last executing test programs: 15m6.550729079s ago: executing program 2 (id=391): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e0cff3c20"], 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x7f, 0xc8, 0x57}}}, 0x7) 15m5.987794576s ago: executing program 2 (id=394): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x92000000200480c1) 15m5.143715262s ago: executing program 2 (id=396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000880)=""/102, 0x66}], 0x4}, 0x6}], 0x2, 0x2023, 0x0) 15m4.601681495s ago: executing program 2 (id=398): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15m4.354911308s ago: executing program 32 (id=336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15m3.962435148s ago: executing program 2 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 15m3.322839728s ago: executing program 2 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) 14m47.972634705s ago: executing program 33 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) 13m10.136322832s ago: executing program 0 (id=963): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @remote, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 13m9.734245318s ago: executing program 0 (id=966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r1) r2 = syz_io_uring_setup(0x117, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0xdd}, &(0x7f0000000500)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 13m9.083603725s ago: executing program 0 (id=970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000002c0)="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", 0xfc) 13m8.276261724s ago: executing program 0 (id=974): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000380)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@fat=@tz_utc}, {@utf8}, {@utf8no}, {@fat=@usefree}]}, 0x0, 0x291, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 13m7.454185257s ago: executing program 0 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 13m6.880225229s ago: executing program 0 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 13m3.987436944s ago: executing program 34 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 8m57.608793593s ago: executing program 7 (id=2214): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000740)=""/193, 0x0, 0xdddd1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000480)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) 8m56.981780581s ago: executing program 7 (id=2218): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x6bf6, 0x400, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x3fffe, 0x2, 0x0, {0x0, r3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8m55.322385957s ago: executing program 7 (id=2224): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x20}) 8m54.730010851s ago: executing program 7 (id=2226): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab"], 0xa, 0xc35, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 8m53.329460627s ago: executing program 7 (id=2229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m52.588384762s ago: executing program 7 (id=2231): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x0) 8m50.634369432s ago: executing program 35 (id=2231): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x0) 5m58.387663156s ago: executing program 8 (id=3113): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 5m57.938324241s ago: executing program 8 (id=3115): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c000280050001000000000008000740"], 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x44080) 5m56.657812299s ago: executing program 8 (id=3123): syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="5037c8dfdf039a39776e71e00fabbc2a0f210e123916d441596606edcc81211f622c5d0e1e0980ad48c73d758105544e353e678f33f51f3763"], 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 5m55.916904937s ago: executing program 8 (id=3127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m55.431054033s ago: executing program 8 (id=3131): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 5m54.799869173s ago: executing program 8 (id=3136): mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x15, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68dd", 0x2}], 0x1}}], 0x1, 0x4) 5m53.410581403s ago: executing program 36 (id=3136): mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x15, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68dd", 0x2}], 0x1}}], 0x1, 0x4) 2m23.608329828s ago: executing program 6 (id=4011): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x600, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) io_setup(0x7, 0x0) r1 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x4, 0x0, 0x0, r1}]) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58}, 0x10) 2m22.533989977s ago: executing program 6 (id=4015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r3, 0x401070c9, &(0x7f0000000000)) 2m21.606217768s ago: executing program 6 (id=4019): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) dup2(r1, r2) r4 = getpgid(0x0) fcntl$setown(r1, 0x8, r4) tkill(r0, 0x13) 2m21.06399367s ago: executing program 6 (id=4024): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) iopl(0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@bh}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x2, 0x0) rmdir(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x4, 0x0, 0x0, 0x4}}, 0x80, 0x0}}], 0x1, 0x4000000) syz_open_dev$sndctrl(&(0x7f0000002000), 0x4, 0x84801) ptrace(0x10, r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2m19.990640245s ago: executing program 6 (id=4027): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) r3 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x1595, 0x10100, 0x0, 0x17c, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r3, 0x44fd, 0x3, 0x1, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000200)=""/179, 0xb3) 2m19.164190748s ago: executing program 6 (id=4031): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 2m17.720815562s ago: executing program 37 (id=4031): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 15.311881831s ago: executing program 5 (id=4489): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) inotify_init1(0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_secret(0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) memfd_secret(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xb}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 14.399637674s ago: executing program 5 (id=4495): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004"], 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f0000000400000004000000020002", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="02"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000506994d11e5e3d630000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) fdatasync(r5) 7.582062697s ago: executing program 1 (id=4508): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0xd1, 0x16, 0x0, @loopback, @multicast2}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044160, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$tipc(0x1e, 0x2, 0x0) close(r2) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid_for_children\x00') socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'syzkaller1\x00', @remote}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.180159043s ago: executing program 1 (id=4512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x40002, 0x0, 0x0, 0x0, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/59, 0x3b, 0x2, 0x31}, @fda={0x66646185, 0x2, 0x1, 0x8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5.600258318s ago: executing program 1 (id=4514): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r0 = dup(0xffffffffffffffff) bind$unix(r0, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futex(&(0x7f00000001c0)=0x1, 0x9, 0x2, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)=0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8044) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="fac28d000090e9c3", 0x8}], 0x1}}], 0x1, 0x80) 4.318081872s ago: executing program 3 (id=4519): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000240)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0x4, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x800, 0x2, 0x8c, 0x6, 0x8001, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8081, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0xffffffff, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x2, 0x3, 0xffffffff, 0x6, 0x0, 0x2000, 0x6, 0x8, 0x9, 0x3, 0x1000068], [0x1, 0x3, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x7fff, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x9, 0xfffffffd, 0x7, 0x10000, 0x7c, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0x1, 0x4, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x4bbffe95, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x4, 0x81, 0x9, 0x2000002, 0x3, 0x100, 0x8, 0x0, 0x2, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x9, 0x8, 0xffffff81, 0x800000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x1, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x402, 0x7, 0x3, 0x4, 0x7, 0x8, 0x1, 0x0, 0x6, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13b, 0x807, 0x8, 0x5a, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x1fffffd, 0x800, 0x0, 0xc4}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x35, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.146318392s ago: executing program 9 (id=4520): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0x7fffffff, 0x8000, 0x0, 0x1f}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r5 = dup3(r0, r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x24, 0x301, 0x70bd2a, 0x25dfdbfa, {0x1}, [@nested={0x8, 0x131, 0x0, 0x1, [@nested={0x4, 0x103}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8883}, 0x4000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000000480)={{0x2, @private=0xa010102, 0x0, 0x4, 'wrr\x00', 0x12, 0x1, 0x2b}, {@private=0xa010102, 0x4e24, 0x1, 0x0, 0x6, 0x3}}, 0x44) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141a42, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b0000000800000004030000000000000008000100"], 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) open$dir(&(0x7f0000000040)='./bus\x00', 0x452002, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) 3.957269222s ago: executing program 3 (id=4521): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x180}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r8, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.421167004s ago: executing program 9 (id=4522): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) eventfd2(0x8, 0x1) epoll_create(0x89) socket$kcm(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x64) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 3.275893985s ago: executing program 5 (id=4523): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0xd1, 0x16, 0x0, @loopback, @multicast2}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044160, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000300)='ecryptfs\x00', 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$tipc(0x1e, 0x2, 0x0) close(r2) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid_for_children\x00') socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'syzkaller1\x00', @remote}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.182040166s ago: executing program 4 (id=4524): socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) 2.782429179s ago: executing program 9 (id=4525): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000001fcffffbca2f106773d41620ef84130ee6dd87371021286cd19ec9e6fc7fea673eba59f4bbf55858df585e35c5cafb37289a97eed2c985052cf4fe5d2a09a82b95acf4f8e96f7bd4599a2a00b3737e317c449c3a66d901734e93ee843803d637dbaf4b52b04c6e269a0e213313c93b4f31bb02fa8d52a1bc91375d85c0400dae46822d56154437d6098863c60749af3da74f73e3c6fabc5ddfa6f11a0ff59b371fe6651e13d9ff4c81b89367fa3f61d86f60db10bd7746e439a1d0d921640fb9b755f6b8b4bc33c2f8b2541d9ea0b7ae143d7d13f000000000000007c0fb54b497c0668d6ca701706e4934a266323"], 0x77, 0x814, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$KDDISABIO(r1, 0x4b37) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x4c8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe53}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x44c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x43e, 0x3, "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"}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r6, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 2.701342101s ago: executing program 4 (id=4526): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file6\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 2.661826479s ago: executing program 3 (id=4527): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000000c0)={0x2, 'vlan0\x00', {0x6}, 0x7}) r6 = syz_usb_connect$uac1(0x5, 0xa1, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xff, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffc, 0x8}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x5, "16c19c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x7ff, 0xfc}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x81, 0x9, "e0489c57e1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xf, 0x61, {0x7, 0x25, 0x1, 0x82, 0xa6, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x2, 0x1, "024b5e00fe38b9d874"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd4, 0x5, 0x7, {0x7, 0x25, 0x1, 0x82, 0xff, 0xb25}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x9, 0x5, 0x9, 0xff, 0x3}, 0x9b, &(0x7f0000000380)={0x5, 0xf, 0x9b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x23, 0x8}, @generic={0x53, 0x10, 0xb, "5bd476148de5919e80059f0749fce04652ae195e483b3144606287cd41e4377e8069dd4329ff1589914b35a70a96dba026ad36bc96e7b4bbe252de48a6eb0e9eb3ca36234f93eced75e832f5e384288a"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0xf, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10001, 0x0, 0x5, [0xcf, 0x30, 0xff00cf, 0xff0007, 0x3f60, 0xff11]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0xa8, 0x3, 0x726d, 0x9}]}, 0x3, [{0xea, &(0x7f0000000440)=@string={0xea, 0x3, "e21150168e1bd55551627453f695664c6b3c9dce72525e2bf07fe5f757f1d457ee7abd17a9353167a627100a72b03ee2a62923af78be27e764059decf69a679df00576ecbe3b8d349c8486205975c6f10ba756ae29b3d962100c62aaeb99853235362e963a6df591be1670c9ca8187673911c18ef8a588c731a03b706be90cec1896db9f4290c694fde4ceeb54764c1266c081a4c17ed95d4d05237864e02afbea0e58c7f0d4925e3eae9160411e30c48769b94e8caaa5d73b0a71cebac5e39a9257f61c82537d48ec1088581d1a0cfe359a1c5dcc22be1cc31a7a009351d44239d03f8343b3b1d0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xf6eda3fdbc87dd49}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c01}}]}) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000000)=0x10000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x18, 0x0, 0x48) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000300)={0x24, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, 0x0) pwrite64(r9, 0x0, 0x0, 0x400000) 2.297468004s ago: executing program 5 (id=4528): socket$inet_tcp(0x2, 0x1, 0x0) mq_open(&(0x7f0000000200)='kfree\x00\x04\x8e\xf6\f\xa6q\xcb)!\x01\x9a\xd2ITX\x8c6\x9dD\xde\x9f4f\x89\xa6\b\xe3\xa8rC\xbd2\x1ej\xa7\xfeY\x04??