 (unregistering): left promiscuous mode [ 1078.702800][ T2948] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.048160][ T2948] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.131558][T11249] veth1_vlan: entered promiscuous mode [ 1079.349629][ T5775] Bluetooth: hci4: command tx timeout [ 1079.440066][T11508] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1196'. [ 1079.542331][T11249] veth0_macvtap: entered promiscuous mode [ 1079.872936][T11249] veth1_macvtap: entered promiscuous mode [ 1080.287279][ T2948] bridge_slave_1: left allmulticast mode [ 1080.293122][ T2948] bridge_slave_1: left promiscuous mode [ 1080.327366][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.379005][ T2948] bridge_slave_0: left allmulticast mode [ 1080.410274][ T2948] bridge_slave_0: left promiscuous mode [ 1080.447342][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.762806][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.798278][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.852396][ T2948] bond0 (unregistering): Released all slaves [ 1082.049596][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.099076][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.107323][T11427] bridge_slave_0: entered allmulticast mode [ 1082.131993][T11427] bridge_slave_0: entered promiscuous mode [ 1082.531543][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.555456][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.575235][T11427] bridge_slave_1: entered allmulticast mode [ 1082.610258][T11427] bridge_slave_1: entered promiscuous mode [ 1083.689936][T11249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.439170][ T2948] hsr_slave_0: left promiscuous mode [ 1084.452946][ T2948] hsr_slave_1: left promiscuous mode [ 1084.464616][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.579642][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.591366][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.607760][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.679341][ T2948] veth1_macvtap: left promiscuous mode [ 1084.685063][ T2948] veth0_macvtap: left promiscuous mode [ 1084.702146][ T2948] veth1_vlan: left promiscuous mode [ 1084.721571][ T2948] veth0_vlan: left promiscuous mode [ 1087.715563][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 1087.771983][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 1088.087170][T11572] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1207'. [ 1088.379458][T11569] netlink: 'syz.5.1207': attribute type 29 has an invalid length. [ 1088.418608][T11571] netlink: 'syz.5.1207': attribute type 29 has an invalid length. [ 1088.568978][T11249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.746802][T11427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.784841][T11427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.813304][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.827655][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.047680][T11582] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1208'. [ 1089.226575][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.313681][T11427] team0: Port device team_slave_0 added [ 1089.404930][T11427] team0: Port device team_slave_1 added [ 1089.459134][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.282615][T11427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.331247][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.536631][T11427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.572271][T11427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.660167][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.780094][T11427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.393835][T11427] hsr_slave_0: entered promiscuous mode [ 1091.455094][T11427] hsr_slave_1: entered promiscuous mode [ 1091.475507][T11427] debugfs: 'hsr0' already exists in 'hsr' [ 1091.512950][T11427] Cannot create hsr debugfs directory [ 1094.818580][T11644] bridge0: port 3(syz_tun) entered blocking state [ 1094.845159][T11644] bridge0: port 3(syz_tun) entered disabled state [ 1094.927379][T11644] syz_tun: entered allmulticast mode [ 1094.997319][T11652] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1223'. [ 1095.021607][T11644] syz_tun: entered promiscuous mode [ 1095.088729][T11644] bridge0: port 3(syz_tun) entered blocking state [ 1095.095644][T11644] bridge0: port 3(syz_tun) entered forwarding state [ 1096.130626][T11427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1096.245307][T11427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1096.318511][T11427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1096.410310][T11427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1096.539338][T11679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1229'. [ 1098.497652][T11696] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1233'. [ 1101.387829][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.771098][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.992421][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.000110][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.234867][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.242548][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.936768][T11718] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1238'. [ 1103.059314][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1103.099526][ T5071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1103.128017][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1103.163234][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1103.175180][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1103.869057][T11738] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1242'. [ 