last executing test programs: 32m19.193983757s ago: executing program 32 (id=46): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000000008018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb70300000101000585000000060000001801000020696c2500000000002020207b07000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000870000008500000006"], &(0x7f00000000c0)='GPL\x00', 0xe, 0xff3, &(0x7f0000000cc0)=""/4083, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcbb}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020600000000000000050000100000800000b7ee877aa8c9abf4040000000000090002f872797a31000000000000078000000a40fffffff8000004404e2300000000a95e795d000211000300"], 0x58}}, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa55152c2474aa0011aaab0d000000000000005e"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 32m17.439584737s ago: executing program 33 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x5, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 32m16.26979957s ago: executing program 34 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="04001a80e2b9"], 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r6, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000340)={0x6, 0xa97b, 0x2, 0x14c3a19c, 0x3, [0x3563, 0x7, 0x2f6, 0xff]}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x17, 0xa, 0x202, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="1826582c1206000000000000000000000000400018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000000f0af4ffffffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f00000009c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x6, 0x0, 0x3, 0x20, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff7}, @map_val={0x18, 0xb, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000980)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) 29m35.533473845s ago: executing program 35 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0xa}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 29m26.440601841s ago: executing program 36 (id=544): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8) 24m12.126079914s ago: executing program 37 (id=1374): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 24m11.074749145s ago: executing program 38 (id=1377): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d36726567", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 24m8.053724685s ago: executing program 39 (id=1387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_bt_hci(r6, 0x400448e3, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x4}, {0x8, 0x1d, 0x0, 0x0, 0xf}, {0x8, 0x1a}]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0xffffffffc, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x26000, 0xa, 0x3, 0x20, 0x0, 0x3, 0x0, 0x8a, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x60000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0xfd, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0x4, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x70000, 0x5}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 16m52.760897426s ago: executing program 40 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f00005bc000/0xa000)=nil, 0xa000, 0x0, 0x110, 0xffffffffffffffff, 0x7787c000) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0x40, 0x1, 0xfffc, 0x1, "17465be1d348f5bb0900000002010005000801000140009500000000000100"}) 16m19.348675927s ago: executing program 0 (id=2871): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16m17.818783515s ago: executing program 0 (id=2876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xf) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000100)="ba0455111f1b8072fd972350948b312588a8", 0xfdef, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 16m15.716170876s ago: executing program 0 (id=2880): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000008}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 16m15.175151281s ago: executing program 0 (id=2884): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 16m12.778109368s ago: executing program 0 (id=2888): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4ea1, @dev={0xac, 0x14, 0x14, 0x23}}], 0x10) listen(r0, 0x7) 16m12.464779047s ago: executing program 0 (id=2890): socket$key(0xf, 0x3, 0x2) timer_create(0x1, &(0x7f0000000680)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000380)="af7c85be1af716296e250f6069951e206802918214edb1f3682f04a8f34b5ecac3700132da04ceddef7b3910765db31d64df7cfd358532bd14581c055c57f9b06b19c91fef5d2fa9719f868c5d96a8262b002a02cb13b3d7c26c86235ace10a320bdc9d7e1fa33ede4de761b762359b42e7625a8e2c298c1f3b87928dfa044561f2c76160b44f7276d5e7553e077d28326bace8f5e2343fcde3ef593c8b2e8569c5adb52f17c9458375df91c8c83213badc2f8365798f6825762404110275b7b63a749eb96d7177c4045a6dc149cb614942a8296b2b0a91ec4d345a6d2abe4b75aafab672b520018ef5c1664a684d016a99b39cac0e880", &(0x7f00000006c0)="e849afd67cec405d02b4993e0103a2a65d5b35d28084b138b5f6a388b3a2ca18c457b0ea83e8ab5a4e0ec258c5f712b8194b6e250046284bbd5402aaed37bf1ac58e78ed589a6b1ef3e21ee50fc24f2580d0fd36c5154b1254ed95f14856c3df37bd2156c4095327f029d0278e1f57a5b83df89f7e274addd80455e6463039bccf07c1af3abc7ff20537ec83a3ed1fa63913a2bdd0057aad83a8f93a893224ec7743772dc4d5"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0xfffffffe, 0xce, &(0x7f0000000a00)=""/206, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xfffffc00) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x654) syz_open_dev$vbi(0x0, 0x0, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) 15m57.219109276s ago: executing program 41 (id=2890): socket$key(0xf, 0x3, 0x2) timer_create(0x1, &(0x7f0000000680)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000380)="af7c85be1af716296e250f6069951e206802918214edb1f3682f04a8f34b5ecac3700132da04ceddef7b3910765db31d64df7cfd358532bd14581c055c57f9b06b19c91fef5d2fa9719f868c5d96a8262b002a02cb13b3d7c26c86235ace10a320bdc9d7e1fa33ede4de761b762359b42e7625a8e2c298c1f3b87928dfa044561f2c76160b44f7276d5e7553e077d28326bace8f5e2343fcde3ef593c8b2e8569c5adb52f17c9458375df91c8c83213badc2f8365798f6825762404110275b7b63a749eb96d7177c4045a6dc149cb614942a8296b2b0a91ec4d345a6d2abe4b75aafab672b520018ef5c1664a684d016a99b39cac0e880", &(0x7f00000006c0)="e849afd67cec405d02b4993e0103a2a65d5b35d28084b138b5f6a388b3a2ca18c457b0ea83e8ab5a4e0ec258c5f712b8194b6e250046284bbd5402aaed37bf1ac58e78ed589a6b1ef3e21ee50fc24f2580d0fd36c5154b1254ed95f14856c3df37bd2156c4095327f029d0278e1f57a5b83df89f7e274addd80455e6463039bccf07c1af3abc7ff20537ec83a3ed1fa63913a2bdd0057aad83a8f93a893224ec7743772dc4d5"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0xfffffffe, 0xce, &(0x7f0000000a00)=""/206, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xfffffc00) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x654) syz_open_dev$vbi(0x0, 0x0, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) 15m32.328396243s ago: executing program 4 (id=2967): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x2) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="69642cbd7000fcdbdf25120000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc(serpent),tgr192)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beeb915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {0x0}], 0x2}], 0x1, 0x40800) 15m29.169369459s ago: executing program 4 (id=2971): sendmsg$inet(0xffffffffffffffff, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000050c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0x4, "dadd"}, {0x2, 0x11, "90261cf17d180c5deb1100b4cd8cc3"}]}]}}}], 0x30}, 0x40) 15m28.790748465s ago: executing program 4 (id=2974): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000100)="c4e17d28970090000048b8de0f0000000000000f23c00f21f835030001000f23f866baa000ec66baa100ec430fc75b0066b8e2008ed866baf80cb894eab284ef66bafc0c66ed640f01ca3e450f300f79db", 0x51}], 0x1, 0x15, 0x0, 0x0) timerfd_create(0x8, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x8}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 15m27.995334153s ago: executing program 4 (id=2978): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x2a, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0xfffffefd, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x6c8325736d6888ae}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000014c0)={r5, 0xfe, "ee0953e5ee8cdb1d0b752a486999875b86994fd13f4adf61cdcc941cf69e0fc73e16ec300d5e0be8f62b48cbb4cfe97b1e58cee2c15897945949773ec29da461d8103f463a38170227cffb1be18fdf167c7b5e36991b2b327a02cd7cc5c953bde9fb615cf9a8fbd1891f5ebf0cbc68c85440c7daa78073a55b21eab85c2b550eb78330d1cf1d3b39aa4256ec903969e5b6c027504bc1f6188fbf43618f31fbc60195e8efa75f23d8ed86b9d62058af218e2d1831b38f2e007cf8c4dbab44a187c45171dab3303d2ab058b8bcde1d5a4b5e00d308987591d35a7a05b504afb7ffc1dee1e5c0af3d7e7f97c28fbd7c45d5ea34c1d6586698215338bd2d0c9e"}, &(0x7f0000001600)=0x106) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmmsg$inet(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000006, 0x4132, 0xffffffffffffffff, 0xab7ee000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) accept(r6, &(0x7f0000001640)=@ieee802154={0x24, @short}, &(0x7f00000016c0)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000080601010000000000000000000000090500018007"], 0x28}, 0x1, 0x0, 0x0, 0x40080d0}, 0x40040) 15m26.649739646s ago: executing program 4 (id=2984): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000005800000016"], 0xe8}}, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 15m23.717633764s ago: executing program 4 (id=2989): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={'xxhash64\x00'}}) socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_generic(0x10, 0x3, 0x10) 15m7.987027951s ago: executing program 42 (id=2989): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={'xxhash64\x00'}}) socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_generic(0x10, 0x3, 0x10) 14m22.93064657s ago: executing program 6 (id=3150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210020000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1}, 0x0) 14m22.66163903s ago: executing program 6 (id=3154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$usbmon(0x0, 0x0, 0xa400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000340)=""/36, 0x24) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, 'Y'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 14m20.124314232s ago: executing program 6 (id=3160): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0xaa9844, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x101) 14m18.597794979s ago: executing program 6 (id=3165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14m18.076393983s ago: executing program 6 (id=3168): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 14m15.021088003s ago: executing program 6 (id=3173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 13m59.799918655s ago: executing program 43 (id=3173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 6m42.838015698s ago: executing program 7 (id=4985): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r1], 0x5c}}, 0x800) 6m40.040116296s ago: executing program 7 (id=4990): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) readv(r0, &(0x7f0000003180)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1) socket$netlink(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="6400000007060108000000000000000002000003050001000700000008000640000000090900020073797a320000000008000640000000030900020073797a320000000005000100070000000900020073797a30000000000900020073797a32000000008cd59e2d24e6e351d56b83f4902d3056f10429b364f96c57af63564fe7684e426692395472"], 0x64}}, 0x20) sendmsg$kcm(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000f"], 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000000500000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m37.987555292s ago: executing program 7 (id=4998): mkdir(&(0x7f0000000400)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) 6m36.953008739s ago: executing program 7 (id=5003): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m36.521979298s ago: executing program 7 (id=5009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0x40, 0x80000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000002400)={0x40, 0x6, 0x0, {0x3, 0x3, 0x17, 0x0, '/sys/fs/smackfs/syslog\x00'}}, 0x40) 6m33.922109956s ago: executing program 7 (id=5014): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfa, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 6m18.494028513s ago: executing program 44 (id=5014): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfa, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 2m48.786484569s ago: executing program 9 (id=5859): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x91) close(r0) socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m48.124340739s ago: executing program 9 (id=5861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 2m46.670510157s ago: executing program 9 (id=5866): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x86) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x121, 0x1) getdents(r2, &(0x7f00000002c0)=""/201, 0xc9) 2m45.208199018s ago: executing program 9 (id=5871): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x91) close(r0) socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m43.186910557s ago: executing program 9 (id=5876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0x8, 0x3, "02b51112"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2m42.714766712s ago: executing program 9 (id=5881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000040)={0x9e, 0x80000, r0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000080)={0x1}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 2m27.241131915s ago: executing program 45 (id=5881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000040)={0x9e, 0x80000, r0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000080)={0x1}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 42.735237821s ago: executing program 1 (id=6184): socket(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r0], 0x50}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 41.444468444s ago: executing program 1 (id=6189): socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r2, 0x0, 0x0, 0x61, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000300)=0xc7) write(r5, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000440), 0x0, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 35.573792306s ago: executing program 1 (id=6203): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) 34.400004854s ago: executing program 1 (id=6208): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x48) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 34.131485907s ago: executing program 1 (id=6213): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES64=r1, @ANYRES8=r0, @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(&(0x7f00000003c0)=@rnullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='nfsd\x00', 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 28.860732087s ago: executing program 1 (id=6218): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15.101559979s ago: executing program 3 (id=6263): socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r2, 0x0, 0x0, 0x61, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000300)=0xc7) write(r5, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000440), 0x0, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 12.110597943s ago: executing program 46 (id=6218): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.918166998s ago: executing program 3 (id=6279): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c0100", @ANYRES8=r0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES8=r0, @ANYRES32, @ANYRES8, @ANYBLOB="7f140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x3a1b66ac857f1c5b}, 0x4044005) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.778348836s ago: executing program 8 (id=6280): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x200000000000008e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) 10.777993856s ago: executing program 5 (id=6281): sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r3], 0xe8}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0x96) quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000200, r9, &(0x7f0000000740)='./file0\x00') 10.765145103s ago: executing program 2 (id=6282): socket(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r0], 0x50}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 10.634379363s ago: executing program 3 (id=6283): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = io_uring_setup(0x818, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0), 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800010000000000000000f30900000000000000040004003b77f90e67394f88d2b2692adde7975c8593e9c3ff60ebf0c0e16f8cb1f8a3f4594730d56874e30d153cc27eb79bb5074464d04fd3fe6d015d2bf5bc4a7f3dae1a7bf8df8ead72fe60cf0eaa92e82b9602c934a2afcd77f373109e88518052b5fa78e3b905e12c19b73c54765926158d5ece5567c13e13"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700"/102], 0x210) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffff}}, 0x18) 9.962107534s ago: executing program 2 (id=6284): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008800) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 9.406047219s ago: executing program 5 (id=6285): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r3, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 9.405689518s ago: executing program 8 (id=6286): r0 = creat(0x0, 0x1d0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x1}}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x40800) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8], [0x7, 0x0, 0x2]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 6.46401061s ago: executing program 3 (id=6287): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x0, 0x7ffffff5, 0x3, 0x0, 0x0, 0x473f, 0x1}) 6.338443111s ago: executing program 8 (id=6288): socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r2, 0x0, 0x0, 0x61, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000300)=0xc7) write(r5, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000440), 0x0, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 6.250505667s ago: executing program 2 (id=6289): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x24040084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.184517983s ago: executing program 5 (id=6290): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000400000000000000000000f3850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 6.000055469s ago: executing program 3 (id=6291): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a", @ANYRES64=0x0, @ANYRESDEC=r0], 0x22) 5.918580171s ago: executing program 2 (id=6292): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x6}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 5.874333886s ago: executing program 5 (id=6293): fanotify_init(0x200, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = socket(0x840000000002, 0x3, 0xff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) close(r3) sendmsg$inet(r0, 0x0, 0x2400c804) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f00000000c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfffffffffffbfffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32, @ANYBLOB="0006000000000000240012800b00010067656e65766500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r7, 0x708, 0xb8f3) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x5, &(0x7f0000000080)={0xf, "14a6c62707da239de521fbd83463674d70b41d4008e200"}}) socket$nl_generic(0x10, 0x3, 0x10) 4.552324055s ago: executing program 3 (id=6294): socket(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000440)='!', 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 4.504175581s ago: executing program 8 (id=6295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x3f, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffd039294d, 0xf515, 0x2, 0x202, 0x7, 0x0, 0x0, 0x10, 0x10004}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.065854341s ago: executing program 2 (id=6296): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = io_uring_setup(0x818, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0), 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800010000000000000000f30900000000000000040004003b77f90e67394f88d2b2692adde7975c8593e9c3ff60ebf0c0e16f8cb1f8a3f4594730d56874e30d153cc27eb79bb5074464d04fd3fe6d015d2bf5bc4a7f3dae1a7bf8df8ead72fe60cf0eaa92e82b9602c934a2afcd77f373109e88518052b5fa78e3b905e12c19b73c54765926158d5ece5567c13e13"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700"/102], 0x210) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffff}}, 0x18) 4.065623324s ago: executing program 8 (id=6297): creat(0x0, 0x1d0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x1}}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4.024417712s ago: executing program 5 (id=6298): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x18, 0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 2.014654821s ago: executing program 8 (id=6299): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r3, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.219812526s ago: executing program 5 (id=6300): r0 = socket(0x2f, 0x3, 0x3ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x2, r4, 0x0, 0x7ffffff5, 0x3, 0x0, 0x0, 0x473f, 0x1}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setresuid(0x0, 0xee00, 0x0) r6 = io_uring_setup(0xaae, &(0x7f0000000380)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4091, 0xffb}], 0x1) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 0s ago: executing program 2 (id=6301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x3}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x4}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) kernel console output (not intermixed with test programs): error -71 [ 1195.754084][T15143] usb 3-1: USB disconnect, device number 27 [ 1196.203344][ T5707] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1197.152914][ T3435] bridge_slave_1: left allmulticast mode [ 1197.152947][ T3435] bridge_slave_1: left promiscuous mode [ 1197.153209][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.202578][ T5707] usb 8-1: Using ep0 maxpacket: 16 [ 1197.204799][ T5707] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.204826][ T5707] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.204846][ T5707] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1197.204882][ T5707] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1197.204903][ T5707] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.272183][ T5707] usb 8-1: config 0 descriptor?? [ 1197.348052][ T3435] bridge_slave_0: left allmulticast mode [ 1197.348075][ T3435] bridge_slave_0: left promiscuous mode [ 1197.370939][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.460819][ T5707] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000C/input/input34 [ 1199.650414][ T5707] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1199.689852][ T5707] usb 8-1: USB disconnect, device number 8 [ 1199.940166][T17042] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1199.940234][T17042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1199.940779][T17042] vhci_hcd vhci_hcd.0: Device attached [ 1199.943244][T17043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1200.152084][T17041] fido_id[17041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1200.267535][ T823] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1200.335610][ T823] usb 37-1: new full-speed USB device number 8 using vhci_hcd [ 1202.679960][T17044] vhci_hcd: connection reset by peer [ 1202.696369][T12136] vhci_hcd vhci_hcd.2: stop threads [ 1202.696393][T12136] vhci_hcd vhci_hcd.2: release socket [ 1202.696460][T12136] vhci_hcd vhci_hcd.2: disconnect device [ 1205.472370][ T823] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1207.405043][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.489701][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.531620][ T3435] bond0 (unregistering): Released all slaves [ 1207.968010][T17083] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1207.968032][T17083] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1207.968101][T17083] vhci_hcd vhci_hcd.0: Device attached [ 1208.400339][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1208.520265][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1208.636922][ T9] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1210.784811][T17084] vhci_hcd: connection reset by peer [ 1210.785691][ T1415] vhci_hcd vhci_hcd.7: stop threads [ 1210.785706][ T1415] vhci_hcd vhci_hcd.7: release socket [ 1210.785754][ T1415] vhci_hcd vhci_hcd.7: disconnect device [ 1211.659557][T11472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1211.760073][T11472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1211.804173][T11472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1211.910670][T11472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1211.945582][T11472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1212.585869][T17121] overlayfs: failed to resolve './file0': -2 [ 1213.462868][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1213.782614][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1214.282718][T11472] Bluetooth: hci0: command tx timeout [ 1215.248386][ T3435] hsr_slave_0: left promiscuous mode [ 1215.284817][ T3435] hsr_slave_1: left promiscuous mode [ 1215.286169][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.286195][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.373606][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.373718][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.767522][ T3435] veth1_macvtap: left promiscuous mode [ 1215.767624][ T3435] veth0_macvtap: left promiscuous mode [ 1215.767867][ T3435] veth1_vlan: left promiscuous mode [ 1215.768026][ T3435] veth0_vlan: left promiscuous mode [ 1216.363412][T11472] Bluetooth: hci0: command tx timeout [ 1217.729837][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 1217.729853][ T36] audit: type=1804 audit(1779247915.618:303): pid=17191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3219" name="file0" dev="tmpfs" ino=2208 res=1 errno=0 [ 1218.374692][ T3435] ` (unregistering): Port device team_slave_1 removed [ 1218.433872][T11472] Bluetooth: hci0: command tx timeout [ 1218.436790][ T3435] ` (unregistering): Port device team_slave_0 removed [ 1219.021636][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1219.207751][T17215] 9p: Bad value for 'rfdno' [ 1220.514125][T11472] Bluetooth: hci0: command tx timeout [ 1220.577069][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.578761][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.580687][T17094] bridge_slave_0: entered allmulticast mode [ 1220.613518][T17094] bridge_slave_0: entered promiscuous mode [ 1220.634831][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.635037][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.635262][T17094] bridge_slave_1: entered allmulticast mode [ 1220.638076][T17094] bridge_slave_1: entered promiscuous mode [ 1220.924923][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.928645][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.045886][T17094] team0: Port device team_slave_0 added [ 1222.068770][T17094] team0: Port device team_slave_1 added [ 1222.442785][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.442802][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.442826][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.448715][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.448729][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.448754][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.746296][T17094] hsr_slave_0: entered promiscuous mode [ 1222.749230][T17094] hsr_slave_1: entered promiscuous mode [ 1222.751782][T17094] debugfs: 'hsr0' already exists in 'hsr' [ 1222.751806][T17094] Cannot create hsr debugfs directory [ 1224.020094][T17257] fuse: Bad value for 'user_id' [ 1224.020113][T17257] fuse: Bad value for 'user_id' [ 1224.216091][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1226.593192][T17094] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.701059][ T36] audit: type=1804 audit(1779247924.588:304): pid=17280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3243" name="file0" dev="tmpfs" ino=237 res=1 errno=0 [ 1228.252378][ T3435] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.339309][T17094] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.545907][ T36] audit: type=1804 audit(1779247927.438:305): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3255" name="file0" dev="tmpfs" ino=2249 res=1 errno=0 [ 1230.454642][ T3435] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.472952][T17321] overlayfs: conflicting lowerdir path [ 1231.755744][T17094] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.142771][ T3435] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.140225][T17094] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.360306][ T3435] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.031203][T17094] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1237.071304][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.204612][T17094] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1237.244985][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.251955][T17094] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1237.292271][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.387972][T17094] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1237.459265][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1239.396924][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.699803][T17417] overlayfs: conflicting lowerdir path [ 1239.797086][ T3435] bridge_slave_1: left allmulticast mode [ 1239.797119][ T3435] bridge_slave_1: left promiscuous mode [ 1239.797373][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.975119][ T3435] bridge_slave_0: left allmulticast mode [ 1239.975143][ T3435] bridge_slave_0: left promiscuous mode [ 1239.975303][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.316063][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.299246][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.374482][ T3435] bond0 (unregistering): Released all slaves [ 1243.552808][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1244.819551][T17094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.881949][T17094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.909353][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.909573][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.581646][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.581775][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.151900][T17094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.964671][ T3435] hsr_slave_0: left promiscuous mode [ 1249.005212][ T3435] hsr_slave_1: left promiscuous mode [ 1249.006373][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.006396][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.220148][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.220174][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.183693][ T3435] veth1_macvtap: left promiscuous mode [ 1250.183801][ T3435] veth0_macvtap: left promiscuous mode [ 1250.184080][ T3435] veth1_vlan: left promiscuous mode [ 1250.186594][ T3435] veth0_vlan: left promiscuous mode [ 1252.535523][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 1253.393476][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 1255.175635][T17094] veth0_vlan: entered promiscuous mode [ 1255.216034][T17094] veth1_vlan: entered promiscuous mode [ 1255.665008][T17094] veth0_macvtap: entered promiscuous mode [ 1255.768859][T17094] veth1_macvtap: entered promiscuous mode [ 