last executing test programs: 10m20.987318923s ago: executing program 32 (id=44): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 9m58.389956245s ago: executing program 2 (id=178): setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x8, 0x10}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x24008080) 9m58.039982781s ago: executing program 2 (id=180): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) connect$netrom(r0, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 9m56.995026861s ago: executing program 2 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x200000, 0x7) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) 9m56.703709323s ago: executing program 2 (id=187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r4, r0, 0x4, r0}, 0x10) 9m56.428464294s ago: executing program 2 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 9m55.250229613s ago: executing program 2 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x3f) 9m39.998005456s ago: executing program 33 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x3f) 8m32.181066959s ago: executing program 6 (id=563): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x428000, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f00000002c0)={0x0, 0x9, 0x6, "2979e4939de2"}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x10, {0xe, "5d7b7ab1e75b234ea0f52fe54faf"}}, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) setreuid(0xee00, 0xee01) syz_usb_control_io$uac1(r0, 0x0, 0x0) mkdir(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 8m29.276492288s ago: executing program 6 (id=580): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) 8m28.305354193s ago: executing program 6 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 8m27.215724381s ago: executing program 6 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 8m26.871878761s ago: executing program 6 (id=592): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8m26.471889219s ago: executing program 6 (id=599): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = gettid() ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x421c2, 0x82) ftruncate(r3, 0xee6e) sendfile(r2, r3, 0x0, 0x8000fffffffe) 8m26.146772932s ago: executing program 34 (id=599): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = gettid() ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x421c2, 0x82) ftruncate(r3, 0xee6e) sendfile(r2, r3, 0x0, 0x8000fffffffe) 8m9.472629705s ago: executing program 3 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./bus\x00', 0x400) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 8m9.015790757s ago: executing program 3 (id=684): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x80, 0x10, 0x0, {0x3, 0x0, 0x1000, 0x1, 0x5, 0x6, 0x80000000, 0xb, 0xe26, 0x5000, 0x5, 0x0, 0x0, 0x300, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x2) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) 8m8.628316727s ago: executing program 3 (id=688): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="00214717a7070008000003063ceb9d04712000000000000000ce8cf4bbca69d16c68f7c2fdaa355f37c0c6eb", 0x2c}], 0x1, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 8m6.553278062s ago: executing program 3 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m6.051998919s ago: executing program 3 (id=707): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) 8m5.660048476s ago: executing program 3 (id=711): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x1e, 0x4, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x80000) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 7m50.227432833s ago: executing program 35 (id=711): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x1e, 0x4, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x80000) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4m59.047706158s ago: executing program 7 (id=1628): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x8, 0x4, 'group_id'}}, {{0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, r3}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}]}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m58.425384605s ago: executing program 7 (id=1631): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1000) 4m57.527800645s ago: executing program 7 (id=1634): sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x8}]}}]}, 0x38}}, 0x40840) 4m55.375853967s ago: executing program 7 (id=1639): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m55.140225191s ago: executing program 7 (id=1644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3", 0xd}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4m52.866013414s ago: executing program 7 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 4m52.376388141s ago: executing program 36 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 2m47.597548313s ago: executing program 8 (id=2099): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa00"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r3) syz_usb_connect$uac1(0x3, 0x78, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902"], &(0x7f00000002c0)={0x0, 0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f1000030b"]}) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/950], 0x0) 2m44.740964181s ago: executing program 8 (id=2108): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0xffe) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000000)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000202070250000000000202020940af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m44.261872935s ago: executing program 8 (id=2114): r0 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) read(r0, 0x0, 0x0) close(r0) 2m44.101143076s ago: executing program 8 (id=2117): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f00000008c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xf38a02, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) 2m43.981864515s ago: executing program 8 (id=2119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180"], 0x80}}, 0x0) fstat(r0, &(0x7f00000002c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m43.387733808s ago: executing program 8 (id=2125): socket(0x10, 0x803, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x500, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) 2m42.65859756s ago: executing program 37 (id=2125): socket(0x10, 0x803, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x500, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) 13.682067446s ago: executing program 5 (id=2525): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x40000022, 0x10, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x21, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12.42482612s ago: executing program 5 (id=2527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x80000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 12.238725664s ago: executing program 5 (id=2530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xc3a01, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x1b6c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x8, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) 6.058242056s ago: executing program 0 (id=2542): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x69, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x54, 0x7, 0x0, 0x8, 0x78]}, &(0x7f0000000180)=0x54) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008051) 5.23002672s ago: executing program 1 (id=2545): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a1a6fa2f17b1d75e"}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x15, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) memfd_create(&(0x7f00000001c0)='\b\x9dF\xd8\b\xb3~u\x06\x00\xdc\xddq\xf6c\r;\xfcO\x8c=\x81\xb1\x17\xbb\xed\xf6b\x84\xb7\'\x8aSpA\xd4\x98\x85D\x7f]N\x8ar\x17O\x0fKR\"\xf68Fx(\xbd\xa8\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x15\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8S5\x11HS\xe0\x87N\x82/\x93\xb9\x9f\x0e\'O\x88v?b\xbf\xbc\xe6\xfd$\x8e\xc2B\x96U7\x84\x91\x8d\xa9\x90s^\xee3\xa93\xe3\v\x86\xa9R\x1a\xc7-\'E\xf2q\x9c\x00\x00~\x81\b\x87XwX\xe1\xa4d\x90\xfdt\xae\x04g\x16\xb2\xab\x00\x00\x00\x00\x00\x00', 0x6) socket$inet6(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r1, 0x5d62, 0x0, 0x0, 0x0, 0x0) 5.125449338s ago: executing program 0 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0xce1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="8d0000008000"}) 4.552179s ago: executing program 5 (id=2549): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 4.475855237s ago: executing program 1 (id=2550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 4.450760334s ago: executing program 0 (id=2551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fcntl$setstatus(r3, 0x4, 0x800) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 3.802855813s ago: executing program 4 (id=2552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 3.432893592s ago: executing program 4 (id=2553): socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) socket(0x28, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4) 3.273326082s ago: executing program 0 (id=2554): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x62, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 3.219657358s ago: executing program 9 (id=2555): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) rename(0x0, &(0x7f0000000380)='./bus\x00') 3.121877091s ago: executing program 4 (id=2556): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r2, @ANYBLOB="08000100e000000208000200ffffffff08000400ac1414aa080004009d1414aa08000a000100200008000200"], 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r3, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102393, 0x5501, 0x10100008) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @local}}) 3.094360385s ago: executing program 5 (id=2557): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x42, 0x100) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) 3.091578515s ago: executing program 9 (id=2558): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0xa, 0x3, 0x3a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.079848418s ago: executing program 1 (id=2559): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) socket$kcm(0x10, 0x2, 0x4) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)=""/139, 0x8b}], 0x2}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 2.97290525s ago: executing program 0 (id=2560): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x54, r4, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@device_b, {0x9}}, 0x1c, @val={0x8c, 0x10, {0x8f6, "ae21f29d3b67", @short="6da9539971ce0e92"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x54}, 0x1, 0x0, 0x0, 0x88d4}, 0x40094) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.930427014s ago: executing program 4 (id=2561): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @remote}, {0x0, 0x0, 0x8}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) 2.875177169s ago: executing program 5 (id=2562): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2.777627914s ago: executing program 9 (id=2563): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000021c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2505000000080009000200000008000c00aa0a0000060001000500000008000b00020000"], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000) 2.776682783s ago: executing program 0 (id=2564): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 2.699974331s ago: executing program 4 (id=2565): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r7, 0x0, 0x4ffe6, 0x0) 1.402730373s ago: executing program 1 (id=2566): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x2e) 1.400934768s ago: executing program 9 (id=2567): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 1.265920755s ago: executing program 1 (id=2568): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101"], 0x78) close(r1) r2 = inotify_init1(0x0) mbind(&(0x7f0000823000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x52000775) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') renameat2(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 1.131933993s ago: executing program 9 (id=2569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="711f464eb5fbd4279ce3dbb642b3", 0xe}, 0x1, 0x0, 0x0, 0x4}, 0x4044004) recvmmsg(r3, &(0x7f0000002e40)=[{{0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0) 168.626781ms ago: executing program 9 (id=2570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x20, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 165.411266ms ago: executing program 4 (id=2571): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/55, &(0x7f0000000000)=0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2572): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) kernel console output (not intermixed with test programs): sim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.336100][ T30] audit: type=1326 audit(1745488619.273:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.5.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85da18e969 code=0x7ffc0000 [ 295.384816][ T30] audit: type=1326 audit(1745488619.273:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.5.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85da18e969 code=0x7ffc0000 [ 295.420480][ T30] audit: type=1326 audit(1745488619.273:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.5.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85da18e969 code=0x7ffc0000 [ 295.485144][ T9155] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.486369][ T30] audit: type=1326 audit(1745488619.273:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.5.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85da18e969 code=0x7ffc0000 [ 295.569961][ T30] audit: type=1326 audit(1745488619.273:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.5.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85da18e969 code=0x7ffc0000 [ 295.616047][ T30] audit: type=1326 audit(1745488619.273:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.5.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85da18e969 code=0x7ffc0000 [ 295.657898][ T30] audit: type=1326 audit(1745488619.273:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9171 comm="syz.5.