\x90\xea\xb0s\xf1e\nR\x0f\x850\v\xfb3s\n\xe7~\xc8\xc7\xd9{\xeeC\xd0*\xaf\xad\x10\xd1K\\0*\xbf\x93\xa5\xe0.\xa0\x95\x87~%\x16\x86\x8e\x11\x8c\xad\x93\x97\xb9\x87\xb5\x03g/\xbf\xb6\xb1\x04\n\x1c\x151\x9f\xc2\x93\xd7\xbe\x88\x06\x0f\xd9\xd1\xcbC(XrX\xb7\x8b^\x8f\x1cU\xeb\xf8r\xc7{B\xa6\xf4\b\x93\b\xb3\xb9\x84\xa9\xba\xb4\xbd\xb2\x06\xb4\xe6\xd4\x97\xa1\x95\x9a\xda\xd9\xa3\x8c\xcb\xdb\xe3\x13\x9f\xc7kO\xea\xddfpb\xb2\xe6\xd50\x8f}\xaaQw(P\"@Y\x87+0<\xe1$_\x84\x01\xb1\x13Y!\x02\x9a\xb3\x7f\xe6FU\xf5.\x96\xe0\x89\x04;\x00aI', 0x40, 0x40, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x809268, 0x400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0x113, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x200000, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 2.10142609s ago: executing program 1 (id=4529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) shmctl$IPC_SET(0x0, 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x401, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000008060108000000000000000400000004050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0xf219233ff90c8b9d, 0x70bd28, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000880) 2.078091263s ago: executing program 9 (id=4530): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0x5}, {0xfff1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rmdir(&(0x7f0000000640)='./file0\x00') close(r2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) lseek(r3, 0x5, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') io_setup(0x4, &(0x7f0000000240)) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000200)=0x89, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) syz_genetlink_get_family_id$tipc(0x0, r2) 2.036309844s ago: executing program 4 (id=4531): clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, &(0x7f00000001c0)=@multiplanar_overlay={0xcb, 0x1, 0x4, 0x20, 0x0, {r0, r1/1000+60000}, {0x2, 0x8, 0x6, 0x1b, 0x0, 0x10, "aa4bc8ff"}, 0xd9, 0x3, {&(0x7f0000000140)=[{0x40000, 0x2, {0xfff}, 0xf}, {0x9, 0x368, {0xfff}, 0xffffffff}]}, 0x70}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) ptrace(0x10, r2) ptrace$cont(0x7, r2, 0x1000000fffdffff, 0xfffffffffffffff7) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000001d80), 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000340)={0x2, 0x3, 0x4, 0xe000, 0x3b1, {}, {0x1, 0x8, 0x10, 0xff, 0x40, 0xf, "c73fbff6"}, 0xffffffff, 0x4, {}, 0x2}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r8, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0), 0x4) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x2, 0x10, 0x401]}, &(0x7f0000000240)=0x44) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x1016, 0x6, 0xc1, 0x1, 0x20}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x8000005, 0x3, 0x1}) 1.488741193s ago: executing program 1 (id=4532): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x1, @random="8825f840d166"}, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'veth0_vlan\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, 0x0, 0x0, 0x40002023, 0x0) write(r5, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x800802, &(0x7f0000000580)={[{@file_umask}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0x37c}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@codepage={'codepage', 0x3d, 'cp1251'}}]}, 0x1, 0x306, &(0x7f0000000240)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r9 = open(&(0x7f0000000140)='./file1\x00', 0x10000, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r10, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) r11 = syz_create_resource$binfmt(0x0) r12 = openat$binfmt(0xffffffffffffff9c, r11, 0x42, 0x1ff) close(r12) 1.45101811s ago: executing program 5 (id=4533): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8) syz_io_uring_setup(0x1d4c, &(0x7f00000008c0)={0x0, 0x0, 0x10001, 0x3}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.289538083s ago: executing program 3 (id=4534): openat$autofs(0xffffff9c, 0x0, 0x80, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.226933507s ago: executing program 9 (id=4535): r0 = socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x640100fc, @in=@loopback, 0x2, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, {0x0, 0x0, 0x0, 0x2800000002}}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x40, 0xfffffc01, 0x0, 0x8}}, 0xe4) listen(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)=ANY=[], 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) setsockopt$sock_linger(r6, 0x1, 0xd, 0x0, 0x0) listen(r6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x178, 0x32, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x457530c2}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1220}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000804) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a03"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x20000}}, 0x20}}, 0x20044002) 1.197654513s ago: executing program 4 (id=4536): r0 = syz_io_uring_setup(0x19f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) 878.963843ms ago: executing program 3 (id=4537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xa) r1 = socket$netlink(0x10, 0x3, 0x1c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040805) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x21}, 0x28) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x6, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x409}, 0x22) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r4) 809.231786ms ago: executing program 5 (id=4538): syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000002680)=[0x0], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001a10", 0x18, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @mld={0x0, 0x0, 0x0, 0x9, 0x105, @local}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, 0x0, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e28}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 699.168954ms ago: executing program 4 (id=4539): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c0980b1b168f316ef027e344d0243a2b9dd9e298a53adbac89d61de21d8fdf8c266eb3c361eb859cd4e0b4b2ed210bda92d246d19491fd2610", 0x39}], 0x1, &(0x7f0000000280)="fcc305d732f94d3f811f84943c22459d472ed3f45ebe9a737f74cc4d1f4626601a9820a8ec275cbfede00c41fd53f75b30ba3ffa8abc47d682d4955a5f4b4aaca523e0b4cda7ac761f6381143d7713019129e20991e9391d34d0daa499b7946aab", 0x61, 0x4000800}, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x10, r4, 0x200000}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r8) close(r7) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x20) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6802000001050101000000000000000005000005540201000000"], 0x268}, 0x1, 0x0, 0x0, 0x4c010}, 0x44000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) 180.876191ms ago: executing program 1 (id=4540): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") r0 = creat(0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0xe501, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000160a010100000000000000000a", @ANYRESOCT=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44048800) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@deltaction={0x14, 0x31, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x30000004) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 165.088746ms ago: executing program 9 (id=4550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r2 = epoll_create1(0x97f89f8e944a2088) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) shutdown(r1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000007c0)={@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {&(0x7f0000000600)=""/227, 0xe3}, &(0x7f0000000200), 0x14}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) sysinfo(&(0x7f0000000540)=""/145) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0xec}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "000000009b993e68", "75df9881592b9fd38bcad042e286f2cd", ')\x00\x000', "578619a280c847dd"}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000340)='./file1\x00', 0x1808004, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r5], 0x4, 0x7d6, &(0x7f0000001580)="$eJzs3U1sHOUZAOB3EocEIwVEqxRFIUwClYIEZr0GU5cDLOuxM7DetXbXVaKqohE4yIoDFIpacoGoErRVq6qnHilXbr1RVWqlHtpey6GX3pA4VRz6J1CF5GpmdxP/7NohOOEnz2N5Z3b2ne97Zz2ed2bt/TYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEjqs5XKZBKN/HtLp9LR6rPt1sI2jw/a+8OGyQaPbeg3Iim+48CB+PDfvWVfvfzwoeLmeBzp3TsSB4rJgbhwy6HbHvnK2J7B+tskdLWOXWFcEvFakdS5M6uryy9eg0Suo5/+7hOv8tFacTufNfNOK1+ozWdp3mmlM9PTlQdOznXSubyRdU53utlCWm9ntW6rnZ6o35tOzsxMpdnE6dZSc3621sgGCx++v1qpTKdPTCxmtXan1XzgiejUT+aNRt6cL2OqlR9EEfNwsSM+mXfTblZbSNOzK6vLU+uySoalWgRNDntgb2//OXLPbe+//N6/VpaLHXLU9ib9HbM6OVmtTk4/NPPQw5XKWLVS3bigskn0I/b3V6+MXZOdli+Q3Tt4w6e0p1//oxF5NGMpTkW66WtfROyLesxGO1qxUCz7274tUX2D+v/1j9bW1rbpd339H1T5Oy4/fDjK+n+0d+/oqPq/JYttv/Z9ougr+nopXokLcS7OxGqsxnK8uLvt79/1jPd82haSDffmI4tm5NGJVuSxELVySdpfksZMTMd0VOKpOBlz0Yk05iKPRmTRidPRiW5k5R5Vj3ZkUYtutKIdaZyIetwbaUzGTMzEVKSRxUScjlYsRTPm4/6ola2cjZXyeZ/alOWhm+O3z/71/TeL+UtBk9ttVnEyVwT9c5ugLeV+2/pf7v9bIkafYnBjuBaHcbgqa4P6DwAAAHxpJeWr70n5Ev+d5dxc3si+fQVrdseuQ3oAAADALij/8n+kmOwr5u6MpLj+rwyJfPe65wYAAADsjqR8j10SEeNxV2/ubKzEa7Ecw14EAAAAAL6Ayr//Hy0m4xGvlgsGw6W4/gcAAIAviR+PGmP/vcEYu53F/cnvyzGAk4uLp+5JzteKuNr5vb31+pNvXWqxO3c4OdhvpJxMj124JYmIsXp2JBmMfvlxf0T0D8rbw5fHEhg11n/Sbm+bQGyfQHkvfhbHejHHnulNn+k/kvR6GZ/LG9lEvdV4pBwSsfjuvvzcyg8jit5/0lw4mMTZldXliaefX32mzOVi0crF8/0BFDeMo7h26yCXvRtySaLMZW0wJvydw7d4X/lGjH6/471+K+u3f0+59v+2jLO8cfuT9dv/ehzvxRwf703HB4/0+jxQ9Dk58chk1GoH93SzU92X19ZtfT+LyZ22fIefwutxdy/m7hN39yZDsqhuyOK5rVlU12fRey5izy5l8eaxV0/990+tJJvaKYupIVncOiKLtb0Rm7MA+KycLUf9uVyFbi6rUFFUCkX931R3bx6seQXH2v9c7qV3lvFxv9mIWFfrxmJzdb/c9pVV97XoHdFP9GJO9M4nxg4PqSuVIUf0F1Ze+HP/iP7g27/69XeO/uU3Zb9XVd3ejnt7Mf1J3P7HETW22Oafb6qqbxVrvDW03+IcrNOoJnExYu/3z78Qh1565cL9K+fPPLv87PJz1erUdOXBSuWhauwrTxX6k20yBeDGtfNn7IyMuKnfRPLgqKvqfsW7/dK/FEzE0/F8rEZxBnBXL/aurf2+U1yJr/s3hPt2uGodX/cJL/ftcG15Oba6NTaJEbFT656xr/2ynHx4TX4cAHBdHN+mDu9Q/y+9Mn/fDtfdG2v5pqvjGF3Lh/nGNX02AODGkLU/SMa7byTtdr741OTMzGStezJL2636k2k7n53P0rzZzdr1k7XmfJYutlvdVn3wwvFs1kk7S4uLrXY3nWu109jTyU+Vn/ye9j/6vZMt1JrdvN5ZbGS1TpbWW81urd5NZ/NOPV1ceryRd05m7XLlzmJWz+fyeq2bt5ppp7XUrmcTadrJsnWB+WzW7OZzeTHbTBfb+UKtfTEiGksLWTqbdertfLHb6jU46CtvzrXaC2WzE1s3/x/X+/kGgM+Dl165cO7M6uryi1c38/crCf6stxEA2EiVBgAAAAAAAAAAAACAz7+tb9crln6KdwR+spn9cc27uIFmvtkfkrG3pJj7nCT22c1899FHz42KefzVO05eWTvDf1OGvdX1jYMRN73zi96Sx0YH/6j/+7c7W/puRFzF6mvJNjEbDhM3XefDEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9f8AAAD//+Qga2g=") 60.411036ms ago: executing program 4 (id=4541): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi0\x00', 0xc8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x4, 0x10000, 0x4, 0xfffffff8, 0xcc7, 0x4, 0x8, 0xe, 0x9, 0x2, 0x1, 0x1, 0x1, 0x6, 0x10000105, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x1, 0x20001e58, 0xb5c, 0x6, 0x1, 0x7, 0x6, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r1, 0x6411) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x4c, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0x3}, {0x0, 0xf}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x22}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44060}, 0x98) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x1}) r7 = fspick(0xffffffffffffffff, 0x0, 0x1) unshare(0x26020480) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x40) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) writev(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=4542): socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x19f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): m syz.6.2976: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 797.586605][T13974] EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz.6.2976: Bad quota inode: 3, type: 0 [ 797.625470][T13974] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 797.647148][T13974] EXT4-fs (loop6): mount failed [ 798.126553][T11898] kernel read not supported for file inotify (pid: 11898 comm: kworker/1:0) [ 799.674303][T11898] IPVS: starting estimator thread 0... [ 799.779248][T14006] IPVS: using max 240 ests per chain, 12000 per kthread [ 799.896721][T14008] overlayfs: failed to clone upperpath [ 800.734714][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 800.748461][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2995'. [ 800.762444][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2995'. [ 800.851695][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 800.851769][ T30] audit: type=1326 audit(1760559579.207:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 800.975091][ T30] audit: type=1326 audit(1760559579.237:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 800.998875][ T30] audit: type=1326 audit(1760559579.237:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.021575][ T30] audit: type=1326 audit(1760559579.237:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.044035][ T30] audit: type=1326 audit(1760559579.257:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.066516][ T30] audit: type=1326 audit(1760559579.257:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.089742][ T30] audit: type=1326 audit(1760559579.257:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.112531][ T30] audit: type=1326 audit(1760559579.257:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.134963][ T30] audit: type=1326 audit(1760559579.277:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.157405][ T30] audit: type=1326 audit(1760559579.277:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.8.2994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 801.815544][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3000'. [ 801.861525][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3000'. [ 802.091299][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 802.989448][T11898] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 803.226413][T11898] usb 7-1: Using ep0 maxpacket: 16 [ 803.251751][T11898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 803.324037][T11898] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 803.334495][T11898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.343020][T11898] usb 7-1: Product: syz [ 803.347345][T11898] usb 7-1: Manufacturer: syz [ 803.352282][T11898] usb 7-1: SerialNumber: syz [ 803.402533][T11898] usb 7-1: config 0 descriptor?? [ 803.426070][T11898] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 803.437045][T11898] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 804.114492][T11898] em28xx 7-1:0.0: chip ID is em2874 [ 804.553328][T14080] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3016'. [ 804.737709][T11898] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 804.747544][T11898] em28xx 7-1:0.0: board has no eeprom [ 805.050110][T11898] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 805.058318][T11898] em28xx 7-1:0.0: dvb set to bulk mode. [ 805.070712][T11912] em28xx 7-1:0.0: Binding DVB extension [ 805.130904][T11898] usb 7-1: USB disconnect, device number 13 [ 805.138965][T11898] em28xx 7-1:0.0: Disconnecting em28xx [ 805.421171][T11912] em28xx 7-1:0.0: Registering input extension [ 805.799229][T11912] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 805.805987][T11912] Registered IR keymap rc-empty [ 805.812103][T11912] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 