last executing test programs: 16m57.512019637s ago: executing program 32 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) 13m12.044516637s ago: executing program 5 (id=1642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000001680)) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="713ac5b278ff8d0c05cd221a4173dfce010a953459e91a926495e1bb9666d4493b6a7be4c2972c8a822d1b891dce0d06f24757d537b52907bea6524debb52e7262fbcfb8b4525cf6d1cb3b94d14481022e25cfc90914c3c92bdd73d8191cc3cd4f20f7c7ff9865365594964be8f70ee2f1ffa5e1693536cca02ac5c48a1c7eb0a0484ae5593f6b31498152ab8d7b92ff3e0a3a278412d4a0664d93ab8a1373513be4af666fb8", 0xa6}, {0x0}, {&(0x7f0000000300)="ff72c30bbcf9fb10292c83f17e8d7e7caf4c7ef69d8ca17dfced0181e0f896fa070ab647ee2acc22c1adcad1e703baef5100572e8e5480b2b543cb3abf505681289844f0e4abf7c620ac1b30f74ffec414466a66a52f9f11e8159a6cf8e77887bbf9a64e46de8b3ae6c4b97cb66fed55b35c7f096fb3555ae7de355ae67a040c5d607962b6fe3d9c4b71d43cf0be20218de5a55bb0ea39f38a228e02f6ec292427a8406ce0769b1b56eaf37fdce3241f6debc41c769a9815571b4c5ee5c4106b0a93bb46ce037c6865f8e15b34e29c1525cc77752f7619a716746fa5d98bae1e5006af0509915a74", 0xe8}, {&(0x7f0000000080)="ccabf6055c3d21d527229f8795222913068d38d130c63ef2732ab6fc9807c05e6875be", 0x23}, {&(0x7f0000000400)="8961099b24cc42fe2bd01e4d53e6e112c5f428c9ee20beb0fd577de10456b4ce0db3b9fdb96703f167ac780682bb99b7525a5d1273e3e552214b436f5887353a208a5f8e680c948385ca32b68090d057228c7722aa08d5fd5a7ee03a62f1f7c54aad0d1f8e4a17b6a525f5edc1b8ab69e5cd68e994d36d745b36585a6da9fbebfa5c089a5a61251b04efb7c586bb7f70a78a0ee9503ccab2ce9d4771f681d2b9d071872874da365094926c32b4bd83796740e5bf125200ce185040f42a4321dcf024585bb4b65d77be31aaff57f11cbfe7", 0xd1}, {&(0x7f0000000500)="2799b7972ebd2168073e64b2c9be253175ed0433f5a564de29b4926ac471d063913dd161382bfcca4bf4367703ef336441be441fa6e883d1d318da4eadb22366c16419b4545c507826b826889d7fa49723514514e23e3f7c53c76270c708c3e22a3c58827ee629275301b23644f4d75aff7465c54ab7464a790ecf2364edad213b33dd7b863fb984b6d8be5eaba23f2d657542954db0ff08d3a6e2dc7042742dccaa7b0f06a4ea0a332c1e509985de", 0xaf}], 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xf9, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xd8e, 0x1, 0x9, 0x5, 0x1, 0x37, 0x92fb, 0xc}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', r3, 0x7800, 0x6e4b8f86d45183b2, 0x1, 0x6, {{0x26, 0x4, 0x1, 0x3, 0x98, 0x67, 0x0, 0xa, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}, @end, @end, @ssrr={0x89, 0xf, 0x9b, [@empty, @loopback, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x2, [{@loopback, 0x10001}, {@private=0x4, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000000}]}, @timestamp_addr={0x44, 0x34, 0xb3, 0x1, 0x2, [{@remote, 0x4}, {@multicast2, 0xfffffffd}, {@private=0xa010102, 0xb}, {@private=0xa010102, 0x6}, {@broadcast, 0xde0}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}]}, @timestamp={0x44, 0x18, 0xea, 0x0, 0x7, [0x2, 0x2, 0x9, 0x8, 0x101]}]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000640)={0x0, 0x4, 0xffff, 0xfffff7ef, 0x9, 0x9}, &(0x7f0000000680)=0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13m0.02794351s ago: executing program 5 (id=1666): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0xb21e0000, 0x0, 0x1e, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 12m57.585530462s ago: executing program 5 (id=1669): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 12m56.292757149s ago: executing program 5 (id=1674): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x22, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x26e3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x2, 0x1000, 0x1, &(0x7f0000935000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000000c0)=""/17) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x4a, 0x4, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0xfb, 0x29, 0x0, @loopback, @private=0xa010102}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x61]}}, 0x0, 0x1c, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pread64(r1, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000050a05000000000000000000000000060c000240000000000000000214000000030a010100000000000000000700000214000000030a0300000000000000000002000007980200000b0a010200000000000000000a00000a080005400000000608000740000000136c0212803c0201800a00010072616e67650000002c0202802802038083000100a63fdbbe5d2a4e15cb5358e10ae836753c8a90a1a7ba9b18bb7c8de681b0502af0938ca10311277650263c3607cb75ae909051f64f1f1fb8e459caf97ede960d0e248b7ee9e560f787aa133f613e7dad5a60d8f9e049ee69380dde9db9c67fe7fdb504ebef263e01c1c0dee1b982252880841fbd9107fab2a2ae7cee85219200ad000100e4e2fbb72703a5d0bf220abfdad807a8d12c1305d6aac4b595c6b8ecdf0faaf32f0f00bab624298ab008e479fc0a7e4c64cca9139de9fb6e97a919dc8fc4629d75b9fa5b2e71503e3b946d3356b3cc4db3bed523d460bade68bd67d2399025f539f888d84584b8ff0aa2756fde806f11577b953ba46162183e84871dd47b8f23bc2f6ff03146e906de07b2a76f859ee6fc414674bb55228063dacc1f44a9325db50af31638c5b0af7354de98b846757a2b90d4f20000006d000100e9ea6750c0b4d2fc9514e9cbd4e9f7d388747218df36649ef51cd133b8937985345d7850c88ecc279d0f173bdf9bac91a5dcf22cb3185f0f92c0585100248a9413c10b55ddc23786fa4a0672e6fc0dcc29e760f95332827978358655e25c8eed6b027cc6a869f278a80183eda9a1684bf6505bad0e0000005f0001006a0a757f15c2574c3faca75482d8e86f4982374ba67e4240ae6eba60a4e9a3a22d66aa92a3f4bef81caf37e49f8ea05a891df2dd51484dc83aa89331f2bf56a330876779c3ce27f3ccc4aa029bdb844116ff9c77739451d7b08272002000028008000180ffffffff0900020073797a320000000008000340000000042c0001800b00010065787468647200001c00028008000440000000e6080003400000004208000440000000510800054000000032140000001100010000000000000000000100000a97e631476114aab74d8bc34c47fd9c134f3fa249bb60872454d835532527dd8b34e703bd80f7861ed801ac66b1e0a6a5331a34f894290cb340ce8ef9e335af6656973515176b19c8398fd2c0b155b9885332a7cba3ac04d6f2ee1dc446294f8427a83e0c5ea47260e07b2c085e008e14493d9d8c957643545bd11aa8d43e2bc141a122f994309971af7c0f57841409202befc6dac9f6f6750888d27048bf796e47d1723eb9fc2f85b3968d4fad761b30d20ec4c4fc10204dc77a0e86b76566fdec6eb354ecdf1a77dd54f9774318f2dee1caeca7fd19af26d3b930316ad3"], 0x308}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 12m55.089276856s ago: executing program 5 (id=1675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 12m53.725205499s ago: executing program 5 (id=1678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x1, 0x20000b) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) msgget$private(0x0, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8028, 0x6}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x7}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$inet6_mptcp(0xa, 0x1, 0x106) 12m38.644995151s ago: executing program 33 (id=1678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x1, 0x20000b) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) msgget$private(0x0, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8028, 0x6}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x7}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$inet6_mptcp(0xa, 0x1, 0x106) 12m18.624486896s ago: executing program 0 (id=1757): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x464}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x88, &(0x7f0000000900)}, 0x10) 12m18.337004632s ago: executing program 0 (id=1760): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001440), 0x80800, 0x0) readv(r0, &(0x7f0000002d80)=[{&(0x7f0000001880)=""/195, 0xc3}], 0x1) 12m17.736686674s ago: executing program 0 (id=1762): r0 = gettid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) prlimit64(r0, 0xe, &(0x7f0000000000)={0x7, 0x1c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12m16.577749068s ago: executing program 0 (id=1766): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0xe0f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) close(0x3) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020}, 0x2020) 12m13.014331474s ago: executing program 0 (id=1777): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xca, 0x0, 0x0) 12m11.936784238s ago: executing program 0 (id=1778): syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) 11m56.830678281s ago: executing program 34 (id=1778): syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) 6m17.625378807s ago: executing program 6 (id=3012): io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0xfffffffffffffe1f) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x5, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xfff, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x7, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 6m13.145816089s ago: executing program 6 (id=3037): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) 6m13.024612759s ago: executing program 6 (id=3039): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) tkill(0x0, 0x6) tkill(0x0, 0x31) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000500)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ec0)={0x0, &(0x7f00000000c0)={0x18, 0x0, 0x9, {0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x10, {0x9}}, &(0x7f0000000480)={0x1a, 0x0, 0x0, {'/}\t[*{](]\x00'}}, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x68, 0xfffffffffffffffe, 0x1, [{0x6, 0x0, 0x0, 0x7}, {0x6, 0x1, 0x4, 0xb, 'GPL\x00'}, {0x5, 0xcb, 0x1, 0x4, '\x00'}]}, 0xffffffffffffffff, &(0x7f0000000a80)={0xa0, 0x0, 0x3, {{0x3, 0x3, 0x8, 0x1, 0x0, 0x3, {0x6, 0x5, 0x7, 0x18e, 0x1, 0x0, 0x60000, 0xa, 0xda15, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x7ff}}, {0x0, 0x6}}}, &(0x7f0000000b40)={0x20, 0x0, 0x6, {0x8, 0x0, 0x7, 0xfff}}, &(0x7f0000000d80)={0x130, 0x0, 0x83, {0x4, 0x2277, 0x0, '\x00', {0x10000, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x6000, '\x00', 0x6, 0x7fffffff, 0x7, 0x5, {0x0, 0x7}, {0x9, 0xa}, {0x5aa4, 0x926}, {0xffffffffffffff66, 0x2}, 0xfffffffa, 0x7d4, 0x8, 0x6}}}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() chmod(0x0, 0x8) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 6m12.787925349s ago: executing program 6 (id=3042): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) waitid(0x2, 0x0, 0x0, 0x1000000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xfce1) ioctl$TCFLSH(r4, 0x540b, 0x2) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) removexattr(&(0x7f0000000580)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) 6m11.700270289s ago: executing program 6 (id=3045): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) 6m8.117492239s ago: executing program 6 (id=3070): shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r3, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0xfffffff9, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r6, 0x24, 0x0, 0x5, &(0x7f0000000440)=[0x0], 0x3ffffe70, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2800, 0x40, 0x1d}, 0x18) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f00000002c0)=r7}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 5m52.908448937s ago: executing program 35 (id=3070): shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r3, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0xfffffff9, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r6, 0x24, 0x0, 0x5, &(0x7f0000000440)=[0x0], 0x3ffffe70, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2800, 0x40, 0x1d}, 0x18) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f00000002c0)=r7}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 5m43.129279513s ago: executing program 7 (id=3239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 5m42.914993323s ago: executing program 7 (id=3242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe2, &(0x7f0000000b00)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0xbac, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@dstopts={0x5c, 0x171, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x61, 0xb5d, "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"}]}], @ndisc_ns={0x87, 0x0, 0x0, @local}}}}}}, 0x0) 5m42.838216533s ago: executing program 7 (id=3243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 5m42.672412178s ago: executing program 7 (id=3246): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000380)=ANY=[@ANYBLOB="79ee7ca42eeabbbbbbbbbbbb86dd6a00000200641100fe8000000000000000"], 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 5m41.767571625s ago: executing program 7 (id=3254): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x401, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00'}, 0x94) 5m40.754374407s ago: executing program 7 (id=3258): io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0xfffffffffffffe1f) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x5, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xfff, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x7, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m25.558096107s ago: executing program 36 (id=3258): io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0xfffffffffffffe1f) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x5, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xfff, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x7, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m4.077196746s ago: executing program 4 (id=4601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0xfb, 0x3e, 0x1, 0x5}}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m3.710220649s ago: executing program 4 (id=4605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000001) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m2.790554837s ago: executing program 4 (id=4606): r0 = userfaultfd(0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(r0, &(0x7f00000002c0)=""/153, 0x99) 3m1.582447726s ago: executing program 4 (id=4618): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='./file0/file0\x00') 3m1.420736505s ago: executing program 4 (id=4619): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x1, 0x2, 0xe, 0x201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000600000200000000020000000000000602000000020000000000000e010000000000000000006100"], 0x0, 0x54}, 0x28) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @mcast2, 0x9371}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) 2m59.421721965s ago: executing program 4 (id=4633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x42232, 0x823}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @random="83e10b3ae419"}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008084}, 0xc010) 2m58.862654537s ago: executing program 37 (id=4633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x42232, 0x823}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @random="83e10b3ae419"}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008084}, 0xc010) 21.864576529s ago: executing program 9 (id=6029): unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x55, 0x0}, 0x10) 21.705049403s ago: executing program 9 (id=6031): fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 21.672079792s ago: executing program 9 (id=6033): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0xffffffffffffffff, r1) 21.534588848s ago: executing program 9 (id=6036): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c1", 0xd2) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=@fragment={0x0, 0x0, 0xe, 0x0, 0x0, 0x2, 0x68}, 0x8) 21.409618636s ago: executing program 9 (id=6041): unshare(0x6020400) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x55, 0x0}, 0x10) 21.241786608s ago: executing program 9 (id=6045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x3}, {&(0x7f0000000540)='G', 0x1}, {0x0}], 0x3) 11.484713772s ago: executing program 8 (id=6141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x28, 0x0, &(0x7f0000000000)="f8ad48cc8bd37058dd007f5b86dd1555f459d056450700e75631f23335719fa3800dcf72a4ec77cf", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 11.300402574s ago: executing program 8 (id=6144): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x10) fcntl$lock(r1, 0x25, &(0x7f0000000200)={0x1, 0x0, 0x9}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000006740)={&(0x7f0000000000)={0x50, 0x0, 0xfffffffffffffffc, {0x7, 0x2d, 0x0, 0x50002200, 0x0, 0x4, 0xfffffffa, 0x5, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.376436233s ago: executing program 8 (id=6159): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 9.704477459s ago: executing program 1 (id=6164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x3}, {&(0x7f0000000540)='G', 0x1}, {&(0x7f0000000240)="6200bd750a", 0x5}], 0x3) 3.833161261s ago: executing program 3 (id=6213): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 3.77722813s ago: executing program 3 (id=6214): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.829176052s ago: executing program 3 (id=6215): syz_emit_ethernet(0xa50, &(0x7f0000000800)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa1a, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6eb0d2a053d25628546e3026b0fbc15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc7, "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"}]}}}}}}, 0x0) 2.720364861s ago: executing program 3 (id=6216): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x0, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x777680, 0x42) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.667589121s