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85da18e969 code=0x7ffc0000 [ 295.715160][ T9186] lo: entered allmulticast mode [ 295.817198][ T9155] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.897359][ T9155] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.924368][ T9185] lo: left allmulticast mode [ 295.958000][ T9155] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.014091][ T9155] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.177795][ T9199] overlayfs: failed to clone upperpath [ 296.898572][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 296.976736][ T5139] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 298.368466][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 298.459682][ T9223] bridge_slave_1: left allmulticast mode [ 298.486382][ T9223] bridge_slave_1: left promiscuous mode [ 298.493229][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.562266][ T9223] bridge_slave_0: left allmulticast mode [ 298.591417][ T9223] bridge_slave_0: left promiscuous mode [ 298.605244][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.029661][ T9258] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 300.053189][ T9257] uprobe: syz.5.919:9257 failed to unregister, leaking uprobe [ 300.167577][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 300.167597][ T30] audit: type=1326 audit(1745488624.313:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.4.921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x0 [ 300.258594][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.7.922'. [ 300.483508][ T9274] syzkaller0: entered promiscuous mode [ 300.490887][ T9274] syzkaller0: entered allmulticast mode [ 301.062356][ T30] audit: type=1800 audit(1745488625.193:53): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.923" name="/" dev="fuse" ino=1 res=0 errno=0 [ 301.434561][ T9294] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.842902][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.583949][ T9356] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.738816][ T9358] netlink: 'syz.1.953': attribute type 13 has an invalid length. [ 308.759362][ T9364] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 309.528262][ T9358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.550624][ T9358] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.606895][ T9358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.026942][ T9381] overlayfs: failed to clone upperpath [ 310.698949][ T9393] overlayfs: failed to clone upperpath [ 311.593945][ T9413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.572166][ T30] audit: type=1804 audit(1745488636.713:54): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.977" name="file0" dev="tmpfs" ino=1275 res=1 errno=0 [ 314.736254][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 314.743694][ T5139] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 315.287752][ T30] audit: type=1804 audit(1745488639.433:55): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.989" name="/newroot/203/file0" dev="tmpfs" ino=1147 res=1 errno=0 [ 315.739859][ T9479] overlayfs: failed to clone upperpath [ 317.140766][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.216546][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.970501][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1002'. [ 318.046643][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 319.609675][ T9541] kvm: pic: non byte read [ 319.629679][ T9541] kvm: pic: level sensitive irq not supported [ 319.629756][ T9541] kvm: pic: non byte read [ 319.692905][ T9541] kvm: pic: level sensitive irq not supported [ 319.692980][ T9541] kvm: pic: non byte read [ 320.610895][ T9587] overlayfs: failed to clone upperpath [ 320.623669][ T9585] tipc: Started in network mode [ 320.656639][ T9585] tipc: Node identity 080211000001, cluster identity 4711 [ 320.744297][ T9585] tipc: Enabled bearer , priority 0 [ 321.873444][ T8365] tipc: Node number set to 134418688 [ 322.383915][ T9599] syz.1.1035 (9599): drop_caches: 2 [ 323.312221][ T30] audit: type=1326 audit(1745488647.453:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 323.359749][ T30] audit: type=1326 audit(1745488647.453:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 323.392023][ T30] audit: type=1326 audit(1745488647.473:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff65192ab39 code=0x7ffc0000 [ 323.419136][ T30] audit: type=1326 audit(1745488647.473:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 323.514485][ T30] audit: type=1326 audit(1745488647.483:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 323.546801][ T30] audit: type=1326 audit(1745488647.483:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff65192ab39 code=0x7ffc0000 [ 323.605443][ T30] audit: type=1326 audit(1745488647.483:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 323.649689][ T30] audit: type=1326 audit(1745488647.493:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff65192ab39 code=0x7ffc0000 [ 323.675542][ T30] audit: type=1326 audit(1745488647.493:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 323.702497][ T30] audit: type=1326 audit(1745488647.533:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff65192ab39 code=0x7ffc0000 [ 323.989491][ T6700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.053216][ T6700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.732479][ T9646] netlink: 'syz.5.1055': attribute type 1 has an invalid length. [ 325.026015][ T8345] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 325.050208][ T9646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.093477][ T9651] ip6erspan0: entered promiscuous mode [ 325.158268][ T9651] bond1: (slave ip6erspan0): making interface the new active one [ 325.189662][ T9651] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 325.236392][ T8345] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 325.263595][ T8345] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.313328][ T8345] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.339396][ T8345] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.353165][ T8345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.402867][ T8345] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.424013][ T8345] usb 2-1: invalid MIDI out EP 0 [ 325.619585][ T8345] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 325.733315][ T8345] usb 2-1: USB disconnect, device number 15 [ 328.037762][ T8358] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 328.245962][ T8358] usb 8-1: Using ep0 maxpacket: 16 [ 328.327911][ T8358] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 328.362631][ T8358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 328.434015][ T8358] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 328.455293][ T8358] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.468667][ T8358] usb 8-1: Product: syz [ 328.472955][ T8358] usb 8-1: Manufacturer: syz [ 328.477843][ T8358] usb 8-1: SerialNumber: syz [ 328.500380][ T8358] usb 8-1: config 0 descriptor?? [ 328.532463][ T8358] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 328.587816][ T8358] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 328.896637][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 329.746939][ T8358] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 329.766268][ T8358] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 329.796147][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 329.812419][ T9] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 329.843042][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.872393][ T9] usb 9-1: config 0 descriptor?? [ 330.096178][ T9] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 330.388722][ T8358] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 330.609912][ T8358] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 330.631865][ T8358] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 330.654429][ T8358] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 330.672486][ T8358] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 330.680148][ T8358] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 330.690839][ T8358] usb 8-1: USB disconnect, device number 5 [ 331.306767][ T9757] overlayfs: failed to clone upperpath [ 332.278988][ T9768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.355069][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.420574][ T9] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 332.649037][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.736013][ T5139] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.197002][ T9] asix 9-1:0.0: probe with driver asix failed with error -71 [ 333.207411][ T9] usb 9-1: USB disconnect, device number 3 [ 333.538765][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 333.538784][ T30] audit: type=1800 audit(1745488657.683:193): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1101" name="/" dev="9p" ino=2 res=0 errno=0 [ 333.885607][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 334.019593][ T9787] overlayfs: failed to clone upperpath [ 334.048660][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 334.077598][ T9] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 334.096412][ T9] usb 9-1: config 0 has no interface number 0 [ 334.111877][ T9] usb 9-1: config 0 interface 12 has no altsetting 0 [ 334.179181][ T9792] ptrace attach of "./syz-executor exec"[8303] was attempted by "./syz-executor exec"[9792] [ 334.607263][ T9] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 334.625919][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.646119][ T9] usb 9-1: Product: syz [ 334.650445][ T9] usb 9-1: Manufacturer: syz [ 334.691165][ T9] usb 9-1: SerialNumber: syz [ 334.704169][ T9] usb 9-1: config 0 descriptor?? [ 334.886374][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1108'. [ 334.921404][ T9797] syz_tun: entered allmulticast mode [ 334.939366][ T9802] bridge_slave_1: left allmulticast mode [ 334.945677][ T9802] bridge_slave_1: left promiscuous mode [ 334.993958][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.031820][ T9802] bridge_slave_0: left allmulticast mode [ 335.037948][ T9802] bridge_slave_0: left promiscuous mode [ 335.045092][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.099459][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 335.115210][ T9807] overlayfs: failed to clone upperpath [ 335.206524][ T9806] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 335.304831][ T9806] 8021q: adding VLAN 0 to HW filter on device team1 [ 335.319794][ T9796] syz_tun: left allmulticast mode [ 336.769080][ T9] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 336.792338][ T9] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 336.820458][ T9] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 336.836030][ T9] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 336.875938][ T9] usb 9-1: USB disconnect, device number 4 [ 337.056123][ T8345] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 337.268244][ T8345] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.298424][ T8345] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.319431][ T8345] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.349361][ T8345] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.376456][ T8345] usb 8-1: SerialNumber: syz [ 337.607892][ T8345] usb 8-1: 0:2 : does not exist [ 337.614422][ T8345] usb 8-1: unit 5: unexpected type 0x0d [ 337.636822][ T8345] usb 8-1: USB disconnect, device number 6 [ 337.904867][ T9858] loop2: detected capacity change from 0 to 7 [ 337.923043][ T9858] Dev loop2: unable to read RDB block 7 [ 337.934082][ T9858] loop2: AHDI p1 p2 [ 337.946055][ T9858] loop2: partition table partially beyond EOD, truncated [ 337.974243][ T9858] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 338.531750][ T9867] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 338.860955][ T9884] overlayfs: failed to clone upperpath [ 338.884796][ T9884] Invalid ELF header len 8 [ 339.890100][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1151'. [ 339.899268][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1151'. [ 339.908317][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1151'. [ 341.960087][ T9941] overlayfs: failed to clone upperpath [ 342.001541][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'. [ 342.455497][ T9962] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1170'. [ 342.470895][ T8359] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 342.639414][ T8359] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.653647][ T8359] usb 2-1: config 0 has no interface number 0 [ 342.666157][ T8359] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 342.678605][ T8359] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 342.690416][ T8359] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.711072][ T8359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.722321][ T8359] usb 2-1: config 0 descriptor?? [ 342.744725][ T9950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 342.770500][ T8359] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 342.946063][ T5880] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 343.068634][ T8345] usb 2-1: USB disconnect, device number 16 [ 343.107936][ T5880] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 343.610551][ T9982] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 344.065914][ T5880] usb 9-1: config 179 has no interface number 0 [ 344.072341][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 344.085242][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 344.097275][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 344.109439][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 344.135253][ T9982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.170859][ T9983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.179094][ T9983] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.212365][ T9983] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 344.292916][ T9982] ip6erspan0: entered promiscuous mode [ 344.332180][ T9982] bond1: (slave ip6erspan0): making interface the new active one [ 344.364273][ T9982] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 345.071309][ T5880] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 345.084767][ T5880] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 345.103678][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.893041][ T5880] usb 9-1: can't set config #179, error -71 [ 345.917895][ T5880] usb 9-1: USB disconnect, device number 5 [ 348.626704][T10037] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 348.689675][T10041] syz.1.1196: attempt to access beyond end of device [ 348.689675][T10041] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 348.703255][T10041] hpfs: hpfs_map_sector(): read error [ 349.326532][ T5139] Bluetooth: hci0: Dropping invalid advertising data [ 351.066082][ T8358] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 351.242243][ T8358] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 351.293668][ T8358] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.396271][ T8358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.493131][ T8358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.526336][ T8358] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.574723][ T8358] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.624365][ T8358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.668610][ T8358] usb 8-1: config 0 descriptor?? [ 351.889409][ T30] audit: type=1804 audit(1745488676.033:194): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1214" name="file0" dev="tmpfs" ino=1631 res=1 errno=0 [ 352.098082][ T8358] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 352.128525][ T8358] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 352.164683][ T8358] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 352.179334][T10088] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 352.399945][ T9] usb 8-1: USB disconnect, device number 7 [ 354.925924][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1227'. [ 355.831241][T10140] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1232'. [ 358.402004][T10161] bond0: (slave bond_slave_0): Releasing backup interface [ 358.422394][T10165] Cannot find add_set index 0 as target [ 358.563262][T10161] bond0: (slave bond_slave_1): Releasing backup interface [ 358.625662][T10161] team0: Port device team_slave_0 removed [ 358.662437][T10161] team0: Port device team_slave_1 removed [ 358.682685][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.713258][T10161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.750159][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.762057][T10161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.790328][T10161] bond1: (slave ip6erspan0): Releasing active interface [ 358.846857][ T36] tipc: Resetting bearer [ 361.255694][T10201] netlink: 'syz.7.1252': attribute type 10 has an invalid length. [ 361.325654][T10201] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.431918][T10204] x_tables: unsorted underflow at hook 1 [ 361.436312][T10201] bond0: (slave team0): Enslaving as an active interface with an up link [ 362.536440][ T5946] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 362.677063][T10226] ipvlan2: entered promiscuous mode [ 362.706124][ T5946] usb 9-1: Using ep0 maxpacket: 16 [ 362.717308][ T5946] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 362.725741][ T5946] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 362.733956][ T5946] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 362.743142][ T5946] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.756541][ T5946] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.766540][ T5946] usb 9-1: config 0 interface 0 has no altsetting 0 [ 362.773217][ T5946] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 362.782443][ T5946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.793413][ T5946] usb 9-1: config 0 descriptor?? [ 363.234574][T10241] syz.1.1263: attempt to access beyond end of device [ 363.234574][T10241] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 363.326473][T10241] syz.1.1263: attempt to access beyond end of device [ 363.326473][T10241] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 363.339579][ T5139] block nbd1: Receive control failed (result -107) [ 364.297032][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 364.392117][T10238] nbd1: detected capacity change from 0 to 12 [ 364.409136][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 364.518300][T10234] nbd1: detected capacity change from 12 to 6 [ 364.526848][T10241] block nbd1: Dead connection, failed to find a fallback [ 364.534353][T10241] block nbd1: shutting down sockets [ 364.546285][T10241] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.568275][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 364.596339][ T5946] usbhid 9-1:0.0: can't add hid device: -71 [ 364.615506][ T5946] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 364.653129][T10241] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.704561][ T8365] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 364.769783][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 364.819018][ T5946] usb 9-1: USB disconnect, device number 6 [ 364.835962][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 364.882535][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 364.916990][T10241] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.954352][ T8365] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 364.956364][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 364.986023][ T8365] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.021705][ T8365] usb 8-1: Product: syz [ 365.029506][ T8365] usb 8-1: Manufacturer: syz [ 365.040963][ T8365] usb 8-1: SerialNumber: syz [ 365.062774][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 365.067631][ T8365] r8152-cfgselector 8-1: Unknown version 0x0000 [ 365.110408][ T8365] r8152-cfgselector 8-1: config 0 descriptor?? [ 365.247130][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 365.279583][T10241] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 365.326276][T10241] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 365.408207][ T8365] r8152-cfgselector 8-1: Unknown version 0x0000 [ 365.486408][ T8365] r8152-cfgselector 8-1: bad CDC descriptors [ 365.659873][T10258] overlayfs: failed to clone upperpath [ 365.697931][ T5946] r8152-cfgselector 8-1: USB disconnect, device number 8 [ 366.166361][ T5946] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 366.504405][ T5946] usb 9-1: config index 0 descriptor too short (expected 32820, got 52) [ 366.522244][ T5946] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.581417][ T5946] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 366.593030][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.621641][ T5946] usb 9-1: Product: syz [ 366.622899][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.634772][ T5946] usb 9-1: Manufacturer: syz [ 366.659322][ T5946] usb 9-1: SerialNumber: syz [ 366.704910][ T5946] usb 9-1: config 0 descriptor?? [ 366.732890][ T5946] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.782808][ T5946] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 366.910993][T10281] netlink: 'syz.7.1277': attribute type 11 has an invalid length. [ 367.221964][T10285] No such timeout policy "syz0" [ 367.999132][ T8365] usb 9-1: USB disconnect, device number 7 [ 372.069672][ T30] audit: type=1326 audit(1745488696.213:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85da18e969 code=0x0 [ 372.526048][ T8358] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 372.686196][ T8358] usb 8-1: Using ep0 maxpacket: 16 [ 372.749711][ T8358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.933385][ T8358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.184410][ T8358] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.248418][ T8358] usb 8-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 373.311904][ T8358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.363034][ T8358] usb 8-1: config 0 descriptor?? [ 373.855098][ T8358] apple 0003:05AC:0245.000A: unknown main item tag 0x1 [ 373.866568][T10396] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 373.882237][ T8358] apple 0003:05AC:0245.000A: unknown global tag 0xe [ 374.273218][ T8358] apple 0003:05AC:0245.000A: item 0 0 1 14 parsing failed [ 374.370508][ T8358] apple 0003:05AC:0245.000A: parse failed [ 374.527376][ T8358] apple 0003:05AC:0245.000A: probe with driver apple failed with error -22 [ 374.599410][ T8358] usb 8-1: USB disconnect, device number 9 [ 375.166943][ T8345] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 375.997034][ T8345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.105025][ T8345] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.166060][ T8345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.209340][ T8345] usb 2-1: config 0 descriptor?? [ 376.235747][ T8345] pwc: Askey VC010 type 2 USB webcam detected. [ 376.643512][ T8345] pwc: recv_control_msg error -32 req 02 val 2b00 [ 376.763173][ T8345] pwc: recv_control_msg error -32 req 02 val 2700 [ 376.780315][ T8345] pwc: recv_control_msg error -32 req 02 val 2c00 [ 376.795157][ T8345] pwc: recv_control_msg error -32 req 04 val 1000 [ 376.806828][ T8345] pwc: recv_control_msg error -32 req 04 val 1300 [ 376.820566][T10443] syz.7.1335: attempt to access beyond end of device [ 376.820566][T10443] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 376.833777][T10443] hpfs: hpfs_map_sector(): read error [ 376.859232][ T8345] pwc: recv_control_msg error -32 req 04 val 1400 [ 377.408048][ T8345] pwc: recv_control_msg error -32 req 02 val 2000 [ 377.536303][ T8345] pwc: recv_control_msg error -32 req 02 val 2100 [ 378.425698][ T8345] pwc: recv_control_msg error -71 req 02 val 2500 [ 378.444906][ T8345] pwc: recv_control_msg error -71 req 02 val 2400 [ 378.458580][ T8345] pwc: recv_control_msg error -71 req 02 val 2600 [ 378.466713][ T8345] pwc: recv_control_msg error -71 req 02 val 2900 [ 378.485451][ T8345] pwc: recv_control_msg error -71 req 02 val 2800 [ 378.496412][ T8345] pwc: recv_control_msg error -71 req 04 val 1100 [ 378.503362][ T8345] pwc: recv_control_msg error -71 req 04 val 1200 [ 378.516393][ T8345] pwc: Registered as video103. [ 378.523305][ T8345] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 378.556851][ T8345] usb 2-1: USB disconnect, device number 17 [ 378.583838][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.595955][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.241389][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1342'. [ 379.402350][T10463] syzkaller0: entered promiscuous mode [ 379.414748][T10463] syzkaller0: entered allmulticast mode [ 379.553825][T10474] netlink: 'syz.8.1345': attribute type 4 has an invalid length. [ 379.639367][T10475] netlink: 'syz.8.1345': attribute type 4 has an invalid length. [ 379.968968][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1349'. [ 380.059413][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1349'. [ 380.788791][T10493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.913595][T10495] overlayfs: failed to clone upperpath [ 388.560129][ T5139] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 389.506143][ T5880] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 389.626209][ T5946] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 389.686010][ T5880] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 389.695771][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.796289][ T5880] usb 9-1: Product: syz [ 389.802453][ T5880] usb 9-1: Manufacturer: syz [ 389.807405][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 390.057375][ T5880] usb 9-1: SerialNumber: syz [ 390.065026][ T5880] usb 9-1: config 0 descriptor?? [ 390.098605][ T5946] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 390.121014][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.214904][ T5946] usb 2-1: Product: syz [ 390.248519][ T5946] usb 2-1: Manufacturer: syz [ 390.266549][ T5946] usb 2-1: SerialNumber: syz [ 390.275615][ T5880] hso 9-1:0.0: Failed to find BULK IN ep [ 390.304739][ T5880] usb-storage 9-1:0.0: USB Mass Storage device detected [ 390.314253][ T5946] usb 2-1: config 0 descriptor?? [ 390.464576][ T5946] as10x_usb: device has been detected [ 390.470799][ T5946] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 390.492148][T10557] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.1371'. [ 390.508243][ T5946] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 390.566712][T10557] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 390.645570][T10557] ufs: Invalid option: "ü" or missing value [ 390.660385][ T5946] as10x_usb: error during firmware upload part1 [ 390.680370][T10557] ufs: wrong mount options [ 390.695424][ T5946] Registered device Sky IT Digital Key (green led) [ 390.731516][ T5946] usb 9-1: USB disconnect, device number 8 [ 390.869896][ T9] usb 2-1: USB disconnect, device number 18 [ 390.972644][ T9] Unregistered device Sky IT Digital Key (green led) [ 390.986820][ T9] as10x_usb: device has been disconnected [ 391.400162][ T8345] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 391.525154][T10582] xt_nat: multiple ranges no longer supported [ 392.287781][ T8345] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.326616][ T8345] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 392.362843][ T8345] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.380382][ T8345] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.395082][ T8345] usb 8-1: Product: syz [ 392.402466][ T8345] usb 8-1: Manufacturer: syz [ 392.409150][ T8345] usb 8-1: SerialNumber: syz [ 392.666232][T10577] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 393.806189][T10577] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 393.861437][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'. [ 393.887340][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1389'. [ 393.932576][T10610] kvm: pic: level sensitive irq not supported [ 395.321622][ T8345] cdc_ncm 8-1:1.0: failed to get mac address [ 395.369055][ T8345] cdc_ncm 8-1:1.0: bind() failure [ 395.426085][ T8345] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 395.443573][ T8345] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 395.471251][ T8345] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 395.521044][ T8345] usb 8-1: USB disconnect, device number 10 [ 395.669181][T10658] overlayfs: failed to clone upperpath [ 397.793686][T10703] hub 6-0:1.0: USB hub found [ 397.866048][T10704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.618978][T10703] hub 6-0:1.0: 1 port detected [ 399.018625][T10721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.059631][T10721] syz.1.1424: attempt to access beyond end of device [ 399.059631][T10721] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 399.106168][T10721] EXT4-fs (loop3): unable to read superblock [ 399.120295][ T30] audit: type=1326 audit(1745488723.263:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10718 comm="syz.8.1423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x0 [ 399.158271][ T5880] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 399.312973][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1426'. [ 399.368560][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.389960][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.403898][ T5880] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 399.419449][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.440196][ T5880] usb 8-1: config 0 descriptor?? [ 399.534212][T10733] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 399.560464][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.571170][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.580357][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.590819][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.600083][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.614705][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.623240][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.632415][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.640846][T10733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 399.864410][ T5880] petalynx 0003:18B1:0037.000B: hidraw0: USB HID vff.ff Device [HID 18b1:0037] on usb-dummy_hcd.7-1/input0 [ 400.238199][ T5880] usb 8-1: USB disconnect, device number 11 [ 401.104739][T10758] overlayfs: failed to clone upperpath [ 401.180955][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1434'. [ 405.646298][ T30] audit: type=1326 audit(1745488729.773:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 405.778787][ T30] audit: type=1326 audit(1745488729.773:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 405.850489][ T30] audit: type=1326 audit(1745488729.773:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 405.995923][ T30] audit: type=1326 audit(1745488729.773:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 406.095384][ T30] audit: type=1326 audit(1745488729.773:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 406.182584][ T30] audit: type=1326 audit(1745488729.773:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 406.215908][ T30] audit: type=1326 audit(1745488729.773:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 406.376875][ T30] audit: type=1326 audit(1745488729.773:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 406.425498][ T30] audit: type=1326 audit(1745488729.773:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 407.096000][ T30] audit: type=1326 audit(1745488729.773:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.8.