805.824412][T11912] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 805.930148][T11912] em28xx 7-1:0.0: Input extension successfully initialized [ 805.961217][T11898] em28xx 7-1:0.0: Closing input extension [ 806.081588][T11898] em28xx 7-1:0.0: Freeing device [ 807.202903][T14103] loop8: detected capacity change from 0 to 2048 [ 807.263497][T14106] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 807.344009][T14103] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.3023: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 807.406653][T14103] EXT4-fs (loop8): get root inode failed [ 807.412885][T14103] EXT4-fs (loop8): mount failed [ 808.354060][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.405399][T14115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.780102][T14116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 809.204634][T14132] Set syz1 is full, maxelem 65536 reached [ 809.888991][T14140] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3032'. [ 809.898438][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3032'. [ 810.809039][T11912] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 810.982067][T11912] usb 9-1: config 0 has no interfaces? [ 811.003926][T11912] usb 9-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 811.014447][T11912] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 811.022949][T11912] usb 9-1: Product: syz [ 811.027283][T11912] usb 9-1: SerialNumber: syz [ 811.042383][T11912] usb 9-1: config 0 descriptor?? [ 811.177799][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.187382][T14156] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.264015][ T5859] usb 9-1: USB disconnect, device number 5 [ 811.348517][T14156] batman_adv: batadv0: Interface deactivated: dummy0 [ 812.093439][T14156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.232078][T14156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.417637][T14170] overlayfs: failed to resolve './cgroup': -2 [ 812.979283][T14173] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 813.026078][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'. [ 813.315109][T14167] loop8: detected capacity change from 0 to 8192 [ 813.941958][T14173] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 813.944009][ T1145] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.057794][ T1145] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.108345][ T1145] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.199382][ T1145] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.897876][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3060'. [ 816.481921][T14204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.153437][T14222] loop3: detected capacity change from 0 to 8192 [ 818.480038][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 818.522631][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 818.571821][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 818.614463][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 819.204250][T14249] tipc: Enabling of bearer rejected, failed to enable media [ 819.337893][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3078'. [ 820.284465][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 820.326482][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 820.338281][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 820.383971][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 821.492510][T14290] fuse: Bad value for 'fd' [ 821.507339][T14293] loop8: detected capacity change from 0 to 2048 [ 821.575489][T14293] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 821.605892][T14293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 821.756430][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3091'. [ 821.819493][T14297] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 821.860586][T14297] @0: renamed from bond_slave_1 [ 822.584192][T14307] netlink: 'syz.1.3096': attribute type 27 has an invalid length. [ 822.633399][T14307] gtp0: left promiscuous mode [ 822.639744][T14307] macvtap1: left promiscuous mode [ 822.644961][T14307] macvtap1: left allmulticast mode [ 822.850966][T14307] bond3: left allmulticast mode [ 822.856020][T14307] vcan0: left allmulticast mode [ 822.945687][T14307] bond4: left promiscuous mode [ 822.955559][T14307] bridge5: left promiscuous mode [ 823.204219][T14317] binder: BINDER_SET_CONTEXT_MGR already set [ 823.210917][T14317] binder: 14315:14317 ioctl 4018620d 80000040 returned -16 [ 823.958257][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3102'. [ 824.037326][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3102'. [ 824.179067][ T5859] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 824.279279][T11913] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 824.342638][ T5859] usb 7-1: Using ep0 maxpacket: 8 [ 824.368096][ T5859] usb 7-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 824.380624][ T5859] usb 7-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 824.393982][ T5859] usb 7-1: config 0 interface 0 has no altsetting 0 [ 824.401002][ T5859] usb 7-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 824.410323][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.490891][ T5859] usb 7-1: config 0 descriptor?? [ 824.499209][T11913] usb 4-1: Using ep0 maxpacket: 8 [ 824.516227][T11913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 824.553712][T11913] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 824.562558][T11913] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 824.572033][T11913] usb 4-1: config 4 has no interface number 0 [ 824.659804][T11913] usb 4-1: string descriptor 0 read error: -22 [ 824.667117][T11913] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 824.677035][T11913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.794541][T11913] uvcvideo 4-1:4.147: Found UVC 0.02 device (04f2:b746) [ 824.803291][T11913] uvcvideo 4-1:4.147: No valid video chain found. [ 824.988692][ T5859] playstation 0003:054C:09CC.000A: item fetching failed at offset 5/7 [ 825.006318][T11913] usb 4-1: USB disconnect, device number 13 [ 825.034024][ T5859] playstation 0003:054C:09CC.000A: Parse failed [ 825.041742][ T5859] playstation 0003:054C:09CC.000A: probe with driver playstation failed with error -22 [ 825.240208][T11913] usb 7-1: USB disconnect, device number 14 [ 825.827779][T14351] syzkaller0: entered promiscuous mode [ 825.833904][T14351] syzkaller0: entered allmulticast mode [ 826.580835][T14362] fuse: Bad value for 'fd' [ 826.791715][T14367] lo: Caught tx_queue_len zero misconfig [ 828.874060][T14403] kvm: emulating exchange as write [ 828.918927][T11913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 828.990131][ T5085] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.103909][T11913] usb 4-1: Using ep0 maxpacket: 16 [ 829.161053][ T5085] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.187964][T11913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.199433][T11913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.209496][T11913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 829.222798][T11913] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 829.232133][T11913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.315392][T11913] usb 4-1: config 0 descriptor?? [ 829.325854][T14411] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2463114781/2463114783 [ 829.335970][T14411] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2463114781/2463114783 [ 829.422608][ T5085] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.537011][ T5085] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.842782][T11913] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input17 [ 829.878409][ T5085] bridge_slave_1: left allmulticast mode [ 829.889069][ T5085] bridge_slave_1: left promiscuous mode [ 829.895520][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.897108][T11913] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 829.994966][ T5085] bridge_slave_0: left allmulticast mode [ 830.005485][ T5085] bridge_slave_0: left promiscuous mode [ 830.012954][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.047779][T11913] usb 4-1: USB disconnect, device number 14 [ 830.648571][T14418] netlink: 528 bytes leftover after parsing attributes in process `syz.5.3141'. [ 831.038455][ T5085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.098539][ T5085] bond_slave_0: left allmulticast mode [ 831.134152][ T5085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.182521][ T5085] bond_slave_1: left allmulticast mode [ 831.224741][ T5085] bond0 (unregistering): Released all slaves [ 831.620420][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 831.630383][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 831.641037][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 831.654441][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 831.669970][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 832.755437][ T5085] hsr_slave_0: left promiscuous mode [ 832.755914][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 832.755979][ T30] audit: type=1804 audit(1760559611.107:417): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3145" name="/newroot/602/file0" dev="tmpfs" ino=3303 res=1 errno=0 [ 832.802413][ T5085] hsr_slave_1: left promiscuous mode [ 832.815980][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.828067][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.848454][T14449] loop6: detected capacity change from 0 to 128 [ 832.877514][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.889774][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.929613][ T5085] veth1_macvtap: left promiscuous mode [ 832.935280][ T5085] veth0_macvtap: left promiscuous mode [ 832.941719][ T5085] veth1_vlan: left promiscuous mode [ 832.947135][ T5085] veth0_vlan: left promiscuous mode [ 832.981363][T14449] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 833.034020][T14449] ext4 filesystem being mounted at /513/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 833.173776][T14449] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 833.286799][T14449] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 833.534391][T14459] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 833.565028][ T7282] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 833.739091][ T51] Bluetooth: hci1: command tx timeout [ 834.284358][ T5085] team0 (unregistering): Port device team_slave_1 removed [ 834.335108][ T5085] team0 (unregistering): Port device team_slave_0 removed [ 834.581118][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3154'. [ 834.607082][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3154'. [ 834.633958][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3154'. [ 834.861549][T14459] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 834.867591][T14461] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 834.888474][T14480] netlink: 'syz.5.3156': attribute type 1 has an invalid length. [ 835.005017][T14480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 835.224234][T14482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 835.235210][T14482] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 835.249374][T14482] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 835.459531][T14480] ip6erspan0: entered promiscuous mode [ 835.476372][T14480] bond5: (slave ip6erspan0): making interface the new active one [ 835.486448][T14480] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 835.504142][T14434] chnl_net:caif_netlink_parms(): no params data found [ 835.832748][ T51] Bluetooth: hci1: command tx timeout [ 835.911055][T14491] netlink: 'syz.6.3169': attribute type 4 has an invalid length. [ 836.858336][T14434] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.869279][T14434] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.876957][T14434] bridge_slave_0: entered allmulticast mode [ 836.886311][T14434] bridge_slave_0: entered promiscuous mode [ 837.037191][T14434] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.045652][T14434] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.053590][T14434] bridge_slave_1: entered allmulticast mode [ 837.062923][T14434] bridge_slave_1: entered promiscuous mode [ 837.301301][T14434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.327238][T14434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.488058][T14434] team0: Port device team_slave_0 added [ 837.577522][T14434] team0: Port device team_slave_1 added [ 837.848056][T14434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.864040][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.895174][T14434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.912613][ T51] Bluetooth: hci1: command tx timeout [ 838.065491][T14434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.077215][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.108022][T14434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.543593][T14434] hsr_slave_0: entered promiscuous mode [ 838.553708][T14434] hsr_slave_1: entered promiscuous mode [ 838.913724][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.921056][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.947961][T14434] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 839.981428][ T51] Bluetooth: hci1: command tx timeout [ 840.000401][T14434] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 840.084827][T14434] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 840.173804][T14434] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 840.729482][T14546] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 840.829202][T14546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 840.920232][T14548] vlan2: entered allmulticast mode [ 840.925542][T14548] bond3: entered allmulticast mode [ 841.327936][T14434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.504333][T14434] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.593340][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.600976][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.660329][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 841.718216][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.725735][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.369749][T14565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3184'. [ 842.994536][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3184'. [ 843.083887][ T30] audit: type=1804 audit(1760559621.417:418): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3185" name="file0" dev="ramfs" ino=44351 res=1 errno=0 [ 843.593608][T14434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.297271][T14434] veth0_vlan: entered promiscuous mode [ 845.382031][T14434] veth1_vlan: entered promiscuous mode [ 845.547256][T14434] veth0_macvtap: entered promiscuous mode [ 845.597885][T14434] veth1_macvtap: entered promiscuous mode [ 845.784825][T14434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.879529][T14434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.958995][T14126] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.967999][T14126] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.031493][T14126] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.079997][T14126] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.977025][T14677] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 