1104.160047][T11720] lo speed is unknown, defaulting to 1000 [ 1105.309707][ T5775] Bluetooth: hci1: command tx timeout [ 1107.769109][ T5775] Bluetooth: hci1: command tx timeout [ 1108.186996][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1246'. [ 1109.651220][T11761] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1109.827556][ T5775] Bluetooth: hci1: command tx timeout [ 1110.131753][ T999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.527801][ T999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.598985][T11789] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1251'. [ 1110.692989][T11427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.761430][ T999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.993412][T11800] overlayfs: failed to clone upperpath [ 1111.324810][ T999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.906933][ T5775] Bluetooth: hci1: command tx timeout [ 1112.181354][T11720] chnl_net:caif_netlink_parms(): no params data found [ 1112.470348][ T999] bridge_slave_1: left allmulticast mode [ 1112.480845][ T999] bridge_slave_1: left promiscuous mode [ 1112.501599][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.541321][ T999] bridge_slave_0: left allmulticast mode [ 1112.571717][ T999] bridge_slave_0: left promiscuous mode [ 1112.587740][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.778667][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1260'. [ 1112.927217][T11828] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1262'. [ 1113.305714][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.341679][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.394474][ T999] bond0 (unregistering): Released all slaves [ 1113.604508][T11825] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1113.683207][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1267'. [ 1113.792667][ T999] hsr_slave_0: left promiscuous mode [ 1113.819679][ T999] hsr_slave_1: left promiscuous mode [ 1113.843816][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.863011][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.878820][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.905388][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.969988][ T999] veth1_macvtap: left promiscuous mode [ 1113.975979][ T999] veth0_macvtap: left promiscuous mode [ 1113.995987][ T999] veth1_vlan: left promiscuous mode [ 1114.001897][ T999] veth0_vlan: left promiscuous mode [ 1114.068069][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1269'. [ 1114.730009][T11851] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1272'. [ 1114.970350][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1115.028879][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1115.443319][T11427] veth0_vlan: entered promiscuous mode [ 1115.544349][T11427] veth1_vlan: entered promiscuous mode [ 1115.976069][T11427] veth0_macvtap: entered promiscuous mode [ 1116.065261][T11427] veth1_macvtap: entered promiscuous mode [ 1116.513052][T11427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.715795][T11870] hfs: unable to load iocharset "io#harset" [ 1116.770621][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.816848][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.840822][T11720] bridge_slave_0: entered allmulticast mode [ 1116.890655][T11720] bridge_slave_0: entered promiscuous mode [ 1116.974459][T11427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.034822][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.060202][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.069581][T11720] bridge_slave_1: entered allmulticast mode [ 1117.090533][T11720] bridge_slave_1: entered promiscuous mode [ 1117.453169][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.510622][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.608367][T11890] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1281'. [ 1117.808649][ T8057] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.852607][ T8057] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.018720][ T8057] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.067882][ T8057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.369867][T11720] team0: Port device team_slave_0 added [ 1118.465014][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 1118.489887][T11720] team0: Port device team_slave_1 added [ 1119.361674][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.391381][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.571233][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.623219][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.633445][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.735474][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.532090][T11720] hsr_slave_0: entered promiscuous mode [ 1120.600490][T11720] hsr_slave_1: entered promiscuous mode [ 1120.663610][T11720] debugfs: 'hsr0' already exists in 'hsr' [ 1120.707087][T11720] Cannot create hsr debugfs directory [ 1120.729234][T11921] hfs: unable to load iocharset "io#harset" [ 1122.637526][T11960] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1295'. [ 1122.667297][ T5775] Bluetooth: hci5: unexpected subevent 0x1a length: 10 > 6 [ 1123.179545][T11720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1123.337910][T11720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1123.474662][T11720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1123.659664][T11720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1123.779996][T11973] hfs: unable to load iocharset "io#harset" [ 1123.911071][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1301'. [ 1125.476123][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.718869][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.725745][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.952456][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.959815][ T8057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.987013][ T8057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.164165][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.171762][ T8057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.219820][T12008] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1307'. [ 1126.424618][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.455559][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.485306][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.493037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.657357][T12030] hfs: unable to load iocharset "io#harset" [ 1132.758610][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.120475][T12057] fuse: Bad value for 'fd' [ 1133.436017][T11720] veth0_vlan: entered promiscuous mode [ 1133.755925][T11720] veth1_vlan: entered promiscuous mode [ 1134.344548][T11720] veth0_macvtap: entered promiscuous mode [ 1134.521177][T11720] veth1_macvtap: entered promiscuous mode [ 1137.061331][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.309560][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.801361][ T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.900463][ T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.909974][ T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.919585][ T83] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.185412][ T5775] Bluetooth: hci5: unexpected event for opcode 0x2000 [ 1140.116053][T12118] loop3: detected capacity change from 0 to 128 [ 1140.298814][T12118] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1140.317881][T12118] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.175565][ T5775] Bluetooth: hci2: unexpected event for opcode 0x2000 [ 1142.276777][ T5775] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1142.286416][ T5775] Bluetooth: hci5: Injecting HCI hardware error event [ 1142.299041][ T5071] Bluetooth: hci5: hardware error 0x00 [ 1144.171101][T11427] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1146.151773][ T5071] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1146.237011][ T5071] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1146.246799][ T5071] Bluetooth: hci2: Injecting HCI hardware error event [ 1146.254315][ T5071] Bluetooth: hci2: hardware error 0x00 [ 1147.827763][ T5775] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1148.497092][ T5071] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1150.866863][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.950040][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.438975][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.471937][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.757367][T12216] netlink: 'syz.0.1354': attribute type 29 has an invalid length. [ 1151.894278][T12222] netlink: 'syz.0.1354': attribute type 29 has an invalid length. [ 1152.584304][T12222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1354'. [ 1153.618416][T12230] 9p: Bad value for 'rfdno' [ 1157.359819][T12261] netlink: 'syz.8.1366': attribute type 29 has an invalid length. [ 1157.487101][T12261] netlink: 'syz.8.1366': attribute type 29 has an invalid length. [ 1157.763786][T12264] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1366'. [ 1161.417074][ T8585] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1161.645057][ T8585] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.677824][ T8585] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1161.721082][ T8585] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1161.738845][T12310] netlink: 'syz.5.1382': attribute type 29 has an invalid length. [ 1161.761682][ T8585] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1161.794699][ T8585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.816865][T12310] netlink: 'syz.5.1382': attribute type 29 has an invalid length. [ 1161.863045][ T8585] usb 3-1: config 0 descriptor?? [ 1161.883378][T12310] netlink: 496 bytes leftover after parsing attributes in process `syz.5.1382'. [ 1164.280274][ T8585] magicmouse 0003:05AC:0265.0001: item fetching failed at offset 1/5 [ 1164.860787][ T8585] magicmouse 0003:05AC:0265.0001: magicmouse hid parse failed [ 1164.910472][ T8585] magicmouse 0003:05AC:0265.0001: probe with driver magicmouse failed with error -22 [ 1165.075631][ T8585] usb 3-1: USB disconnect, device number 2 [ 1165.246574][ T29] audit: type=1326 audit(1772042674.893:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1165.497370][ T29] audit: type=1326 audit(1772042674.893:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1165.565911][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 1165.594428][ T29] audit: type=1326 audit(1772042674.893:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1165.624543][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 1165.789436][ T29] audit: type=1326 audit(1772042674.893:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1165.906634][ T29] audit: type=1326 audit(1772042674.983:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1166.034205][ T29] audit: type=1326 audit(1772042674.983:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1166.178034][ T29] audit: type=1326 audit(1772042674.983:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1166.324487][ T29] audit: type=1326 audit(1772042674.993:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1166.466582][ T29] audit: type=1326 audit(1772042674.993:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1166.693866][ T29] audit: type=1326 audit(1772042674.993:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.8.