ago: executing program 3 (id=6217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e0000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x10, 0x0, &(0x7f00000002c0)="2f97bd05f75e410000000000000008fa", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.505911432s ago: executing program 3 (id=6218): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b81) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000c89000/0x1000)=nil, &(0x7f000035b000/0x2000)=nil, 0x1000, 0x1}) 889.724997ms ago: executing program 8 (id=6219): fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 851.933087ms ago: executing program 2 (id=6220): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x114) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=@fragment={0x0, 0x0, 0xe, 0x0, 0x0, 0x2, 0x68}, 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 805.227152ms ago: executing program 2 (id=6221): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdir(0x0, 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x11fc, r0, 0x0, 0x0, 0xa00, 0x0, 0x0, r0}]) 789.222696ms ago: executing program 8 (id=6222): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f00005ad000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005ae000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 678.116682ms ago: executing program 1 (id=6223): r0 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x308}, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000e000/0xa000)=nil, 0x3000, 0x3}) 677.506232ms ago: executing program 8 (id=6224): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82c", 0xfc0) 611.795879ms ago: executing program 2 (id=6225): syz_emit_ethernet(0xa50, &(0x7f0000000800)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa1a, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6eb0d2a053d25628546e3026b0fbc15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc7, "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"}]}}}}}}, 0x0) 585.376617ms ago: executing program 1 (id=6226): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x0, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x777680, 0x42) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 430.400356ms ago: executing program 2 (id=6227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x10, 0x0, &(0x7f00000002c0)="2f97bd05f75e410000000000000008fa", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 316.624722ms ago: executing program 2 (id=6228): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x28, 0x0, &(0x7f0000000000)="f8ad48cc8bd37058dd007f5b86dd1555f459d056450700e75631f23335719fa3800dcf72a4ec77cf", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 259.66845ms ago: executing program 1 (id=6229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 253.367874ms ago: executing program 2 (id=6230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}, 0x4}], 0x1, 0x400100b5, 0x0) 71.205188ms ago: executing program 1 (id=6231): fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 0s ago: executing program 1 (id=6232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x3}, {&(0x7f0000000540)='G', 0x1}, {&(0x7f0000000240)="6200bd750a5c0100", 0x8}], 0x3) kernel console output (not intermixed with test programs): -adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.258806][T13462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.338381][T13127] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.529862][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.530015][ T9506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.542244][T13462] hsr_slave_0: entered promiscuous mode [ 678.544623][T13462] hsr_slave_1: entered promiscuous mode [ 678.545501][T13462] debugfs: 'hsr0' already exists in 'hsr' [ 678.545523][T13462] Cannot create hsr debugfs directory [ 678.762257][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.762442][ T9506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.197514][ T9506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.197534][ T9506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.460420][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.460441][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.131645][T13127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.535913][ T37] kauditd_printk_skb: 64 callbacks suppressed [ 681.535930][ T37] audit: type=1326 audit(1769066456.765:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13671 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa245d4acb9 code=0x7fc00000 [ 682.285421][T13462] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 682.326952][T13462] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 682.418609][T13462] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 682.503232][T13462] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 682.814075][T13127] veth0_vlan: entered promiscuous mode [ 682.866389][T13127] veth1_vlan: entered promiscuous mode [ 683.140950][T13127] veth0_macvtap: entered promiscuous mode [ 683.173106][T13127] veth1_macvtap: entered promiscuous mode [ 683.256909][T13127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.376238][T13127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.407544][ T2154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.424603][T13462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.429087][ T2154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.561910][ T2154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.565553][ T2154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.820379][T13462] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.986303][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.986438][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.069337][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.069419][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.422944][ T9506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.422964][ T9506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.607472][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.607494][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.541148][T13462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.223194][T13778] overlay: Unknown parameter 'volatile\' [ 688.390817][T13462] veth0_vlan: entered promiscuous mode [ 688.427061][T13462] veth1_vlan: entered promiscuous mode [ 689.527112][T13462] veth0_macvtap: entered promiscuous mode [ 689.560810][T13462] veth1_macvtap: entered promiscuous mode [ 689.633896][T13462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.647271][T13462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.709161][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.709540][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.709728][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.709762][ T68] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.292372][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.292391][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.351674][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.351693][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.652578][T13803] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2594'. [ 690.652607][T13803] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2594'. [ 690.961286][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.961355][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.226145][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 694.257923][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 694.260596][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 694.267393][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.268532][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.392907][ T5122] Bluetooth: hci2: command tx timeout [ 698.095526][T13863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2613'. [ 698.472806][ T5122] Bluetooth: hci2: command tx timeout [ 699.233344][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.382116][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2619'. [ 699.392389][T13835] chnl_net:caif_netlink_parms(): no params data found [ 700.974408][ T5122] Bluetooth: hci2: command tx timeout [ 701.172856][ T37] audit: type=1326 audit(1769066475.545:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.172912][ T37] audit: type=1326 audit(1769066475.555:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.172952][ T37] audit: type=1326 audit(1769066475.565:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.172993][ T37] audit: type=1326 audit(1769066475.565:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.173032][ T37] audit: type=1326 audit(1769066475.575:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.173070][ T37] audit: type=1326 audit(1769066475.575:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.173110][ T37] audit: type=1326 audit(1769066475.585:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.173149][ T37] audit: type=1326 audit(1769066475.585:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.173187][ T37] audit: type=1326 audit(1769066475.595:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.173226][ T37] audit: type=1326 audit(1769066475.635:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13897 comm="syz.7.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3fa6acb9 code=0x7ffc0000 [ 701.963223][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 702.400513][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.832599][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2636'. [ 702.973381][T13916] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2629'. [ 703.043349][ T5812] Bluetooth: hci2: command tx timeout [ 703.310231][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.975986][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.013713][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.082405][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.085168][T13835] bridge_slave_0: entered allmulticast mode [ 704.087630][T13835] bridge_slave_0: entered promiscuous mode [ 704.124048][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.124254][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.124481][T13835] bridge_slave_1: entered allmulticast mode [ 704.135508][T13835] bridge_slave_1: entered promiscuous mode [ 704.296057][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.338795][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.521402][T13835] team0: Port device team_slave_0 added [ 704.631199][T13835] team0: Port device team_slave_1 added [ 704.731153][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2647'. [ 705.534413][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.534439][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.534465][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.564404][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.564429][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.564455][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.914655][ T68] bridge_slave_1: left allmulticast mode [ 705.914683][ T68] bridge_slave_1: left promiscuous mode [ 705.914911][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.049905][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 706.075361][ T68] bridge_slave_0: left allmulticast mode [ 706.075386][ T68] bridge_slave_0: left promiscuous mode [ 706.075620][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.993920][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.033272][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.075362][ T68] bond0 (unregistering): Released all slaves [ 708.098341][T13835] hsr_slave_0: entered promiscuous mode [ 708.099109][T13835] hsr_slave_1: entered promiscuous mode [ 708.099617][T13835] debugfs: 'hsr0' already exists in 'hsr' [ 708.099632][T13835] Cannot create hsr debugfs directory [ 708.364686][ T68] tipc: Left network mode [ 708.836157][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2679'. [ 711.632924][ T68] hsr_slave_0: left promiscuous mode [ 711.672935][ T68] hsr_slave_1: left promiscuous mode [ 711.673922][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.673947][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.732172][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2699'. [ 711.733883][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.733908][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.873776][ T68] veth1_macvtap: left promiscuous mode [ 711.873878][ T68] veth0_macvtap: left promiscuous mode [ 711.874115][ T68] veth1_vlan: left promiscuous mode [ 711.874188][ T68] veth0_vlan: left promiscuous mode [ 714.913428][ T68] team0 (unregistering): Port device team_slave_1 removed [ 715.163491][ T68] team0 (unregistering): Port device team_slave_0 removed [ 717.474985][ T13] bond0: (slave bond_slave_0): interface is now down [ 717.475014][ T13] bond0: (slave bond_slave_1): interface is now down [ 717.616940][T13927] bond0: (slave bond_slave_0): interface is now down [ 717.616964][T13927] bond0: (slave bond_slave_1): interface is now down [ 717.767776][T10032] bond0: (slave bond_slave_0): interface is now down [ 717.767850][T10032] bond0: (slave bond_slave_1): interface is now down [ 718.561238][T13927] bond0: (slave bond_slave_0): interface is now down [ 718.561262][T13927] bond0: (slave bond_slave_1): interface is now down [ 718.693706][ T989] bond0: (slave bond_slave_0): interface is now down [ 718.693730][ T989] bond0: (slave bond_slave_1): interface is now down [ 718.864860][T14138] overlayfs: failed to clone lowerpath [ 718.888388][T14139] overlayfs: failed to clone lowerpath [ 718.966766][T14140] overlayfs: failed to clone lowerpath [ 719.004020][T13927] bond0: (slave bond_slave_0): interface is now down [ 719.004045][T13927] bond0: (slave bond_slave_1): interface is now down [ 719.574091][ T1423] bond0: (slave bond_slave_0): interface is now down [ 719.574113][ T1423] bond0: (slave bond_slave_1): interface is now down [ 719.746255][ T1384] bond0: (slave bond_slave_0): interface is now down [ 719.746280][ T1384] bond0: (slave bond_slave_1): interface is now down [ 719.882943][T10032] bond0: (slave bond_slave_0): interface is now down [ 719.882967][T10032] bond0: (slave bond_slave_1): interface is now down [ 720.051751][ T58] bond0: (slave bond_slave_0): interface is now down [ 720.051776][ T58] bond0: (slave bond_slave_1): interface is now down [ 720.182850][ T3590] bond0: (slave bond_slave_0): interface is now down [ 720.182872][ T3590] bond0: (slave bond_slave_1): interface is now down [ 720.325908][T13927] bond0: (slave bond_slave_0): interface is now down [ 720.325930][T13927] bond0: (slave bond_slave_1): interface is now down [ 720.462885][ T989] bond0: (slave bond_slave_0): interface is now down [ 720.462908][ T989] bond0: (slave bond_slave_1): interface is now down [ 720.614144][ T13] bond0: (slave bond_slave_0): interface is now down [ 720.614165][ T13] bond0: (slave bond_slave_1): interface is now down [ 720.752840][T13927] bond0: (slave bond_slave_0): interface is now down [ 720.752861][T13927] bond0: (slave bond_slave_1): interface is now down [ 720.892782][ T3548] bond0: (slave bond_slave_0): interface is now down [ 720.892806][ T3548] bond0: (slave bond_slave_1): interface is now down [ 721.044482][ T1440] bond0: (slave bond_slave_0): interface is now down [ 721.044506][ T1440] bond0: (slave bond_slave_1): interface is now down [ 721.182824][ T989] bond0: (slave bond_slave_0): interface is now down [ 721.182848][ T989] bond0: (slave bond_slave_1): interface is now down [ 721.189364][ T989] bond0: now running without any active interface! [ 722.765691][T13835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 722.826466][T13835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 722.948480][T13835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 723.031200][T13835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 723.047780][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2736'. [ 723.527312][T10032] bond0: (slave bond_slave_0): interface is now down [ 723.527335][T10032] bond0: (slave bond_slave_1): interface is now down [ 723.539670][T10032] bond0: now running without any active interface! [ 723.570233][T13835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.701476][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.731201][T13927] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.731784][T13927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.766317][T13927] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.766515][T13927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.569859][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.781721][T13835] veth0_vlan: entered promiscuous mode [ 725.818942][T13835] veth1_vlan: entered promiscuous mode [ 727.024055][T14366] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 727.102338][T13835] veth0_macvtap: entered promiscuous mode [ 727.111002][T13835] veth1_macvtap: entered promiscuous mode [ 727.184549][T14375] TCP: TCP_TX_DELAY enabled [ 728.095946][T14366] bond1: (slave ip6gretap1): making interface the new active one [ 728.097376][T14366] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 