850.345970][T14681] loop6: detected capacity change from 0 to 128 [ 851.323895][T11897] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 851.478283][T14126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.486780][T14126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.586383][ T4201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.594652][ T4201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.568035][T14718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3227'. [ 853.868284][T11897] usb 7-1: unable to get BOS descriptor or descriptor too short [ 853.880835][T11897] usb 7-1: no configurations [ 853.885628][T11897] usb 7-1: can't read configurations, error -22 [ 854.001475][T14724] team0: Port device team_slave_0 removed [ 856.362776][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3240'. [ 858.650978][T14788] netlink: 'syz.9.3253': attribute type 4 has an invalid length. [ 858.687802][T14788] netlink: 'syz.9.3253': attribute type 4 has an invalid length. [ 859.825906][T14808] netlink: 'syz.3.3262': attribute type 10 has an invalid length. [ 972.412571][T16183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3717'. [ 972.422023][T16183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3717'. [ 972.435933][T16183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3717'. [ 972.449929][T16183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3717'. [ 972.547815][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3718'. [ 972.685136][T16188] batadv_slave_0: entered promiscuous mode [ 972.706066][T16188] batadv_slave_0: left promiscuous mode [ 973.750183][T16205] : renamed from bond_slave_0 [ 974.843474][T16219] overlayfs: failed to clone lowerpath [ 975.423681][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'. [ 975.873964][T16238] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3737'. [ 976.496842][T16254] pimreg: entered allmulticast mode [ 976.594416][T16253] pimreg: left allmulticast mode [ 977.270770][T16264] binder: 16262:16264 unknown command 0 [ 977.276602][T16264] binder: 16262:16264 ioctl c0306201 80000080 returned -22 [ 977.682361][T16269] dummy0: entered allmulticast mode [ 979.131036][T16289] netlink: 'syz.6.3753': attribute type 83 has an invalid length. [ 980.678329][ T51] Bluetooth: Frame is too long (len 12, expected len 4) [ 981.537900][T16322] loop9: detected capacity change from 0 to 1024 [ 981.583805][T16322] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 981.598448][T16322] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 981.654767][T16322] EXT4-fs error (device loop9): ext4_get_journal_inode:5808: inode #32: comm syz.9.3763: iget: special inode unallocated [ 981.723608][T16322] EXT4-fs (loop9): Remounting filesystem read-only [ 981.733578][T16322] EXT4-fs (loop9): no journal found [ 982.034503][T16334] netlink: 'syz.5.3766': attribute type 10 has an invalid length. [ 982.145869][T16334] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.160120][T16334] bond0: (slave team0): Enslaving as an active interface with an up link [ 982.505583][T16340] netlink: 'syz.9.3768': attribute type 4 has an invalid length. [ 982.644580][T16341] netlink: 'syz.9.3768': attribute type 4 has an invalid length. [ 983.124274][T16347] ref_ctr_offset mismatch. inode: 0x1123 offset: 0x0 ref_ctr_offset(old): 0x80000100 ref_ctr_offset(new): 0x0 [ 983.704194][T16360] lo speed is unknown, defaulting to 1000 [ 983.715339][T16360] lo speed is unknown, defaulting to 1000 [ 983.726985][T16360] lo speed is unknown, defaulting to 1000 [ 983.774471][T16360] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 983.817506][T16360] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 984.006521][T16360] lo speed is unknown, defaulting to 1000 [ 984.015335][T16360] lo speed is unknown, defaulting to 1000 [ 984.023995][T16360] lo speed is unknown, defaulting to 1000 [ 984.032816][T16360] lo speed is unknown, defaulting to 1000 [ 984.041608][T16360] lo speed is unknown, defaulting to 1000 [ 984.205971][T16366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3775'. [ 984.317349][T16366] bond4: entered promiscuous mode [ 984.337488][T16366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 984.403751][T16367] netlink: 'syz.5.3776': attribute type 1 has an invalid length. [ 984.411992][T16367] netlink: 'syz.5.3776': attribute type 4 has an invalid length. [ 984.420088][T16367] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3776'. [ 984.461891][T16374] netlink: 'syz.5.3776': attribute type 1 has an invalid length. [ 984.470279][T16374] netlink: 'syz.5.3776': attribute type 4 has an invalid length. [ 984.480133][T16374] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3776'. [ 984.959178][T16382] netlink: 'syz.5.3780': attribute type 1 has an invalid length. [ 985.043729][T16382] 8021q: adding VLAN 0 to HW filter on device bond6 [ 985.118535][T16387] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 985.148516][T16387] bond6: (slave batadv1): making interface the new active one [ 985.175038][T16387] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 985.240073][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3780'. [ 985.355797][T16382] bond6 (unregistering): (slave batadv1): Releasing active interface [ 985.444577][T16382] bond6 (unregistering): Released all slaves [ 985.906008][T16398] netlink: 'syz.1.3784': attribute type 4 has an invalid length. [ 985.971985][T16398] netlink: 'syz.1.3784': attribute type 4 has an invalid length. [ 986.119733][T11913] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 986.278934][T11913] usb 10-1: Using ep0 maxpacket: 32 [ 986.299364][T11913] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.311509][T11913] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 986.323540][T11913] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 986.375000][T11913] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 986.384835][T11913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.393256][T11913] usb 10-1: Product: syz [ 986.397683][T11913] usb 10-1: Manufacturer: syz [ 986.402798][T11913] usb 10-1: SerialNumber: syz [ 986.817355][T16405] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3788'. [ 987.457799][T11913] cdc_ncm 10-1:1.0: bind() failure [ 987.476432][T11913] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 987.484793][T11913] cdc_ncm 10-1:1.1: bind() failure [ 987.619932][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 987.620005][ T30] audit: type=1326 audit(1760560021.979:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.650370][ T30] audit: type=1326 audit(1760560021.979:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.685821][ T30] audit: type=1326 audit(1760560022.039:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.3.3794" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x0 [ 987.708296][ T30] audit: type=1326 audit(1760560022.039:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.731092][ T30] audit: type=1326 audit(1760560022.039:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.755219][ T30] audit: type=1326 audit(1760560022.039:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.778145][ T30] audit: type=1326 audit(1760560022.039:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.800811][ T30] audit: type=1326 audit(1760560022.039:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.823396][ T30] audit: type=1326 audit(1760560022.039:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.845881][ T30] audit: type=1326 audit(1760560022.079:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.5.3793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 987.945395][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3785'. [ 987.967146][T11934] usb 10-1: USB disconnect, device number 5 [ 988.826368][T16438] netlink: 'syz.3.3802': attribute type 1 has an invalid length. [ 988.908221][T16438] 8021q: adding VLAN 0 to HW filter on device bond4 [ 989.071989][T16442] bond4: (slave veth15): Enslaving as an active interface with a down link [ 989.086133][T16436] vlan0: entered promiscuous mode [ 989.111249][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3803'. [ 989.256017][T16438] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 989.384901][T16442] vlan3: entered allmulticast mode [ 989.394892][T16442] bond4: entered allmulticast mode [ 989.424187][T16442] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 989.802624][T16454] netlink: 'syz.5.3805': attribute type 4 has an invalid length. [ 989.887767][T16454] netlink: 'syz.5.3805': attribute type 4 has an invalid length. [ 991.338203][T16476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3815'. [ 991.386394][T16475] hub 1-0:1.0: USB hub found [ 991.410876][T16475] hub 1-0:1.0: 1 port detected [ 992.442210][T16492] lo speed is unknown, defaulting to 1000 [ 992.703935][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 992.704080][ T30] audit: type=1326 audit(1760560033.065:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16493 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 992.939758][ T30] audit: type=1326 audit(1760560033.115:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16493 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 992.963336][ T30] audit: type=1326 audit(1760560033.115:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16493 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 992.987891][ T30] audit: type=1326 audit(1760560033.135:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16493 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 993.011461][ T30] audit: type=1326 audit(1760560033.135:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16493 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 995.616400][T16515] loop9: detected capacity change from 0 to 128 [ 995.715705][T16515] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 995.857202][T16515] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 996.184393][T14434] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 996.813506][T16530] syzkaller0: entered promiscuous mode [ 996.823282][T16530] syzkaller0: entered allmulticast mode [ 997.988067][T16542] lo speed is unknown, defaulting to 1000 [ 997.997813][T16542] lo speed is unknown, defaulting to 1000 [ 998.007403][T16542] lo speed is unknown, defaulting to 1000 [ 998.057578][T16542] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 998.125897][T16542] lo speed is unknown, defaulting to 1000 [ 998.136758][T16542] lo speed is unknown, defaulting to 1000 [ 998.147459][T16542] lo speed is unknown, defaulting to 1000 [ 998.158161][T16542] lo speed is unknown, defaulting to 1000 [ 998.172193][T16542] lo speed is unknown, defaulting to 1000 [ 998.408801][ T30] audit: type=1326 audit(1760560038.755:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.529022][ T30] audit: type=1326 audit(1760560038.875:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.686483][ T30] audit: type=1326 audit(1760560038.925:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.714207][ T30] audit: type=1326 audit(1760560038.955:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.742414][ T30] audit: type=1326 audit(1760560038.955:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.767669][ T30] audit: type=1326 audit(1760560038.955:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.793089][ T30] audit: type=1326 audit(1760560038.975:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.817828][ T30] audit: type=1326 audit(1760560038.975:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.844515][ T30] audit: type=1326 audit(1760560038.995:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 998.870248][ T30] audit: type=1326 audit(1760560038.995:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 999.278994][T11901] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 999.858436][T16559] loop6: detected capacity change from 0 to 4096 [ 1000.364333][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1001.214925][T16559] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1001.736977][T11901] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1001.744958][T11901] usb 7-1: no configurations [ 1001.749846][T11901] usb 7-1: can't read configurations, error -22 [ 1001.759198][T16560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.777255][T11913] lo speed is unknown, defaulting to 1000 [ 1002.737716][ T7282] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 1003.565206][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3843'. [ 1003.600997][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3844'. [ 1004.523905][T16583] loop6: detected capacity change from 0 to 256 [ 1004.590929][T16585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.635412][T16583] exfat: Deprecated parameter 'namecase' [ 1004.646192][T16583] exfat: Deprecated parameter 'namecase' [ 1004.830197][T16583] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1005.566163][T16596] tipc: Enabling of bearer rejected, failed to enable media [ 1005.767504][T16598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1005.815581][T16600] bond_slave_0: entered promiscuous mode [ 1005.821614][T16600] bond_slave_1: entered promiscuous mode [ 1005.830791][T16600] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.846889][T16600] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1006.746422][T16608] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1006.846332][T16608] kvm: pic: non byte read [ 1006.875454][T16608] kvm: pic: level sensitive irq not supported [ 1006.875771][T16608] kvm: pic: non byte read [ 1006.894611][T16608] kvm: pic: level sensitive irq not supported [ 1006.894950][T16608] kvm: pic: non byte read [ 1007.254141][T16615] lo speed is unknown, defaulting to 1000 [ 1007.263249][T16615] lo speed is unknown, defaulting to 1000 [ 1008.558376][T16639] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1008.565131][T16639] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1008.578365][T16639] vhci_hcd vhci_hcd.0: Device attached [ 1008.863988][T11887] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1008.865835][T16647] syzkaller0: entered promiscuous mode [ 1008.877553][T16647] syzkaller0: entered allmulticast mode [ 1008.883445][T11934] usb 46-1: SetAddress Request (2) to port 0 [ 1008.894276][T11934] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1009.075147][T11887] usb 7-1: config 0 has no interfaces? [ 1009.085636][T11887] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1009.109379][T11887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.176192][T11887] usb 7-1: config 0 descriptor?? [ 1010.597948][T11913] usb 7-1: USB disconnect, device number 20 [ 1010.608248][T16640] vhci_hcd: connection reset by peer [ 1010.615173][T14126] vhci_hcd: stop threads [ 1010.620390][T14126] vhci_hcd: release socket [ 1010.625024][T14126] vhci_hcd: disconnect device [ 1010.653806][T16659] orangefs_mount: mount request failed with -4 [ 1010.761657][T16667] lo speed is unknown, defaulting to 1000 [ 1010.770013][T16667] lo speed is unknown, defaulting to 1000 [ 1012.267661][T16692] loop6: detected capacity change from 0 to 1024 [ 1012.278294][T16696] loop9: detected capacity change from 0 to 128 [ 1012.334945][T16701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3888'. [ 