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 408.447155][T10855] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 408.667647][T10861] ip6gretap0: entered promiscuous mode [ 408.673521][T10861] vlan2: entered promiscuous mode [ 409.013419][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1476'. [ 409.220457][T10880] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1477'. [ 409.297905][ T8365] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 409.549903][ T8365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.433772][ T8365] usb 2-1: config 0 has no interfaces? [ 410.439351][ T8365] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 410.448455][ T8365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.462676][ T8365] usb 2-1: config 0 descriptor?? [ 410.763290][ T8365] usb 2-1: USB disconnect, device number 19 [ 412.056044][T10897] warning: `syz.7.1482' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 418.287409][T10957] kvm: pic: single mode not supported [ 418.287428][T10957] kvm: pic: level sensitive irq not supported [ 418.296140][T10957] kvm: pic: non byte read [ 418.426691][T10957] kvm: pic: level sensitive irq not supported [ 418.426744][T10957] kvm: pic: non byte read [ 418.606199][T10957] kvm: pic: non byte read [ 418.632445][T10957] kvm: pic: non byte read [ 418.661323][T10957] kvm: pic: single mode not supported [ 418.661341][T10957] kvm: pic: level sensitive irq not supported [ 418.677177][T10957] kvm: pic: non byte read [ 418.699634][T10957] kvm: pic: level sensitive irq not supported [ 418.699688][T10957] kvm: pic: non byte read [ 418.721431][T10957] kvm: pic: non byte read [ 418.730917][T10957] kvm: pic: level sensitive irq not supported [ 418.730970][T10957] kvm: pic: non byte read [ 418.754502][T10957] kvm: pic: non byte read [ 419.298435][T10973] kvm: pic: non byte read [ 419.303397][T10973] kvm: pic: level sensitive irq not supported [ 420.516328][ T8353] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 420.688542][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 420.819438][ T8353] usb 8-1: Using ep0 maxpacket: 32 [ 420.836692][T11011] tipc: Resetting bearer [ 420.847520][ T8353] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.858681][ T8353] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.875904][ T8353] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 420.885153][ T8353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.955494][ T8353] usb 8-1: config 0 descriptor?? [ 421.322901][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 421.488648][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 421.591606][ T8353] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 421.672951][ T8353] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 421.964476][ T8353] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 422.566348][ T8353] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 422.649920][T11034] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 422.747266][T11036] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 422.772398][ T8353] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 424.514006][ T8345] usb 8-1: USB disconnect, device number 12 [ 425.722999][T11093] overlayfs: failed to clone upperpath [ 426.706203][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 426.706223][ T30] audit: type=1804 audit(1745488750.843:209): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1555" name="/newroot/311/file0" dev="tmpfs" ino=1738 res=1 errno=0 [ 427.359252][T11118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.195588][T11161] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 434.041958][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 434.051102][T11194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1583'. [ 434.306052][ T8345] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 434.455884][ T8345] usb 2-1: Using ep0 maxpacket: 32 [ 434.462986][ T8345] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 434.471237][ T8345] usb 2-1: config 0 has no interface number 0 [ 434.477824][ T8345] usb 2-1: config 0 interface 12 has no altsetting 0 [ 434.488470][ T8345] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 434.497659][ T8345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.505747][ T8345] usb 2-1: Product: syz [ 434.510059][ T8345] usb 2-1: Manufacturer: syz [ 434.514759][ T8345] usb 2-1: SerialNumber: syz [ 434.538289][ T8345] usb 2-1: config 0 descriptor?? [ 435.162801][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 435.285778][T11220] hsr_slave_1 (unregistering): left promiscuous mode [ 435.952556][T11237] netlink: 'syz.4.1597': attribute type 7 has an invalid length. [ 435.987984][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 436.271724][T11242] xt_hashlimit: size too large, truncated to 1048576 [ 436.357632][T11245] xt_hashlimit: size too large, truncated to 1048576 [ 436.384950][T11244] kvm: pic: non byte write [ 436.866284][ T8345] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 436.873988][ T8345] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 436.884498][ T8345] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 437.100222][ T8345] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 437.120105][ T8345] usb 2-1: USB disconnect, device number 20 [ 437.832153][T11273] dns_resolver: Unsupported server list version (0) [ 438.840785][T11284] overlayfs: failed to clone upperpath [ 438.945905][ T8345] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 439.971420][ T8345] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 440.022606][ T8345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.031696][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.058832][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.076086][ T8345] usb 2-1: Product: syz [ 440.080312][ T8345] usb 2-1: Manufacturer: syz [ 440.084937][ T8345] usb 2-1: SerialNumber: syz [ 440.098164][ T8345] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 440.284281][ T8353] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 441.055538][ T9] usb 2-1: USB disconnect, device number 21 [ 441.770315][ T8353] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 441.796312][ T8353] ath9k_htc: Failed to initialize the device [ 441.828753][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 441.844920][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1621'. [ 442.424207][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.578752][T11314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.625936][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.642038][T11314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.066935][ T8353] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 443.547330][ T8353] usb 9-1: Using ep0 maxpacket: 16 [ 443.573132][ T8353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.595441][ T8353] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 443.616249][ T8353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.650210][ T8353] usb 9-1: Product: syz [ 443.654434][ T8353] usb 9-1: Manufacturer: syz [ 443.659790][ T8353] usb 9-1: SerialNumber: syz [ 443.676609][ T8353] usb 9-1: config 0 descriptor?? [ 443.732259][ T8353] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 443.931403][ T6708] usb 9-1: Failed to submit usb control message: -71 [ 443.945913][ T8353] usb 9-1: USB disconnect, device number 9 [ 443.968828][ T6708] usb 9-1: unable to send the bmi data to the device: -71 [ 444.014075][ T6708] usb 9-1: unable to get target info from device [ 444.159626][ T6708] usb 9-1: could not get target info (-71) [ 444.166218][ T6708] usb 9-1: could not probe fw (-71) [ 446.120965][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 446.197463][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 446.786571][T11375] vlan3: entered promiscuous mode [ 446.792092][T11375] vlan2: entered promiscuous mode [ 446.816117][T11375] gretap0: entered promiscuous mode [ 449.418705][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1650'. [ 449.459876][ T6700] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.556382][T11406] vlan3: entered promiscuous mode [ 449.570315][T11406] syz_tun: entered promiscuous mode [ 449.638833][ T6700] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.715668][T11404] syzkaller0: entered promiscuous mode [ 449.722396][T11404] syzkaller0: entered allmulticast mode [ 449.771393][ T6700] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.085932][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 450.249318][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 450.265462][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.271068][T11424] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.274814][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 450.290476][ T9] usb 2-1: SerialNumber: syz [ 450.290683][T11424] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.304720][T11424] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.344580][T11424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.354763][T11424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.551195][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 450.583754][ T9] usb 2-1: USB disconnect, device number 22 [ 452.506788][ T5139] Bluetooth: hci3: command tx timeout [ 454.586038][ T5139] Bluetooth: hci3: command tx timeout [ 456.679774][ T5139] Bluetooth: hci3: command tx timeout [ 457.706964][ T6700] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.748125][T11488] tipc: Enabled bearer , priority 10 [ 458.657947][ T6700] bridge_slave_1: left allmulticast mode [ 458.664858][ T6700] bridge_slave_1: left promiscuous mode [ 458.683653][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.707985][ T6700] bridge_slave_0: left allmulticast mode [ 458.720454][ T6700] bridge_slave_0: left promiscuous mode [ 458.734294][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.746196][ T5139] Bluetooth: hci3: command tx timeout [ 458.936804][T11512] kvm: pic: non byte write [ 460.272810][ T6700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.060994][ T6700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.141866][ T6700] bond0 (unregistering): (slave team0): Releasing backup interface [ 461.281728][ T6700] bond0 (unregistering): Released all slaves [ 461.289884][ T30] audit: type=1326 audit(1745488785.423:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.392461][ T30] audit: type=1326 audit(1745488785.423:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.485328][ T30] audit: type=1326 audit(1745488785.423:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.585973][ T30] audit: type=1326 audit(1745488785.423:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.705931][ T30] audit: type=1326 audit(1745488785.423:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.783616][ T30] audit: type=1326 audit(1745488785.423:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.806877][ T30] audit: type=1326 audit(1745488785.433:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.830117][ T30] audit: type=1326 audit(1745488785.433:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 461.972751][T11422] chnl_net:caif_netlink_parms(): no params data found [ 462.191467][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 463.056701][ T6700] hsr_slave_0: left promiscuous mode [ 463.075921][ T6700] hsr_slave_1: left promiscuous mode [ 463.082059][ T6700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.118903][ T6700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.152890][ T6700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.171590][ T6700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.369234][ T6700] veth1_macvtap: left promiscuous mode [ 463.395511][ T6700] veth0_macvtap: left promiscuous mode [ 463.408411][ T6700] veth1_vlan: left promiscuous mode [ 463.420610][ T6700] veth0_vlan: left promiscuous mode [ 464.297613][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 464.986077][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 465.367990][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.376516][ T9] usb 9-1: config 0 has no interface number 0 [ 465.384959][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.418862][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.458540][ T9] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 465.476006][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.532055][ T9] usb 9-1: config 0 descriptor?? [ 465.533746][ T6700] team0 (unregistering): Port device team_slave_1 removed [ 465.746538][ T6700] team0 (unregistering): Port device team_slave_0 removed [ 466.051479][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:04D9:A055.000D/input/input14 [ 466.268608][ T9] holtek_kbd 0003:04D9:A055.