728.100841][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.198482][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.259193][ T8293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.259240][ T8293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.259273][ T8293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.261165][ T8293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.892992][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.893013][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.793161][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.793181][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.378267][T14527] gre1: entered promiscuous mode [ 736.378293][T14527] gre1: entered allmulticast mode [ 739.233025][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2866'. [ 740.191880][T14608] io-wq is not configured for unbound workers [ 740.349988][T14614] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2870'. [ 740.868134][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2878'. [ 744.365580][ T5122] Bluetooth: hci3: command 0x0406 tx timeout [ 746.502466][T14720] netlink: 'syz.6.2912': attribute type 3 has an invalid length. [ 750.871541][T14772] fuse: Bad value for 'fd' [ 752.400603][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.400673][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.085222][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2962'. [ 754.085258][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2962'. [ 756.019664][T14887] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2976'. [ 756.019691][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2976'. [ 756.898686][T14909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2987'. [ 757.211275][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2990'. [ 757.211317][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2990'. [ 759.504460][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 764.373318][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 764.373338][ T37] audit: type=1326 audit(1903284269.509:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373381][ T37] audit: type=1326 audit(1903284269.509:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373419][ T37] audit: type=1326 audit(1903284269.509:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373458][ T37] audit: type=1326 audit(1903284269.509:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373495][ T37] audit: type=1326 audit(1903284269.509:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373533][ T37] audit: type=1326 audit(1903284269.509:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373570][ T37] audit: type=1326 audit(1903284269.509:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373608][ T37] audit: type=1326 audit(1903284269.509:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373645][ T37] audit: type=1326 audit(1903284269.509:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 764.373682][ T37] audit: type=1326 audit(1903284269.509:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 765.116379][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 765.119612][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3040'. [ 766.605716][T15075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3050'. [ 766.892094][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 768.441269][T15110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'. [ 769.521879][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 769.521892][ T37] audit: type=1326 audit(1903284274.669:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.521919][ T37] audit: type=1326 audit(1903284274.679:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.521942][ T37] audit: type=1326 audit(1903284274.679:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.521963][ T37] audit: type=1326 audit(1903284274.679:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.521984][ T37] audit: type=1326 audit(1903284274.679:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.522006][ T37] audit: type=1326 audit(1903284274.679:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.522027][ T37] audit: type=1326 audit(1903284274.679:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.522048][ T37] audit: type=1326 audit(1903284274.679:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.522070][ T37] audit: type=1326 audit(1903284274.679:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 769.522091][ T37] audit: type=1326 audit(1903284274.679:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15114 comm="syz.4.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 770.006634][T15133] netlink: 'syz.7.3074': attribute type 1 has an invalid length. [ 770.061391][T15133] bond1: (slave ip6gretap1): making interface the new active one [ 770.061907][T15133] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 770.405379][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3077'. [ 770.406588][T15146] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3077'. [ 772.846275][T15164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3084'. [ 772.946263][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.960322][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.114969][T15166] netlink: 'syz.4.3068': attribute type 4 has an invalid length. [ 773.612398][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 773.616228][T15176] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3088'. [ 773.754526][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.786430][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.779659][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 774.779680][ T37] audit: type=1326 audit(1903284279.949:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.779723][ T37] audit: type=1326 audit(1903284279.949:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.779764][ T37] audit: type=1326 audit(1903284279.949:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.779802][ T37] audit: type=1326 audit(1903284279.949:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.779840][ T37] audit: type=1326 audit(1903284279.949:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.779878][ T37] audit: type=1326 audit(1903284279.949:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.779925][ T37] audit: type=1326 audit(1903284279.949:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.779964][ T37] audit: type=1326 audit(1903284279.949:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.780003][ T37] audit: type=1326 audit(1903284279.949:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 774.780041][ T37] audit: type=1326 audit(1903284279.949:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15181 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46089aacb9 code=0x7ffc0000 [ 775.147944][T15190] netlink: 'syz.7.3095': attribute type 4 has an invalid length. [ 775.855951][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3100'. [ 775.860413][T15208] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3100'. [ 777.341177][ T1440] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.341305][ T1440] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.341342][ T1440] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.341375][ T1440] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.676703][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'. [ 777.691884][T15233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3111'. [ 779.824061][T15249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3116'. [ 780.419738][T15259] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3105'. [ 780.971743][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 781.013727][T15269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3124'. [ 782.950767][T15287] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3130'. [ 783.833619][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3136'. [ 783.838152][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3136'. [ 785.183541][T15318] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3142'. [ 785.348231][T15326] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3146'. [ 786.305266][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 786.323015][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 786.325524][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.356802][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 786.357800][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 786.496837][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3148'. [ 786.523219][T15338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3148'. [ 787.626468][T15354] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3155'. [ 787.689500][T15328] chnl_net:caif_netlink_parms(): no params data found [ 788.397949][ T5122] Bluetooth: hci0: command tx timeout [ 789.138369][T15328] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.139066][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.139305][T15328] bridge_slave_0: entered allmulticast mode [ 789.141663][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 789.163105][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3163'. [ 789.187157][T15328] bridge_slave_0: entered promiscuous mode [ 789.192147][T15328] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.192330][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.192549][T15328] bridge_slave_1: entered allmulticast mode [ 789.221766][T15328] bridge_slave_1: entered promiscuous mode [ 789.280684][T15328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.217920][T15328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.506847][T15328] team0: Port device team_slave_0 added [ 790.533423][T15328] team0: Port device team_slave_1 added [ 790.641855][T15328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.641870][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.641889][T15328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.644697][ T5122] Bluetooth: hci0: command tx timeout [ 791.433381][T15328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.433398][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.433420][T15328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.436224][ T5122] Bluetooth: hci5: command 0x0406 tx timeout [ 791.702950][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 791.727462][T15408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3176'. [ 791.989064][T15328] hsr_slave_0: entered promiscuous mode [ 791.997961][T15328] hsr_slave_1: entered promiscuous mode [ 792.002171][T15328] debugfs: 'hsr0' already exists in 'hsr' [ 792.002199][T15328] Cannot create hsr debugfs directory [ 792.227631][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3190'. [ 792.228661][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 792.719509][ T5812] Bluetooth: hci0: command tx timeout [ 792.845415][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 792.846379][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 793.215313][T15482] netlink: 'syz.2.3208': attribute type 4 has an invalid length. [ 793.334214][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 793.335263][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3212'. [ 793.608627][ T1440] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.847349][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'. [ 793.907060][T15507] netlink: 'syz.3.3221': attribute type 4 has an invalid length. [ 794.004616][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3223'. [ 794.227965][ T1440] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.495782][T15533] netlink: 'syz.2.3232': attribute type 4 has an invalid length. [ 794.670697][ T1440] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.792823][ T5812] Bluetooth: hci0: command tx timeout [ 795.288421][ T1440] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.330547][T15328] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 797.232268][T15328] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 797.434262][T15328] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 797.623075][T15328] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 797.705460][T15615] __nla_validate_parse: 2 callbacks suppressed [ 797.705477][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 797.792585][ T13] bond0: (slave bond_slave_0): interface is now down [ 797.797633][ T13] bond0: (slave bond_slave_1): interface is now down [ 797.824292][T15615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.904451][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 797.933061][T13927] bond0: (slave bond_slave_0): interface is now down [ 797.933081][T13927] bond0: (slave bond_slave_1): interface is now down [ 798.073498][T13927] bond0: (slave bond_slave_0): interface is now down [ 798.073519][T13927] bond0: (slave bond_slave_1): interface is now down [ 798.606448][ T1440] bridge_slave_1: left allmulticast mode [ 798.608295][ T1440] bridge_slave_1: left promiscuous mode [ 798.699772][T10032] bond0: (slave bond_slave_0): interface is now down [ 798.699817][T10032] bond0: (slave bond_slave_1): interface is now down [ 798.771691][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.045115][ T2154] bond0: (slave bond_slave_0): interface is now down [ 799.045137][ T2154] bond0: (slave bond_slave_1): interface is now down [ 799.193109][ T1127] bond0: (slave bond_slave_0): interface is now down [ 799.193129][ T1127] bond0: (slave bond_slave_1): interface is now down [ 799.332986][T13927] bond0: (slave bond_slave_0): interface is now down [ 799.333007][T13927] bond0: (slave bond_slave_1): interface is now down [ 799.337033][ T1440] bridge_slave_0: left allmulticast mode [ 799.337058][ T1440] bridge_slave_0: left promiscuous mode [ 799.337313][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.475510][ T6017] bond0: (slave bond_slave_0): interface is now down [ 799.475533][ T6017] bond0: (slave bond_slave_1): interface is now down [ 799.486873][T15647] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 799.614863][T15095] bond0: (slave bond_slave_0): interface is now down [ 799.614884][T15095] bond0: (slave bond_slave_1): interface is now down [ 799.772119][T10343] bond0: (slave bond_slave_0): interface is now down [ 799.772143][T10343] bond0: (slave bond_slave_1): interface is now down [ 799.902958][T10343] bond0: (slave bond_slave_0): interface is now down [ 799.902982][T10343] bond0: (slave bond_slave_1): interface is now down [ 800.054019][ T58] bond0: (slave bond_slave_0): interface is now down [ 800.054034][ T58] bond0: (slave bond_slave_1): interface is now down [ 800.195570][T10343] bond0: (slave bond_slave_0): interface is now down [ 800.195595][T10343] bond0: (slave bond_slave_1): interface is now down [ 800.363220][ T6017] bond0: (slave bond_slave_0): interface is now down [ 800.363243][ T6017] bond0: (slave bond_slave_1): interface is now down [ 800.502805][ T2154] bond0: (slave bond_slave_0): interface is now down [ 800.502827][ T2154] bond0: (slave bond_slave_1): interface is now down [ 800.643095][ T8293] bond0: (slave bond_slave_0): interface is now down [ 800.643118][ T8293] bond0: (slave bond_slave_1): interface is now down [ 800.889432][ T1127] bond0: (slave bond_slave_0): interface is now down [ 800.889526][ T1127] bond0: (slave bond_slave_1): interface is now down [ 801.023432][ T1127] bond0: (slave bond_slave_0): interface is now down [ 801.023480][ T1127] bond0: (slave bond_slave_1): interface is now down [ 801.163774][T10343] bond0: (slave bond_slave_0): interface is now down [ 801.163818][T10343] bond0: (slave bond_slave_1): interface is now down [ 801.303538][ T1127] bond0: (slave bond_slave_0): interface is now down [ 801.303584][ T1127] bond0: (slave bond_slave_1): interface is now down [ 801.527512][ T2154] bond0: (slave bond_slave_0): interface is now down [ 801.527558][ T2154] bond0: (slave bond_slave_1): interface is now down [ 801.703467][ T1127] bond0: (slave bond_slave_0): interface is now down [ 801.703488][ T1127] bond0: (slave bond_slave_1): interface is now down [ 801.843861][T15095] bond0: (slave bond_slave_0): interface is now down [ 801.843883][T15095] bond0: (slave bond_slave_1): interface is now down [ 801.982794][T15095] bond0: (slave bond_slave_0): interface is now down [ 801.982820][T15095] bond0: (slave bond_slave_1): interface is now down [ 802.128626][ T2154] bond0: (slave bond_slave_0): interface is now down [ 802.128649][ T2154] bond0: (slave bond_slave_1): interface is now down [ 802.262993][ T2154] bond0: (slave bond_slave_0): interface is now down [ 802.263016][ T2154] bond0: (slave bond_slave_1): interface is now down [ 802.402814][ T1423] bond0: (slave bond_slave_0): interface is now down [ 802.402838][ T1423] bond0: (slave bond_slave_1): interface is now down [ 802.574708][ T1423] bond0: (slave bond_slave_0): interface is now down [ 802.574732][ T1423] bond0: (slave bond_slave_1): interface is now down [ 802.716583][T13927] bond0: (slave bond_slave_0): interface is now down [ 802.716607][T13927] bond0: (slave bond_slave_1): interface is now down [ 802.736975][ T1440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.834217][ T1440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.856738][ T1423] bond0: (slave bond_slave_0): interface is now down [ 802.856759][ T1423] bond0: (slave bond_slave_1): interface is now down [ 802.887212][ T1440] bond0 (unregistering): Released all slaves [ 802.921287][T15647] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 802.994712][ T989] bond0: (slave bond_slave_0): interface is now down [ 802.994736][ T989] bond0: (slave bond_slave_1): interface is now down [ 803.012289][T15686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3289'. [ 803.162691][ T989] bond0: (slave bond_slave_0): interface is now down [ 803.162712][ T989] bond0: (slave bond_slave_1): interface is now down [ 803.315634][T10032] bond0: (slave bond_slave_0): interface is now down [ 803.315663][T10032] bond0: (slave bond_slave_1): interface is now down [ 803.539585][ T6017] bond0: (slave bond_slave_0): interface is now down [ 803.539613][ T6017] bond0: (slave bond_slave_1): interface is now down [ 803.695958][ T2154] bond0: (slave bond_slave_0): interface is now down [ 803.695981][ T2154] bond0: (slave bond_slave_1): interface is now down [ 804.294166][ T1423] bond0: (slave bond_slave_0): interface is now down [ 804.294211][ T1423] bond0: (slave bond_slave_1): interface is now down [ 804.530298][ T6017] bond0: (slave bond_slave_0): interface is now down [ 804.530321][ T6017] bond0: (slave bond_slave_1): interface is now down [ 804.746258][ T1127] bond0: (slave bond_slave_0): interface is now down [ 804.746281][ T1127] bond0: (slave bond_slave_1): interface is now down [ 804.751061][ T1127] bond0: now running without any active interface! [ 806.582816][ T1440] hsr_slave_0: left promiscuous mode [ 806.626651][ T1440] hsr_slave_1: left promiscuous mode [ 806.627316][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.627331][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.663493][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.663512][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.935686][ T1440] veth1_macvtap: left promiscuous mode [ 806.935794][ T1440] veth0_macvtap: left promiscuous mode [ 806.935953][ T1440] veth1_vlan: left promiscuous mode [ 806.936043][ T1440] veth0_vlan: left promiscuous mode [ 810.164054][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 810.423375][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 812.513784][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.566558][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.574575][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 812.581260][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 812.581956][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 813.023819][T15328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.168043][T15328] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.296437][T13927] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.296840][T13927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.340857][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.341008][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.861738][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.861911][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.321396][T15757] chnl_net:caif_netlink_parms(): no params data found [ 814.713258][ T5812] Bluetooth: hci3: command tx timeout [ 815.196361][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.351280][T15757] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.351474][T15757] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.351730][T15757] bridge_slave_0: entered allmulticast mode [ 815.375586][T15757] bridge_slave_0: entered promiscuous mode [ 815.396095][T15757] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.398737][T15757] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.398972][T15757] bridge_slave_1: entered allmulticast mode [ 815.401493][T15757] bridge_slave_1: entered promiscuous mode [ 816.279960][T15839] fuse: Bad value for 'fd' [ 816.438686][T15845] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3331'. [ 816.488523][ T1440] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.642162][T15757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.672961][T15757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.792798][ T5812] Bluetooth: hci3: command tx timeout [ 816.858219][T15757] team0: Port device team_slave_0 added [ 817.148099][ T1440] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.217512][T15757] team0: Port device team_slave_1 added [ 817.389355][T15757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.389372][T15757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.389393][T15757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.399374][T15757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.399391][T15757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.399415][T15757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.630206][T15882] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3341'. [ 817.782558][ T1440] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.878059][ T5812] Bluetooth: hci3: command tx timeout [ 819.222568][ T1440] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.481506][T15757] hsr_slave_0: entered promiscuous mode [ 819.497714][T15757] hsr_slave_1: entered promiscuous mode [ 819.498652][T15757] debugfs: 'hsr0' already exists in 'hsr' [ 819.498675][T15757] Cannot create hsr debugfs directory [ 820.083028][T15328] veth0_vlan: entered promiscuous mode [ 820.333982][T15328] veth1_vlan: entered promiscuous mode [ 821.362790][ T5812] Bluetooth: hci3: command tx timeout [ 821.362824][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 821.418653][ T1440] bridge_slave_1: left allmulticast mode [ 821.418680][ T1440] bridge_slave_1: left promiscuous mode [ 821.418916][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.516323][ T1440] bridge_slave_0: left allmulticast mode [ 821.516348][ T1440] bridge_slave_0: left promiscuous mode [ 821.516583][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.561543][T15948] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3360'. [ 822.203509][ T1440] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 823.479901][ T1440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.535217][ T1440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.555192][ T1440] bond0 (unregistering): Released all slaves [ 823.560286][ T1440] bond1 (unregistering): Released all slaves [ 823.934494][T15328] veth0_macvtap: entered promiscuous mode [ 824.274770][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 824.305288][T15328] veth1_macvtap: entered promiscuous mode [ 824.491765][T15757] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 824.574545][T15328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.899338][T16002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3378'. [ 825.119054][T15757] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 825.172477][T15757] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 825.292855][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 825.322677][T15757] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 825.369297][T15328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.414582][T16030] gre1: entered promiscuous mode [ 825.414608][T16030] gre1: entered allmulticast mode [ 825.572794][ T1440] hsr_slave_0: left promiscuous mode [ 825.612856][ T1440] hsr_slave_1: left promiscuous mode [ 825.613903][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.613927][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.645590][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.645616][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.807505][ T1440] veth1_macvtap: left promiscuous mode [ 825.807566][ T1440] veth0_macvtap: left promiscuous mode [ 825.807692][ T1440] veth1_vlan: left promiscuous mode [ 825.807778][ T1440] veth0_vlan: left promiscuous mode [ 827.374107][T16065] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3392'. [ 829.473252][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 829.703286][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 831.926427][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.932799][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.983696][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.997268][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.140420][T16073] gre1: entered promiscuous mode [ 832.140444][T16073] gre1: entered allmulticast mode [ 832.743590][ T8293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.743610][ T8293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.150660][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.150682][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.792534][T15757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.058313][T15757] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.170040][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.170237][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.306913][T13927] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.307047][T13927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.595570][T15757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.612221][T16159] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3414'. [ 838.055642][T16174] macvlan2: entered promiscuous mode [ 838.060628][T16174] batman_adv: batadv0: Adding interface: macvlan2 [ 838.060646][T16174] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.060685][T16174] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 838.187563][T16177] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.198315][T16177] bridge_slave_1: left allmulticast mode [ 838.198342][T16177] bridge_slave_1: left promiscuous mode [ 838.198593][T16177] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.599094][T15757] veth0_vlan: entered promiscuous mode [ 838.700897][T15757] veth1_vlan: entered promiscuous mode [ 838.894228][T15757] veth0_macvtap: entered promiscuous mode [ 838.922156][T15757] veth1_macvtap: entered promiscuous mode [ 839.004100][T15757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.020710][T15757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.071524][ T1440] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.072167][ T1440] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.072205][ T1440] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.072240][ T1440] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.178807][T16208] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 839.773940][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.773961][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.029040][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.029061][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.577555][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3433'. [ 840.577577][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3433'. [ 842.614770][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.676367][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.694661][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.706781][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.769753][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.822350][ T5812] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 842.822468][ T5812] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 844.571469][T16273] chnl_net:caif_netlink_parms(): no params data found [ 844.763143][T16273] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.763330][T16273] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.763617][T16273] bridge_slave_0: entered allmulticast mode [ 844.766295][T16273] bridge_slave_0: entered promiscuous mode [ 844.770908][T16273] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.771103][T16273] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.771300][T16273] bridge_slave_1: entered allmulticast mode [ 844.793124][ T5812] Bluetooth: hci5: command tx timeout [ 844.827851][T16273] bridge_slave_1: entered promiscuous mode [ 844.891509][T16273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.905663][T16273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.960772][T16273] team0: Port device team_slave_0 added [ 844.971300][T16273] team0: Port device team_slave_1 added [ 845.017037][T16273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.017053][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.017078][T16273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.019308][T16273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.019322][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.019348][T16273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.527534][T16273] hsr_slave_0: entered promiscuous mode [ 845.532221][T16273] hsr_slave_1: entered promiscuous mode [ 845.549539][T16273] debugfs: 'hsr0' already exists in 'hsr' [ 845.549566][T16273] Cannot create hsr debugfs directory [ 845.664155][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3457'. [ 846.114717][T16342] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.730998][T16342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.770786][T16342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.872688][ T5812] Bluetooth: hci5: command tx timeout [ 847.173932][ T5812] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 847.174438][ T5812] Bluetooth: hci4: Injecting HCI hardware error event [ 847.179012][ T5812] Bluetooth: hci4: hardware error 0x00 [ 848.484416][ T1440] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.531362][T16388] macvlan2: entered promiscuous mode [ 848.532352][T16388] batman_adv: batadv0: Adding interface: macvlan2 [ 848.532367][T16388] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.532394][T16388] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 848.618526][ T1440] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.618632][ T1440] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.618667][ T1440] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.025486][ T5122] Bluetooth: hci5: command tx timeout [ 849.367581][ T5812] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 851.061235][ T5812] Bluetooth: hci5: command tx timeout [ 852.579551][T16452] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 852.655451][T16459] netlink: 'syz.9.3499': attribute type 1 has an invalid length. [ 852.823086][T16464] macvlan2: entered promiscuous mode [ 853.284501][T16273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 853.348113][T16273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 853.514053][T16273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 853.584949][T16273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 853.984144][T16273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.033089][T16273] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.060954][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.061161][T10032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.076784][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.079642][T10032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.136878][T16273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.439215][T16273] veth0_vlan: entered promiscuous mode [ 856.675780][T16273] veth1_vlan: entered promiscuous mode [ 856.992366][T16273] veth0_macvtap: entered promiscuous mode [ 857.010872][T16273] veth1_macvtap: entered promiscuous mode [ 857.122132][T16273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.230800][T16273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.296060][ T1440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.296110][ T1440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.296145][ T1440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.296178][ T1440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.763710][T13927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.763731][T13927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.823384][ T6043] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 857.905733][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.905752][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.999589][ T6043] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 857.999617][ T6043] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 857.999635][ T6043] usb 9-1: config 0 has no interface number 0 [ 858.001600][T16584] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 858.023449][ T6043] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 858.023479][ T6043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.023498][ T6043] usb 9-1: Product: syz [ 858.023512][ T6043] usb 9-1: Manufacturer: syz [ 858.023525][ T6043] usb 9-1: SerialNumber: syz [ 858.037703][ T6043] usb 9-1: config 0 descriptor?? [ 858.133684][T16584] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 858.732893][ T6043] uvcvideo 9-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 858.732936][ T6043] uvcvideo 9-1:0.64: No valid video chain found. [ 858.971003][T13848] usb 9-1: USB disconnect, device number 2 [ 861.367468][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3556'. [ 