1255.829612][T17094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.875721][T17094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.895761][ T8827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.913842][ T8827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.914100][ T8827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.914137][ T8827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.005193][T12136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.005215][T12136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.321608][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.321628][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.798452][T17704] netlink: 'syz.2.3359': attribute type 12 has an invalid length. [ 1261.798473][T17704] netlink: 'syz.2.3359': attribute type 29 has an invalid length. [ 1261.798486][T17704] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1262.057433][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1264.216212][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1267.106848][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1267.724600][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3382'. [ 1267.726836][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3382'. [ 1268.299628][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1268.299652][T17807] netlink: 90 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1268.328506][T17807] netlink: 90 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1271.650453][T17846] fuse: Bad value for 'fd' [ 1282.324012][T17984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1283.086259][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3448'. [ 1284.190675][T18044] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3455'. [ 1284.236180][T18041] fuse: fd is not a fuse device [ 1288.179928][T18089] overlayfs: failed to clone upperpath [ 1289.499340][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3480'. [ 1289.499373][T18113] netlink: 90 bytes leftover after parsing attributes in process `syz.1.3480'. [ 1289.499935][T18113] netlink: 90 bytes leftover after parsing attributes in process `syz.1.3480'. [ 1290.212647][ T5615] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1291.702675][ T5615] usb 3-1: Using ep0 maxpacket: 16 [ 1291.730498][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.730527][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.730548][ T5615] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1291.730587][ T5615] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1291.730608][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.789541][ T5615] usb 3-1: config 0 descriptor?? [ 1292.231933][ T36] audit: type=1326 audit(1779247990.118:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1292.232558][ T36] audit: type=1326 audit(1779247990.118:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1292.236018][ T36] audit: type=1326 audit(1779247990.128:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1292.236311][ T36] audit: type=1326 audit(1779247990.128:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1292.236801][ T36] audit: type=1326 audit(1779247990.128:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1292.237055][ T36] audit: type=1326 audit(1779247990.128:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1292.237301][ T36] audit: type=1326 audit(1779247990.128:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1292.237916][ T36] audit: type=1326 audit(1779247990.128:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18149 comm="syz.1.3495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1293.000748][ T5615] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input35 [ 1293.074132][ T5615] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1293.175996][ T5615] usb 3-1: USB disconnect, device number 28 [ 1293.213610][T17701] udevd[17701]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1293.368914][T18156] fido_id[18156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1293.528870][T18166] overlayfs: failed to clone upperpath [ 1295.268535][ T36] audit: type=1804 audit(1779247993.158:314): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3509" name="file0" dev="tmpfs" ino=543 res=1 errno=0 [ 1296.799511][T18217] pimreg: tun_chr_ioctl cmd 1074025677 [ 1296.799702][T18217] pimreg: linktype set to 778 [ 1296.800798][T18217] pimreg: tun_chr_ioctl cmd 1074025673 [ 1297.196155][T18224] 9p: Bad value for 'cachetag' [ 1298.375387][T18234] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1300.427199][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.660444][T12136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.043056][T18267] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 1302.107902][T12136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.230972][T18267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1302.569331][T12136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.135990][T12136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.302244][T12136] bond0 (unregistering): Released all slaves [ 1306.326994][T12136] bond1 (unregistering): Released all slaves [ 1307.772926][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1309.570236][T18408] overlayfs: failed to clone upperpath [ 1310.241369][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1314.035422][T11472] Bluetooth: hci3: Malformed LE Event: 0x1b [ 1314.257219][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1314.791031][T18466] fuse: fd is not a fuse device [ 1316.031418][T11472] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1316.036005][T11472] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1316.131889][T12136] hsr_slave_0: left promiscuous mode [ 1316.172286][T12136] hsr_slave_1: left promiscuous mode [ 1317.708657][T18529] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1317.833910][ T36] audit: type=1326 audit(1779248015.718:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61d70e1d9 code=0x7ffc0000 [ 1317.833959][ T36] audit: type=1326 audit(1779248015.718:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1317.833998][ T36] audit: type=1326 audit(1779248015.718:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1317.839866][ T36] audit: type=1326 audit(1779248015.728:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1317.840469][ T36] audit: type=1326 audit(1779248015.728:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61d70e1d9 code=0x7ffc0000 [ 1317.842386][ T36] audit: type=1326 audit(1779248015.728:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61d70e1d9 code=0x7ffc0000 [ 1317.990984][ T36] audit: type=1326 audit(1779248015.728:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1317.991031][ T36] audit: type=1326 audit(1779248015.798:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61d70e1d9 code=0x7ffc0000 [ 1317.991072][ T36] audit: type=1326 audit(1779248015.798:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61d70e1d9 code=0x7ffc0000 [ 1317.991111][ T36] audit: type=1326 audit(1779248015.798:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18525 comm="syz.1.3622" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61d70e1d9 code=0x7ffc0000 [ 1318.712536][T18535] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3625'. [ 1319.755978][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1323.149055][T12136] IPVS: stop unused estimator thread 0... [ 1340.672092][T11472] Bluetooth: hci0: command 0x0406 tx timeout [ 1341.788102][T14695] Bluetooth: hci3: Malformed LE Event: 0x1b [ 1341.810604][T18682] vlan1: entered promiscuous mode [ 1341.811978][T18682] vlan1: entered allmulticast mode [ 1341.812116][T18682] veth0_vlan: entered allmulticast mode [ 1344.230056][T18713] netlink: 'syz.2.3674': attribute type 5 has an invalid length. [ 1344.296908][T18718] netlink: 'syz.2.3674': attribute type 5 has an invalid length. [ 1357.305713][T18853] could not allocate digest TFM handle md5 [ 1361.566249][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.672044][T14695] Bluetooth: hci3: connection err: -111 [ 1364.493126][T18972] wg1: entered promiscuous mode [ 1364.493152][T18972] wg1: entered allmulticast mode [ 1364.571054][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'. [ 1367.651483][ T36] kauditd_printk_skb: 453 callbacks suppressed [ 1367.651502][ T36] audit: type=1800 audit(1779248065.508:778): pid=19015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3770" name="bus" dev="ramfs" ino=64802 res=0 errno=0 [ 1376.292886][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1376.294830][T19118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1379.753051][T14695] Bluetooth: hci3: Malformed LE Event: 0x1b [ 1393.488529][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3833'. [ 1411.702207][T19320] tipc: Cannot configure node identity twice [ 1413.987001][T19336] could not allocate digest TFM handle xxhash64 [ 1419.982222][T19390] could not allocate digest TFM handle xxhash64 [ 1423.039188][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.391156][T19451] could not allocate digest TFM handle xxhash64 [ 1427.831361][ T36] audit: type=1326 audit(1779248125.648:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.831625][ T36] audit: type=1326 audit(1779248125.648:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.831828][ T36] audit: type=1326 audit(1779248125.658:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.833494][ T36] audit: type=1326 audit(1779248125.658:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.833833][ T36] audit: type=1326 audit(1779248125.658:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.834167][ T36] audit: type=1326 audit(1779248125.658:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.835649][ T36] audit: type=1326 audit(1779248125.658:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.835926][ T36] audit: type=1326 audit(1779248125.658:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.836183][ T36] audit: type=1326 audit(1779248125.658:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1427.837501][ T36] audit: type=1326 audit(1779248125.668:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.7.3940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f14c783ce59 code=0x7ffc0000 [ 1428.893925][T19503] could not allocate digest TFM handle xxhash64 [ 1434.542835][T19555] could not allocate digest TFM handle xxhash64 [ 1434.800222][T19569] 9p: Bad value for 'rfdno' [ 1436.796985][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3970'. [ 1438.358806][T19605] netlink: 'syz.2.3977': attribute type 21 has an invalid length. [ 1438.358828][T19605] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1438.358995][T19605] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 1438.359009][T19605] netlink: 'syz.2.3977': attribute type 3 has an invalid length. [ 1438.359020][T19605] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1446.465151][T19685] netlink: 'syz.8.4007': attribute type 21 has an invalid length. [ 1446.470700][T19685] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4007'. [ 1446.470793][T19685] netlink: 'syz.8.4007': attribute type 4 has an invalid length. [ 1446.470806][T19685] netlink: 'syz.8.4007': attribute type 3 has an invalid length. [ 1446.470817][T19685] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4007'. [ 1447.951461][T19721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1450.248154][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4042'. [ 1450.425365][ T36] kauditd_printk_skb: 125 callbacks suppressed [ 1450.425403][ T36] audit: type=1326 audit(1779248148.218:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.426816][ T36] audit: type=1326 audit(1779248148.218:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.427103][ T36] audit: type=1326 audit(1779248148.228:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.427397][ T36] audit: type=1326 audit(1779248148.228:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.429377][ T36] audit: type=1326 audit(1779248148.228:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.429620][ T36] audit: type=1326 audit(1779248148.228:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.429882][ T36] audit: type=1326 audit(1779248148.228:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.430143][ T36] audit: type=1326 audit(1779248148.228:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.431492][ T36] audit: type=1326 audit(1779248148.228:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1450.431711][ T36] audit: type=1326 audit(1779248148.238:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19747 comm="syz.1.4039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb61d76ce59 code=0x7ffc0000 [ 1451.284616][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 1461.165933][T19922] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4110'. [ 1461.499141][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4116'. [ 1461.793849][T19943] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4119'. [ 1463.510547][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4131'. [ 1470.463657][T11472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1470.519609][T11472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1470.520975][T11472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1470.522095][T11472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1470.528603][T11472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1472.762336][T14695] Bluetooth: hci1: command tx timeout [ 1473.656267][T20075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.656437][T20075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.656670][T20075] bridge_slave_0: entered allmulticast mode [ 1473.662333][T20075] bridge_slave_0: entered promiscuous mode [ 1473.706848][T20075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.707062][T20075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.707302][T20075] bridge_slave_1: entered allmulticast mode [ 1473.736669][T20075] bridge_slave_1: entered promiscuous mode [ 1473.804608][T20075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.834274][T20075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.978721][T20075] team0: Port device team_slave_0 added [ 1473.988675][T20075] team0: Port device team_slave_1 added [ 1474.050645][T20075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.050661][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.050684][T20075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.097274][T20075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.097288][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.097313][T20075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.208028][T20075] hsr_slave_0: entered promiscuous mode [ 1474.209420][T20075] hsr_slave_1: entered promiscuous mode [ 1474.210321][T20075] debugfs: 'hsr0' already exists in 'hsr' [ 1474.210343][T20075] Cannot create hsr debugfs directory [ 1476.054976][T14695] Bluetooth: hci1: command tx timeout [ 1477.553301][T19872] bond1: (slave syz_tun): Removing an active aggregator [ 1477.554451][T19872] bond1: (slave syz_tun): Releasing backup interface [ 1478.196612][T14695] Bluetooth: hci1: command tx timeout [ 1479.004379][T20075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.272528][T14695] Bluetooth: hci1: command tx timeout [ 1480.812392][T20075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.714525][T20075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.032072][T20186] fuse: fd is not a fuse device [ 