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.8-1/input1 [ 466.312360][ T9] usb 9-1: USB disconnect, device number 10 [ 467.309497][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.325497][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.338631][T11422] bridge_slave_0: entered allmulticast mode [ 467.354734][T11422] bridge_slave_0: entered promiscuous mode [ 467.368652][T11594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1701'. [ 467.472791][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.488078][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.511039][T11422] bridge_slave_1: entered allmulticast mode [ 467.574979][T11422] bridge_slave_1: entered promiscuous mode [ 467.688807][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.733543][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.852693][T11422] team0: Port device team_slave_0 added [ 467.870502][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 467.883694][T11422] team0: Port device team_slave_1 added [ 468.069125][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.082227][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.139829][ T30] audit: type=1804 audit(1745488792.263:218): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.1716" name="/newroot/140/file1" dev="fuse" ino=1 res=1 errno=0 [ 468.185956][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.197744][ T30] audit: type=1800 audit(1745488792.263:219): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1716" name="/" dev="fuse" ino=1 res=0 errno=0 [ 468.262462][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.303082][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.391954][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.524289][T11422] hsr_slave_0: entered promiscuous mode [ 469.556979][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1721'. [ 469.577320][T11422] hsr_slave_1: entered promiscuous mode [ 469.583898][T11422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.597454][T11667] program syz.1.1723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.625959][T11422] Cannot create hsr debugfs directory [ 469.696051][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1721'. [ 470.178780][T11422] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 470.194481][T11422] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 470.306183][T11422] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 470.335348][T11422] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.087377][ T8353] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 471.282665][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.329571][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.349429][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.356664][ T6708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.408819][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.416175][ T6705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.435131][ T8353] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 471.450043][ T8353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.469608][ T8353] usb 2-1: Product: syz [ 471.475024][ T8353] usb 2-1: Manufacturer: syz [ 471.480231][ T8353] usb 2-1: SerialNumber: syz [ 471.530371][ T8353] usb 2-1: config 0 descriptor?? [ 471.570873][ T8353] upd78f0730 2-1:0.0: upd78f0730 converter detected [ 471.643582][ T8353] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 471.922798][ T8353] usb 2-1: USB disconnect, device number 23 [ 471.936838][ T8353] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 471.958164][ T8353] upd78f0730 2-1:0.0: device disconnected [ 473.033627][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.136132][ T5139] Bluetooth: hci0: unexpected subevent 0x01 length: 14 < 18 [ 473.235380][T11737] sch_tbf: burst 8791 is lower than device lo mtu (65550) ! [ 473.282833][T11740] sch_tbf: burst 8787 is lower than device lo mtu (65550) ! [ 474.927656][T11422] veth0_vlan: entered promiscuous mode [ 474.968558][T11422] veth1_vlan: entered promiscuous mode [ 475.147098][T11422] veth0_macvtap: entered promiscuous mode [ 475.228785][T11768] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1754'. [ 475.238913][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 475.303043][T11422] veth1_macvtap: entered promiscuous mode [ 475.696020][ T5880] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 475.738517][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.761118][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.792956][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.813837][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.839388][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.895731][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.912318][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.922921][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.933817][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.948701][ T5880] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.960989][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.968506][ T5880] usb 9-1: config 0 has no interface number 0 [ 475.974658][ T5880] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 475.991689][ T5880] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 476.005375][ T5880] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 476.015649][ T6706] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.046602][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.063281][ T5880] usb 9-1: config 0 descriptor?? [ 476.099266][T11422] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.124465][T11770] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 476.135866][T11422] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.156260][T11422] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.165011][T11422] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.185111][ T5880] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 476.404664][ T6706] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.410989][ T8345] usb 9-1: USB disconnect, device number 11 [ 477.690936][ T6706] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.765970][ T30] audit: type=1326 audit(1745488801.893:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 477.938905][ T30] audit: type=1326 audit(1745488801.893:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 478.016015][ T30] audit: type=1326 audit(1745488802.143:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 478.676213][ T6682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.684087][ T6682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.728421][ T30] audit: type=1326 audit(1745488802.143:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 478.794987][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.804176][ T6706] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.836778][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.848709][ T30] audit: type=1326 audit(1745488802.143:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 478.910806][ T30] audit: type=1326 audit(1745488802.143:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 478.985894][ T30] audit: type=1326 audit(1745488802.143:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 479.070380][ T30] audit: type=1326 audit(1745488802.143:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 479.127522][ T30] audit: type=1326 audit(1745488802.143:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 479.221283][ T30] audit: type=1326 audit(1745488803.023:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11791 comm="syz.8.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65198e969 code=0x7ffc0000 [ 479.724634][ T6706] bridge_slave_1: left allmulticast mode [ 479.735308][ T6706] bridge_slave_1: left promiscuous mode [ 479.747751][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.848475][ T6706] bridge_slave_0: left allmulticast mode [ 479.893233][ T6706] bridge_slave_0: left promiscuous mode [ 480.043375][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.579758][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1777'. [ 484.732952][T11860] netlink: 'syz.8.1779': attribute type 30 has an invalid length. [ 485.009345][ T6706] team0: Port device geneve0 removed [ 485.345727][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.366699][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.383754][ T6706] bond0 (unregistering): Released all slaves [ 486.572723][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.580554][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.330294][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.361734][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.658075][T11902] xt_policy: too many policy elements [ 488.554114][T11883] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.564535][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1793'. [ 488.573668][T11883] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.593115][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 488.676227][T11883] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.745958][T11883] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.978687][T11935] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 492.014472][T11935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 492.266408][ T6706] hsr_slave_0: left promiscuous mode [ 492.286801][ T6706] hsr_slave_1: left promiscuous mode [ 492.292709][T11952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.304152][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.332270][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.386728][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.316000][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.367064][ T6706] veth1_macvtap: left promiscuous mode [ 493.376214][ T6706] veth0_macvtap: left promiscuous mode [ 493.387684][ T6706] veth1_vlan: left promiscuous mode [ 493.406043][ T6706] veth0_vlan: left promiscuous mode [ 496.422343][T11989] Cannot find add_set index 0 as target [ 497.141267][ T6706] team0 (unregistering): Port device team_slave_1 removed [ 497.275950][ T6706] team0 (unregistering): Port device team_slave_0 removed [ 497.304802][ T8345] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 497.500607][ T8345] usb 2-1: Using ep0 maxpacket: 8 [ 497.517746][ T8345] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 497.546996][ T8345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 497.559278][ T8345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 497.588715][ T8345] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.663213][ T8345] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 497.672397][ T8345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.695841][ T8345] usb 2-1: Product: syz [ 497.700162][ T8345] usb 2-1: Manufacturer: syz [ 497.704798][ T8345] usb 2-1: SerialNumber: syz [ 498.597786][ T8345] usb 2-1: config 0 descriptor?? [ 498.652818][ T8345] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 498.848339][ T8345] imon:send_packet: packet tx failed (-71) [ 498.945972][ T8345] imon 2-1:0.0: panel buttons/knobs setup failed [ 499.086022][ T8345] rc_core: IR keymap rc-imon-pad not found [ 499.099909][ T8345] Registered IR keymap rc-empty [ 499.120336][ T8345] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 499.199418][ T8345] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 499.244508][ T8345] imon:send_packet: packet tx failed (-71) [ 499.307091][ T8345] imon 2-1:0.0: remote input dev register failed [ 499.316403][ T8345] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 500.024040][ T8345] imon 2-1:0.0: unable to initialize intf0, err 0 [ 500.038901][ T8345] imon:imon_probe: failed to initialize context! [ 500.054651][ T8345] imon 2-1:0.0: unable to register, err -19 [ 500.514745][ T8345] usb 2-1: USB disconnect, device number 24 [ 500.522213][T12019] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1825'. [ 500.866036][T12025] netem: incorrect ge model size [ 500.878874][T12025] netem: change failed [ 500.991971][T12035] syz_tun: entered allmulticast mode [ 501.050033][T12028] syz_tun: left allmulticast mode [ 501.385977][ T8345] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 501.461533][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.468005][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.566417][ T8345] usb 2-1: Using ep0 maxpacket: 8 [ 501.575929][ T8345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 501.584930][ T8345] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 501.595277][ T8345] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 501.608836][ T8345] usb 2-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.632889][ T8345] usb 2-1: config 1 interface 0 has no altsetting 0 [ 501.720546][T12058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.891201][ T8345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.180459][ T8345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.235961][ T8345] usb 2-1: Product: syz [ 502.276651][ T8345] usb 2-1: Manufacturer: syz [ 502.341472][ T8345] usb 2-1: SerialNumber: syz [ 502.366635][T12040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 502.386064][T12040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 502.674244][ T8345] usb 2-1: bad CDC descriptors [ 502.687911][ T8345] usb 2-1: USB disconnect, device number 25 [ 502.936184][ T5946] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 503.139089][ T5946] usb 10-1: Using ep0 maxpacket: 16 [ 503.149864][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 503.160110][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 503.160133][ T30] audit: type=1326 audit(1745488827.303:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.162748][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.195942][ T30] audit: type=1326 audit(1745488827.313:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.208173][ T5946] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.247622][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.257540][ T5946] usb 10-1: Product: syz [ 503.261955][ T5946] usb 10-1: Manufacturer: syz [ 503.268509][ T5946] usb 10-1: SerialNumber: syz [ 503.271184][ T30] audit: type=1326 audit(1745488827.313:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.276765][ T5946] usb 10-1: config 0 descriptor?? [ 503.313713][ T5946] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 503.334962][ T5946] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 503.336505][ T30] audit: type=1326 audit(1745488827.313:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.371940][ T30] audit: type=1326 audit(1745488827.313:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.395483][ T30] audit: type=1326 audit(1745488827.313:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.454459][ T30] audit: type=1326 audit(1745488827.313:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.480789][ T30] audit: type=1326 audit(1745488827.313:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.509844][ T30] audit: type=1326 audit(1745488827.313:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.532255][ T30] audit: type=1326 audit(1745488827.313:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12079 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 503.925483][ T5946] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 503.973481][ T5946] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 505.526893][ T5946] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 506.254154][T12111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 506.496707][ T5946] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 506.501710][T12116] Invalid source name [ 506.588623][ T1324] kworker/u8:5 (1324) used greatest stack depth: 18712 bytes left [ 507.632518][ T5946] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 507.643254][ T5946] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 507.650376][ T5946] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 507.666207][ T5946] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 507.677833][ T5946] usb 10-1: USB disconnect, device number 2 [ 