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9c629 code=0x50000 [ 1168.168951][T12363] overlayfs: overlapping lowerdir path [ 1169.044969][T12376] netlink: 'syz.3.1399': attribute type 29 has an invalid length. [ 1169.114499][T12376] netlink: 'syz.3.1399': attribute type 29 has an invalid length. [ 1169.164940][T12377] netlink: 'syz.3.1399': attribute type 29 has an invalid length. [ 1169.208406][T12376] netlink: 'syz.3.1399': attribute type 29 has an invalid length. [ 1169.477677][T12383] fuse: Invalid rootmode [ 1170.005117][T12390] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1404'. [ 1170.088925][T12390] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1404'. [ 1175.824203][T12456] netlink: 'syz.5.1426': attribute type 5 has an invalid length. [ 1175.861149][T12456] netlink: 'syz.5.1426': attribute type 9 has an invalid length. [ 1175.900292][T12456] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1426'. [ 1176.239399][T12459] netlink: 'syz.0.1427': attribute type 19 has an invalid length. [ 1178.034534][T12488] netlink: 'syz.3.1438': attribute type 10 has an invalid length. [ 1178.070529][T12488] bridge0: port 3(netdevsim0) entered blocking state [ 1178.117274][T12488] bridge0: port 3(netdevsim0) entered disabled state [ 1178.169059][T12488] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1178.229366][T12488] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1178.332095][T12488] bridge0: port 3(netdevsim0) entered blocking state [ 1178.339448][T12488] bridge0: port 3(netdevsim0) entered forwarding state [ 1179.529037][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1446'. [ 1179.609035][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1446'. [ 1179.677059][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1446'. [ 1179.812280][T12509] delete_channel: no stack [ 1180.547684][T12529] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1453'. [ 1180.685682][T12534] warning: `syz.3.1455' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1181.910202][T12547] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1460'. [ 1183.285343][T12566] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1468'. [ 1183.323044][T12566] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1468'. [ 1184.307770][T12585] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 1184.527473][T12585] team0: Port device macvlan0 added [ 1186.427872][T12606] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 1186.572085][T12609] net_ratelimit: 10 callbacks suppressed [ 1186.572166][T12609] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 1186.642997][T12609] ===================================================== [ 1186.650468][T12609] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 1186.657954][T12609] batadv_get_vid+0x2ce/0x3b0 [ 1186.663109][T12609] batadv_interface_tx+0x2e8/0x1dd0 [ 1186.668733][T12609] dev_hard_start_xmit+0x24e/0xad0 [ 1186.674057][T12609] __dev_queue_xmit+0x35e0/0x5a50 [ 1186.679475][T12609] __bpf_redirect+0x162e/0x1760 [ 1186.684840][T12609] bpf_clone_redirect+0x4a6/0x6c0 [ 1186.690213][T12609] ___bpf_prog_run+0x12af/0xeb60 [ 1186.695552][T12609] __bpf_prog_run512+0xc5/0x100 [ 1186.700948][T12609] bpf_test_run+0x493/0xdf0 [ 1186.706297][T12609] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1186.711962][T12609] bpf_prog_test_run+0x5bb/0x9f0 [ 1186.717292][T12609] __sys_bpf+0x925/0xee0 [ 1186.721953][T12609] __x64_sys_bpf+0xa4/0xf0 [ 1186.726696][T12609] x64_sys_call+0x13d0/0x3ea0 [ 1186.731764][T12609] do_syscall_64+0x134/0xf80 [ 1186.736787][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.742860][T12609] [ 1186.745263][T12609] Uninit was created at: [ 1186.749933][T12609] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1186.756127][T12609] pskb_expand_head+0x2ef/0x1fb0 [ 1186.761424][T12609] skb_ensure_writable+0x44e/0x510 [ 1186.766849][T12609] bpf_clone_redirect+0x301/0x6c0 [ 1186.772151][T12609] ___bpf_prog_run+0x12af/0xeb60 [ 1186.777678][T12609] __bpf_prog_run512+0xc5/0x100 [ 1186.782778][T12609] bpf_test_run+0x493/0xdf0 [ 1186.787758][T12609] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1186.793508][T12609] bpf_prog_test_run+0x5bb/0x9f0 [ 1186.798824][T12609] __sys_bpf+0x925/0xee0 [ 1186.803221][T12609] __x64_sys_bpf+0xa4/0xf0 [ 1186.808119][T12609] x64_sys_call+0x13d0/0x3ea0 [ 1186.813071][T12609] do_syscall_64+0x134/0xf80 [ 1186.818091][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.824156][T12609] [ 1186.826722][T12609] CPU: 0 UID: 0 PID: 12609 Comm: syz.8.1483 Not tainted syzkaller #0 PREEMPT(full) [ 1186.836634][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1186.847052][T12609] ===================================================== [ 1186.854257][T12609] Disabling lock debugging due to kernel taint [ 1186.860934][T12609] Kernel panic - not syncing: kmsan.panic set ... [ 1186.867503][T12609] CPU: 0 UID: 0 PID: 12609 Comm: syz.8.1483 Tainted: G B syzkaller #0 PREEMPT(full) [ 1186.878622][T12609] Tainted: [B]=BAD_PAGE [ 1186.882942][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1186.893212][T12609] Call Trace: [ 1186.896984][T12609] [ 1186.900618][T12609] __dump_stack+0x26/0x30 [ 1186.905117][T12609] dump_stack_lvl+0x50/0x1c0 [ 1186.910223][T12609] ? dump_stack+0x12/0x25 [ 