863.522766][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 863.672796][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 863.675500][ T9] usb 10-1: config 0 has an invalid interface number: 239 but max is 0 [ 863.675527][ T9] usb 10-1: config 0 has no interface number 0 [ 863.675569][ T9] usb 10-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 863.675595][ T9] usb 10-1: config 0 interface 239 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 863.675620][ T9] usb 10-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 863.675645][ T9] usb 10-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.852076][ T9] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 863.852106][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.852125][ T9] usb 10-1: Product: syz [ 863.852140][ T9] usb 10-1: Manufacturer: syz [ 863.852153][ T9] usb 10-1: SerialNumber: syz [ 863.894163][ T9] usb 10-1: config 0 descriptor?? [ 863.897589][T16700] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 864.122509][ T9] ath6kl: Failed to submit usb control message: -71 [ 864.122561][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 864.138786][ T9] ath6kl: Unable to send get target info: -71 [ 864.139917][ T9] ath6kl: Failed to init ath6kl core: -71 [ 864.196350][ T9] ath6kl_usb 10-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 864.226543][ T9] usb 10-1: USB disconnect, device number 2 [ 867.191493][ T5812] Bluetooth: hci2: unexpected event for opcode 0x041b [ 870.022755][ T5915] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 870.172715][ T5915] usb 9-1: Using ep0 maxpacket: 16 [ 870.187944][ T5915] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 870.187976][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 870.195613][ T5915] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 870.195643][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.195663][ T5915] usb 9-1: Product: syz [ 870.195677][ T5915] usb 9-1: Manufacturer: syz [ 870.195691][ T5915] usb 9-1: SerialNumber: syz [ 870.224720][ T5915] usb 9-1: config 0 descriptor?? [ 870.254018][ T5915] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 870.254040][ T5915] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 870.403882][T16889] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3637'. [ 870.841231][ T5915] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 870.842263][ T5915] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 871.878130][ T5915] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 871.878151][ T5915] em28xx 9-1:0.0: No AC97 audio processor [ 871.904557][ T5915] usb 9-1: USB disconnect, device number 3 [ 871.906694][ T5915] em28xx 9-1:0.0: Disconnecting em28xx [ 872.078097][ T5915] em28xx 9-1:0.0: Freeing device [ 872.232433][T16936] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3652'. [ 873.880218][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3664'. [ 873.948168][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 873.951940][T16988] netlink: 27 bytes leftover after parsing attributes in process `syz.8.3666'. [ 874.297529][T16986] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.298281][T16986] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.800136][T16986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.832551][T16986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.362079][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.362148][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.086766][ T5122] Bluetooth: hci1: command 0x1003 tx timeout [ 876.087104][ T5812] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 876.348830][T17026] fuse: Bad value for 'fd' [ 876.363865][T15095] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.371360][T15095] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.371436][T15095] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.371470][T15095] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.919663][T17054] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3695'. [ 876.961259][T17057] fuse: Bad value for 'fd' [ 877.602263][T17071] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3702'. [ 877.781178][T17080] fuse: Unknown parameter 'user_i00000000000000000000' [ 877.848540][T17083] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3707'. [ 877.920086][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 877.920104][ T37] audit: type=1326 audit(1903284383.139:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.940668][ T37] audit: type=1326 audit(1903284383.149:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.941575][ T37] audit: type=1326 audit(1903284383.159:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.942072][ T37] audit: type=1326 audit(1903284383.159:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.942111][ T37] audit: type=1326 audit(1903284383.159:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.942149][ T37] audit: type=1326 audit(1903284383.159:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.942371][ T37] audit: type=1326 audit(1903284383.159:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.946856][ T37] audit: type=1326 audit(1903284383.169:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 877.954945][ T37] audit: type=1326 audit(1903284383.169:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17084 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 878.202442][T17099] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3715'. [ 878.349984][T17107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3718'. [ 878.500728][T17111] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3720'. [ 879.362814][T17134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3729'. [ 879.495217][T17139] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3731'. [ 879.627200][T17142] tipc: Failed to remove unknown binding: 66,0,0/0:495861419/495861420 [ 879.647680][T17142] tipc: Failed to remove unknown binding: 66,0,0/0:495861419/495861420 [ 879.651621][ T37] audit: type=1326 audit(1903284384.869:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17144 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b109acb9 code=0x7ffc0000 [ 880.844602][ T5812] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 881.649127][ T5812] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 882.788482][T17231] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3771'. [ 884.406053][T17293] netlink: 'syz.9.3800': attribute type 1 has an invalid length. [ 884.449574][T17293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 884.460531][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3800'. [ 884.875545][ T5812] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 884.875816][ T5812] Bluetooth: hci3: Injecting HCI hardware error event [ 884.877969][ T5812] Bluetooth: hci3: hardware error 0x00 [ 885.465959][T17293] bond1 (unregistering): Released all slaves [ 887.216540][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 889.574133][T15120] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 889.722756][T15120] usb 9-1: Using ep0 maxpacket: 8 [ 889.724837][T15120] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 889.724863][T15120] usb 9-1: config 0 has no interface number 0 [ 889.724905][T15120] usb 9-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 889.724933][T15120] usb 9-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 889.724953][T15120] usb 9-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.731813][T15120] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 889.731844][T15120] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.731864][T15120] usb 9-1: Product: syz [ 889.731879][T15120] usb 9-1: Manufacturer: syz [ 889.731893][T15120] usb 9-1: SerialNumber: syz [ 889.740158][T15120] usb 9-1: config 0 descriptor?? [ 889.957826][T15120] ath6kl: Failed to submit usb control message: -71 [ 889.957875][T15120] ath6kl: unable to send the bmi data to the device: -71 [ 889.957890][T15120] ath6kl: Unable to send get target info: -71 [ 889.961589][T15120] ath6kl: Failed to init ath6kl core: -71 [ 889.997302][T15120] ath6kl_usb 9-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 890.014221][T15120] usb 9-1: USB disconnect, device number 4 [ 891.152028][T17487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3882'. [ 892.447372][T17516] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3893'. [ 892.908974][T17536] overlayfs: failed to clone lowerpath [ 893.092521][T17540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3906'. [ 893.783090][T17572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3917'. [ 895.376263][T17601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3930'. [ 896.077646][T17630] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3942'. [ 897.396673][T17670] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3958'. [ 897.556046][T17677] netlink: 368 bytes leftover after parsing attributes in process `syz.3.3959'. [ 897.758949][T17673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.824294][T17673] bond0: (slave rose0): Enslaving as an active interface with an up link [ 898.161483][T17703] comedi comedi2: dt2815: I/O port conflict (0x8,2) [ 898.244183][T17707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3969'. [ 900.157058][T17747] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3983'. [ 901.432056][T17786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3995'. [ 901.634085][ T5812] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 902.892452][T17837] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 902.910354][T15120] IPVS: starting estimator thread 0... [ 903.004330][T17839] IPVS: using max 8 ests per chain, 19200 per kthread [ 904.041746][T17863] ptrace attach of "./syz-executor exec"[16273] was attempted by "\x0a N#  "[17863] [ 904.087452][T17863] loop2: detected capacity change from 0 to 7 [ 904.101417][T16540] Dev loop2: unable to read RDB block 7 [ 904.101458][T16540] loop2: AHDI p1 p2 p3 [ 904.101487][T16540] loop2: partition table partially beyond EOD, truncated [ 904.110010][T16540] loop2: p1 start 1601398130 is beyond EOD, truncated [ 904.110036][T16540] loop2: p2 start 1702059890 is beyond EOD, truncated [ 904.135064][T17863] Dev loop2: unable to read RDB block 7 [ 904.135098][T17863] loop2: AHDI p1 p2 p3 [ 904.135127][T17863] loop2: partition table partially beyond EOD, truncated [ 904.136015][T17863] loop2: p1 start 1601398130 is beyond EOD, truncated [ 904.136034][T17863] loop2: p2 start 1702059890 is beyond EOD, truncated [ 904.295627][T17863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.686901][ T5812] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 905.687138][ T5812] Bluetooth: hci0: Injecting HCI hardware error event [ 905.689543][ T5122] Bluetooth: hci0: hardware error 0x00 [ 906.322202][T17905] macvlan3: entered promiscuous mode [ 906.689277][T17912] netlink: 'syz.3.4036': attribute type 1 has an invalid length. [ 907.162483][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 908.075727][T17967] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 908.153033][ T5122] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 908.863109][T18006] netlink: 'syz.4.4070': attribute type 1 has an invalid length. [ 909.693736][T18038] ptrace attach of "./syz-executor exec"[15328] was attempted by " "[18038] [ 909.958706][T18054] fuse: Bad value for 'fd' [ 910.281603][T18070] ptrace attach of "./syz-executor exec"[13127] was attempted by " "[18070] [ 910.786988][T18086] fuse: Bad value for 'fd' [ 912.632934][T18120] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 912.632961][T18120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 912.686692][T18125] netlink: 'syz.4.4118': attribute type 1 has an invalid length. [ 912.702847][T18120] vhci_hcd vhci_hcd.0: Device attached [ 912.956445][ T6020] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 912.982766][ T5868] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 913.115540][ T6020] usb 10-1: config 0 has no interfaces? [ 913.115576][ T6020] usb 10-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 913.115599][ T6020] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.135603][ T6020] usb 10-1: config 0 descriptor?? [ 913.269161][T18142] ptrace attach of "./syz-executor exec"[13127] was attempted by "./syz-executor exec"[18142] [ 913.402977][T18121] usb 51-1: recv xbuf, 0 [ 913.413444][ T6020] usb 10-1: USB disconnect, device number 3 [ 913.478686][ T68] vhci_hcd vhci_hcd.9: stop threads [ 913.514985][ T68] vhci_hcd vhci_hcd.9: release socket [ 913.797815][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 914.034450][ T5122] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 914.073936][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 914.247787][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 914.247815][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.247833][ T9] usb 4-1: config 0 has no interface number 0 [ 914.277124][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 914.277154][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.277174][ T9] usb 4-1: Product: syz [ 914.277189][ T9] usb 4-1: Manufacturer: syz [ 914.277203][ T9] usb 4-1: SerialNumber: syz [ 914.282377][ T9] usb 4-1: config 0 descriptor?? [ 914.344658][ T9] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 914.503838][T18173] netlink: 'syz.9.4133': attribute type 1 has an invalid length. [ 914.584443][T18180] ptrace attach of "./syz-executor exec"[13127] was attempted by "./syz-executor exec"[18180] [ 914.657026][ T9] IPVS: starting estimator thread 0... [ 914.744232][T18187] IPVS: using max 8 ests per chain, 19200 per kthread [ 915.353823][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4144'. [ 915.864816][T18214] ptrace attach of "./syz-executor exec"[15328] was attempted by "./syz-executor exec"[18214] [ 915.959840][ T9] IPVS: starting estimator thread 0... [ 916.042733][T18217] IPVS: using max 16 ests per chain, 38400 per kthread [ 916.548260][ T6020] usb 4-1: USB disconnect, device number 10 [ 916.617792][ T9] IPVS: starting estimator thread 0... [ 916.706294][T18245] IPVS: using max 9 ests per chain, 21600 per kthread [ 916.771498][T18253] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4163'. [ 917.569199][T18271] netlink: 'syz.3.4170': attribute type 1 has an invalid length. [ 918.391679][ T5122] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 918.392084][ T5122] Bluetooth: hci2: Injecting HCI hardware error event [ 918.397155][ T5122] Bluetooth: hci2: hardware error 0x00 [ 918.598494][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4172'. [ 918.648031][T18284] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4174'. [ 920.172040][T18315] tipc: Failed to obtain node identity [ 920.172073][T18315] tipc: Enabling of bearer rejected, failed to enable media [ 920.293340][T18319] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4185'. [ 920.379316][T18324] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.4188'. [ 920.421899][T18329] overlayfs: failed to clone lowerpath [ 920.467484][T18329] overlayfs: failed to clone lowerpath [ 920.474131][ T5122] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 922.001966][T18358] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4201'. [ 922.196225][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4206'. [ 922.375048][T18382] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4214'. [ 922.703454][T18397] Bluetooth: MGMT ver 1.23 [ 922.937188][T18412] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4225'. [ 923.766365][T18435] [U] w [ 923.881409][T18439] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4236'. [ 923.881436][T18439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4236'. [ 924.113010][T18439] geneve0: entered allmulticast mode [ 924.517545][T18433] [U] [ 924.612691][ T5868] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 925.827492][ T5868] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 925.827521][ T5868] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 925.827547][ T5868] usb 10-1: config 0 has no interface number 0 [ 925.832492][ T5868] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 925.832521][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.832548][ T5868] usb 10-1: Product: syz [ 925.833091][ T5868] usb 10-1: Manufacturer: syz [ 925.833107][ T5868] usb 10-1: SerialNumber: syz [ 926.002832][ T5868] usb 10-1: config 0 descriptor?? [ 926.012432][ T5868] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22 [ 927.488511][ T5915] usb 10-1: USB disconnect, device number 4 [ 927.495924][T18517] fuse: Bad value for 'fd' [ 927.777888][T18527] netlink: 'syz.4.4271': attribute type 1 has an invalid length. [ 928.537206][T18561] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 929.415760][T18589] netlink: 'syz.2.4297': attribute type 1 has an invalid length. [ 929.659268][T18600] ptrace attach of "./syz-executor exec"[16273] was attempted by " "[18600] [ 930.499489][T18617] netlink: 'syz.2.4308': attribute type 1 has an invalid length. [ 931.241097][T18645] tipc: Failed to remove unknown binding: 66,0,0/0:796122720/796122721 [ 931.241824][T18645] tipc: Failed to remove unknown binding: 66,0,0/0:796122720/796122721 [ 932.150152][T18669] tipc: Failed to remove unknown binding: 66,0,0/0:3682318536/3682318537 [ 932.150856][T18669] tipc: Failed to remove unknown binding: 66,0,0/0:3682318536/3682318537 [ 932.433725][T18677] netlink: 'syz.3.4333': attribute type 1 has an invalid length. [ 933.076858][T18704] tipc: Failed to remove unknown binding: 66,0,0/0:756774072/756774073 [ 933.078270][T18704] tipc: Failed to remove unknown binding: 66,0,0/0:756774072/756774073 [ 933.466235][T18717] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4348'. [ 933.467117][T18717] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4348'. [ 933.563630][ T5953] kernel write not supported for file bpf-prog (pid: 5953 comm: kworker/0:9) [ 933.815243][T18730] tipc: Failed to remove unknown binding: 66,0,0/0:2108272105/2108272106 [ 933.816035][T18730] tipc: Failed to remove unknown binding: 66,0,0/0:2108272105/2108272106 [ 934.195372][T18751] netlink: 124 bytes leftover after parsing attributes in process `syz.9.4364'. [ 934.195417][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4364'. [ 934.475448][T18756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.096396][T18754] fuse: Bad value for 'fd' [ 936.720743][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.720813][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.119313][T18847] program syz.3.4403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 937.891532][T18871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4412'. [ 940.102350][T18947] fuse: Bad value for 'fd' [ 941.382459][T18989] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4465'. [ 942.121470][T19004] fuse: Bad value for 'fd' [ 942.429521][T19013] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4477'. [ 947.520457][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 947.520475][ T37] audit: type=1326 audit(1903284452.739:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.551844][ T37] audit: type=1326 audit(1903284452.769:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.581956][ T37] audit: type=1326 audit(1903284452.799:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.582332][ T37] audit: type=1326 audit(1903284452.799:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.614688][ T37] audit: type=1326 audit(1903284452.839:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.615020][ T37] audit: type=1326 audit(1903284452.839:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.622254][ T37] audit: type=1326 audit(1903284452.839:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.625888][ T37] audit: type=1326 audit(1903284452.849:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.631771][ T37] audit: type=1326 audit(1903284452.849:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 947.631829][ T37] audit: type=1326 audit(1903284452.849:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 951.104355][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4576'. [ 951.104393][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4576'. [ 951.192517][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 951.972899][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 952.887800][ T9] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 952.887829][ T9] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 952.887848][ T9] usb 10-1: config 0 has no interface number 0 [ 952.895896][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 952.895926][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.895945][ T9] usb 10-1: Product: syz [ 952.895959][ T9] usb 10-1: Manufacturer: syz [ 952.895973][ T9] usb 10-1: SerialNumber: syz [ 952.922062][ T9] usb 10-1: config 0 descriptor?? [ 953.488328][T19299] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 953.563445][ T9] uvcvideo 10-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 953.563480][ T9] uvcvideo 10-1:0.64: No valid video chain found. [ 953.594601][ T9] usb 10-1: USB disconnect, device number 5 [ 955.656016][T19335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4611'. [ 955.704030][ T5969] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 955.872661][ T5969] usb 10-1: Using ep0 maxpacket: 16 [ 955.879785][ T5969] usb 10-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 955.879816][ T5969] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.879836][ T5969] usb 10-1: Product: syz [ 955.879851][ T5969] usb 10-1: Manufacturer: syz [ 955.879865][ T5969] usb 10-1: SerialNumber: syz [ 955.895641][ T5969] usb 10-1: config 0 descriptor?? [ 956.222749][ T5987] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 956.744871][ T5987] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 956.744901][ T5987] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 956.744920][ T5987] usb 4-1: config 0 has no interface number 0 [ 956.751093][ T5987] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 956.751125][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.751144][ T5987] usb 4-1: Product: syz [ 956.751157][ T5987] usb 4-1: Manufacturer: syz [ 956.751178][ T5987] usb 4-1: SerialNumber: syz [ 956.907556][ T5987] usb 4-1: config 0 descriptor?? [ 957.049348][ T5969] usb_8dev 10-1:0.0 can0: sending command message failed [ 957.049373][ T5969] usb_8dev 10-1:0.0 can0: can't get firmware version [ 957.156750][ T5987] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 957.156785][ T5987] uvcvideo 4-1:0.64: No valid video chain found. [ 957.211174][ T5987] usb 4-1: USB disconnect, device number 11 [ 957.373301][ T5969] usb_8dev 10-1:0.0: probe with driver usb_8dev failed with error -22 [ 957.388377][ T5969] usb 10-1: USB disconnect, device number 6 [ 957.877294][T19372] 9p: Bad value for 'wfdno' [ 958.537663][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 958.537681][ T37] audit: type=1326 audit(1903284463.759:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19381 comm="syz.2.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 958.537945][ T37] audit: type=1326 audit(1903284463.759:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19381 comm="syz.2.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 958.538739][ T37] audit: type=1326 audit(1903284463.759:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19381 comm="syz.2.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 958.539124][ T37] audit: type=1326 audit(1903284463.759:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19381 comm="syz.2.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb2123cacb9 code=0x7ffc0000 [ 959.493335][T19396] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 959.527898][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 959.541171][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 959.553828][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 959.556674][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 959.558631][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 959.736677][T19402] 9p: Bad value for 'wfdno' [ 959.752358][T19404] mmap: syz.9.4641 (19404): VmData 37400576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 961.017421][T19426] 9p: Bad value for 'wfdno' [ 961.672952][ T5812] Bluetooth: hci1: command tx timeout [ 962.869411][T19453] 9p: Bad value for 'wfdno' [ 963.095271][ T3590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.162456][T19465] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4668'. [ 963.762694][ T5812] Bluetooth: hci1: command tx timeout [ 964.912132][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4679'. [ 964.975314][ T3590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.031294][T19502] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4682'. [ 965.087372][T19397] chnl_net:caif_netlink_parms(): no params data found [ 965.578636][ T3590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.800256][T19528] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4694'. [ 965.832674][ T5812] Bluetooth: hci1: command tx timeout [ 966.049307][ T3590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.546710][T19397] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.549625][T19397] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.549870][T19397] bridge_slave_0: entered allmulticast mode [ 966.561556][T19397] bridge_slave_0: entered promiscuous mode [ 966.588129][T19397] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.588323][T19397] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.588586][T19397] bridge_slave_1: entered allmulticast mode [ 966.611743][T19397] bridge_slave_1: entered promiscuous mode [ 967.091599][T19397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.129482][T19397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.281200][T19563] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4706'. [ 967.425562][T19397] team0: Port device team_slave_0 added [ 967.466211][T19397] team0: Port device team_slave_1 added [ 967.645820][T19397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.645838][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.645863][T19397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.654516][T19397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.654531][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.654553][T19397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.796714][ T3590] bridge_slave_1: left allmulticast mode [ 967.796742][ T3590] bridge_slave_1: left promiscuous mode [ 967.796987][ T3590] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.906145][ T3590] bridge_slave_0: left allmulticast mode [ 967.906174][ T3590] bridge_slave_0: left promiscuous mode [ 967.906419][ T3590] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.912804][ T5122] Bluetooth: hci1: command tx timeout [ 969.131772][T19602] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4717'. [ 969.143549][ T3590] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 969.530601][ T5122] Bluetooth: hci5: command 0x0406 tx timeout [ 972.113487][ T3590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.183919][ T3590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.229163][ T3590] bond0 (unregistering): Released all slaves [ 972.255633][ T3590] bond1 (unregistering): Released all slaves [ 972.311887][ T3590] bond2 (unregistering): Released all slaves [ 972.356676][ T3590] bond3 (unregistering): Released all slaves [ 972.405519][ T3590] bond4 (unregistering): Released all slaves [ 972.481588][ T3590] bond5 (unregistering): Released all slaves [ 972.528332][ T3590] bond6 (unregistering): Released all slaves [ 972.598280][ T3590] bond7 (unregistering): Released all slaves [ 972.970755][T19397] hsr_slave_0: entered promiscuous mode [ 972.971923][T19397] hsr_slave_1: entered promiscuous mode [ 972.976483][T19397] debugfs: 'hsr0' already exists in 'hsr' [ 972.976506][T19397] Cannot create hsr debugfs directory [ 975.463129][ T3590] hsr_slave_0: left promiscuous mode [ 975.513471][ T3590] hsr_slave_1: left promiscuous mode [ 975.514406][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.514441][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.550278][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.550303][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.668571][ T37] audit: type=1326 audit(1903284480.889:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19683 comm="syz.2.4749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2123cacb9 code=0x0 [ 975.851484][ T3590] veth1_macvtap: left promiscuous mode [ 975.856185][ T3590] veth0_macvtap: left promiscuous mode [ 975.856438][ T3590] veth1_vlan: left promiscuous mode [ 975.856595][ T3590] veth0_vlan: left promiscuous mode [ 980.993180][ T3590] team0 (unregistering): Port device team_slave_1 removed [ 981.255912][ T3590] team0 (unregistering): Port device team_slave_0 removed [ 984.867202][T19776] fuse: Unknown parameter 'group_i00000000000000000000' [ 986.205830][T19810] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3741449670 (119726389440 ns) > initial count (30174075360 ns). Using initial count to start timer. [ 987.471688][ T3590] IPVS: stop unused estimator thread 0... [ 988.562313][T19397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 988.624271][T19397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 988.684154][T19397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 988.749771][T19397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 990.089914][T19397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.177980][T19397] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.243041][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.243258][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.268415][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.268618][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.215968][T19397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.350149][T19397] veth0_vlan: entered promiscuous mode [ 991.413290][T19397] veth1_vlan: entered promiscuous mode [ 991.606066][T19397] veth0_macvtap: entered promiscuous mode [ 991.639372][T19397] veth1_macvtap: entered promiscuous mode [ 991.749586][T19397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.794808][T19397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.858260][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.933047][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.939129][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.963303][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.533968][ T2154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.533990][ T2154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.723597][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.723619][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.850387][T19938] fuse: Bad value for 'user_id' [ 992.850405][T19938] fuse: Bad value for 'user_id' [ 994.752797][T20000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4845'. [ 994.752823][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4845'. [ 995.988358][T20040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4857'. [ 995.988385][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 996.091174][T20043] program syz.9.4858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.763590][T20079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4871'. [ 997.763615][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4871'. [ 998.160223][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.160291][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.047652][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4884'. [ 999.047675][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4884'. [ 999.803498][T20145] fuse: Bad value for 'fd' [ 1002.350189][T20190] fuse: Bad value for 'fd' [ 1004.875511][T20243] fuse: Bad value for 'fd' [ 1005.261276][T20260] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4926'. [ 1005.557475][T20273] fuse: Bad value for 'fd' [ 1005.872198][T20288] IPv6: addrconf: prefix option has invalid lifetime [ 1005.878955][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4934'. [ 1005.878991][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4934'. [ 1006.021071][T20293] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4935'. [ 1006.258593][T20303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1006.482908][T20314] 9p: Bad value for 'wfdno' [ 1006.605760][T20319] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1007.286686][T20341] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4953'. [ 1007.707625][T20359] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1007.813017][T20357] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 1008.439770][T20379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4965'. [ 1008.997810][T20398] netlink: 112 bytes leftover after parsing attributes in process `syz.9.4971'. [ 1010.281314][T20442] 9p: Bad value for 'wfdno' [ 1010.753132][T20460] __nla_validate_parse: 2 callbacks suppressed [ 1010.753151][T20460] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4992'. [ 1011.026633][T20472] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4996'. [ 1011.560408][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5006'. [ 1012.041681][T20522] netlink: 'syz.2.5015': attribute type 32 has an invalid length. [ 1012.041703][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1012.143822][T20522] bond3: option coupled_control: invalid value (28) [ 1012.248098][T20522] bond3 (unregistering): Released all slaves [ 1012.484609][T20539] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5020'. [ 1013.005875][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5030'. [ 1013.127368][T20568] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5033'. [ 1013.424587][T20584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1013.794651][T20606] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5047'. [ 1014.509607][T20636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5060'. [ 1015.945345][T20702] 9p: Bad value for 'wfdno' [ 1016.367383][T20709] __nla_validate_parse: 1 callbacks suppressed [ 1016.367404][T20709] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5086'. [ 