1012.419287][T16692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.432934][T16692] ext4 filesystem being mounted at /664/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.629024][T16692] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.3886: inode has both inline data and extents flags [ 1012.704393][T16692] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.3886: inode has both inline data and extents flags [ 1012.991735][ T7282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1013.556571][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1013.556646][ T30] audit: type=1326 audit(1760560053.895:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.3.3891" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x0 [ 1013.592284][T16726] veth0_to_team: entered promiscuous mode [ 1013.985595][T11934] usb 46-1: device descriptor read/8, error -110 [ 1014.030132][ T30] audit: type=1326 audit(1760560054.385:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1014.057375][ T30] audit: type=1326 audit(1760560054.395:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1014.475112][T11934] usb usb46-port1: attempt power cycle [ 1014.756491][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3902'. [ 1015.002654][T16741] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1015.117329][T11934] usb usb46-port1: unable to enumerate USB device [ 1015.285098][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1015.318056][T16746] bond3: (slave vcan0): Releasing backup interface [ 1015.392257][T16746] bond3: Destroying bond [ 1015.415012][T16746] bond3 (unregistering): Released all slaves [ 1015.494351][T16750] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3905'. [ 1015.569990][T16754] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3905'. [ 1015.710380][T16755] netlink: 'syz.5.3907': attribute type 3 has an invalid length. [ 1015.722430][T16755] netlink: 'syz.5.3907': attribute type 3 has an invalid length. [ 1019.476313][T16780] bond0: (slave team0): Releasing backup interface [ 1019.552372][T16780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1019.601875][T16786] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1020.214747][T16796] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1020.226635][T16796] overlayfs: failed to set xattr on upper [ 1020.237197][T16796] overlayfs: ...falling back to redirect_dir=nofollow. [ 1020.249086][T16796] overlayfs: ...falling back to index=off. [ 1020.257632][T16796] overlayfs: ...falling back to uuid=null. [ 1020.275461][T16796] overlayfs: failed to clone lowerpath [ 1020.300524][T16798] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1021.058005][ T30] audit: type=1326 audit(1760560061.375:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.083398][ T30] audit: type=1326 audit(1760560061.375:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.109312][ T30] audit: type=1326 audit(1760560061.375:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.134704][ T30] audit: type=1326 audit(1760560061.375:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.161404][ T30] audit: type=1326 audit(1760560061.375:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.186766][ T30] audit: type=1326 audit(1760560061.375:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.212314][ T30] audit: type=1326 audit(1760560061.375:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.237716][ T30] audit: type=1326 audit(1760560061.375:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.263404][ T30] audit: type=1326 audit(1760560061.375:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.288833][ T30] audit: type=1326 audit(1760560061.385:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1021.586865][T16813] tipc: Enabling of bearer rejected, failed to enable media [ 1021.857008][T16820] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1021.867095][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.899255][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.936416][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.955524][ T1145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.104492][T16837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.254359][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.261242][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.310058][T16840] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 1023.366721][T16837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1023.570117][T16840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.614194][T16843] vlan0: entered allmulticast mode [ 1023.623929][T16843] veth1: entered allmulticast mode [ 1023.638270][T16843] bond3: (slave vlan0): Opening slave failed [ 1023.696706][T16846] netlink: 'syz.5.3937': attribute type 1 has an invalid length. [ 1023.870974][T16846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1023.971930][T16846] netlink: 'syz.5.3937': attribute type 10 has an invalid length. [ 1023.980269][T16846] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3937'. [ 1024.078841][T16847] bond6: (slave veth19): Enslaving as an active interface with a down link [ 1024.124746][T16850] bond6: (slave dummy0): making interface the new active one [ 1024.137703][T16850] dummy0: entered promiscuous mode [ 1024.144510][T16850] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1024.238018][T16846] bond6: (slave dummy0): Releasing active interface [ 1027.107137][T16893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.118277][T16893] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1027.446405][T16899] syzkaller0: entered promiscuous mode [ 1027.452298][T16899] syzkaller0: entered allmulticast mode [ 1027.955050][T16903] sctp: [Deprecated]: syz.6.3958 (pid 16903) Use of int in max_burst socket option deprecated. [ 1027.955050][T16903] Use struct sctp_assoc_value instead [ 1028.016865][T16905] IPVS: Error connecting to the multicast addr [ 1028.133774][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3956'. [ 1029.103692][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1031.542990][T16951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.692247][T16951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1032.433073][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1032.473078][T16955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1032.764935][T16959] netlink: 'syz.1.3978': attribute type 1 has an invalid length. [ 1032.943988][T16963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1032.982512][T16962] bond6: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 1033.047807][T16959] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1033.049213][T16084] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1033.159138][T16963] ip6erspan0: entered promiscuous mode [ 1033.178029][T16963] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1033.192348][T16084] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1033.427007][T16965] macvlan2: entered promiscuous mode [ 1033.435623][T16965] bond5: entered promiscuous mode [ 1033.444035][T16965] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1033.551015][T16965] bond5: left promiscuous mode [ 1034.392958][T16972] bridge9: port 1(vlan3) entered disabled state [ 1034.541923][T16972] dummy0: left promiscuous mode [ 1034.605693][T16972] veth0_to_team: left promiscuous mode [ 1034.619237][T16972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.308947][T16999] netlink: 'syz.6.3991': attribute type 1 has an invalid length. [ 1036.413098][T17004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1036.567858][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1036.567930][ T30] audit: type=1326 audit(1760560076.925:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.606318][ T30] audit: type=1326 audit(1760560076.935:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.633746][ T30] audit: type=1326 audit(1760560076.945:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.660786][ T30] audit: type=1326 audit(1760560076.945:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.686351][T17004] veth9: entered promiscuous mode [ 1036.697612][ T30] audit: type=1326 audit(1760560076.945:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.703822][T17004] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 1036.724566][ T30] audit: type=1326 audit(1760560076.945:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.760356][ T30] audit: type=1326 audit(1760560076.945:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.787389][ T30] audit: type=1326 audit(1760560076.965:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.811000][ T30] audit: type=1326 audit(1760560076.965:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1036.833939][ T30] audit: type=1326 audit(1760560076.965:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1037.810898][T17020] loop6: detected capacity change from 0 to 2048 [ 1037.911384][T17020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.097406][T17033] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1038.124413][T17033] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 192 with error 28 [ 1038.142618][T17033] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1038.142618][T17033] [ 1038.157259][T17033] EXT4-fs (loop6): Total free blocks count 0 [ 1038.167948][T17033] EXT4-fs (loop6): Free/Dirty block details [ 1038.178723][T17033] EXT4-fs (loop6): free_blocks=2415919504 [ 1038.184625][T17033] EXT4-fs (loop6): dirty_blocks=208 [ 1038.194519][T17033] EXT4-fs (loop6): Block reservation details [ 1038.205113][T17033] EXT4-fs (loop6): i_reserved_data_blocks=13 [ 1038.563960][ T1145] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1039.469949][T17043] netlink: 'syz.6.4005': attribute type 1 has an invalid length. [ 1039.614048][T17048] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4005'. [ 1039.626426][T17048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1039.707200][T17047] lo speed is unknown, defaulting to 1000 [ 1039.715733][T17047] lo speed is unknown, defaulting to 1000 [ 1039.965187][T17043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1040.004324][T17043] bond6: (slave geneve2): making interface the new active one [ 1040.023978][T17043] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1040.091283][T16065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1040.150943][T16065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1040.233978][T16065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1040.308850][T16065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1040.591553][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4010'. [ 1040.633919][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4011'. [ 1041.438379][ T51] Bluetooth: hci5: unexpected subevent 0x03 length: 232 > 9 [ 1041.488487][T17074] netlink: 'syz.9.4012': attribute type 83 has an invalid length. [ 1041.811797][T17077] sd 0:0:1:0: PR command failed: 1026 [ 1041.817599][T17077] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1041.827696][T17077] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1041.856470][T17078] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1041.956466][T11897] lo speed is unknown, defaulting to 1000 [ 1042.955433][T17102] loop6: detected capacity change from 0 to 1024 [ 1042.984283][T17104] lo speed is unknown, defaulting to 1000 [ 1042.992743][T17104] lo speed is unknown, defaulting to 1000 [ 1043.104161][T17102] EXT4-fs: Ignoring removed bh option [ 1043.110480][T17102] EXT4-fs: Ignoring removed nobh option [ 1043.116419][T17102] EXT4-fs: Ignoring removed bh option [ 1043.279236][T17102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.270130][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1044.355224][ T7599] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.433054][T17122] bridge12: port 1(veth5) entered blocking state [ 1044.440231][T17122] bridge12: port 1(veth5) entered disabled state [ 1044.447328][T17122] veth5: entered allmulticast mode [ 1044.456309][T17122] veth5: entered promiscuous mode [ 1044.474872][T17126] bridge12: port 2(veth0_to_bond) entered blocking state [ 1044.487781][T17126] bridge12: port 2(veth0_to_bond) entered disabled state [ 1044.500185][T17126] veth0_to_bond: entered allmulticast mode [ 1044.514076][T17126] veth0_to_bond: entered promiscuous mode [ 1044.606773][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1044.821163][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1044.926849][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4032'. [ 1044.960052][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4032'. [ 1044.970043][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4032'. [ 1044.979247][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4032'. [ 1045.026310][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1045.095321][T17128] tipc: Started in network mode [ 1045.101207][T17128] tipc: Node identity 7f000001, cluster identity 4711 [ 1045.110439][T17128] tipc: Enabled bearer , priority 10 [ 1045.154496][T17128] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1045.165208][T17128] tipc: Enabled bearer , priority 10 [ 1045.203133][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1045.478971][ T61] bridge_slave_1: left allmulticast mode [ 1045.484839][ T61] bridge_slave_1: left promiscuous mode [ 1045.491591][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.554188][ T61] bridge_slave_0: left allmulticast mode [ 1045.564655][ T61] bridge_slave_0: left promiscuous mode [ 1045.576360][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.164523][ T61] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1046.237135][T11901] tipc: Node number set to 2130706433 [ 1046.326013][ T61] bond6 (unregistering): (slave geneve2): Releasing active interface [ 1046.384042][T17140] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 1046.654067][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1046.825338][ T61] bond1 (unregistering): Released all slaves [ 1046.847359][ T61] bond2 (unregistering): Released all slaves [ 1046.869075][ T61] bond3 (unregistering): Released all slaves [ 1046.889509][ T61] bond0 (unregistering): Released all slaves [ 1046.911190][ T61] bond4 (unregistering): Released all slaves [ 1046.958397][ T61] bond5 (unregistering): (slave veth9): Releasing backup interface [ 1047.014926][T17150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1047.015127][ T61] bond5 (unregistering): Released all slaves [ 1047.065722][ T61] bond6 (unregistering): Released all slaves [ 1047.087997][T17150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1047.100814][T17150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1047.114592][T17150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1047.126982][T17150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1047.374153][T17149] lo speed is unknown, defaulting to 1000 [ 1047.382530][T17149] lo speed is unknown, defaulting to 1000 [ 1047.816045][ T61] hsr_slave_0: left promiscuous mode [ 1047.860151][ T61] hsr_slave_1: left promiscuous mode [ 1047.868010][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.931519][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.640103][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1048.669641][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1049.157590][T17166] geneve2: left promiscuous mode [ 1049.163752][T17166] geneve2: left allmulticast mode [ 1049.185719][ T51] Bluetooth: hci2: command tx timeout [ 1049.228236][T17166] syzkaller0: left promiscuous mode [ 1049.237339][T17166] syzkaller0: left allmulticast mode [ 1049.327872][T17166] vlan2: left allmulticast mode [ 1049.333762][T17166] bond3: left allmulticast mode [ 1049.386691][T17166] ip6erspan0: left promiscuous mode [ 1049.402049][T11910] lo speed is unknown, defaulting to 1000 [ 1049.408162][T11910] syz2: Port: 1 Link DOWN [ 1049.487782][ T61] IPVS: stop unused estimator thread 0... [ 1050.992008][T17184] lo speed is unknown, defaulting to 1000 [ 1051.004941][T17184] lo speed is unknown, defaulting to 1000 [ 1051.259708][ T51] Bluetooth: hci2: command tx timeout [ 1051.270973][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4050'. [ 1051.694144][T17149] chnl_net:caif_netlink_parms(): no params data found [ 1052.943566][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1052.943643][ T30] audit: type=1800 audit(1760560093.265:1046): pid=17211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4052" name="bus" dev="ramfs" ino=53214 res=0 errno=0 [ 1053.229220][T17149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.236967][T17149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.244876][T17149] bridge_slave_0: entered allmulticast mode [ 1053.254731][T17149] bridge_slave_0: entered promiscuous mode [ 1053.373842][ T51] Bluetooth: hci2: command tx timeout [ 1053.442954][T17149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.450655][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.458430][T17149] bridge_slave_1: entered allmulticast mode [ 1053.468030][T17149] bridge_slave_1: entered promiscuous mode [ 1053.704128][T17149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.747478][T17149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.945138][T17149] team0: Port device team_slave_0 added [ 1053.983213][T17149] team0: Port device team_slave_1 added [ 1054.298353][T17149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.310238][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.344329][T17149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.395617][T17149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.408367][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.444138][T17149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.946696][T17149] hsr_slave_0: entered promiscuous mode [ 1054.957607][T17149] hsr_slave_1: entered promiscuous mode [ 1054.966286][T17149] debugfs: 'hsr0' already exists in 'hsr' [ 1054.972460][T17149] Cannot create hsr debugfs directory [ 1055.098055][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1055.149271][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1055.440014][ T51] Bluetooth: hci2: command tx timeout [ 1056.323582][T17149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1056.334436][T17254] netlink: 'syz.3.4067': attribute type 1 has an invalid length. [ 1056.421059][T17254] bond6: entered promiscuous mode [ 1056.427563][T17254] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1056.437879][T17149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1056.484509][T17149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1056.575897][T17149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1057.365023][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1057.431147][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1057.440554][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1057.449818][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1057.471780][T17265] futex_wake_op: syz.3.4070 tries to shift op by -1; fix this program [ 1057.626118][T17264] tipc: Started in network mode [ 1057.635812][T17264] tipc: Node identity 7f000001, cluster identity 4711 [ 1057.653676][T17264] tipc: Enabled bearer , priority 10 [ 1057.745274][T17149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.754014][T17264] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1057.765396][T17264] tipc: Enabled bearer , priority 10 [ 1057.893198][T17149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.963268][T16078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.970981][T16078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.070451][T16078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.077934][T16078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.773398][T11897] tipc: Node number set to 2130706433 [ 1058.931309][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1058.941738][T17279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.956242][T17279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.289667][T17282] netlink: 'syz.5.4077': attribute type 14 has an invalid length. [ 1060.357766][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4081'. [ 1060.367415][T17295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.414184][T17297] netlink: 'syz.3.4082': attribute type 21 has an invalid length. [ 1060.452683][T17295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.475506][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1060.524139][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1060.534766][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1060.545260][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1060.594480][T17302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.680703][T17301] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1060.687909][T17301] tipc: Enabled bearer , priority 10 [ 1060.772909][T17302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.830402][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1060.872863][T17304] tipc: Bearer : already 2 bearers with priority 10 [ 1060.881546][T17304] tipc: Bearer : trying with adjusted priority [ 1060.890248][T17304] tipc: Enabling of bearer rejected, failed to enable media [ 1060.968930][T17302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.076292][T17149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.100038][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1061.205646][T17302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.629872][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1061.677630][ T61] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.807783][ T61] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.822471][ T61] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.836363][ T61] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.701327][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1063.739619][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1063.816071][T17149] veth0_vlan: entered promiscuous mode [ 1064.027957][T17149] veth1_vlan: entered promiscuous mode [ 1064.530667][T17149] veth0_macvtap: entered promiscuous mode [ 1064.647127][T17149] veth1_macvtap: entered promiscuous mode [ 1064.696702][T17336] netlink: 'syz.5.4093': attribute type 5 has an invalid length. [ 1064.704923][T17336] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4093'. [ 1064.781634][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1064.972026][T17149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.102712][T17149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.460024][T14126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.527954][T14126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.543850][T14126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.558317][T14126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.819765][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1066.861525][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1067.055964][T17362] overlayfs: failed to resolve './file2': -2 [ 1067.245175][T17365] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1067.393436][T17365] bond7: (slave ip6gretap2): making interface the new active one [ 1067.406685][T17365] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1067.899792][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1067.919359][T17374] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4103'. [ 1068.273103][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1068.282417][T17381] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1068.941015][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1069.979590][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1070.477069][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1070.516134][T17399] team0: entered promiscuous mode [ 1070.525961][T17399] team_slave_1: entered promiscuous mode [ 1070.545552][T17399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1070.564634][T17399] bridge0: port 2(macvlan2) entered blocking state [ 1070.576186][T17399] bridge0: port 2(macvlan2) entered disabled state [ 1070.588230][T17399] macvlan2: entered allmulticast mode [ 1070.598380][T17399] team0: entered allmulticast mode [ 1070.604513][T17399] team_slave_1: entered allmulticast mode [ 1070.621628][T17399] macvlan2: entered promiscuous mode [ 1071.021816][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1072.059951][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1072.087055][T16084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.095269][T16084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.515655][T16074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.523948][T16074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.004591][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4118'. [ 1073.103759][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1074.139677][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1074.597620][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4124'. [ 1075.191753][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1075.358171][T17458] netlink: 'syz.9.4128': attribute type 5 has an invalid length. [ 1075.463270][ T30] audit: type=1326 audit(1760560115.745:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17457 comm="syz.9.4128" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x0 [ 1076.219687][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1076.628186][T17473] tipc: Enabling of bearer rejected, failed to enable media [ 1077.271296][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1077.703125][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1077.754871][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1077.863665][T17484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.952711][T17484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.030572][T17484] bond0 (unregistering): Released all slaves [ 1078.183798][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4137'. [ 1078.219142][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1078.227756][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 1078.243883][ T51] Bluetooth: hci2: hardware error 0x00 [ 1078.299882][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1078.813356][ T30] audit: type=1326 audit(1760560119.145:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.5.4139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7fc00000 [ 1078.989402][ T30] audit: type=1326 audit(1760560119.345:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.084902][ T30] audit: type=1326 audit(1760560119.385:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.108665][ T30] audit: type=1326 audit(1760560119.385:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.131263][ T30] audit: type=1326 audit(1760560119.385:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.155301][ T30] audit: type=1326 audit(1760560119.385:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.178342][ T30] audit: type=1326 audit(1760560119.395:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.201723][ T30] audit: type=1326 audit(1760560119.415:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.224302][ T30] audit: type=1326 audit(1760560119.415:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.4.4142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1079.341861][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1079.678831][T16074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.405158][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1080.497762][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1081.245276][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1081.245345][ T30] audit: type=1326 audit(1760560121.605:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.370203][ T30] audit: type=1326 audit(1760560121.635:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.394365][ T30] audit: type=1326 audit(1760560121.635:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.417445][ T30] audit: type=1326 audit(1760560121.685:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.440275][ T30] audit: type=1326 audit(1760560121.685:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.463047][ T30] audit: type=1326 audit(1760560121.685:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.485458][ T30] audit: type=1326 audit(1760560121.685:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.508554][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1081.517982][ T30] audit: type=1326 audit(1760560121.685:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.9.