1186.914870][T12609] dump_stack+0x1e/0x25 [ 1186.920220][T12609] vpanic+0x7b4/0x1430 [ 1186.924511][T12609] panic+0x15d/0x160 [ 1186.929127][T12609] kmsan_report+0x31a/0x320 [ 1186.934264][T12609] ? __msan_warning+0x1b/0x30 [ 1186.939304][T12609] ? batadv_get_vid+0x2ce/0x3b0 [ 1186.945086][T12609] ? batadv_interface_tx+0x2e8/0x1dd0 [ 1186.950743][T12609] ? dev_hard_start_xmit+0x24e/0xad0 [ 1186.956386][T12609] ? __dev_queue_xmit+0x35e0/0x5a50 [ 1186.961935][T12609] ? __bpf_redirect+0x162e/0x1760 [ 1186.967654][T12609] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1186.973127][T12609] ? ___bpf_prog_run+0x12af/0xeb60 [ 1186.978397][T12609] ? __bpf_prog_run512+0xc5/0x100 [ 1186.983576][T12609] ? bpf_test_run+0x493/0xdf0 [ 1186.989407][T12609] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 1186.995437][T12609] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1187.001000][T12609] ? __sys_bpf+0x925/0xee0 [ 1187.005572][T12609] ? __x64_sys_bpf+0xa4/0xf0 [ 1187.010321][T12609] ? x64_sys_call+0x13d0/0x3ea0 [ 1187.015430][T12609] ? do_syscall_64+0x134/0xf80 [ 1187.020367][T12609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.026575][T12609] ? kernel_text_address+0x10e/0x1a0 [ 1187.032090][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.037372][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.043552][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.048852][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.055037][T12609] ? batadv_interface_tx+0x71/0x1dd0 [ 1187.060875][T12609] ? filter_irq_stacks+0x49/0x190 [ 1187.066118][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.071573][T12609] __msan_warning+0x1b/0x30 [ 1187.076228][T12609] batadv_get_vid+0x2ce/0x3b0 [ 1187.081066][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.087053][T12609] batadv_interface_tx+0x2e8/0x1dd0 [ 1187.092525][T12609] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1187.099128][T12609] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1187.104943][T12609] dev_hard_start_xmit+0x24e/0xad0 [ 1187.110273][T12609] __dev_queue_xmit+0x35e0/0x5a50 [ 1187.115540][T12609] ? skb_release_data+0x107c/0x11b0 [ 1187.120936][T12609] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1187.127858][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.133147][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.139320][T12609] ? __dev_queue_xmit+0x280/0x5a50 [ 1187.147787][T12609] ? pskb_expand_head+0x1c0e/0x1fb0 [ 1187.153462][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.158773][T12609] __bpf_redirect+0x162e/0x1760 [ 1187.163923][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.169311][T12609] bpf_clone_redirect+0x4a6/0x6c0 [ 1187.174532][T12609] ___bpf_prog_run+0x12af/0xeb60 [ 1187.179734][T12609] __bpf_prog_run512+0xc5/0x100 [ 1187.184748][T12609] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1187.190889][T12609] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 1187.196784][T12609] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 1187.202597][T12609] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1187.207936][T12609] ? __sys_bpf+0x925/0xee0 [ 1187.213024][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.218409][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.223691][T12609] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1187.230622][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.236632][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.242650][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.248485][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.253897][T12609] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1187.260531][T12609] ? kmsan_get_metadata+0x146/0x160 [ 1187.265997][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.272404][T12609] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1187.278304][T12609] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1187.283926][T12609] bpf_test_run+0x493/0xdf0 [ 1187.288601][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.294691][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.300497][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.306594][T12609] ? bpf_test_run+0x2f4/0xdf0 [ 1187.311719][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.317276][T12609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1187.323546][T12609] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1187.329405][T12609] ? kmsan_get_metadata+0xf1/0x160 [ 1187.334928][T12609] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1187.341629][T12609] bpf_prog_test_run+0x5bb/0x9f0 [ 1187.346764][T12609] __sys_bpf+0x925/0xee0 [ 1187.351204][T12609] __x64_sys_bpf+0xa4/0xf0 [ 1187.355764][T12609] x64_sys_call+0x13d0/0x3ea0 [ 1187.360603][T12609] do_syscall_64+0x134/0xf80 [ 1187.365981][T12609] ? clear_bhb_loop+0x50/0xa0 [ 1187.370855][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.377163][T12609] RIP: 0033:0x7fdeb1d9c629 [ 1187.381688][T12609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.401967][T12609] RSP: 002b:00007fdeb2d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1187.410740][T12609] RAX: ffffffffffffffda RBX: 00007fdeb2015fa0 RCX: 00007fdeb1d9c629 [ 1187.418911][T12609] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1187.427348][T12609] RBP: 00007fdeb1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1187.435613][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.443873][T12609] R13: 00007fdeb2016038 R14: 00007fdeb2015fa0 R15: 00007ffdff6e71f8 [ 1187.452173][T12609] [ 1187.455985][T12609] Kernel Offset: disabled [ 1187.460452][T12609] Rebooting in 86400 seconds..