509.317991][T12152] tipc: Failed to remove unknown binding: 66,1,1/0:2678186192/2678186194 [ 509.327204][T12152] tipc: Failed to remove unknown binding: 66,1,1/0:2678186192/2678186194 [ 509.446282][ T52] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 510.625904][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 510.651168][ T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.679789][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.703837][ T52] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.724014][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.761480][ T52] usb 2-1: Product: syz [ 510.801503][ T52] usb 2-1: Manufacturer: syz [ 510.954951][ T52] usb 2-1: SerialNumber: syz [ 511.629990][ T52] usb 2-1: 0:2 : does not exist [ 511.710637][ T52] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 511.818916][ T52] usb 2-1: USB disconnect, device number 26 [ 511.944299][T12174] syz_tun: entered allmulticast mode [ 512.161814][T12173] syz_tun: left allmulticast mode [ 514.856768][T12207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.948220][T12213] bridge0: entered promiscuous mode [ 516.000605][T12213] vlan4: entered promiscuous mode [ 519.694008][ T5139] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 522.845869][ T52] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 523.199452][T12302] netlink: 'syz.1.1915': attribute type 1 has an invalid length. [ 523.246055][ T52] usb 10-1: Using ep0 maxpacket: 8 [ 523.256500][ T52] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.278906][ T52] usb 10-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 523.300400][ T52] usb 10-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 523.318064][T12302] bond1: entered promiscuous mode [ 523.336920][T12302] bond1: entered allmulticast mode [ 523.347827][T12308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1915'. [ 523.367570][ T52] usb 10-1: config 0 interface 0 has no altsetting 0 [ 523.374347][ T52] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 523.440574][T12308] bond1: left promiscuous mode [ 523.455647][T12308] bond1: left allmulticast mode [ 523.461373][T12308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.533155][T12306] ip6gretap1: entered allmulticast mode [ 523.549918][T12306] bond1: (slave ip6gretap1): making interface the new active one [ 523.589690][T12306] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 524.107181][ T52] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.135495][ T52] usb 10-1: config 0 descriptor?? [ 524.153654][ T52] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 524.358370][T12290] syz_tun: entered allmulticast mode [ 524.391073][ T52] usb 10-1: USB disconnect, device number 3 [ 525.097075][ T52] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 525.573419][ T52] usb 9-1: Using ep0 maxpacket: 8 [ 525.585738][ T52] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 525.594888][ T52] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.613347][ T52] usb 9-1: Product: syz [ 525.621064][ T52] usb 9-1: Manufacturer: syz [ 525.625713][ T52] usb 9-1: SerialNumber: syz [ 525.675359][ T52] usb 9-1: config 0 descriptor?? [ 526.303927][ T52] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 527.591486][T12372] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.678998][ T52] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 528.690235][ T52] usb 9-1: USB disconnect, device number 12 [ 529.363473][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 529.363496][ T30] audit: type=1804 audit(1745488853.503:254): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1941" name="file0" dev="tmpfs" ino=2706 res=1 errno=0 [ 529.930464][T12422] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1946'. [ 530.269969][T12428] netlink: 'syz.9.1948': attribute type 5 has an invalid length. [ 535.515243][T12462] : entered promiscuous mode [ 539.146165][T12495] netlink: 'syz.5.1968': attribute type 2 has an invalid length. [ 549.244117][T12600] netlink: 'syz.4.2002': attribute type 4 has an invalid length. [ 549.518175][T12607] delete_channel: no stack [ 554.316608][T12674] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2027'. [ 554.326452][T12674] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2027'. [ 554.789146][T12678] overlayfs: failed to clone upperpath [ 554.901193][T12682] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.960880][T12682] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.025594][T12682] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.042555][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2031'. [ 555.052392][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2031'. [ 555.084746][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2031'. [ 555.108803][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2031'. [ 555.373611][T12682] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.457546][T12682] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.483990][T12682] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.504619][T12682] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.525250][T12682] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.460339][T12708] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 559.546889][T12724] fuse: root generation should be zero [ 562.416017][ T8358] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 563.399323][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.405706][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.515476][T12766] Malformed UNC in devname [ 564.515476][T12766] [ 564.522709][T12766] CIFS: VFS: Malformed UNC in devname [ 566.714411][T12790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2060'. [ 567.656881][T12800] netlink: 764 bytes leftover after parsing attributes in process `syz.8.2066'. [ 570.146945][T12820] netlink: zone id is out of range [ 570.152126][T12820] netlink: zone id is out of range [ 570.178324][T12820] netlink: zone id is out of range [ 570.183485][T12820] netlink: zone id is out of range [ 570.198049][T12820] netlink: zone id is out of range [ 570.208698][T12820] netlink: zone id is out of range [ 570.231838][T12820] netlink: zone id is out of range [ 570.251598][T12820] netlink: zone id is out of range [ 570.268688][T12820] netlink: zone id is out of range [ 570.274663][T12820] netlink: zone id is out of range [ 570.446107][T12827] bridge_slave_0: left allmulticast mode [ 570.465834][T12827] bridge_slave_0: left promiscuous mode [ 570.532981][T12827] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.584908][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2077'. [ 570.601342][T12827] bridge_slave_1: left allmulticast mode [ 570.639819][T12827] bridge_slave_1: left promiscuous mode [ 570.657466][T12827] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.698517][T12827] bond0: (slave bond_slave_0): Releasing backup interface [ 570.712252][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2077'. [ 570.811618][T12827] bond0: (slave bond_slave_1): Releasing backup interface [ 571.505348][T12827] team0: Port device team_slave_0 removed [ 571.533813][T12827] team0: Port device team_slave_1 removed [ 571.565150][T12827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.584279][T12827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.605189][T12827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.625331][T12827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.646127][T12837] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 572.439448][T12887] syz.9.2091 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 572.684193][T12896] xt_policy: too many policy elements [ 575.296200][T11424] Bluetooth: hci3: command 0x0406 tx timeout [ 575.467956][ T8365] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 575.662137][ T8365] usb 9-1: Using ep0 maxpacket: 16 [ 575.678478][ T8365] usb 9-1: descriptor type invalid, skip [ 575.691811][ T8365] usb 9-1: config 0 has no interfaces? [ 575.708450][ T8365] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.727649][ T8365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.738275][ T8365] usb 9-1: Product: syz [ 575.742523][ T8365] usb 9-1: Manufacturer: syz [ 575.750000][ T8365] usb 9-1: SerialNumber: syz [ 575.763888][ T8365] usb 9-1: config 0 descriptor?? [ 576.014910][ T8365] usb 9-1: USB disconnect, device number 14 [ 577.925010][T12951] 9pnet_fd: Insufficient options for proto=fd [ 578.750709][ T6708] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.974315][ T6708] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.089696][ T6708] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.163754][ T6708] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.027566][T12990] Illegal XDP return value 12990 on prog (id 430) dev N/A, expect packet loss! [ 580.662294][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.676533][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.688725][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.702079][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.713474][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.171286][ T5139] Bluetooth: hci3: Unable to find connection for big 0x14 [ 582.904208][ T6708] bond0 (unregistering): Released all slaves [ 582.967491][T13017] wlan0 speed is unknown, defaulting to 1000 [ 582.973943][T13017] wlan0 speed is unknown, defaulting to 1000 [ 582.985936][T13030] lo: entered allmulticast mode [ 583.026281][T13030] tunl0: entered allmulticast mode [ 583.061060][T13030] gre0: entered allmulticast mode [ 583.137244][T13030] gretap0: entered allmulticast mode [ 583.163445][T13030] erspan0: entered allmulticast mode [ 583.199474][T13030] ip_vti0: entered allmulticast mode [ 583.216117][ T5139] Bluetooth: hci2: command tx timeout [ 583.230128][T13030] ip6_vti0: entered allmulticast mode [ 583.238579][T13030] sit0: entered allmulticast mode [ 583.257245][T13030] ip6tnl0: entered allmulticast mode [ 583.264750][T13030] ip6gre0: entered allmulticast mode [ 583.303126][T13030] syz_tun: entered allmulticast mode [ 583.332335][T13030] ip6gretap0: entered allmulticast mode [ 583.349477][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.357200][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.373595][T13030] bridge0: entered allmulticast mode [ 583.383609][T13030] vcan0: entered allmulticast mode [ 583.403832][T13030] bond0: entered allmulticast mode [ 583.426118][T13030] bond_slave_0: entered allmulticast mode [ 583.431972][T13030] bond_slave_1: entered allmulticast mode [ 583.481908][T13030] team0: entered allmulticast mode [ 583.495933][T13030] team_slave_0: entered allmulticast mode [ 583.503664][T13030] team_slave_1: entered allmulticast mode [ 583.549390][T13030] dummy0: entered allmulticast mode [ 583.599145][T13030] nlmon0: entered allmulticast mode [ 583.631878][T13030] caif0: entered allmulticast mode [ 583.653038][T13030] vxcan0: entered allmulticast mode [ 583.671714][T13030] vxcan1: entered allmulticast mode [ 583.692515][T13030] veth0: entered allmulticast mode [ 583.715866][T13030] veth1: entered allmulticast mode [ 583.739445][T13030] wg0: entered allmulticast mode [ 583.755084][T13030] wg1: entered allmulticast mode [ 583.781269][T13030] wg2: entered allmulticast mode [ 583.799006][T13030] veth0_to_bridge: entered allmulticast mode [ 583.813556][T13030] veth1_to_bridge: entered allmulticast mode [ 583.833396][T13030] veth0_to_bond: entered allmulticast mode [ 583.870920][T13030] veth1_to_bond: entered allmulticast mode [ 583.902403][T13030] veth0_to_team: entered allmulticast mode [ 583.947650][T13030] veth1_to_team: entered allmulticast mode [ 583.985894][T13030] veth0_to_batadv: entered allmulticast mode [ 583.994537][T13030] batadv_slave_0: entered allmulticast mode [ 584.032650][T13030] veth1_to_batadv: entered allmulticast mode [ 584.043425][T13030] batadv_slave_1: entered allmulticast mode [ 584.053679][T13030] xfrm0: entered allmulticast mode [ 584.062189][T13030] veth0_to_hsr: entered allmulticast mode [ 584.072064][T13030] hsr_slave_0: entered allmulticast mode [ 584.081448][T13030] hsr0: entered allmulticast mode [ 584.092463][T13030] veth1_virt_wifi: entered allmulticast mode [ 584.107476][T13030] veth0_virt_wifi: entered allmulticast mode [ 584.124898][T13030] veth1_vlan: entered allmulticast mode [ 584.147819][T13030] veth0_vlan: entered allmulticast mode [ 584.197122][T13030] vlan0: entered allmulticast mode [ 584.213375][T13030] vlan1: entered allmulticast mode [ 584.220191][T13030] macvlan0: entered allmulticast mode [ 584.241941][T13030] macvlan1: entered allmulticast mode [ 584.265642][T13030] ipvlan0: entered allmulticast mode [ 584.282319][T13030] veth1_macvtap: entered allmulticast mode [ 584.299524][T13030] veth0_macvtap: entered allmulticast mode [ 584.309763][T13030] macvtap0: entered allmulticast mode [ 584.318659][T13030] macsec0: entered allmulticast mode [ 584.329592][T13030] geneve0: entered allmulticast mode [ 584.357149][T13030] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.372632][T13030] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.383878][T13030] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.401025][T13030] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.410937][T13030] geneve1: entered allmulticast mode [ 584.447610][T13030] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 584.472139][T13030] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 584.486438][T13030] netdevsim netdevsim4 eth0: entered allmulticast mode [ 584.512059][T13030] netdevsim netdevsim4 eth1: entered allmulticast mode [ 584.526071][T13030] netdevsim netdevsim4 eth2: entered allmulticast mode [ 584.536656][T13030] netdevsim netdevsim4 eth3: entered allmulticast mode [ 584.544908][T13030] ip6tnl1: left promiscuous mode [ 584.552728][T13030] ip6tnl1: entered allmulticast mode [ 584.562967][T13030] ip6tnl2: entered allmulticast mode [ 584.576292][T13030] syztnl2: entered allmulticast mode [ 584.581835][T13030] bond1: entered allmulticast mode [ 584.587734][T13030] ip6erspan0: entered allmulticast mode [ 584.594149][T13030] ip6erspan0: left promiscuous mode [ 584.600926][T13030] bridge1: entered allmulticast mode [ 584.619672][T13030] vlan2: entered allmulticast mode [ 584.636864][T13030] vlan3: left promiscuous mode [ 584.646175][T13030] syz_tun: left promiscuous mode [ 584.651398][T13030] vlan3: entered allmulticast mode [ 584.657233][T13030] : entered allmulticast mode [ 584.666549][T13017] wlan0 speed is unknown, defaulting to 1000 [ 584.708705][T13017] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 584.784932][T13017] wlan0 speed is unknown, defaulting to 1000 [ 584.795076][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2148'. [ 584.804685][T13070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2148'. [ 584.815369][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2148'. [ 584.825441][T13070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2148'. [ 584.860802][T13017] wlan0 speed is