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1081.764596][T17529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4151'. [ 1081.815039][T17529] sch_tbf: burst 88 is lower than device veth0_to_bridge mtu (1514) ! [ 1082.025781][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4152'. [ 1082.066408][T17531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4152'. [ 1082.076573][T17531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4152'. [ 1082.238479][T17536] netlink: 'syz.1.4154': attribute type 1 has an invalid length. [ 1082.402964][T17538] team0: Port device vxlan0 added [ 1082.415206][T16081] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.468929][T16081] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.532681][T17536] gretap1: entered promiscuous mode [ 1082.539850][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1082.560554][T17536] bond8: (slave gretap1): making interface the new active one [ 1082.572194][T17536] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1082.594412][T16081] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.608279][T16081] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1083.579928][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1083.837067][T17563] netlink: 43 bytes leftover after parsing attributes in process `syz.9.4161'. [ 1083.871956][T17561] netlink: 'syz.1.4162': attribute type 4 has an invalid length. [ 1083.896678][T17563] tipc: Bearer : already 2 bearers with priority 10 [ 1083.905721][T17563] tipc: Bearer : trying with adjusted priority [ 1083.919247][T17563] tipc: Enabled bearer , priority 9 [ 1083.925844][T17565] : renamed from vlan0 (while UP) [ 1083.960517][T17565] tipc: Disabling bearer [ 1084.502363][T17570] netlink: 'syz.9.4164': attribute type 1 has an invalid length. [ 1084.576007][T17570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1084.580616][T17568] overlayfs: failed to resolve './file2': -2 [ 1084.637062][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.638690][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1084.648305][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.693696][T17570] vlan0: entered allmulticast mode [ 1084.702933][T17570] bond3: entered allmulticast mode [ 1084.807174][T17576] bond3: (slave gretap2): making interface the new active one [ 1084.815172][T17576] gretap2: entered allmulticast mode [ 1084.826689][T17576] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1085.426421][T17586] team0: Port device vxlan0 added [ 1085.492499][T16074] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.570450][T16074] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.624546][T16074] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.659725][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1085.724040][T16074] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.699785][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1087.607027][T17620] tipc: Enabling of bearer rejected, failed to enable media [ 1087.739797][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1088.559875][T17632] bridge0: entered promiscuous mode [ 1088.572633][T17632] bridge0: port 3(macsec1) entered blocking state [ 1088.579792][T17632] bridge0: port 3(macsec1) entered disabled state [ 1088.586970][T17632] macsec1: entered allmulticast mode [ 1088.592738][T17632] bridge0: entered allmulticast mode [ 1088.761345][T17632] macsec1: left allmulticast mode [ 1088.766585][T17632] bridge0: left allmulticast mode [ 1088.779955][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1088.804605][T17632] bridge0: left promiscuous mode [ 1089.590376][T17650] vlan2: entered promiscuous mode [ 1089.595718][T17650] veth0_virt_wifi: entered promiscuous mode [ 1089.602934][T17650] vlan2: entered allmulticast mode [ 1089.608234][T17650] veth0_virt_wifi: entered allmulticast mode [ 1089.820275][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1090.483029][T17656] lo speed is unknown, defaulting to 1000 [ 1090.491781][T17656] lo speed is unknown, defaulting to 1000 [ 1090.859728][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1091.597677][T17668] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1091.816793][T17670] vlan3: entered promiscuous mode [ 1091.899600][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1092.065725][T17672] netlink: 'syz.4.4200': attribute type 4 has an invalid length. [ 1092.940428][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1093.979913][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1094.782205][T17711] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 1094.978157][T17715] syz_tun: entered allmulticast mode [ 1095.019801][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1095.057179][T17715] syz_tun: left allmulticast mode [ 1096.059640][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1096.126889][T17730] tipc: Enabling of bearer rejected, failed to enable media [ 1096.148237][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4219'. [ 1096.170247][T17732] netlink: 'syz.5.4220': attribute type 1 has an invalid length. [ 1096.266949][T17732] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1096.565474][T17735] veth21: entered promiscuous mode [ 1096.586215][T17735] bond7: (slave veth21): Enslaving as an active interface with a down link [ 1096.765036][T17736] veth23: entered promiscuous mode [ 1096.785648][T17736] bond7: (slave veth23): Enslaving as an active interface with a down link [ 1096.823270][T17732] bond7: entered allmulticast mode [ 1097.099845][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1097.768031][T17761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4225'. [ 1097.804055][T17760] tipc: Enabling of bearer rejected, failed to enable media [ 1097.920047][T17761] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1098.139899][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1098.411658][T17768] tipc: Started in network mode [ 1098.416883][T17768] tipc: Node identity feb0044d4051, cluster identity 4711 [ 1098.425624][T17768] tipc: Enabled bearer , priority 0 [ 1098.438387][T17768] syzkaller0: entered promiscuous mode [ 1098.444987][T17768] syzkaller0: entered allmulticast mode [ 1098.479033][T17768] tipc: Resetting bearer [ 1098.494922][T17767] tipc: Resetting bearer [ 1098.538154][T17767] tipc: Disabling bearer [ 1099.179631][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1099.631614][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4234'. [ 1100.219777][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1100.839885][T17798] fuse: root generation should be zero [ 1100.934485][T17799] bond6: left promiscuous mode [ 1101.259919][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1102.053780][T11904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1102.254671][T11904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.270031][T11904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1102.287866][T11904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1102.299868][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1102.311368][T11904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.359747][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4245'. [ 1102.395447][T11904] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1102.409646][T11904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.417859][T11904] usb 5-1: Product: syz [ 1102.428727][T11904] usb 5-1: Manufacturer: syz [ 1102.438054][T11904] usb 5-1: SerialNumber: syz [ 1102.493880][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4245'. [ 1102.495515][T11904] usb 5-1: config 0 descriptor?? [ 1102.543545][T11904] adutux 5-1:0.0: interrupt endpoints not found [ 1103.339850][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1103.706199][ T51] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1104.379832][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1105.016376][T11904] usb 5-1: USB disconnect, device number 2 [ 1105.285392][T17849] tipc: Enabling of bearer rejected, failed to enable media [ 1105.321837][T17846] bridge5: port 1(macvlan3) entered blocking state [ 1105.328982][T17846] bridge5: port 1(macvlan3) entered disabled state [ 1105.336348][T17846] macvlan3: entered allmulticast mode [ 1105.357240][T17846] macvlan3: entered promiscuous mode [ 1105.419631][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1105.434807][T17853] loop4: detected capacity change from 0 to 512 [ 1105.476528][T17853] EXT4-fs: Ignoring removed nobh option [ 1105.580896][T17853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.594325][T17853] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.328009][T17149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.387412][T17867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.395027][T17867] IPv6: NLM_F_CREATE should be set when creating new route [ 1106.459575][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1107.334513][T17883] tipc: Enabling of bearer rejected, already enabled [ 1107.384211][ T51] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 1107.499673][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1107.517765][T17886] veth0_to_team: entered promiscuous mode [ 1107.743193][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1107.756182][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 1107.764482][ T51] Bluetooth: hci1: hardware error 0x00 [ 1108.539966][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1109.579705][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1109.826673][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1110.486456][ T30] audit: type=1326 audit(1760560151.834:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17916 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1110.509557][ T30] audit: type=1326 audit(1760560151.834:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17916 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1110.532767][ T30] audit: type=1326 audit(1760560151.844:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17916 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1110.555321][ T30] audit: type=1326 audit(1760560151.844:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17916 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1110.556708][T17921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4280'. [ 1110.578362][ T30] audit: type=1326 audit(1760560151.844:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17916 comm="syz.9.4277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1110.620041][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1110.636421][T17921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4280'. [ 1110.661538][T17921] team0: entered promiscuous mode [ 1110.666773][T17921] team_slave_0: entered promiscuous mode [ 1110.678015][T17921] team_slave_1: entered promiscuous mode [ 1110.694041][T17921] vxlan0: entered promiscuous mode [ 1110.701992][ T30] audit: type=1326 audit(1760560151.984:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.5.4281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1110.702225][ T30] audit: type=1326 audit(1760560151.984:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.5.4281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1110.702528][ T30] audit: type=1326 audit(1760560152.014:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.5.4281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1110.702739][ T30] audit: type=1326 audit(1760560152.014:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.5.4281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1110.703072][ T30] audit: type=1326 audit(1760560152.014:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.5.4281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1110.854026][T17921] ip6gretap0: entered promiscuous mode [ 1111.404223][T17934] netlink: 'syz.9.4282': attribute type 1 has an invalid length. [ 1111.424666][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1111.438030][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 1111.450552][ T51] Bluetooth: hci0: hardware error 0x00 [ 1111.584179][T17937] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1111.603956][T17937] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1111.659472][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1111.703955][T17939] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 1111.972010][T17941] tipc: Enabled bearer , priority 0 [ 1112.020624][T17941] syzkaller0: entered promiscuous mode [ 1112.026379][T17941] syzkaller0: entered allmulticast mode [ 1112.135283][T17941] tipc: Resetting bearer [ 1112.195893][T17940] tipc: Resetting bearer [ 1112.238234][T17940] tipc: Disabling bearer [ 1112.699767][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1112.963395][T17955] vlan4: entered promiscuous mode [ 1112.973176][T17955] bond0: entered promiscuous mode [ 1113.066711][T17957] loop4: detected capacity change from 0 to 1024 [ 1113.581838][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1113.739693][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1113.925440][T17971] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4295'. [ 1114.789848][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1114.968100][T17984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4302'. [ 1115.214015][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1115.557247][T17992] netlink: 'syz.1.4305': attribute type 18 has an invalid length. [ 1115.820243][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1115.953806][T17989] macvlan2: left allmulticast mode [ 1115.964425][T17989] macvlan2: left promiscuous mode [ 1115.971407][T17989] bridge0: port 2(macvlan2) entered disabled state [ 1116.029109][T17989] bridge_slave_0: left promiscuous mode [ 1116.035788][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.281875][T18002] tipc: Enabling of bearer rejected, failed to enable media [ 1116.859767][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1117.276207][T18015] tipc: Enabling of bearer rejected, failed to enable media [ 1117.830556][T18019] lo speed is unknown, defaulting to 1000 [ 1117.839450][T18019] lo speed is unknown, defaulting to 1000 [ 1117.902889][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1118.503584][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4317'. [ 1118.939845][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1119.107670][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4318'. [ 1119.737468][T18048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4320'. [ 1119.979727][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1120.136424][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4320'. [ 1121.019750][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1121.034483][T18062] netlink: 'syz.5.4325': attribute type 1 has an invalid length. [ 1121.184070][T18062] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1121.335274][T18066] veth25: entered promiscuous mode [ 1121.376478][T18066] bond8: (slave veth25): Enslaving as an active interface with a down link [ 1121.401141][T18068] bond8: entered allmulticast mode [ 1121.528902][T11901] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1121.713055][T11901] usb 5-1: Using ep0 maxpacket: 32 [ 1121.747186][T11901] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1121.756241][T11901] usb 5-1: config 0 has no interface number 0 [ 1121.762897][T11901] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1121.844643][T11901] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1121.856567][T11901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.865042][T11901] usb 5-1: Product: syz [ 1121.869582][T11901] usb 5-1: Manufacturer: syz [ 1121.874365][T11901] usb 5-1: SerialNumber: syz [ 1121.981302][T11901] usb 5-1: config 0 descriptor?? [ 1122.059880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1122.577306][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1122.577379][ T30] audit: type=1326 audit(1760560163.934:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.606840][ T30] audit: type=1326 audit(1760560163.934:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.630614][ T30] audit: type=1326 audit(1760560163.934:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.653747][ T30] audit: type=1326 audit(1760560163.934:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.676731][ T30] audit: type=1326 audit(1760560163.934:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.700060][ T30] audit: type=1326 audit(1760560163.944:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.723125][ T30] audit: type=1326 audit(1760560163.944:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.746124][ T30] audit: type=1326 audit(1760560163.944:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1122.975904][T18090] fuse: Unknown parameter '.' [ 1123.099883][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1124.139666][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1125.179753][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1125.975912][T11901] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1125.984053][T11901] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1125.992436][T11901] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1126.000599][T11901] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1126.053280][T18108] netlink: 'syz.9.4340': attribute type 1 has an invalid length. [ 