1482.421323][T20075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.656425][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.421368][T20075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1485.861318][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1485.870095][T20075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1486.108200][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1486.122230][T20075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1486.157243][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1486.158404][T20075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1486.211788][T20075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1486.444292][T20075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.492086][T20075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.512393][T19379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.513517][T19379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.553619][T19379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.553747][T19379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.574869][T20246] fuse: fd is not a fuse device [ 1487.781772][T20075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.040995][T20075] veth0_vlan: entered promiscuous mode [ 1488.130142][T20298] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4231'. [ 1488.300046][T20075] veth1_vlan: entered promiscuous mode [ 1489.164049][T20075] veth0_macvtap: entered promiscuous mode [ 1489.179582][T20075] veth1_macvtap: entered promiscuous mode [ 1489.291069][T20075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.318099][T20075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.351410][T19379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.354092][T19379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.354842][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.381031][T19379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.040152][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.040172][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.085810][ T3376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.085828][ T3376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.339486][T20322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4238'. [ 1496.647281][T20365] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1497.263125][T20367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4255'. [ 1497.640107][T20377] blkio.reset_stats is deprecated [ 1499.484948][T20408] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4270'. [ 1501.203200][T20431] fuse: fd is not a fuse device [ 1505.156316][T20459] hub 8-0:1.0: USB hub found [ 1505.169725][T20459] hub 8-0:1.0: 1 port detected [ 1506.376735][T20472] netlink: 'syz.7.4296': attribute type 1 has an invalid length. [ 1506.432328][T20472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1506.599525][T20472] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1507.768511][T20510] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4313'. [ 1516.693192][T20630] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1519.584839][T20664] bridge0: port 3(syz_tun) entered blocking state [ 1519.584966][T20664] bridge0: port 3(syz_tun) entered disabled state [ 1519.585163][T20664] syz_tun: entered allmulticast mode [ 1519.586656][T20664] syz_tun: entered promiscuous mode [ 1519.587266][T20664] bridge0: port 3(syz_tun) entered blocking state [ 1519.587333][T20664] bridge0: port 3(syz_tun) entered forwarding state [ 1520.062015][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4380'. [ 1520.769936][T20699] bridge0: port 3(syz_tun) entered blocking state [ 1520.770188][T20699] bridge0: port 3(syz_tun) entered disabled state [ 1520.770488][T20699] syz_tun: entered allmulticast mode [ 1520.791866][T20699] syz_tun: entered promiscuous mode [ 1520.800770][T20699] bridge0: port 3(syz_tun) entered blocking state [ 1520.800888][T20699] bridge0: port 3(syz_tun) entered forwarding state [ 1522.991022][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1522.992495][T20726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1523.087113][T20732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4400'. [ 1523.142740][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4400'. [ 1523.172986][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4400'. [ 1523.417856][T20742] bridge0: port 3(syz_tun) entered blocking state [ 1523.417990][T20742] bridge0: port 3(syz_tun) entered disabled state [ 1523.418165][T20742] syz_tun: entered allmulticast mode [ 1523.419756][T20742] syz_tun: entered promiscuous mode [ 1523.420191][T20742] bridge0: port 3(syz_tun) entered blocking state [ 1523.420253][T20742] bridge0: port 3(syz_tun) entered forwarding state [ 1524.901268][T20775] capability: warning: `syz.8.4418' uses 32-bit capabilities (legacy support in use) [ 1525.374343][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4423'. [ 1525.376501][T20787] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4423'. [ 1528.382655][ T5729] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1528.532602][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 1528.534718][ T5729] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1528.537598][ T5729] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1528.537622][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.537654][ T5729] usb 2-1: Product: syz [ 1528.537665][ T5729] usb 2-1: Manufacturer: syz [ 1528.537676][ T5729] usb 2-1: SerialNumber: syz [ 1528.589736][ T5729] usb 2-1: config 0 descriptor?? [ 1528.599699][ T5729] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1528.601526][ T5729] usb 2-1: Detected FT232R [ 1528.810324][ T5729] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1529.031617][ T5729] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 1529.068159][ T5729] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1529.187461][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4438'. [ 1529.189125][T20828] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4438'. [ 1529.236269][ T5729] usb 2-1: USB disconnect, device number 3 [ 1529.286484][ T5729] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1529.307620][ T5729] ftdi_sio 2-1:0.0: device disconnected [ 1529.851669][T20841] netlink: 892 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1531.699395][T20859] random: crng reseeded on system resumption [ 1533.855699][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4456'. [ 1533.857826][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4456'. [ 1535.568991][T20911] Bluetooth: MGMT ver 1.23 [ 1535.955298][T20926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4479'. [ 1535.956924][T20926] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4479'. [ 1537.430907][T20954] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4493'. [ 1538.809785][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4506'. [ 1538.809991][T20987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.941820][T20987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.917815][T21062] fuse: fd is not a fuse device [ 1545.953638][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.392317][T21143] fuse: fd is not a fuse device [ 1556.880434][T21189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4582'. [ 1557.021593][T21189] bridge0: port 3(syz_tun) entered disabled state [ 1557.022277][T21189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.085060][T21189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.582920][ T36] kauditd_printk_skb: 131 callbacks suppressed [ 1560.582935][ T36] audit: type=1326 audit(1779248258.448:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.582960][ T36] audit: type=1326 audit(1779248258.448:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.582983][ T36] audit: type=1326 audit(1779248258.448:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.583004][ T36] audit: type=1326 audit(1779248258.448:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.583027][ T36] audit: type=1326 audit(1779248258.448:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.583048][ T36] audit: type=1326 audit(1779248258.448:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.583070][ T36] audit: type=1326 audit(1779248258.448:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.583093][ T36] audit: type=1326 audit(1779248258.448:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.583114][ T36] audit: type=1326 audit(1779248258.448:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1560.583143][ T36] audit: type=1326 audit(1779248258.448:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21228 comm="syz.1.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0a137ce59 code=0x7ffc0000 [ 1561.343323][T21249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1563.609343][T21277] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1563.726682][T21277] netlink: 'syz.2.4620': attribute type 4 has an invalid length. [ 1567.675887][T21336] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4642'. [ 1571.036215][T21382] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1575.304107][T21485] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4703'. [ 1576.267884][T21509] netlink: 324 bytes leftover after parsing attributes in process `syz.8.4715'. [ 1576.660769][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1578.571983][T11472] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1578.617390][T11472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1578.621618][T11472] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1578.623483][T11472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1578.628584][T11472] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1580.897899][T14695] Bluetooth: hci5: command tx timeout [ 1582.468203][T19827] bridge0: port 3(syz_tun) entered disabled state [ 1582.587584][T19827] syz_tun (unregistering): left allmulticast mode [ 1582.587616][T19827] syz_tun (unregistering): left promiscuous mode [ 1582.606438][T19827] bridge0: port 3(syz_tun) entered disabled state [ 1582.912647][T14695] Bluetooth: hci5: command tx timeout [ 1583.059111][T21577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.059352][T21577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.059555][T21577] bridge_slave_0: entered allmulticast mode [ 1583.062376][T21577] bridge_slave_0: entered promiscuous mode [ 1583.092645][T21577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.092856][T21577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.093056][T21577] bridge_slave_1: entered allmulticast mode [ 1583.095805][T21577] bridge_slave_1: entered promiscuous mode [ 1583.352888][ T3469] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.542092][T21577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.562938][T21577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.774605][ T3469] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.850816][T21577] team0: Port device team_slave_0 added [ 1583.860626][T21577] team0: Port device team_slave_1 added [ 1584.046785][T21577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.046801][T21577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.046826][T21577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.097099][T21577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.097114][T21577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.097138][T21577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.236435][ T3469] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.593449][T21577] hsr_slave_0: entered promiscuous mode [ 1585.594953][T21577] hsr_slave_1: entered promiscuous mode [ 1585.596111][T21577] debugfs: 'hsr0' already exists in 'hsr' [ 1585.596135][T21577] Cannot create hsr debugfs directory [ 1586.102563][T14695] Bluetooth: hci5: command tx timeout [ 1586.227034][ T3469] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.906020][ T3469] bridge_slave_1: left allmulticast mode [ 1587.906054][ T3469] bridge_slave_1: left promiscuous mode [ 1587.927499][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.637211][T14695] Bluetooth: hci5: command tx timeout [ 1588.684920][ T3469] bridge_slave_0: left allmulticast mode [ 1588.684953][ T3469] bridge_slave_0: left promiscuous mode [ 1588.685214][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.956857][T21719] syz.7.4790 (21719) used greatest stack depth: 16480 bytes left [ 1590.596808][ T3469] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1594.753693][T20078] Bluetooth: hci1: command 0x0406 tx timeout [ 1594.921366][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.965216][ T3469] bond0 (unregistering): Released all slaves [ 1595.025376][ T3469] bond1 (unregistering): Released all slaves [ 1595.363522][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1596.109253][ T3469] tipc: Left network mode [ 1597.450479][T21791] random: crng reseeded on system resumption [ 1603.808310][T21577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1604.187179][T21577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1604.188208][T21577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1604.245672][T21577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1604.394514][T21577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1604.447244][T21577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1604.490329][T21577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1604.568786][T21577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1605.237788][T21577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.316907][T21577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.346803][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.346941][T15265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.650302][ T3469] hsr_slave_0: left promiscuous mode [ 1605.686915][ T3469] hsr_slave_1: left promiscuous mode [ 1605.690635][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1605.690659][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.735334][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1605.735360][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.736785][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4834'. [ 1605.879804][ T3469] veth1_macvtap: left promiscuous mode [ 1605.879918][ T3469] veth0_macvtap: left promiscuous mode [ 1605.903432][ T3469] veth1_vlan: left promiscuous mode [ 1605.903619][ T3469] veth0_vlan: left promiscuous mode [ 1607.319808][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.513195][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 1607.574717][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 1608.324549][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.327025][T15265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.350297][T21885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.599691][T21885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.725008][T21577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.983114][T21577] veth0_vlan: entered promiscuous mode [ 1611.024328][T21577] veth1_vlan: entered promiscuous mode [ 1611.151982][T21577] veth0_macvtap: entered promiscuous mode [ 1611.242826][T21577] veth1_macvtap: entered promiscuous mode [ 1611.345505][T21577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.375923][T21577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.421916][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.428718][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.434983][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.454741][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.500459][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.500477][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.774686][T21970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4859'. [ 1612.808396][ T3376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.808413][ T3376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.268606][T20078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1614.355150][T20078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1614.357234][T20078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1614.358311][T20078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1614.359234][T20078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1615.284270][T21997] could