1018.092697][ T8012] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1018.342696][ T8012] usb 2-1: Using ep0 maxpacket: 16 [ 1018.348343][ T8012] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1018.348381][ T8012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.348401][ T8012] usb 2-1: Product: syz [ 1018.348415][ T8012] usb 2-1: Manufacturer: syz [ 1018.348429][ T8012] usb 2-1: SerialNumber: syz [ 1018.401978][ T8012] usb 2-1: config 0 descriptor?? [ 1018.761233][ T8012] usb_8dev 2-1:0.0 can0: sending command message failed [ 1018.761257][ T8012] usb_8dev 2-1:0.0 can0: can't get firmware version [ 1018.904852][ T8012] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 1018.948518][ T8012] usb 2-1: USB disconnect, device number 4 [ 1019.627558][T20758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1019.808099][T20764] 9p: Bad value for 'wfdno' [ 1021.416323][T20781] 9p: Bad value for 'rfdno' [ 1022.032760][T20803] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5116'. [ 1024.026396][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5135'. [ 1025.219259][T20882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1025.791589][T20902] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5159'. [ 1027.326891][T20938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5171'. [ 1033.129109][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5240'. [ 1034.482085][T21178] 9p: Bad value for 'wfdno' [ 1034.868975][T21192] netlink: 'syz.9.5262': attribute type 5 has an invalid length. [ 1034.868997][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5262'. [ 1035.198669][T21206] 9p: Bad value for 'wfdno' [ 1035.583053][ T5953] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1035.732643][ T5953] usb 10-1: Using ep0 maxpacket: 16 [ 1035.737909][ T5953] usb 10-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1035.737941][ T5953] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.737960][ T5953] usb 10-1: Product: syz [ 1035.737975][ T5953] usb 10-1: Manufacturer: syz [ 1035.737989][ T5953] usb 10-1: SerialNumber: syz [ 1035.802256][ T5953] usb 10-1: config 0 descriptor?? [ 1035.847668][T21236] 9p: Bad value for 'wfdno' [ 1036.063829][ T5953] usb_8dev 10-1:0.0 can0: sending command message failed [ 1036.063853][ T5953] usb_8dev 10-1:0.0 can0: can't get firmware version [ 1036.390998][ T5953] usb_8dev 10-1:0.0: probe with driver usb_8dev failed with error -22 [ 1036.434593][ T5953] usb 10-1: USB disconnect, device number 7 [ 1037.556202][T21301] 9p: Bad value for 'rfdno' [ 1038.690757][T21336] 9p: Bad value for 'rfdno' [ 1039.344784][T21363] 9p: Bad value for 'rfdno' [ 1040.139084][T21399] 9p: Bad value for 'rfdno' [ 1040.333005][T21407] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5351'. [ 1041.433834][T21436] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5364'. [ 1042.232072][T21469] 9p: Bad value for 'rfdno' [ 1044.985463][ T3590] bridge_slave_1: left allmulticast mode [ 1044.985490][ T3590] bridge_slave_1: left promiscuous mode [ 1044.985755][ T3590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.167641][ T3590] bridge_slave_0: left allmulticast mode [ 1045.167901][ T3590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.290442][ T3590] batman_adv: batadv0: Removing interface: macvlan2 [ 1047.403194][ T3590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.463184][ T3590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.483487][ T3590] bond0 (unregistering): Released all slaves [ 1049.167199][ T3590] hsr_slave_0: left promiscuous mode [ 1049.201089][ T3590] hsr_slave_1: left promiscuous mode [ 1049.202047][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.240302][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.532902][ T3590] pimreg (unregistering): left allmulticast mode [ 1051.375577][T21667] 9p: Bad value for 'rfdno' [ 1051.449945][T21669] 9p: Bad value for 'rfdno' [ 1055.356103][ T3590] team0 (unregistering): Port device team_slave_1 removed [ 1055.386456][T21694] 9p: Bad value for 'rfdno' [ 1055.713556][ T3590] team0 (unregistering): Port device team_slave_0 removed [ 1056.422714][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1056.632679][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1056.649540][ T9] usb 10-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1056.649571][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.649591][ T9] usb 10-1: Product: syz [ 1056.649606][ T9] usb 10-1: Manufacturer: syz [ 1056.649619][ T9] usb 10-1: SerialNumber: syz [ 1056.713618][ T9] usb 10-1: config 0 descriptor?? [ 1059.387639][ T9] usb_8dev 10-1:0.0 can0: sending command message failed [ 1059.389155][ T9] usb_8dev 10-1:0.0 can0: can't get firmware version [ 1059.542174][ T9] usb_8dev 10-1:0.0: probe with driver usb_8dev failed with error -22 [ 1059.613044][ T9] usb 10-1: USB disconnect, device number 8 [ 1059.623805][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.623864][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.804598][T21734] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5477'. [ 1065.942645][T15120] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1066.812697][T15120] usb 2-1: Using ep0 maxpacket: 16 [ 1066.842660][T15120] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1066.842686][T15120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.842701][T15120] usb 2-1: Product: syz [ 1066.842712][T15120] usb 2-1: Manufacturer: syz [ 1066.842725][T15120] usb 2-1: SerialNumber: syz [ 1066.897990][T15120] usb 2-1: config 0 descriptor?? [ 1067.205180][T15120] usb_8dev 2-1:0.0 can0: sending command message failed [ 1067.205206][T15120] usb_8dev 2-1:0.0 can0: can't get firmware version [ 1067.403364][T21869] 9p: Bad value for 'rfdno' [ 1067.443201][T15120] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 1067.521018][T15120] usb 2-1: USB disconnect, device number 5 [ 1071.395503][T21925] 9p: Bad value for 'rfdno' [ 1072.574137][T21945] 9p: Bad value for 'rfdno' [ 1072.816286][T21951] 9p: Bad value for 'rfdno' [ 1074.943559][T21987] 9pnet_fd: Insufficient options for proto=fd [ 1075.991554][T22009] 9pnet_fd: Insufficient options for proto=fd [ 1076.899099][T22033] 9pnet_fd: Insufficient options for proto=fd [ 1077.829785][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1077.849206][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1077.860091][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1077.861334][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1077.862191][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1078.174648][T22072] 9pnet_fd: Insufficient options for proto=fd [ 1078.500546][T22064] chnl_net:caif_netlink_parms(): no params data found [ 1078.528677][ T37] audit: type=1326 audit(1903284583.739:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22084 comm="syz.3.5607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35b109acb9 code=0x0 [ 1078.862444][T22098] 9p: Bad value for 'wfdno' [ 1078.957560][T22101] 9pnet_fd: Insufficient options for proto=fd [ 1079.356507][T22064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.356696][T22064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.356969][T22064] bridge_slave_0: entered allmulticast mode [ 1079.359835][T22064] bridge_slave_0: entered promiscuous mode [ 1079.563433][T22064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.564943][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.565183][T22064] bridge_slave_1: entered allmulticast mode [ 1079.567638][T22064] bridge_slave_1: entered promiscuous mode [ 1079.687155][T22064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.695487][T22064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.814404][T22064] team0: Port device team_slave_0 added [ 1079.821566][T22064] team0: Port device team_slave_1 added [ 1079.912794][ T5122] Bluetooth: hci4: command tx timeout [ 1080.151907][T22123] 9p: Bad value for 'wfdno' [ 1080.291793][T22126] 9pnet_fd: Insufficient options for proto=fd [ 1080.370477][T22129] 9p: Bad value for 'wfdno' [ 1080.481149][ T37] audit: type=1326 audit(1903284585.699:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22134 comm="syz.9.5629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16c7ffacb9 code=0x0 [ 1080.739141][T22147] 9p: Bad value for 'wfdno' [ 1080.874751][T22064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.874768][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.874792][T22064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.877373][T22064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.877388][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.877413][T22064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.009567][T22064] hsr_slave_0: entered promiscuous mode [ 1081.010467][T22064] hsr_slave_1: entered promiscuous mode [ 1081.528578][T22154] 9p: Bad value for 'rfdno' [ 1081.611793][T22156] 9p: Bad value for 'wfdno' [ 1082.005518][ T5812] Bluetooth: hci4: command tx timeout [ 1082.152712][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 1082.215136][ T37] audit: type=1326 audit(1903284587.439:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22176 comm="syz.3.5645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35b109acb9 code=0x0 [ 1082.449089][T22182] 9p: Bad value for 'rfdno' [ 1082.873147][ T1384] bridge_slave_1: left allmulticast mode [ 1082.873173][ T1384] bridge_slave_1: left promiscuous mode [ 1082.873411][ T1384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.967700][ T1384] bridge_slave_0: left allmulticast mode [ 1082.967729][ T1384] bridge_slave_0: left promiscuous mode [ 1082.967991][ T1384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.200462][T22206] 9p: Bad value for 'rfdno' [ 1084.097468][ T5122] Bluetooth: hci4: command tx timeout [ 1084.997439][ T5868] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1085.172818][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1085.217615][ T5868] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1085.217644][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.217662][ T5868] usb 2-1: Product: syz [ 1085.217675][ T5868] usb 2-1: Manufacturer: syz [ 1085.217689][ T5868] usb 2-1: SerialNumber: syz [ 1085.222331][ T5868] usb 2-1: config 0 descriptor?? [ 1085.293572][ T1384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.374218][ T1384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.404483][ T1384] bond0 (unregistering): Released all slaves [ 1085.417838][ T1384] bond1 (unregistering): Released all slaves [ 1085.433162][ T1384] bond2 (unregistering): Released all slaves [ 1085.742293][ T5868] usb_8dev 2-1:0.0 can0: sending command message failed [ 1085.742309][ T5868] usb_8dev 2-1:0.0 can0: can't get firmware version [ 1086.057699][ T5868] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 1086.084387][ T5868] usb 2-1: USB disconnect, device number 6 [ 1086.162686][ T5122] Bluetooth: hci4: command tx timeout [ 1087.137844][ T1384] hsr_slave_0: left promiscuous mode [ 1087.152769][ T1384] hsr_slave_1: left promiscuous mode [ 1087.155138][ T1384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.207358][ T1384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.725448][ T1384] team0 (unregistering): Port device team_slave_1 removed [ 1092.166890][ T1384] team0 (unregistering): Port device team_slave_0 removed [ 1093.480754][T22456] ptrace attach of "./syz-executor exec"[22457] was attempted by "./syz-executor exec"[22456] [ 1095.857762][T22490] netlink: 'syz.1.5770': attribute type 1 has an invalid length. [ 1095.857784][T22490] netlink: 'syz.1.5770': attribute type 2 has an invalid length. [ 1096.215977][T22064] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1096.338461][T22064] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1096.691257][T22064] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1096.806124][T22064] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1097.107051][T22064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.256250][T22064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.298557][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.298751][ T9506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.350049][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.362729][T10343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.224340][T22563] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5789'. [ 1098.532771][T22064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.615192][T22064] veth0_vlan: entered promiscuous mode [ 1098.632051][T22064] veth1_vlan: entered promiscuous mode [ 1099.132840][T22064] veth0_macvtap: entered promiscuous mode [ 1099.138961][T22064] veth1_macvtap: entered promiscuous mode [ 1099.190694][T22064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.226189][T22064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.269359][ T1384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.269405][ T1384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.269439][ T1384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.269469][ T1384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.279548][T22591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1100.078245][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.078265][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.342750][ T2154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.342770][ T2154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.586364][T22632] tc_dump_action: action bad kind [ 1100.993346][T22641] netlink: 'syz.8.5820': attribute type 1 has an invalid length. [ 1100.993369][T22641] netlink: 'syz.8.5820': attribute type 2 has an invalid length. [ 1102.539037][T22696] netlink: 'syz.9.5845': attribute type 1 has an invalid length. [ 1102.539057][T22696] netlink: 'syz.9.5845': attribute type 2 has an invalid length. [ 1102.986234][T22704] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5848'. [ 1103.488873][T22730] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5859'. [ 1104.402140][T22758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5870'. [ 1106.149329][T22784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5882'. [ 1106.904427][T22808] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5893'. [ 1107.077961][T22814] fuse: Bad value for 'fd' [ 1107.957512][T22840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5907'. [ 1109.425360][ T37] audit: type=1800 audit(1903284614.639:592): pid=22869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.5915" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1117.721065][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1117.743665][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1117.750913][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1117.761066][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1117.778372][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1117.991571][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6058'. [ 1118.049477][T23186] ip6gre1: entered promiscuous mode [ 1118.049513][T23186] ip6gre1: entered allmulticast mode [ 1119.028195][T10343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1119.028434][T10343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1119.052794][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1119.592806][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1119.832900][ T5122] Bluetooth: hci2: command tx timeout [ 1120.056374][T23181] chnl_net:caif_netlink_parms(): no params data found [ 1120.072950][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1120.576153][T23181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.577299][T23181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.649432][T23181] bridge_slave_0: entered allmulticast mode [ 1120.843002][T23181] bridge_slave_0: entered promiscuous mode [ 1120.982665][T23181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.984718][T23181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.986854][T23181] bridge_slave_1: entered allmulticast mode [ 1121.085081][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.085149][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.109105][T23181] bridge_slave_1: entered promiscuous mode [ 1121.161976][T23181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.175897][T23181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.453077][T23181] team0: Port device team_slave_0 added [ 1121.463284][T23181] team0: Port device team_slave_1 added [ 1121.855842][T23181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.855859][T23181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.855884][T23181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.861630][T23181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.861644][T23181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.861662][T23181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.912766][ T5122] Bluetooth: hci2: command tx timeout [ 1123.037894][T23181] hsr_slave_0: entered promiscuous mode [ 1123.058975][T23181] hsr_slave_1: entered promiscuous mode [ 1123.059889][T23181] debugfs: 'hsr0' already exists in 'hsr' [ 1123.059913][T23181] Cannot create hsr debugfs directory [ 1123.063606][ T3590] bridge_slave_1: left allmulticast mode [ 1123.063630][ T3590] bridge_slave_1: left promiscuous mode [ 1123.063896][ T3590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.112735][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1123.212249][ T3590] bridge_slave_0: left allmulticast mode [ 1123.212276][ T3590] bridge_slave_0: left promiscuous mode [ 1123.216175][ T3590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.716069][T23320] overlayfs: failed to resolve './file0': -2 [ 1123.992707][ T5122] Bluetooth: hci2: command tx timeout [ 1124.718553][T23351] overlayfs: failed to resolve './file0': -2 [ 1125.320630][ T3590] batman_adv: batadv0: Removing interface: macvlan2 [ 1125.453324][ T3590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.543271][ T3590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.583399][ T3590] bond0 (unregistering): Released all slaves [ 1125.588410][ T3590] bond1 (unregistering): Released all slaves [ 1126.075272][ T5122] Bluetooth: hci2: command tx timeout [ 1126.078402][T23380] overlayfs: failed to resolve './file0': -2 [ 1126.850230][T23400] netlink: 'syz.1.6146': attribute type 1 has an invalid length. [ 1126.850251][T23400] netlink: 'syz.1.6146': attribute type 2 has an invalid length. [ 1126.936268][T23408] overlayfs: failed to resolve './file0': -2 [ 1127.382604][ T3590] hsr_slave_0: left promiscuous mode [ 1127.447968][ T3590] hsr_slave_1: left promiscuous mode [ 1127.451915][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.504229][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.871759][T23447] overlayfs: failed to resolve './file0': -2 [ 1128.767417][T23473] overlayfs: failed to resolve './file0': -2 [ 1130.271970][T23498] overlayfs: failed to resolve './file1': -2 [ 1130.892003][ T37] audit: type=1326 audit(1903284636.109:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23520 comm="syz.2.