unknown, defaulting to 1000 [ 584.974390][T12999] wlan0 speed is unknown, defaulting to 1000 [ 585.281371][T13017] wlan0 speed is unknown, defaulting to 1000 [ 586.246826][ T5139] Bluetooth: hci2: command tx timeout [ 587.403524][T13083] dns_resolver: Unsupported server list version (0) [ 587.709543][T13017] wlan0 speed is unknown, defaulting to 1000 [ 588.586481][ T5139] Bluetooth: hci2: command tx timeout [ 588.625196][T13017] wlan0 speed is unknown, defaulting to 1000 [ 588.944093][T13017] wlan0 speed is unknown, defaulting to 1000 [ 589.010283][ T6708] hsr_slave_0: left promiscuous mode [ 589.022848][ T6708] hsr_slave_1: left promiscuous mode [ 589.054400][ T6708] veth1_macvtap: left promiscuous mode [ 589.060219][ T6708] veth0_macvtap: left promiscuous mode [ 589.068295][ T6708] veth1_vlan: left promiscuous mode [ 589.074958][ T6708] veth0_vlan: left promiscuous mode [ 590.488895][T13097] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2156'. [ 590.583493][T13107] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 590.616278][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2158'. [ 590.656086][ T5139] Bluetooth: hci2: command tx timeout [ 595.136871][T13131] netem: incorrect ge model size [ 595.141904][T13131] netem: change failed [ 595.148660][T13142] batadv_slave_0: left allmulticast mode [ 595.586581][T12999] chnl_net:caif_netlink_parms(): no params data found [ 596.721576][T13165] netlink: 'syz.9.2176': attribute type 10 has an invalid length. [ 596.729713][T13165] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2176'. [ 596.966905][T13165] batman_adv: batadv0: Adding interface: virt_wifi0 [ 596.973546][T13165] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.999236][T13165] batman_adv: batadv0: Interface activated: virt_wifi0 [ 597.842499][T13177] /dev/nullb0: Can't lookup blockdev [ 597.848421][T12999] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.651567][T12999] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.658984][T12999] bridge_slave_0: entered allmulticast mode [ 598.786948][T12999] bridge_slave_0: entered promiscuous mode [ 598.801857][T12999] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.811316][T12999] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.820266][T12999] bridge_slave_1: entered allmulticast mode [ 598.829188][T12999] bridge_slave_1: entered promiscuous mode [ 599.162013][T12999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.244054][T12999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.593794][T12999] team0: Port device team_slave_0 added [ 599.627881][T12999] team0: Port device team_slave_1 added [ 600.828763][T12999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.929862][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.033116][T12999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.096734][T12999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.109927][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.185487][T12999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.342136][T12999] hsr_slave_0: entered promiscuous mode [ 602.366453][T12999] hsr_slave_1: entered promiscuous mode [ 602.381776][T12999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.405322][T12999] Cannot create hsr debugfs directory [ 602.761736][ T30] audit: type=1326 audit(1745488926.903:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 602.875349][ T30] audit: type=1326 audit(1745488926.933:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 603.094894][ T30] audit: type=1326 audit(1745488926.933:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 603.937352][ T30] audit: type=1326 audit(1745488926.933:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 603.959152][ T30] audit: type=1326 audit(1745488926.933:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 603.980941][ T30] audit: type=1326 audit(1745488926.933:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 604.096172][ T30] audit: type=1326 audit(1745488926.933:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 604.277322][ T30] audit: type=1326 audit(1745488926.933:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 604.302339][ T30] audit: type=1326 audit(1745488926.933:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 604.339898][T13238] random: crng reseeded on system resumption [ 604.349212][ T30] audit: type=1326 audit(1745488926.933:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.4.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36ad8e969 code=0x7ffc0000 [ 607.507682][T13290] net_ratelimit: 72 callbacks suppressed [ 607.507731][T13290] openvswitch: netlink: IP tunnel dst address not specified [ 608.297010][T12999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 608.402365][T12999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 608.455136][T12999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.517140][T12999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 609.281725][T12999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.421943][T12999] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.474420][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.481703][ T7669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.549622][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.556916][ T7669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.012147][T13326] netlink: 'syz.9.2215': attribute type 21 has an invalid length. [ 610.040728][T13326] netlink: 'syz.9.2215': attribute type 6 has an invalid length. [ 610.087545][T13326] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2215'. [ 610.115308][T13329] netlink: 'syz.9.2215': attribute type 21 has an invalid length. [ 610.136681][T13329] netlink: 'syz.9.2215': attribute type 6 has an invalid length. [ 610.176343][T13329] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2215'. [ 610.819115][T13341] netlink: 'syz.9.2217': attribute type 1 has an invalid length. [ 611.674957][T12999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.910164][T12999] veth0_vlan: entered promiscuous mode [ 611.926956][T12999] veth1_vlan: entered promiscuous mode [ 612.838646][T12999] veth0_macvtap: entered promiscuous mode [ 612.924673][T12999] veth1_macvtap: entered promiscuous mode [ 613.353313][T12999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.404008][T12999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.481482][T12999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.496041][T12999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.686546][T12999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.485915][T12999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.466383][T13370] vlan2: entered promiscuous mode [ 616.471695][T13370] vlan2: entered allmulticast mode [ 616.616286][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2223'. [ 616.626908][T13370] hsr_slave_1: entered allmulticast mode [ 617.646534][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.654414][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.779948][ T6696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.801204][ T6696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.189323][T13427] serio: Serial port ptm0 [ 620.730723][T13436] sctp: [Deprecated]: syz.4.2236 (pid 13436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.730723][T13436] Use struct sctp_sack_info instead [ 621.416020][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 621.713288][T13448] wlan0 speed is unknown, defaulting to 1000 [ 621.875155][T13040] IPVS: starting estimator thread 0... [ 622.055461][T13467] IPVS: using max 30 ests per chain, 72000 per kthread [ 622.204718][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 622.204734][ T30] audit: type=1326 audit(1745488946.343:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 622.366953][ T30] audit: type=1326 audit(1745488946.343:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 622.482099][ T30] audit: type=1326 audit(1745488946.343:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 622.692403][ T30] audit: type=1326 audit(1745488946.343:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 622.872699][ T30] audit: type=1326 audit(1745488946.343:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 622.965914][ T30] audit: type=1326 audit(1745488946.343:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 623.118249][ T30] audit: type=1326 audit(1745488946.343:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 623.509592][ T30] audit: type=1326 audit(1745488946.383:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 623.715968][ T30] audit: type=1326 audit(1745488946.403:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 623.806410][T13501] Unknown options in mask 5 [ 623.883780][ T30] audit: type=1326 audit(1745488946.403:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 625.137816][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.144140][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.601443][T13518] lo: entered allmulticast mode [ 625.916052][T13037] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 626.705860][T13037] usb 10-1: Using ep0 maxpacket: 8 [ 626.788062][T13037] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 626.824147][T13037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 626.892761][T13037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.938542][T13037] usb 10-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 626.977930][T13037] usb 10-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 627.059994][T13037] usb 10-1: Product: syz [ 627.076482][T13037] usb 10-1: Manufacturer: syz [ 627.120977][T13037] usb 10-1: SerialNumber: syz [ 627.907090][T13037] usb 10-1: config 0 descriptor?? [ 628.102847][T13037] smsusb:smsusb_probe: board id=2, interface number 0 [ 628.146374][T13037] smsusb:smsusb_probe: Device initialized with return code -19 [ 629.766070][T13040] usb 10-1: USB disconnect, device number 4 [ 629.906268][T13060] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 630.165822][T13060] usb 1-1: Using ep0 maxpacket: 16 [ 630.215859][T13060] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.261575][T13060] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.332598][T13060] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 630.572655][T13060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.560646][T13060] usb 1-1: config 0 descriptor?? [ 633.232709][T13060] macally 0003:060B:0001.000E: unknown main item tag 0x0 [ 633.412431][T13060] macally 0003:060B:0001.000E: unexpected long global item [ 633.426819][T13060] macally 0003:060B:0001.000E: probe with driver macally failed with error -22 [ 633.440637][T13060] usb 1-1: USB disconnect, device number 2 [ 639.700122][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2287'. [ 639.746033][T13673] tipc: Resetting bearer [ 640.897467][T13673] tipc: Disabling bearer [ 642.176386][T13693] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[13693] [ 642.402005][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2290'. [ 643.166729][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'. [ 643.943227][T13702] vlan2: entered promiscuous mode [ 644.047575][T13702] ip6gretap0: entered promiscuous mode [ 646.142796][T13728] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 647.493098][T13741] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 648.197002][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 648.835166][T13760] xt_cgroup: invalid path, errno=-2 [ 650.047589][ T8358] kernel write not supported for file /vcs (pid: 8358 comm: kworker/0:8) [ 654.064150][T13820] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 654.974292][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2320'. [ 656.947741][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2326'. [ 658.207019][T13866] trusted_key: encrypted_key: insufficient parameters specified [ 664.950288][T13932] xt_TCPMSS: Only works on TCP SYN packets [ 665.008228][T13913] tipc: Resetting bearer [ 665.031628][T13913] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 665.051037][T13913] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 665.103580][T13913] ip6gretap1: left allmulticast mode [ 671.455996][T13990] netem: change failed [ 671.790012][T13060] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 671.955970][T13060] usb 2-1: Using ep0 maxpacket: 16 [ 672.560532][T13060] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 672.760515][T13060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.925017][T13060] usb 2-1: Product: syz [ 672.929308][T13060] usb 2-1: Manufacturer: syz [ 672.933958][T13060] usb 2-1: SerialNumber: syz [ 672.945035][T13060] usb 2-1: config 0 descriptor?? [ 673.540138][T13060] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 673.639457][T14019] netlink: 'syz.4.2361': attribute type 10 has an invalid length. [ 673.648466][T14019] veth0_vlan: left promiscuous mode [ 673.682162][T14019] veth0_vlan: entered promiscuous mode [ 673.710106][T14019] team0: Device veth0_vlan failed to register rx_handler [ 673.711823][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 673.711845][ T30] audit: type=1800 audit(1745488997.853:285): pid=14008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2358" name="bus" dev="ramfs" ino=46959 res=0 errno=0 [ 673.799801][T13040] usb 2-1: USB disconnect, device number 27 [ 674.192535][T14033] pim6reg1: entered promiscuous mode [ 674.225096][T14033] pim6reg1: entered allmulticast mode [ 674.807550][T14045] wlan0 speed is unknown, defaulting to 1000 [ 675.800089][T14068] overlayfs: failed to resolve './file0': -2 [ 679.754321][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2378'. [ 680.797406][T14128] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 681.430857][T14129] netlink: 'syz.1.2382': attribute type 4 has an invalid length. [ 682.335937][T13058] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 684.511775][T13058] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.610074][T13058] usb 10-1: config 0 has no interfaces? [ 684.663464][T13058] usb 10-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 684.760926][T13058] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.102354][T13058] usb 10-1: config 0 descriptor?? [ 685.153085][ T8358] usb 10-1: USB disconnect, device number 5 [ 685.295455][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 685.965919][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 685.966504][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.981381][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.966718][T14239] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2410'. [ 694.739188][T14247] sctp: [Deprecated]: syz.1.2411 (pid 14247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.739188][T14247] Use struct sctp_sack_info instead [ 694.954466][T14250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2413'. [ 694.995907][T14250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2413'. [ 695.019561][T14250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2413'. [ 