not allocate digest TFM handle xxhash64 [ 1615.678948][ T3469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.783627][T22015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4872'. [ 1615.823853][T22015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.018576][T22015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.632296][T14695] Bluetooth: hci3: command tx timeout [ 1617.888056][ T3469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.945253][T22030] Bluetooth: hci0: invalid len left 7, exp >= 130 [ 1618.415591][ T3469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.673015][T20078] Bluetooth: hci3: command tx timeout [ 1619.153511][ T3469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.209105][T22050] could not allocate digest TFM handle xxhash64 [ 1619.485522][ T5739] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1619.714526][ T5739] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1619.714554][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.714571][ T5739] usb 2-1: Product: syz [ 1619.714583][ T5739] usb 2-1: Manufacturer: syz [ 1619.714609][ T5739] usb 2-1: SerialNumber: syz [ 1620.360253][ T5739] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1620.360312][ T5739] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1620.377571][ T5739] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1620.377627][ T5739] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1620.397243][ T5739] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1620.776991][ T5739] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1621.629385][T20078] Bluetooth: hci3: command tx timeout [ 1622.024528][T21982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.026866][T21982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.027176][T21982] bridge_slave_0: entered allmulticast mode [ 1622.039476][T21982] bridge_slave_0: entered promiscuous mode [ 1622.048151][T21982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.048270][T21982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.048522][T21982] bridge_slave_1: entered allmulticast mode [ 1622.062023][T21982] bridge_slave_1: entered promiscuous mode [ 1622.270624][T17046] usb 2-1: USB disconnect, device number 4 [ 1622.530841][T21982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.559035][T21982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.632679][T20078] Bluetooth: hci3: command tx timeout [ 1626.074378][ T3469] bridge_slave_1: left allmulticast mode [ 1626.074411][ T3469] bridge_slave_1: left promiscuous mode [ 1626.074657][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.235897][ T3469] bridge_slave_0: left allmulticast mode [ 1626.235921][ T3469] bridge_slave_0: left promiscuous mode [ 1626.236098][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.532270][T22119] could not allocate digest TFM handle xxhash64 [ 1627.169820][ T3469] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1627.948962][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.033399][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1628.076388][ T3469] bond0 (unregistering): Released all slaves [ 1628.093804][ T3469] bond1 (unregistering): Released all slaves [ 1628.294401][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1630.164960][T21982] team0: Port device team_slave_0 added [ 1630.167596][T21982] team0: Port device team_slave_1 added [ 1630.219357][T21982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.219371][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.219388][T21982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.225431][T21982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.225445][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.225468][T21982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.365927][T21982] hsr_slave_0: entered promiscuous mode [ 1630.371424][T21982] hsr_slave_1: entered promiscuous mode [ 1630.371996][T21982] debugfs: 'hsr0' already exists in 'hsr' [ 1630.372017][T21982] Cannot create hsr debugfs directory [ 1630.546846][T22140] program syz.2.4905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1631.194364][T22152] could not allocate digest TFM handle xxhash64 [ 1632.473200][ T5263] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1633.379436][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4925'. [ 1633.414254][T22208] could not allocate digest TFM handle xxhash64 [ 1634.147729][T22212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.234171][T22212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.554420][ T3469] hsr_slave_0: left promiscuous mode [ 1634.814694][ T3469] hsr_slave_1: left promiscuous mode [ 1634.838158][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.838184][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.886240][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.886466][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.935237][ T3469] batman_adv: batadv0: Interface deactivated: dummy0 [ 1634.935263][ T3469] batman_adv: batadv0: Removing interface: dummy0 [ 1635.120378][ T3469] veth1_macvtap: left promiscuous mode [ 1635.120480][ T3469] veth0_macvtap: left promiscuous mode [ 1635.120718][ T3469] veth1_vlan: left promiscuous mode [ 1635.120891][ T3469] veth0_vlan: left promiscuous mode [ 1637.026609][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 1637.084541][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 1637.594533][T22284] could not allocate digest TFM handle xxhash64 [ 1639.186585][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4943'. [ 1639.209638][T22312] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4943'. [ 1639.368739][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4942'. [ 1640.435638][T21982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1640.485731][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1640.486717][T21982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1640.968516][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1641.034930][T21982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1641.106055][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1641.125460][T21982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1641.160617][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1641.799559][T21982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.805247][T22366] could not allocate digest TFM handle xxhash64 [ 1642.010034][T21982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.071153][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.071357][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1642.170311][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.170394][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.188031][T22383] syz_tun: entered allmulticast mode [ 1642.863559][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4957'. [ 1642.865727][T22406] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4957'. [ 1642.880397][T22407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4956'. [ 1643.191108][T21982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1643.258387][T21982] veth0_vlan: entered promiscuous mode [ 1643.265879][T21982] veth1_vlan: entered promiscuous mode [ 1643.336145][T21982] veth0_macvtap: entered promiscuous mode [ 1643.371170][T21982] veth1_macvtap: entered promiscuous mode [ 1643.783681][T21982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.822237][T21982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.872692][ T8443] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1643.912386][ T160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.915000][ T160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.915434][ T160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.915472][ T160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.064367][ T8443] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1644.064395][ T8443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.064411][ T8443] usb 2-1: Product: syz [ 1644.064423][ T8443] usb 2-1: Manufacturer: syz [ 1644.064434][ T8443] usb 2-1: SerialNumber: syz [ 1644.570927][ T8443] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1644.570987][ T8443] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1644.861880][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.861901][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.976564][ T8443] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1644.976626][ T8443] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1644.979100][ T8443] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1645.369680][ T8443] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1645.441660][ T3320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.441679][ T3320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.686124][T22441] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4966'. [ 1645.884609][T22448] could not allocate digest TFM handle xxhash64 [ 1646.156290][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4969'. [ 1646.445475][T15143] usb 2-1: USB disconnect, device number 5 [ 1647.185414][T22475] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1647.395748][T22485] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4979'. [ 1650.253015][ T5615] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1650.540259][ T5615] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1650.540288][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.540305][ T5615] usb 3-1: Product: syz [ 1650.540318][ T5615] usb 3-1: Manufacturer: syz [ 1650.540330][ T5615] usb 3-1: SerialNumber: syz [ 1650.906830][T22512] could not allocate digest TFM handle xxhash64 [ 1651.190509][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1651.190570][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1651.550141][T22525] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4991'. [ 1651.799994][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1651.800047][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1651.801255][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1651.831858][ T5615] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1652.839558][ T5739] usb 3-1: USB disconnect, device number 29 [ 1653.940970][T22561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5002'. [ 1654.022328][T22563] could not allocate digest TFM handle xxhash64 [ 1657.882653][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1658.007147][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1658.026526][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1658.027792][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1658.047261][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1658.047288][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.047307][ T9] usb 4-1: Product: syz [ 1658.047319][ T9] usb 4-1: Manufacturer: syz [ 1658.047331][ T9] usb 4-1: SerialNumber: syz [ 1658.232285][T22607] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5017'. [ 1658.497086][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1658.497144][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1658.717746][T22615] could not allocate digest TFM handle xxhash64 [ 1658.865938][T22602] infiniband syz2: set active [ 1658.865958][T22602] infiniband syz2: added ip6_vti0 [ 1658.888673][ T5707] ip6_vti0 speed is unknown, defaulting to 1000 [ 1659.123734][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1659.123804][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1659.124708][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1659.188725][T22602] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1659.188761][T22602] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1659.188797][T22602] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1659.358396][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1660.376455][ T9] usb 4-1: USB disconnect, device number 8 [ 1660.418446][T22602] RDS/IB: syz2: added [ 1660.443259][T22602] smc: adding ib device syz2 with port count 1 [ 1660.448279][T22602] smc: ib device syz2 port 1 has no pnetid [ 1660.481425][ T5707] ip6_vti0 speed is unknown, defaulting to 1000 [ 1660.712114][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1661.784088][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1663.043373][T22653] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5031'. [ 1663.075821][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1664.751967][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1665.000558][T22669] could not allocate digest TFM handle xxhash64 [ 1665.805128][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1666.381621][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1667.021817][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 1667.021951][ T36] audit: type=1326 audit(1779248364.898:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.024388][ T36] audit: type=1326 audit(1779248364.898:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.025790][ T36] audit: type=1326 audit(1779248364.898:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.026806][ T36] audit: type=1326 audit(1779248364.898:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.029103][ T36] audit: type=1326 audit(1779248364.908:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.030110][ T36] audit: type=1326 audit(1779248364.908:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.031024][ T36] audit: type=1326 audit(1779248364.908:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.032000][ T36] audit: type=1326 audit(1779248364.908:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.034150][ T36] audit: type=1326 audit(1779248364.908:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1667.035335][ T36] audit: type=1326 audit(1779248364.908:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22683 comm="syz.8.5041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1668.757939][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.788116][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1668.978787][T22699] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5046'. [ 1669.113949][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1669.170061][T22705] tipc: Enabling of bearer rejected, failed to enable media [ 1669.557057][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1669.604178][ T5739] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1669.758236][ T5739] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1669.758264][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.758282][ T5739] usb 4-1: Product: syz [ 1669.758295][ T5739] usb 4-1: Manufacturer: syz [ 1669.758307][ T5739] usb 4-1: SerialNumber: syz [ 1670.131832][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1670.217304][ T5739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1670.217365][ T5739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1670.947666][ T5739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1670.947738][ T5739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1670.994479][ T5739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1671.019125][T22602] ip6_vti0 speed is unknown, defaulting to 1000 [ 1671.083444][ T5739] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1672.786980][T14695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1672.870001][T14695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1672.878738][T14695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1672.894229][T14695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1672.894939][T14695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1673.135525][ T5739] usb 4-1: USB disconnect, device number 9 [ 1673.517023][T22745] ip6_vti0 speed is unknown, defaulting to 1000 [ 1674.080834][T22781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5072'. [ 1674.398451][ T36] kauditd_printk_skb: 237 callbacks suppressed [ 1674.398502][ T36] audit: type=1326 audit(1779248372.288:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.413411][ T36] audit: type=1326 audit(1779248372.288:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.413461][ T36] audit: type=1326 audit(1779248372.298:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.413500][ T36] audit: type=1326 audit(1779248372.298:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.413536][ T36] audit: type=1326 audit(1779248372.298:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.413574][ T36] audit: type=1326 audit(1779248372.298:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.413621][ T36] audit: type=1326 audit(1779248372.298:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.415824][ T36] audit: type=1326 audit(1779248372.298:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.415882][ T36] audit: type=1326 audit(1779248372.308:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.417718][ T36] audit: type=1326 audit(1779248372.308:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.2.5073" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a6993ce59 code=0x7ffc0000 [ 1674.717671][T22602] bridge0: port 3(syz_tun) entered disabled state [ 1674.896331][T22602] syz_tun (unregistering): left allmulticast mode [ 1674.896364][T22602] syz_tun (unregistering): left promiscuous mode [ 1674.896499][T22602] bridge0: port 3(syz_tun) entered disabled state [ 1674.992654][T20078] Bluetooth: hci2: command tx timeout [ 1675.300528][T22799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'. [ 1676.819616][T19379] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.073144][T20078] Bluetooth: hci2: command tx timeout [ 1677.318926][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'. [ 1677.537497][T19379] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.572740][T22832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5092'. [ 1677.866558][T22745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.866765][T22745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.867306][T22745] bridge_slave_0: entered allmulticast mode [ 1677.870057][T22745] bridge_slave_0: entered promiscuous mode [ 1678.640980][T19379] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.481555][T20078] Bluetooth: hci2: command tx timeout [ 1679.500432][T22745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.500554][T22745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.500850][T22745] bridge_slave_1: entered allmulticast mode [ 1679.507318][T22745] bridge_slave_1: entered promiscuous mode [ 1679.768791][T22745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.777081][T22745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.803259][T19379] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.887458][T22745] team0: Port device team_slave_0 added [ 1681.031657][T22745] team0: Port device team_slave_1 added [ 1681.114472][T22745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.114488][T22745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.114512][T22745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.117006][T22745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.117020][T22745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.117044][T22745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.334103][T22745] hsr_slave_0: entered promiscuous mode [ 1681.335533][T22745] hsr_slave_1: entered promiscuous mode [ 1681.336513][T22745] debugfs: 'hsr0' already exists in 'hsr' [ 1681.336536][T22745] Cannot create hsr debugfs directory [ 1681.553751][T20078] Bluetooth: hci2: command tx timeout [ 1683.802973][T22910] tmpfs: Unknown parameter 'nr_ino' [ 1684.974842][ T36] kauditd_printk_skb: 218 callbacks suppressed [ 1684.974860][ T36] audit: type=1326 audit(1779248382.858:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.974903][ T36] audit: type=1326 audit(1779248382.858:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.974942][ T36] audit: type=1326 audit(1779248382.858:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.974980][ T36] audit: type=1326 audit(1779248382.858:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.975016][ T36] audit: type=1326 audit(1779248382.858:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.975053][ T36] audit: type=1326 audit(1779248382.858:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.975092][ T36] audit: type=1326 audit(1779248382.858:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.975131][ T36] audit: type=1326 audit(1779248382.858:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.975169][ T36] audit: type=1326 audit(1779248382.858:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1684.975208][ T36] audit: type=1326 audit(1779248382.858:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22920 comm="syz.8.5116" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa86939ce59 code=0x7ffc0000 [ 1685.429239][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1686.101987][T22745] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.796040][T22957] tmpfs: Bad value for 'nr_inodes' [ 1687.817885][T19379] bridge_slave_1: left allmulticast mode [ 1687.817922][T19379] bridge_slave_1: left promiscuous mode [ 1687.818177][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.059333][T19379] bridge_slave_0: left allmulticast mode [ 1688.059358][T19379] bridge_slave_0: left promiscuous mode [ 1688.059530][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.902995][ T3377] smc: removing ib device syz2 [ 1689.205568][T19379] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1689.840124][ T3377] smbdirect: ib_dev[syz2] removed [ 1690.091235][T19379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.157567][T19379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.178342][T19379] bond0 (unregistering): Released all slaves [ 1690.253868][T19379] bond1 (unregistering): Released all slaves [ 1690.484181][ T5263] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1690.512315][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 1690.512355][ T9] syz2: Port: 1 Link DOWN [ 1691.346276][T22745] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.626259][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 1691.880126][T23009] program syz.1.5138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1692.296988][T23016] tmpfs: Bad value for 'nr_inodes' [ 1692.588448][T22745] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.788715][ T5263] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1693.029832][ T36] kauditd_printk_skb: 689 callbacks suppressed [ 1693.029849][ T36] audit: type=1326 audit(1779248390.918:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.029891][ T36] audit: type=1326 audit(1779248390.918:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.029929][ T36] audit: type=1326 audit(1779248390.918:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.029974][ T36] audit: type=1326 audit(1779248390.918:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.030014][ T36] audit: type=1326 audit(1779248390.918:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.030055][ T36] audit: type=1326 audit(1779248390.918:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.030095][ T36] audit: type=1326 audit(1779248390.918:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.030134][ T36] audit: type=1326 audit(1779248390.918:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.030172][ T36] audit: type=1326 audit(1779248390.918:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1693.030213][ T36] audit: type=1326 audit(1779248390.918:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23024 comm="syz.3.5143" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5c839bce59 code=0x7ffc0000 [ 1694.846083][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5148'. [ 1694.918693][T22745] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.261583][T23058] program syz.1.5150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1695.328489][ T5263] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1695.512629][T23064] tmpfs: Bad value for 'nr_inodes' [ 1696.099386][T23074] netlink: 'syz.8.5156': attribute type 36 has an invalid length. [ 1696.110806][T23074] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1696.110827][T23074] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1696.115575][T23074] netlink: 'syz.8.5156': attribute type 10 has an invalid length. [ 1697.072556][T23074] macvlan1: entered allmulticast mode [ 1697.139792][T23074] veth1_vlan: entered allmulticast mode [ 1697.147247][T23074] team0: Port device macvlan1 added [ 1697.719359][T23089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5158'. [ 1698.242168][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1698.266784][T22745] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1698.333055][T22745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1698.337097][T22745] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1698.388653][T22745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1698.392012][T22745] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1698.576624][T22745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1698.577736][T22745] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1698.748890][T22745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1698.960138][T23110] program syz.3.5163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1699.272273][T22745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.449078][T22745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.462875][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.463032][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.541731][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.542037][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.409924][T22745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1701.540986][T23142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1701.553514][T11472] Bluetooth: hci5: command 0x0406 tx timeout [ 1701.852689][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5172'. [ 1702.234891][T22745] veth0_vlan: entered promiscuous mode [ 1702.270554][T22745] veth1_vlan: entered promiscuous mode [ 1702.318681][T22745] veth0_macvtap: entered promiscuous mode [ 1703.788644][T22745] veth1_macvtap: entered promiscuous mode [ 1703.891816][T22745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.933766][T22745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1703.959877][T15265] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.961001][T15265] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.964031][T15265] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.037667][T15265] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.298900][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.298922][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.542560][T19379] hsr_slave_0: left promiscuous mode [ 1705.582636][T19379] hsr_slave_1: left promiscuous mode [ 1705.583695][T19379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.583712][T19379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.693661][T19379] veth1_macvtap: left promiscuous mode [ 1705.693771][T19379] veth0_macvtap: left promiscuous mode [ 1705.693998][T19379] veth1_vlan: left promiscuous mode [ 1705.702316][T19379] veth0_vlan: left promiscuous mode [ 1707.080226][T23213] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5195'. [ 1708.504585][T19379] team0 (unregistering): Port device team_slave_1 removed [ 1708.564878][T23233] program syz.1.5201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1708.583406][T19379] team0 (unregistering): Port device team_slave_0 removed [ 1708.976501][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 1708.991498][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.991516][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.126761][T23288] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5216'. [ 1714.183519][T23353] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5232'. [ 1714.314336][T23360] netlink: 316 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1714.638396][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5238'. [ 1714.982318][T23387] fuse: fd is not a fuse device [ 1716.245641][T23410] netlink: 316 bytes leftover after parsing attributes in process `syz.2.5248'. [ 1716.579916][T23412] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1716.632854][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5250'. [ 1716.632874][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5250'. [ 1716.974300][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5253'. [ 1718.691198][T23449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5265'. [ 1718.691219][T23449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5265'. [ 1719.200889][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5268'. [ 1721.031868][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5278'. [ 1721.031883][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5278'. [ 1721.771463][T23502] netlink: 'syz.3.5287': attribute type 1 has an invalid length. [ 1729.062141][T23502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1730.198478][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.036527][T23559] netlink: 'syz.8.5305': attribute type 1 has an invalid length. [ 1731.297340][T23559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1732.132012][T23585] netlink: 'syz.2.5313': attribute type 10 has an invalid length. [ 1736.471659][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5320'. [ 1737.411883][T14695] Bluetooth: hci3: command 0x0406 tx timeout [ 1740.786653][T23585] team0: Device wg2 is of different type [ 1743.790641][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5340'. [ 1748.804424][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5367'. [ 1752.122375][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5380'. [ 1752.477956][T23790] ipvlan2: entered allmulticast mode [ 1755.617424][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5392'. [ 1758.265888][T23859] syzkaller0: entered promiscuous mode [ 1758.265904][T23859] syzkaller0: entered allmulticast mode [ 1758.879241][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5410'. [ 1760.391924][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5414'. [ 1760.735955][T23901] syzkaller1: entered promiscuous mode [ 1760.735979][T23901] syzkaller1: entered allmulticast mode [ 1761.590979][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1763.978774][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1765.989205][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5450'. [ 1769.749692][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5461'. [ 1774.466693][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5477'. [ 1774.811985][T24078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5481'. [ 1777.840739][T24116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5494'. [ 1778.130178][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5495'. [ 1782.302004][T24168] veth1_vlan (unregistering): left allmulticast mode [ 1782.418116][T24168] team0: Port device macvlan1 removed [ 1783.427605][T24187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5516'. [ 1784.668623][T24187] vxlan0: entered promiscuous mode [ 1784.745761][ T56] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1784.746376][ T56] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1784.746414][ T56] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1784.746447][ T56] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1791.864485][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.354532][T24286] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5548'. [ 1792.650154][T24286] vxlan0: entered promiscuous mode [ 1792.654703][T24244] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.654980][T24244] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.655016][T24244] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.655049][T24244] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.910275][T24291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1793.832656][ T5707] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1793.982857][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 1793.986583][ T5707] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1793.987814][ T5707] usb 2-1: config 6 has an invalid interface number: 188 but max is 0 [ 1793.987837][ T5707] usb 2-1: config 6 has no interface number 0 [ 1793.987880][ T5707] usb 2-1: config 6 interface 188 has no altsetting 0 [ 1794.031359][ T5707] usb 2-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=f8.f9 [ 1794.031386][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.031403][ T5707] usb 2-1: Product: syz [ 1794.031416][ T5707] usb 2-1: Manufacturer: syz [ 1794.031429][ T5707] usb 2-1: SerialNumber: syz [ 1794.071739][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5556'. [ 1796.154643][ T5707] asix 2-1:6.188: probe with driver asix failed with error -22 [ 1796.160571][ T5707] usb 2-1: USB disconnect, device number 6 [ 1797.921097][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5565'. [ 1798.604764][T24343] vxlan0: entered promiscuous mode [ 1799.282246][T11472] Bluetooth: hci2: command 0x0406 tx timeout [ 1799.385352][ T160] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.452332][ T160] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.452385][ T160] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.452556][ T160] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1801.145998][T24365] 9p: Bad value for 'wfdno' [ 1805.092453][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5580'. [ 1807.116973][T24447] 9p: Bad value for 'wfdno' [ 1809.235917][T24469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1809.339987][T24470] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1809.588568][T24476] 9p: Bad value for 'wfdno' [ 1810.040398][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5607'. [ 1810.040571][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5607'. [ 1811.612787][T14959] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1811.657231][T24489] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1811.762594][T14959] usb 10-1: Using ep0 maxpacket: 8 [ 1811.785618][T14959] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1811.798670][T14959] usb 10-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1811.798698][T14959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.798715][T14959] usb 10-1: Product: syz [ 1811.798728][T14959] usb 10-1: Manufacturer: syz [ 1811.798741][T14959] usb 10-1: SerialNumber: syz [ 1812.686296][T14959] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1812.784013][T14959] usb 10-1: USB disconnect, device number 6 [ 1813.109486][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5617'. [ 1813.506650][T24526] udevd[24526]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1813.708874][T24533] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5624'. [ 1814.615198][T24546] netlink: 'syz.2.5627': attribute type 1 has an invalid length. [ 1817.303306][T24577] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5637'. [ 1817.617676][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5639'. [ 1818.032717][T24591] netlink: 'syz.2.5642': attribute type 10 has an invalid length. [ 1822.348470][T24623] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1822.349548][T24623] syzkaller1: entered promiscuous mode [ 1822.349569][T24623] syzkaller1: entered allmulticast mode [ 1822.454311][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5652'. [ 1823.443263][T24641] netlink: 'syz.1.5657': attribute type 10 has an invalid length. [ 1825.717546][T24650] netlink: 'syz.3.5660': attribute type 1 has an invalid length. [ 1826.048408][T24657] usb usb8: usbfs: process 24657 (syz.1.5661) did not claim interface 0 before use [ 1827.217483][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5666'. [ 1827.224639][T24674] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5667'. [ 1827.634202][T17046] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1827.786043][T17046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.786074][T17046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.786110][T17046] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1827.786131][T17046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.841073][T17046] usb 2-1: config 0 descriptor?? [ 1828.264877][T17046] usbhid 2-1:0.0: can't add hid device: -71 [ 1828.265006][T17046] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1828.314636][T17046] usb 2-1: USB disconnect, device number 7 [ 1829.420515][T24691] netlink: 'syz.9.5673': attribute type 1 has an invalid length. [ 1829.762662][T17046] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1829.801873][T24701] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5678'. [ 1829.920259][T24706] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5680'. [ 1829.935151][T17046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.935198][T17046] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1829.935219][T17046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.939710][T24709] 9p: Bad value for 'wfdno' [ 1829.983453][T17046] usb 2-1: config 0 descriptor?? [ 1830.201997][T17046] usbhid 2-1:0.0: can't add hid device: -71 [ 1830.202077][T17046] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1830.225489][T17046] usb 2-1: USB disconnect, device number 8 [ 1830.732806][T17046] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1831.236263][T17046] usb 2-1: Using ep0 maxpacket: 32 [ 1831.407065][T17046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.407112][T17046] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1831.407134][T17046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.446079][T17046] usb 2-1: config 0 descriptor?? [ 1831.465651][T17046] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1831.529299][T17046] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1831.920205][T14959] usb 2-1: USB disconnect, device number 9 [ 1832.005898][T14959] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1832.154443][T24742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1832.548770][T24746] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5694'. [ 1834.327601][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1836.273066][T24793] random: crng reseeded on system resumption [ 1836.457199][T24793] Restarting kernel threads ... [ 1836.531478][T24793] Done restarting kernel threads. [ 1839.937604][T24819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1839.937622][T24819] IPv6: NLM_F_CREATE should be set when creating new route [ 1841.402789][ T5729] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1841.650233][ T5729] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1841.650262][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.650280][ T5729] usb 2-1: Product: syz [ 1841.650293][ T5729] usb 2-1: Manufacturer: syz [ 1841.650305][ T5729] usb 2-1: SerialNumber: syz [ 1842.457861][ T5729] usb 2-1: config 0 descriptor?? [ 1842.681953][ T5729] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1844.859542][ T5729] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1844.900535][ T5729] usb 2-1: USB disconnect, device number 10 [ 1853.182036][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.598763][T25040] 9p: Bad value for 'wfdno' [ 1874.690391][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5836'. [ 1876.536958][T25183] xfrm0: entered allmulticast mode [ 1881.847722][T25222] netlink: 'syz.3.5855': attribute type 10 has an invalid length. [ 1883.576071][T25244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5862'. [ 1885.691812][T25259] random: crng reseeded on system resumption [ 1887.397913][T25272] netlink: 'syz.2.5872': attribute type 10 has an invalid length. [ 1892.733674][T25307] netlink: 'syz.9.5881': attribute type 3 has an invalid length. [ 1892.790074][T25307] netlink: 'syz.9.5881': attribute type 3 has an invalid length. [ 1894.608862][T25316] netlink: 'syz.1.5884': attribute type 10 has an invalid length. [ 1898.219306][T25357] netlink: 'syz.8.5898': attribute type 10 has an invalid length. [ 1898.642790][T25363] cgroup: subsys name conflicts with all [ 1902.725665][T25394] netlink: 'syz.8.5910': attribute type 10 has an invalid length. [ 1903.236447][T25398] 9p: Bad value for 'wfdno' [ 1904.150125][T11472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1904.220478][T11472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1904.229326][T11472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1904.235305][T11472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1904.239287][T11472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1904.975404][T25396] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5911'. [ 1904.977382][T25396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.978345][T25396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.365113][T11472] Bluetooth: hci4: command tx timeout [ 1908.524487][T11472] Bluetooth: hci4: command tx timeout [ 1909.743503][T25451] 9p: Bad value for 'wfdno' [ 1909.902886][T25402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.903078][T25402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.903289][T25402] bridge_slave_0: entered allmulticast mode [ 1909.905563][T25402] bridge_slave_0: entered promiscuous mode [ 1909.982795][T25402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.983016][T25402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.983278][T25402] bridge_slave_1: entered allmulticast mode [ 1909.985950][T25402] bridge_slave_1: entered promiscuous mode [ 1910.035224][T25402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.038627][T25402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.188034][T25402] team0: Port device team_slave_0 added [ 1910.191678][T25402] team0: Port device team_slave_1 added [ 1910.340273][T25402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1910.340285][T25402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1910.340298][T25402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.341734][T25402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.341743][T25402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1910.341757][T25402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.623618][T11472] Bluetooth: hci4: command tx timeout [ 1911.416161][T25469] netlink: 'syz.2.5927': attribute type 10 has an invalid length. [ 1911.471358][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 1911.471375][ T36] audit: type=1326 audit(1779248609.358:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25471 comm="syz.3.5928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c839bce59 code=0x0 [ 1911.564508][T25402] hsr_slave_0: entered promiscuous mode [ 1911.566734][T25402] hsr_slave_1: entered promiscuous mode [ 1911.571014][T25402] debugfs: 'hsr0' already exists in 'hsr' [ 1911.571044][T25402] Cannot create hsr debugfs directory [ 1912.750833][T11472] Bluetooth: hci4: command tx timeout [ 1913.688933][T25402] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.599989][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1914.688387][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.435331][T25500] 9p: Bad value for 'wfdno' [ 1915.530202][T25402] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.150551][T25402] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.209241][ T36] audit: type=1326 audit(1779248614.098:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25509 comm="syz.3.5941" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c839bce59 code=0x0 [ 1916.560252][T25402] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.411024][T25533] netlink: 'syz.3.5946': attribute type 10 has an invalid length. [ 1919.394593][T25402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1919.484514][T25402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1919.485911][T25402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1919.645923][T25402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1919.660809][T25402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1919.712164][T25402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1919.720059][T25402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1919.760999][T25402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1920.180544][T25402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.259091][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5955'. [ 1923.601568][T25402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1923.630248][T19379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.630925][T19379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.672281][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.679918][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.943993][T25568] 9p: Bad value for 'wfdno' [ 1925.503871][T25402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1927.331692][T25402] veth0_vlan: entered promiscuous mode [ 1927.343101][T25402] veth1_vlan: entered promiscuous mode [ 1927.434363][T25402] veth0_macvtap: entered promiscuous mode [ 1927.452669][T25402] veth1_macvtap: entered promiscuous mode [ 1927.519986][T25402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1927.564290][T25402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1927.608155][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.608276][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.608314][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.608347][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.912033][T25615] netlink: 'syz.2.5966': attribute type 10 has an invalid length. [ 1928.859273][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1928.859291][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1929.116478][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.116496][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.538580][T25635] syzkaller1: entered promiscuous mode [ 1930.538604][T25635] syzkaller1: entered allmulticast mode [ 1931.449459][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5970'. [ 1935.105746][T25686] netlink: 'syz.2.5984': attribute type 10 has an invalid length. [ 1938.179008][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1940.045997][T25746] netlink: 'syz.5.6005': attribute type 10 has an invalid length. [ 1941.114777][T25746] macvlan1: entered allmulticast mode [ 1941.199418][T25746] veth1_vlan: entered allmulticast mode [ 1941.280571][T25746] team0: Port device macvlan1 added [ 1947.499432][T25812] netlink: 'syz.2.6027': attribute type 10 has an invalid length. [ 1948.641294][T25821] gretap0: entered promiscuous mode [ 1952.130107][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6041'. [ 1952.329223][T25856] netlink: 'syz.8.6043': attribute type 10 has an invalid length. [ 1955.916699][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6056'. [ 1958.442388][T25909] netlink: 'syz.5.6063': attribute type 10 has an invalid length. [ 1958.442857][T25909] veth1_vlan: left allmulticast mode [ 1959.240597][T25923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6071'. [ 1960.745871][T25937] netlink: 'syz.5.6078': attribute type 1 has an invalid length. [ 1960.745892][T25937] netlink: 'syz.5.6078': attribute type 2 has an invalid length. [ 1960.961788][T25947] netlink: 'syz.3.6079': attribute type 10 has an invalid length. [ 1962.800890][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6087'. [ 1963.728707][T25962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.729614][T25962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.372728][T25962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1965.383605][T25962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1967.653969][ T39] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.654319][ T39] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.654357][ T39] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.654390][ T39] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.510423][T26012] netlink: 'syz.8.6100': attribute type 10 has an invalid length. [ 1970.784675][T26024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1971.579727][T26034] netlink: 'syz.1.6110': attribute type 1 has an invalid length. [ 1976.007999][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.451296][T26078] netlink: 'syz.5.6123': attribute type 10 has an invalid length. [ 1981.309375][T26105] netem: change failed [ 1984.266498][T26140] netlink: 'syz.3.6142': attribute type 10 has an invalid length. [ 1997.278606][T26185] netlink: 'syz.8.6156': attribute type 10 has an invalid length. [ 1998.617097][T26188] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6158'. [ 2000.315346][T26164] syz.5.6150 (26164): drop_caches: 2 [ 2003.844840][T26222] netlink: 'syz.1.6168': attribute type 10 has an invalid length. [ 2005.334504][T26232] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (comedi_parport) [ 2009.024307][T26263] gretap0: entered promiscuous mode [ 2009.370285][T26274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6187'. [ 2009.420360][T26274] bridge1: port 1(dummy0) entered blocking state [ 2009.420439][T26274] bridge1: port 1(dummy0) entered disabled state [ 2009.420676][T26274] dummy0: entered allmulticast mode [ 2009.422359][T26274] dummy0: entered promiscuous mode [ 2009.464091][T26274] netlink: 'syz.5.6187': attribute type 10 has an invalid length. [ 2009.464114][T26274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6187'. [ 2009.504366][T26274] bridge1: port 1(dummy0) entered blocking state [ 2009.506681][T26274] bridge1: port 1(dummy0) entered forwarding state [ 2009.872884][T26274] dummy0: left allmulticast mode [ 2009.907011][T26274] bridge1: port 1(dummy0) entered disabled state [ 2011.026424][T26295] netlink: 'syz.2.6194': attribute type 1 has an invalid length. [ 2015.501970][T26326] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 2021.451527][T26354] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (comedi_parport) [ 2026.867868][T26392] 9pnet_fd: Insufficient options for proto=fd [ 2027.748518][T26410] fuse: fd is not a fuse device [ 2029.835697][T14695] Bluetooth: hci4: command 0x0406 tx timeout [ 2032.645831][T26463] fuse: fd is not a fuse device [ 2035.999414][T26488] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6264'. [ 2037.407980][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.478816][T26508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6270'. [ 2038.907777][T26397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2038.990766][T26397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2038.993573][T26397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2038.999946][T26397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2039.008547][T26397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2040.363202][T26539] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6280'. [ 2040.363232][T26539] netlink: 43 bytes leftover after parsing attributes in process `syz.8.6280'. [ 2040.363250][T26539] netlink: 'syz.8.6280': attribute type 5 has an invalid length. [ 2040.363263][T26539] netlink: 43 bytes leftover after parsing attributes in process `syz.8.6280'. [ 2040.479842][T26549] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.6281'. [ 2041.162727][T26397] Bluetooth: hci6: command tx timeout [ 2041.548803][T26514] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.548937][T26514] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.549090][T26514] bridge_slave_0: entered allmulticast mode [ 2041.550588][T26514] bridge_slave_0: entered promiscuous mode [ 2041.594119][T26514] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.595532][T26514] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.598705][T26514] bridge_slave_1: entered allmulticast mode [ 2041.747605][T26514] bridge_slave_1: entered promiscuous mode [ 2042.317804][T26514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2042.322035][T26514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2042.382959][T26514] team0: Port device team_slave_0 added [ 2042.386670][T26514] team0: Port device team_slave_1 added [ 2042.438308][T26514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.438326][T26514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.438350][T26514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.440536][T26514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.440549][T26514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.440572][T26514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2042.622570][T26514] hsr_slave_0: entered promiscuous mode [ 2042.624035][T26514] hsr_slave_1: entered promiscuous mode [ 2042.625059][T26514] debugfs: 'hsr0' already exists in 'hsr' [ 2042.625083][T26514] Cannot create hsr debugfs directory [ 2043.316305][T26397] Bluetooth: hci6: command tx timeout [ 2045.285409][T26583] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6293'. [ 2045.285424][T26583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6293'. [ 2045.394418][T26397] Bluetooth: hci6: command tx timeout [ 2047.083244][T11472] Bluetooth: hci3: command 0x0406 tx timeout [ 2048.036950][T26397] Bluetooth: hci6: command tx timeout [ 2050.209918][T17046] libceph: connect (1)[c::]:6789 error -101 [ 2050.210861][T17046] libceph: mon0 (1)[c::]:6789 connect error [ 2050.256194][T26592] ceph: No mds server is up or the cluster is laggy [ 2050.259365][T17046] libceph: connect (1)[c::]:6789 error -101 [ 2050.259574][T17046] libceph: mon0 (1)[c::]:6789 connect error [ 2050.521963][T21320] libceph: connect (1)[c::]:6789 error -101 [ 2050.522165][T21320] libceph: mon0 (1)[c::]:6789 connect error [ 2050.657990][T11472] Bluetooth: hci3: command 0x0406 tx timeout [ 2051.026994][T17046] libceph: connect (1)[c::]:6789 error -101 [ 2051.027182][T17046] libceph: mon0 (1)[c::]:6789 connect error [ 2051.611131][T26637] netlink: 'syz.2.6301': attribute type 1 has an invalid length. [ 2058.203154][T26514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2058.247380][T26514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2058.248844][T26514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2058.313226][T26514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2058.314573][T26514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2058.340989][T26514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2058.341949][T26514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2058.379720][T26514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2058.591117][T26514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2058.625909][T26514] 8021q: adding VLAN 0 to HW filter on device team0 [ 2058.644905][T23761] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.645122][T23761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2058.657473][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.657735][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2059.373460][T26514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2059.509888][T26514] veth0_vlan: entered promiscuous mode [ 2059.530633][T26514] veth1_vlan: entered promiscuous mode [ 2059.674069][T26514] veth0_macvtap: entered promiscuous mode [ 2059.680814][T26514] veth1_macvtap: entered promiscuous mode [ 2059.705576][T26514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2059.724045][T26514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2059.738811][T23761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.739064][T23761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.739099][T23761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.739131][T23761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.681610][ T3377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.681633][ T3377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2060.899550][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.899570][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.836188][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.275521][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2162.352736][T11472] Bluetooth: hci6: command 0x0406 tx timeout [ 2183.952941][ T37] INFO: task syz-executor:20075 blocked for more than 143 seconds. [ 2183.952987][ T37] Tainted: G L syzkaller #0 [ 2183.952998][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2183.953006][ T37] task:syz-executor state:D stack:22248 pid:20075 tgid:20075 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2183.953066][ T37] Call Trace: [ 2183.953073][ T37] [ 2183.953085][ T37] __schedule+0x16ec/0x5620 [ 2183.953239][ T37] ? __pfx___schedule+0x10/0x10 [ 2183.953263][ T37] ? trace_irq_disable+0x3b/0x140 [ 2183.953350][ T37] ? __pfx___schedule+0x10/0x10 [ 2183.953368][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 2183.953409][ T37] rt_mutex_schedule+0x76/0xf0 [ 2183.953468][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2183.953497][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 2183.953517][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2183.953538][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2183.953558][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2183.953587][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 2183.953664][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 2183.953687][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 2183.953707][ T37] mutex_lock_nested+0x168/0x1d0 [ 2183.953731][ T37] nfsd_shutdown_threads+0x4e/0xd0 [ 2183.953750][ T37] nfsd_umount+0x41/0x60 [ 2183.953769][ T37] deactivate_locked_super+0xbc/0x130 [ 2183.953836][ T37] cleanup_mnt+0x437/0x4d0 [ 2183.953880][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 2183.953930][ T37] task_work_run+0x1d9/0x270 [ 2183.953978][ T37] ? __pfx_task_work_run+0x10/0x10 [ 2183.954011][ T37] exit_to_user_mode_loop+0xf3/0x4d0 [ 2183.954087][ T37] ? rcu_is_watching+0x15/0xb0 [ 2183.954156][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.954339][ T37] do_syscall_64+0x33e/0xf80 [ 2183.954395][ T37] ? clear_bhb_loop+0x40/0x90 [ 2183.954417][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.954440][ T37] RIP: 0033:0x7fe0a137e097 [ 2183.954461][ T37] RSP: 002b:00007ffd2e55c478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2183.954480][ T37] RAX: 0000000000000000 RBX: 00007fe0a14121ca RCX: 00007fe0a137e097 [ 2183.954493][ T37] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffd2e55d5c0 [ 2183.954504][ T37] RBP: 00007ffd2e55d5ac R08: 0000000000000000 R09: 0000000000000000 [ 2183.954515][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2e55d5c0 [ 2183.954526][ T37] R13: 00007fe0a14121ca R14: 00000000001ed87d R15: 00007ffd2e55d600 [ 2183.954557][ T37] [ 2183.954620][ T37] [ 2183.954620][ T37] Showing all locks held in the system: [ 2183.954630][ T37] 1 lock held by khungtaskd/37: [ 2183.954639][ T37] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2183.954735][ T37] 2 locks held by getty/5358: [ 2183.954745][ T37] #0: ffff8880338120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2183.954838][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 2183.954902][ T37] 2 locks held by syz-executor/20075: [ 2183.954908][ T37] #0: ffff8880352580d0 (&type->s_umount_key#72){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 2183.954933][ T37] #1: ffffffff8e2e8638 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 2183.954960][ T37] 2 locks held by syz.9.5881/25305: [ 2183.954972][ T37] #0: ffffffff8f3c8560 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2183.955058][ T37] #1: ffffffff8e2e8638 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x13e/0x1630 [ 2183.955084][ T37] [ 2183.955087][ T37] ============================================= [ 2183.955087][ T37] [ 2183.955096][ T37] NMI backtrace for cpu 0 [ 2183.955111][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2183.955125][ T37] Tainted: [L]=SOFTLOCKUP [ 2183.955128][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2183.955134][ T37] Call Trace: [ 2183.955138][ T37] [ 2183.955143][ T37] dump_stack_lvl+0xe8/0x150 [ 2183.955160][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 2183.955192][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2183.955212][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2183.955227][ T37] sys_info+0x135/0x170 [ 2183.955241][ T37] watchdog+0xfd3/0x1030 [ 2183.955294][ T37] ? watchdog+0x1c9/0x1030 [ 2183.955307][ T37] kthread+0x388/0x470 [ 2183.955340][ T37] ? __pfx_watchdog+0x10/0x10 [ 2183.955355][ T37] ? __pfx_kthread+0x10/0x10 [ 2183.955368][ T37] ret_from_fork+0x514/0xb70 [ 2183.955390][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2183.955401][ T37] ? __switch_to+0xc79/0x1410 [ 2183.955418][ T37] ? __pfx_kthread+0x10/0x10 [ 2183.955431][ T37] ret_from_fork_asm+0x1a/0x30 [ 2183.955450][ T37] [ 2183.955454][ T37] Sending NMI from CPU 0 to CPUs 1: [ 2183.955492][ C1] NMI backtrace for cpu 1 [ 2183.955508][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2183.955529][ C1] Tainted: [L]=SOFTLOCKUP [ 2183.955534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2183.955542][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2183.955604][ C1] Code: bb 6d 02 e9 c3 c9 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2c 2c 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2183.955617][ C1] RSP: 0018:ffffc900001d7e20 EFLAGS: 00000246 [ 2183.955631][ C1] RAX: 0000000001ce0ed1 RBX: ffffffff8199580a RCX: 0000000080000001 [ 2183.955642][ C1] RDX: 0000000000000001 RSI: ffffffff8d6072ed RDI: ffffffff8ba75860 [ 2183.955653][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8933e9b R09: 1ffff110171267d3 [ 2183.955664][ C1] R10: dffffc0000000000 R11: ffffed10171267d4 R12: 0000000000000001 [ 2183.955674][ C1] R13: 1ffff11003a50000 R14: 0000000000000001 R15: 1ffff11003a50000 [ 2183.955685][ C1] FS: 0000000000000000(0000) GS:ffff888126271000(0000) knlGS:0000000000000000 [ 2183.955698][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2183.955709][ C1] CR2: 00007f9a0f84be80 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 2183.955723][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2183.955737][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2183.955747][ C1] Call Trace: [ 2183.955753][ C1] [ 2183.955758][ C1] default_idle+0x9/0x20 [ 2183.955779][ C1] default_idle_call+0x72/0xb0 [ 2183.955799][ C1] do_idle+0x36a/0x5f0 [ 2183.955841][ C1] ? __pfx_do_idle+0x10/0x10 [ 2183.955857][ C1] ? do_idle+0x5c7/0x5f0 [ 2183.955871][ C1] cpu_startup_entry+0x43/0x60 [ 2183.955885][ C1] start_secondary+0x101/0x110 [ 2183.955901][ C1] common_startup_64+0x13e/0x147 [ 2183.955926][ C1] [ 2183.956480][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 2183.956491][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2183.956504][ T37] Tainted: [L]=SOFTLOCKUP [ 2183.956507][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2183.956512][ T37] Call Trace: [ 2183.956517][ T37] [ 2183.956520][ T37] vpanic+0x56c/0xa60 [ 2183.956534][ T37] ? __pfx___schedule+0x10/0x10 [ 2183.956546][ T37] ? __pfx_vpanic+0x10/0x10 [ 2183.956562][ T37] panic+0xc5/0xd0 [ 2183.956573][ T37] ? __pfx_panic+0x10/0x10 [ 2183.956584][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 2183.956601][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2183.956613][ T37] watchdog+0x102c/0x1030 [ 2183.956627][ T37] ? watchdog+0x1c9/0x1030 [ 2183.956640][ T37] kthread+0x388/0x470 [ 2183.956652][ T37] ? __pfx_watchdog+0x10/0x10 [ 2183.956662][ T37] ? __pfx_kthread+0x10/0x10 [ 2183.956675][ T37] ret_from_fork+0x514/0xb70 [ 2183.956687][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2183.956698][ T37] ? __switch_to+0xc79/0x1410 [ 2183.956712][ T37] ? __pfx_kthread+0x10/0x10 [ 2183.956725][ T37] ret_from_fork_asm+0x1a/0x30 [ 2183.956744][ T37] [ 2183.957243][ T37] Kernel Offset: disabled