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d4cdacb9 code=0x7ffc0000 [ 1130.892058][ T37] audit: type=1326 audit(1903284636.109:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23520 comm="syz.2.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d4cdacb9 code=0x7ffc0000 [ 1130.944368][ T37] audit: type=1326 audit(1903284636.169:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23520 comm="syz.2.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f18d4cdacb9 code=0x7ffc0000 [ 1130.945427][ T37] audit: type=1326 audit(1903284636.169:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23520 comm="syz.2.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d4cdacb9 code=0x7ffc0000 [ 1130.945965][ T37] audit: type=1326 audit(1903284636.169:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23520 comm="syz.2.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18d4cdacb9 code=0x7ffc0000 [ 1130.946318][ T37] audit: type=1326 audit(1903284636.169:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23520 comm="syz.2.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d4cdacb9 code=0x7ffc0000 [ 1131.087734][T23527] overlayfs: failed to resolve './file1': -2 [ 1131.623081][ T3590] team0 (unregistering): Port device team_slave_1 removed [ 1131.780202][T23545] fuse: Bad value for 'fd' [ 1131.942753][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1132.130314][ T3590] team0 (unregistering): Port device team_slave_0 removed [ 1132.407072][T23557] overlayfs: failed to resolve './file1': -2 [ 1136.940485][T23445] netlink: 'syz.8.6159': attribute type 1 has an invalid length. [ 1136.940507][T23445] netlink: 'syz.8.6159': attribute type 2 has an invalid length. [ 1137.806021][T23605] netlink: 'syz.1.6229': attribute type 1 has an invalid length. [ 1137.806046][T23605] netlink: 'syz.1.6229': attribute type 2 has an invalid length. [ 1138.160524][T23589] ================================================================== [ 1138.160541][T23589] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1138.160571][T23589] Read of size 1 at addr ffff88805b253200 by task syz.8.6224/23589 [ 1138.160588][T23589] [ 1138.160610][T23589] CPU: 1 UID: 0 PID: 23589 Comm: syz.8.6224 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1138.160636][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1138.160650][T23589] Call Trace: [ 1138.160658][T23589] [ 1138.160670][T23589] dump_stack_lvl+0xe8/0x150 [ 1138.160697][T23589] print_report+0xba/0x230 [ 1138.160720][T23589] ? rt_spin_lock+0x83/0x400 [ 1138.160739][T23589] kasan_report+0x117/0x150 [ 1138.160767][T23589] ? rt_spin_lock+0x83/0x400 [ 1138.160789][T23589] ? __wake_up_common_lock+0x2f/0x1e0 [ 1138.160813][T23589] __kasan_check_byte+0x2a/0x40 [ 1138.160839][T23589] lock_acquire+0x84/0x330 [ 1138.160863][T23589] ? rt_mutex_slowunlock+0x681/0x8b0 [ 1138.160883][T23589] ? reacquire_held_locks+0x104/0x190 [ 1138.160913][T23589] rt_spin_lock+0x83/0x400 [ 1138.160931][T23589] ? __wake_up_common_lock+0x2f/0x1e0 [ 1138.160962][T23589] ? __pfx_rt_spin_lock+0x10/0x10 [ 1138.160979][T23589] ? rt_spin_unlock+0x160/0x200 [ 1138.160999][T23589] ? __wake_up_common_lock+0x18a/0x1e0 [ 1138.161022][T23589] __wake_up_common_lock+0x2f/0x1e0 [ 1138.161044][T23589] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1138.161068][T23589] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1138.161092][T23589] snd_pcm_action+0x1f4/0x240 [ 1138.161111][T23589] loopback_trigger+0xb82/0x1b60 [ 1138.161135][T23589] ? rcu_is_watching+0x15/0xb0 [ 1138.161156][T23589] snd_pcm_do_start+0xb7/0x180 [ 1138.161180][T23589] snd_pcm_action+0xe7/0x240 [ 1138.161199][T23589] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1138.161226][T23589] ? __pfx_interleaved_copy+0x10/0x10 [ 1138.161250][T23589] ? __pfx_default_write_copy+0x10/0x10 [ 1138.161275][T23589] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1138.161298][T23589] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1138.161321][T23589] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1138.161340][T23589] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1138.161362][T23589] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1138.161385][T23589] snd_pcm_oss_write3+0x1bc/0x350 [ 1138.161410][T23589] snd_pcm_oss_write2+0x2c2/0x440 [ 1138.161435][T23589] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1138.161458][T23589] ? rt_spin_unlock+0x14f/0x200 [ 1138.161478][T23589] ? rt_spin_unlock+0x160/0x200 [ 1138.161497][T23589] snd_pcm_oss_sync1+0x194/0x540 [ 1138.161526][T23589] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1138.161555][T23589] ? __pfx_default_wake_function+0x10/0x10 [ 1138.161573][T23589] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1138.161598][T23589] ? __asan_memset+0x22/0x50 [ 1138.161619][T23589] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1138.161647][T23589] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1138.161673][T23589] snd_pcm_oss_release+0x102/0x250 [ 1138.161697][T23589] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1138.161718][T23589] __fput+0x45e/0xa80 [ 1138.161742][T23589] task_work_run+0x1d9/0x270 [ 1138.161760][T23589] ? __pfx_task_work_run+0x10/0x10 [ 1138.161781][T23589] exit_to_user_mode_loop+0xed/0x480 [ 1138.161805][T23589] ? rcu_is_watching+0x15/0xb0 [ 1138.161824][T23589] do_syscall_64+0x2b7/0xf80 [ 1138.161846][T23589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.161863][T23589] ? trace_irq_disable+0x37/0x100 [ 1138.161881][T23589] ? clear_bhb_loop+0x60/0xb0 [ 1138.161898][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.161916][T23589] RIP: 0033:0x7fd85be8acb9 [ 1138.161940][T23589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.161962][T23589] RSP: 002b:00007ffd0a9a8678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1138.161983][T23589] RAX: 0000000000000000 RBX: 00007fd85c107da0 RCX: 00007fd85be8acb9 [ 1138.161996][T23589] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1138.162007][T23589] RBP: 00007fd85c107da0 R08: 0000000000000006 R09: 0000000000000000 [ 1138.162020][T23589] R10: 00007fd85c107cb0 R11: 0000000000000246 R12: 0000000000115d0c [ 1138.162033][T23589] R13: 00007fd85c10609c R14: 0000000000115a6d R15: 00007fd85c106090 [ 1138.162054][T23589] [ 1138.162060][T23589] [ 1138.162065][T23589] Allocated by task 23590: [ 1138.162074][T23589] kasan_save_track+0x3e/0x80 [ 1138.162095][T23589] __kasan_kmalloc+0x93/0xb0 [ 1138.162116][T23589] __kmalloc_cache_noprof+0x1f2/0x6b0 [ 1138.162137][T23589] snd_pcm_attach_substream+0x5b7/0xb20 [ 1138.162161][T23589] snd_pcm_open_substream+0xbd/0x2420 [ 1138.162178][T23589] snd_pcm_oss_open+0xfc2/0x1c50 [ 1138.162197][T23589] chrdev_open+0x4d0/0x5f0 [ 1138.162211][T23589] do_dentry_open+0x7d0/0x1270 [ 1138.162227][T23589] vfs_open+0x3b/0x350 [ 1138.162243][T23589] path_openat+0x34c9/0x3e70 [ 1138.162263][T23589] do_filp_open+0x22d/0x490 [ 1138.162282][T23589] do_sys_openat2+0x12f/0x220 [ 1138.162298][T23589] __x64_sys_openat+0x138/0x170 [ 1138.162316][T23589] do_syscall_64+0xe2/0xf80 [ 1138.162336][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.162352][T23589] [ 1138.162356][T23589] Freed by task 23590: [ 1138.162365][T23589] kasan_save_track+0x3e/0x80 [ 1138.162385][T23589] kasan_save_free_info+0x46/0x50 [ 1138.162403][T23589] __kasan_slab_free+0x5c/0x80 [ 1138.162424][T23589] kfree+0x1bb/0x8f0 [ 1138.162442][T23589] snd_pcm_detach_substream+0x1e1/0x290 [ 1138.162464][T23589] snd_pcm_oss_release+0x184/0x250 [ 1138.162482][T23589] __fput+0x45e/0xa80 [ 1138.162498][T23589] task_work_run+0x1d9/0x270 [ 1138.162512][T23589] exit_to_user_mode_loop+0xed/0x480 [ 1138.162531][T23589] do_syscall_64+0x2b7/0xf80 [ 1138.162552][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.162568][T23589] [ 1138.162572][T23589] The buggy address belongs to the object at ffff88805b253000 [ 1138.162572][T23589] which belongs to the cache kmalloc-2k of size 2048 [ 1138.162588][T23589] The buggy address is located 512 bytes inside of [ 1138.162588][T23589] freed 2048-byte region [ffff88805b253000, ffff88805b253800) [ 1138.162606][T23589] [ 1138.162611][T23589] The buggy address belongs to the physical page: [ 1138.162630][T23589] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b250 [ 1138.162648][T23589] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1138.162664][T23589] anon flags: 0x80000000000040(head|node=0|zone=1) [ 1138.162680][T23589] page_type: f5(slab) [ 1138.162695][T23589] raw: 0080000000000040 ffff88813fea7000 0000000000000000 dead000000000001 [ 1138.162711][T23589] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1138.162725][T23589] head: 0080000000000040 ffff88813fea7000 0000000000000000 dead000000000001 [ 1138.162739][T23589] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1138.162755][T23589] head: 0080000000000003 ffffea00016c9401 00000000ffffffff 00000000ffffffff [ 1138.162769][T23589] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1138.162778][T23589] page dumped because: kasan: bad access detected [ 1138.162791][T23589] page_owner tracks the page as allocated [ 1138.162797][T23589] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5801, tgid 5801 (syz-executor), ts 77915581403, free_ts 0 [ 1138.162832][T23589] post_alloc_hook+0x228/0x280 [ 1138.162854][T23589] get_page_from_freelist+0x28bb/0x2950 [ 1138.162870][T23589] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1138.162886][T23589] alloc_pages_mpol+0xd1/0x380 [ 1138.162900][T23589] allocate_slab+0x86/0x3a0 [ 1138.162917][T23589] ___slab_alloc+0xaf8/0x13d0 [ 1138.162933][T23589] __slab_alloc+0xc5/0x1f0 [ 1138.162948][T23589] __kmalloc_node_track_caller_noprof+0x2b6/0x7f0 [ 1138.162978][T23589] kmalloc_reserve+0x136/0x290 [ 1138.163001][T23589] pskb_expand_head+0x19d/0x1160 [ 1138.163018][T23589] netlink_trim+0x1b3/0x2c0 [ 1138.163032][T23589] netlink_broadcast_filtered+0xd6/0x1010 [ 1138.163048][T23589] nlmsg_notify+0xf0/0x1a0 [ 1138.163063][T23589] __dev_notify_flags+0xf2/0x310 [ 1138.163078][T23589] netif_change_flags+0xe8/0x1a0 [ 1138.163092][T23589] do_setlink+0xf82/0x4590 [ 1138.163107][T23589] page_owner free stack trace missing [ 1138.163114][T23589] [ 1138.163118][T23589] Memory state around the buggy address: [ 1138.163128][T23589] ffff88805b253100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1138.163141][T23589] ffff88805b253180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1138.163153][T23589] >ffff88805b253200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1138.163162][T23589] ^ [ 1138.163171][T23589] ffff88805b253280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1138.163183][T23589] ffff88805b253300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1138.163193][T23589] ================================================================== [ 1138.163681][T23589] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1138.163702][T23589] CPU: 1 UID: 0 PID: 23589 Comm: syz.8.6224 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1138.163725][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1138.163737][T23589] Call Trace: [ 1138.163744][T23589] [ 1138.163751][T23589] vpanic+0x1e0/0x670 [ 1138.163780][T23589] panic+0xc5/0xd0 [ 1138.163804][T23589] ? __pfx_panic+0x10/0x10 [ 1138.163828][T23589] ? preempt_schedule_thunk+0x16/0x30 [ 1138.163850][T23589] ? preempt_schedule_thunk+0x16/0x30 [ 1138.163871][T23589] ? rt_spin_lock+0x83/0x400 [ 1138.163890][T23589] check_panic_on_warn+0x89/0xb0 [ 1138.163918][T23589] ? rt_spin_lock+0x83/0x400 [ 1138.163936][T23589] end_report+0x6f/0x140 [ 1138.163972][T23589] kasan_report+0x128/0x150 [ 1138.163999][T23589] ? rt_spin_lock+0x83/0x400 [ 1138.164021][T23589] ? __wake_up_common_lock+0x2f/0x1e0 [ 1138.164044][T23589] __kasan_check_byte+0x2a/0x40 [ 1138.164070][T23589] lock_acquire+0x84/0x330 [ 1138.164093][T23589] ? rt_mutex_slowunlock+0x681/0x8b0 [ 1138.164111][T23589] ? reacquire_held_locks+0x104/0x190 [ 1138.164139][T23589] rt_spin_lock+0x83/0x400 [ 1138.164156][T23589] ? __wake_up_common_lock+0x2f/0x1e0 [ 1138.164179][T23589] ? __pfx_rt_spin_lock+0x10/0x10 [ 1138.164197][T23589] ? rt_spin_unlock+0x160/0x200 [ 1138.164217][T23589] ? __wake_up_common_lock+0x18a/0x1e0 [ 1138.164241][T23589] __wake_up_common_lock+0x2f/0x1e0 [ 1138.164265][T23589] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1138.164290][T23589] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1138.164313][T23589] snd_pcm_action+0x1f4/0x240 [ 1138.164333][T23589] loopback_trigger+0xb82/0x1b60 [ 1138.164358][T23589] ? rcu_is_watching+0x15/0xb0 [ 1138.164381][T23589] snd_pcm_do_start+0xb7/0x180 [ 1138.164404][T23589] snd_pcm_action+0xe7/0x240 [ 1138.164425][T23589] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1138.164459][T23589] ? __pfx_interleaved_copy+0x10/0x10 [ 1138.164484][T23589] ? __pfx_default_write_copy+0x10/0x10 [ 1138.164511][T23589] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1138.164536][T23589] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1138.164559][T23589] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1138.164579][T23589] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1138.164601][T23589] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1138.164627][T23589] snd_pcm_oss_write3+0x1bc/0x350 [ 1138.164653][T23589] snd_pcm_oss_write2+0x2c2/0x440 [ 1138.164678][T23589] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1138.164700][T23589] ? rt_spin_unlock+0x14f/0x200 [ 1138.164721][T23589] ? rt_spin_unlock+0x160/0x200 [ 1138.164742][T23589] snd_pcm_oss_sync1+0x194/0x540 [ 1138.164771][T23589] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1138.164797][T23589] ? __pfx_default_wake_function+0x10/0x10 [ 1138.164816][T23589] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1138.164842][T23589] ? __asan_memset+0x22/0x50 [ 1138.164863][T23589] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1138.164892][T23589] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1138.164919][T23589] snd_pcm_oss_release+0x102/0x250 [ 1138.164942][T23589] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1138.164973][T23589] __fput+0x45e/0xa80 [ 1138.164998][T23589] task_work_run+0x1d9/0x270 [ 1138.165016][T23589] ? __pfx_task_work_run+0x10/0x10 [ 1138.165038][T23589] exit_to_user_mode_loop+0xed/0x480 [ 1138.165063][T23589] ? rcu_is_watching+0x15/0xb0 [ 1138.165083][T23589] do_syscall_64+0x2b7/0xf80 [ 1138.165107][T23589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.165126][T23589] ? trace_irq_disable+0x37/0x100 [ 1138.165147][T23589] ? clear_bhb_loop+0x60/0xb0 [ 1138.165168][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.165187][T23589] RIP: 0033:0x7fd85be8acb9 [ 1138.165204][T23589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.165221][T23589] RSP: 002b:00007ffd0a9a8678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1138.165241][T23589] RAX: 0000000000000000 RBX: 00007fd85c107da0 RCX: 00007fd85be8acb9 [ 1138.165255][T23589] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1138.165268][T23589] RBP: 00007fd85c107da0 R08: 0000000000000006 R09: 0000000000000000 [ 1138.165281][T23589] R10: 00007fd85c107cb0 R11: 0000000000000246 R12: 0000000000115d0c [ 1138.165295][T23589] R13: 00007fd85c10609c R14: 0000000000115a6d R15: 00007fd85c106090 [ 1138.165316][T23589] [ 1138.165628][T23589] Kernel Offset: disabled