695.152936][T14250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2413'. [ 699.458992][ T30] audit: type=1326 audit(1745489023.603:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.550001][T14290] 9pnet_fd: Insufficient options for proto=fd [ 699.571562][ T30] audit: type=1326 audit(1745489023.603:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.595388][ T30] audit: type=1326 audit(1745489023.603:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.618921][ T30] audit: type=1326 audit(1745489023.603:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.649766][ T30] audit: type=1326 audit(1745489023.603:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.704504][ T30] audit: type=1326 audit(1745489023.603:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.763635][ T30] audit: type=1326 audit(1745489023.603:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.834969][ T30] audit: type=1326 audit(1745489023.633:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.879604][ T30] audit: type=1326 audit(1745489023.633:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 699.904876][ T30] audit: type=1326 audit(1745489023.633:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14295 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 701.320154][T14337] ptrace attach of "./syz-executor exec"[11422] was attempted by "./syz-executor exec"[14337] [ 701.638388][T14337] syz.9.2429 (14337): /proc/14337/oom_adj is deprecated, please use /proc/14337/oom_score_adj instead. [ 701.793211][T13058] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 702.070021][T14330] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2429'. [ 702.799314][T13058] usb 1-1: config 0 has no interfaces? [ 702.836619][T13058] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 702.868190][T13058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.890482][T13058] usb 1-1: Product: syz [ 702.907676][T13058] usb 1-1: Manufacturer: syz [ 702.912359][T13058] usb 1-1: SerialNumber: syz [ 703.078217][T13058] usb 1-1: config 0 descriptor?? [ 703.979432][T14354] bridge4: entered allmulticast mode [ 704.241400][T14367] macsec0: entered promiscuous mode [ 704.278342][T14367] macsec0: left allmulticast mode [ 704.305193][T13058] usb 1-1: USB disconnect, device number 3 [ 706.259405][T14384] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2443'. [ 707.818123][ T8358] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 707.835778][ T8358] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 707.878935][ T8358] hid-generic 0000:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 708.436577][T11424] Bluetooth: hci2: command 0x0406 tx timeout [ 712.085807][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 712.085830][ T30] audit: type=1326 audit(1745489036.203:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.231277][ T30] audit: type=1326 audit(1745489036.203:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.253093][ T30] audit: type=1326 audit(1745489036.203:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.285971][ T30] audit: type=1326 audit(1745489036.273:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.354110][ T30] audit: type=1326 audit(1745489036.353:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.409949][ T30] audit: type=1326 audit(1745489036.353:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.575438][ T30] audit: type=1326 audit(1745489036.423:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.598515][ T30] audit: type=1326 audit(1745489036.423:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 712.633075][ T30] audit: type=1326 audit(1745489036.423:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.1.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x7ffc0000 [ 714.663935][T14482] tipc: Started in network mode [ 714.671098][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2469'. [ 714.683568][T14482] tipc: Node identity 7f000001, cluster identity 4711 [ 714.699827][T14482] tipc: Enabled bearer , priority 10 [ 714.740414][T14482] tipc: Enabled bearer , priority 0 [ 714.973890][T14498] fuse: Bad value for 'fd' [ 715.955276][T13060] tipc: Node number set to 2130706433 [ 716.566279][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 719.826708][ T30] audit: type=1326 audit(1745489043.963:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14553 comm="syz.9.2489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77a2b8e969 code=0x0 [ 726.634658][T14611] vlan2: entered allmulticast mode [ 726.646247][T14611] bridge_slave_0: entered allmulticast mode [ 726.647527][T14615] cgroup: Unknown subsys name 'noxattr' [ 726.737911][T14620] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.2506'. [ 726.756006][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2506'. [ 727.134341][T14628] Smack: duplicate mount options [ 727.206499][T14631] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[14631] [ 728.938914][T14664] sctp: [Deprecated]: syz.0.2522 (pid 14664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 728.938914][T14664] Use struct sctp_sack_info instead [ 729.911454][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 729.924747][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 729.946157][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 729.967021][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 729.987498][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 730.012267][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 730.032805][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 730.043582][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 731.103519][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 731.111395][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 731.119224][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 731.127069][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 731.134850][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 731.142665][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 731.996448][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 732.004486][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 732.012371][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 732.020268][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 732.093373][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 732.140575][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.156914][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.164734][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.336744][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.359984][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.371266][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.382714][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.397337][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.415244][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.437342][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.466292][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.588603][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 733.644901][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2535'. [ 733.973170][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.048119][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.065530][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.554940][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.577600][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.585440][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.596244][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.604091][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.638661][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.655962][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.664046][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.673825][T13060] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 734.692987][T13060] hid-generic 0000:007F:FFFFFFFE.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 735.409307][ T30] audit: type=1326 audit(1745489059.543:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.1.2539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd55eb8e969 code=0x0 [ 738.596596][T14750] overlayfs: failed to clone upperpath [ 738.921649][T14759] netfs: Couldn't get user pages (rc=-14) [ 739.095449][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 739.183654][T14772] vlan2: entered promiscuous mode [ 739.192258][T14772] bridge0: entered promiscuous mode [ 742.193503][T14813] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 742.205440][T14813] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 742.213904][T14813] CPU: 0 UID: 0 PID: 14813 Comm: syz.1.2572 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 742.225999][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 742.236060][T14813] RIP: 0010:find_match+0xae/0xc10 [ 742.241119][T14813] Code: 08 48 89 df e8 03 1f 69 f7 4c 89 64 24 40 48 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d4 1e 69 f7 4c 8b 23 e8 bc 81 66 01 [ 742.260766][T14813] RSP: 0018:ffffc90003656ca0 EFLAGS: 00010206 [ 742.266847][T14813] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: dffffc0000000000 [ 742.274820][T14813] RDX: ffff88802c0c8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 742.282806][T14813] RBP: ffff88803045c520 R08: ffffffff8ac1460f R09: ffffc90003657070 [ 742.290796][T14813] R10: ffffc90003656ea0 R11: ffffffff8ac14450 R12: ffffc90003657070 [ 742.298782][T14813] R13: ffff88803045c537 R14: 1ffff1100608b8a6 R15: 1ffff1100608b8a4 [ 742.306765][T14813] FS: 00007fd55fa6c6c0(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 742.315711][T14813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.322315][T14813] CR2: 000000110c3065a4 CR3: 0000000032082000 CR4: 00000000003526f0 [ 742.330314][T14813] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 742.338297][T14813] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 742.346283][T14813] Call Trace: [ 742.349574][T14813] [ 742.352529][T14813] rt6_nh_find_match+0xde/0x150 [ 742.357401][T14813] nexthop_for_each_fib6_nh+0x1d0/0x410 [ 742.362964][T14813] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 742.368449][T14813] __find_rr_leaf+0x596/0x8f0 [ 742.373142][T14813] ? __pfx___find_rr_leaf+0x10/0x10 [ 742.378388][T14813] fib6_table_lookup+0x410/0xbf0 [ 742.383353][T14813] ? __pfx_fib6_table_lookup+0x10/0x10 [ 742.388822][T14813] ip6_pol_route+0x26d/0x15f0 [ 742.393518][T14813] ? ip6_pol_route+0x192/0x15f0 [ 742.398374][T14813] ? __pfx_ip6_pol_route+0x10/0x10 [ 742.403490][T14813] ? __lock_acquire+0xad5/0xd80 [ 742.408370][T14813] ? __lock_acquire+0xad5/0xd80 [ 742.413281][T14813] fib6_rule_lookup+0x3c4/0x7a0 [ 742.418137][T14813] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 742.423860][T14813] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 742.429247][T14813] ? ip6_route_output_flags+0x30/0x610 [ 742.434717][T14813] ip6_route_output_flags+0x38e/0x610 [ 742.440097][T14813] ip6_dst_lookup_tail+0x1b5/0x1510 [ 742.445311][T14813] ? unwind_get_return_address+0x4d/0x90 [ 742.450959][T14813] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 742.456602][T14813] ? __asan_memset+0x23/0x50 [ 742.461212][T14813] ? crng_fast_key_erasure+0x195/0x270 [ 742.466685][T14813] ? __lock_acquire+0xad5/0xd80 [ 742.471545][T14813] ip6_dst_lookup_flow+0xbb/0x180 [ 742.476579][T14813] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 742.482221][T14813] ? sctp_v6_get_dst+0x57b/0x1e30 [ 742.487254][T14813] ? sctp_v6_get_dst+0x57b/0x1e30 [ 742.492286][T14813] sctp_v6_get_dst+0x7a8/0x1e30 [ 742.497169][T14813] ? __asan_memset+0x23/0x50 [ 742.501779][T14813] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 742.507071][T14813] ? __debug_object_init+0x284/0x480 [ 742.512378][T14813] ? dst_release+0x72/0x1b0 [ 742.516889][T14813] sctp_transport_route+0x12c/0x2e0 [ 742.522094][T14813] sctp_assoc_add_peer+0x611/0x1360 [ 742.527308][T14813] sctp_connect_new_asoc+0x361/0x700 [ 742.532604][T14813] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 742.538421][T14813] ? sctp_sendmsg+0xf30/0x3620 [ 742.543198][T14813] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 742.549099][T14813] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 742.554656][T14813] sctp_sendmsg+0x2009/0x3620 [ 742.559341][T14813] ? futex_wait_queue+0x175/0x1f0 [ 742.564454][T14813] ? __pfx_sctp_sendmsg+0x10/0x10 [ 742.569495][T14813] ? tomoyo_socket_sendmsg_permission+0x285/0x420 [ 742.575954][T14813] ? inet_sendmsg+0x330/0x390 [ 742.580646][T14813] __sock_sendmsg+0x1a6/0x270 [ 742.585355][T14813] __sys_sendto+0x365/0x4c0 [ 742.589876][T14813] ? __pfx___sys_sendto+0x10/0x10 [ 742.594909][T14813] ? do_futex+0x37c/0x5a0 [ 742.599345][T14813] __x64_sys_sendto+0xde/0x100 [ 742.604153][T14813] do_syscall_64+0xf3/0x210 [ 742.608666][T14813] ? clear_bhb_loop+0x45/0xa0 [ 742.613348][T14813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.619335][T14813] RIP: 0033:0x7fd55eb8e969 [ 742.623780][T14813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.643406][T14813] RSP: 002b:00007fd55fa6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 742.651834][T14813] RAX: ffffffffffffffda RBX: 00007fd55edb5fa0 RCX: 00007fd55eb8e969 [ 742.659815][T14813] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 742.667883][T14813] RBP: 00007fd55ec10ab1 R08: 000020000005ffe4 R09: 000000000000001c [ 742.675862][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.683837][T14813] R13: 0000000000000000 R14: 00007fd55edb5fa0 R15: 00007ffe78d73668 [ 742.691825][T14813] [ 742.694844][T14813] Modules linked in: [ 742.699795][T14813] ---[ end trace 0000000000000000 ]--- [ 742.750611][T14813] RIP: 0010:find_match+0xae/0xc10 [ 742.809292][T14813] Code: 08 48 89 df e8 03 1f 69 f7 4c 89 64 24 40 48 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d4 1e 69 f7 4c 8b 23 e8 bc 81 66 01 [ 742.846545][T14813] RSP: 0018:ffffc90003656ca0 EFLAGS: 00010206 [ 742.861572][T14813] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: dffffc0000000000 [ 742.870895][T14813] RDX: ffff88802c0c8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 742.881883][T14813] RBP: ffff88803045c520 R08: ffffffff8ac1460f R09: ffffc90003657070 [ 742.894673][T14813] R10: ffffc90003656ea0 R11: ffffffff8ac14450 R12: ffffc90003657070 [ 742.914219][T14813] R13: ffff88803045c537 R14: 1ffff1100608b8a6 R15: 1ffff1100608b8a4 [ 742.924091][T14813] FS: 00007fd55fa6c6c0(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 742.936157][T14813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.944948][T14813] CR2: 00002000001ab000 CR3: 0000000032082000 CR4: 00000000003526f0 [ 742.956145][T14813] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 742.967844][T14813] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 742.987732][T14813] Kernel panic - not syncing: Fatal exception [ 742.994145][T14813] Kernel Offset: disabled [ 742.998508][T14813] Rebooting in 86400 seconds..