1126.070727][T11901] usb 5-1: USB disconnect, device number 3 [ 1126.143719][T18108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1126.222136][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1126.329543][T18111] veth7: entered promiscuous mode [ 1126.350812][T18111] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1126.373528][T18113] bond5: entered allmulticast mode [ 1126.384932][T18112] tipc: Enabling of bearer rejected, failed to enable media [ 1127.019015][T18125] xt_NFQUEUE: number of queues (65349) out of range (got 65604) [ 1127.259839][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1127.746420][T18134] delete_channel: no stack [ 1127.853322][T18139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4348'. [ 1128.299973][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1128.813645][T18151] netlink: 'syz.4.4354': attribute type 4 has an invalid length. [ 1129.230438][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1129.313789][ T30] audit: type=1326 audit(1760560170.664:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.339963][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1129.354249][ T30] audit: type=1326 audit(1760560170.664:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.404839][ T30] audit: type=1326 audit(1760560170.744:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.429630][ T30] audit: type=1326 audit(1760560170.744:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.457027][ T30] audit: type=1326 audit(1760560170.744:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.486123][ T30] audit: type=1326 audit(1760560170.744:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.513939][ T30] audit: type=1326 audit(1760560170.744:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.540936][ T30] audit: type=1326 audit(1760560170.754:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.567895][ T30] audit: type=1326 audit(1760560170.754:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1129.607953][ T30] audit: type=1326 audit(1760560170.754:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.4.4358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1130.255818][T18170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1130.379759][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1131.419711][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1132.459822][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1133.499949][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1134.368389][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1134.381623][ T30] audit: type=1326 audit(1760560175.704:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.410525][ T30] audit: type=1326 audit(1760560175.714:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.439573][ T30] audit: type=1326 audit(1760560175.774:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.468752][ T30] audit: type=1326 audit(1760560175.774:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.499823][ T30] audit: type=1326 audit(1760560175.774:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.529159][ T30] audit: type=1326 audit(1760560175.774:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.558114][ T30] audit: type=1326 audit(1760560175.774:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.559979][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1134.825770][T18214] 9pnet: Could not find request transport: d [ 1134.933441][ T30] audit: type=1326 audit(1760560176.224:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1134.960776][ T30] audit: type=1326 audit(1760560176.224:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.4.4377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1135.579786][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1135.877430][T18233] lo: entered allmulticast mode [ 1135.915890][T18232] lo: left allmulticast mode [ 1136.374811][ T30] audit: type=1326 audit(1760560177.734:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.5.4384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1136.614960][T18244] tipc: Enabled bearer , priority 0 [ 1136.623167][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1136.745191][T18239] delete_channel: no stack [ 1137.585929][T18256] netlink: 'syz.1.4392': attribute type 10 has an invalid length. [ 1137.659790][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1138.699755][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1139.739696][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1140.779786][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1140.811560][T18275] tipc: Enabling of bearer rejected, failed to enable media [ 1141.819744][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1142.366696][T18292] input: syz1 as /devices/virtual/input/input20 [ 1142.584319][T18295] team0: Mode changed to "loadbalance" [ 1142.666621][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4405'. [ 1142.859824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1143.205032][T18304] netlink: 'syz.4.4407': attribute type 1 has an invalid length. [ 1143.277917][T18304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.386993][T18306] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1143.899573][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1143.974037][T18304] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1144.466505][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'. [ 1144.939811][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1145.167531][T18316] netlink: 'syz.9.4412': attribute type 4 has an invalid length. [ 1145.210517][T11901] lo speed is unknown, defaulting to 1000 [ 1145.216725][T11901] sy0: Port: 1 Link DOWN [ 1145.714314][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4414'. [ 1145.979730][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1146.085887][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.097426][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.156066][T18329] fuse: Bad value for 'fd' [ 1147.019787][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1147.320053][T18340] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1147.444030][T18340] team0: No ports can be present during mode change [ 1147.515930][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4420'. [ 1147.577297][T18340] team0 (unregistering): left promiscuous mode [ 1147.593137][T18340] team_slave_0: left promiscuous mode [ 1147.602970][T18340] team_slave_1: left promiscuous mode [ 1147.609952][T18340] vxlan0: left promiscuous mode [ 1147.631968][T18340] team0 (unregistering): Port device team_slave_0 removed [ 1147.658298][T18340] team0 (unregistering): Port device team_slave_1 removed [ 1147.758415][T18340] team0 (unregistering): Port device vxlan0 removed [ 1147.809992][ T1145] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.881728][ T1145] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.917095][ T1145] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.927473][ T1145] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.059679][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1149.099642][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1149.835651][T18367] loop4: detected capacity change from 0 to 8 [ 1149.934054][T18367] Major/Minor mismatch, trying to mount newer 5.0 filesystem [ 1149.946592][T18367] Please update your kernel [ 1150.139902][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1150.414160][T18370] overlayfs: failed to resolve './file1': -2 [ 1150.523590][T11904] IPVS: starting estimator thread 0... [ 1150.623438][T18371] IPVS: using max 240 ests per chain, 12000 per kthread [ 1151.213695][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1151.377454][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1151.377533][ T30] audit: type=1326 audit(1760560192.664:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18374 comm="syz.9.4431" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x0 [ 1152.048812][T18384] loop4: detected capacity change from 0 to 764 [ 1152.214032][T18384] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1152.229748][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1153.259670][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1154.299826][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1154.839565][T11901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1155.095743][T11901] usb 5-1: Using ep0 maxpacket: 8 [ 1155.339626][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1155.422752][T18353] Set syz1 is full, maxelem 65536 reached [ 1155.589217][T11901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1155.597296][T11901] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 1155.812848][T11901] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1155.821433][T11901] usb 5-1: can't read configurations, error -71 [ 1156.379648][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1157.419852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1158.049482][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1158.059599][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1158.459799][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1158.590315][T18435] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1158.717495][T18439] netlink: 'syz.1.4450': attribute type 10 has an invalid length. [ 1159.500904][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1160.116850][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1160.539864][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1160.591428][T18459] 9pnet_fd: Insufficient options for proto=fd [ 1161.236281][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4459'. [ 1161.580119][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1161.747465][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1161.756756][T18463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1161.783981][T18463] macsec1: entered allmulticast mode [ 1161.789656][T18463] macvlan0: entered allmulticast mode [ 1162.619646][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1163.659764][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1163.902075][T18502] fuse: Bad value for 'user_id' [ 1163.907286][T18502] fuse: Bad value for 'user_id' [ 1164.699806][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1165.286955][T18512] vlan4: entered promiscuous mode [ 1165.296647][T18512] bond0: entered promiscuous mode [ 1165.370003][T18519] futex_wake_op: syz.1.4479 tries to shift op by -1; fix this program [ 1165.378594][T18517] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1165.739643][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1166.739800][T18540] bond6: option arp_interval: invalid value (18446744073709551615) [ 1166.748729][T18540] bond6: option arp_interval: allowed values 0 - 2147483647 [ 1166.779823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1166.816870][T18540] bond6 (unregistering): Released all slaves [ 1166.884907][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4483'. [ 1167.295381][T18548] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4484'. [ 1167.819897][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1167.926202][T18554] fuse: Bad value for 'group_id' [ 1167.931906][T18554] fuse: Bad value for 'group_id' [ 1168.094668][T18558] lo speed is unknown, defaulting to 1000 [ 1168.334663][T18558] lo speed is unknown, defaulting to 1000 [ 1168.859767][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1169.899950][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1170.644518][T18584] lo speed is unknown, defaulting to 1000 [ 1170.653168][T18584] lo speed is unknown, defaulting to 1000 [ 1170.939824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1171.432424][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4497'. [ 1171.485294][T18593] batadv0: entered promiscuous mode [ 1171.491634][T18593] macvtap1: entered promiscuous mode [ 1171.492760][T18589] loop4: detected capacity change from 0 to 256 [ 1171.498939][T18593] macvtap1: entered allmulticast mode [ 1171.509012][T18593] batadv0: entered allmulticast mode [ 1171.519747][T18593] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1171.526996][T18589] vfat: Bad value for 'nfs' [ 1171.826281][T18593] batadv0: left allmulticast mode [ 1171.837212][T18593] batadv0: left promiscuous mode [ 1171.979994][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1172.768208][T18600] netlink: 'syz.9.4502': attribute type 1 has an invalid length. [ 1172.855264][T18600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1173.019712][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1173.186704][T18600] veth9: entered promiscuous mode [ 1173.276694][T18602] veth11: entered promiscuous mode [ 1173.311337][T18602] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1173.346734][T18604] bond7: entered allmulticast mode [ 1174.060038][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1174.835252][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1175.099909][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1175.811408][T18619] cgroup: Unknown subsys name 'cpuset' [ 1176.139874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1177.179561][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1177.682299][T18634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1178.219813][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1178.523497][ T30] audit: type=1326 audit(1760560219.864:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.594380][ T30] audit: type=1326 audit(1760560219.914:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.621961][ T30] audit: type=1326 audit(1760560219.914:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.649025][ T30] audit: type=1326 audit(1760560219.914:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.675845][ T30] audit: type=1326 audit(1760560219.914:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.702910][ T30] audit: type=1326 audit(1760560219.914:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.729901][ T30] audit: type=1326 audit(1760560219.914:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.756926][ T30] audit: type=1326 audit(1760560219.924:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.784120][ T30] audit: type=1326 audit(1760560219.934:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1178.811044][ T30] audit: type=1326 audit(1760560219.934:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.4514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1179.259721][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1180.014814][T18663] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4520'. [ 1180.299656][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1181.339562][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1182.047831][T18689] lo speed is unknown, defaulting to 1000 [ 1182.054272][T18689] lo speed is unknown, defaulting to 1000 [ 1182.061522][T18689] lo speed is unknown, defaulting to 1000 [ 1182.115179][T18689] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1182.165265][T18689] lo speed is unknown, defaulting to 1000 [ 1182.174001][T18689] lo speed is unknown, defaulting to 1000 [ 1182.183122][T18689] lo speed is unknown, defaulting to 1000 [ 1182.191736][T18689] lo speed is unknown, defaulting to 1000 [ 1182.200456][T18689] lo speed is unknown, defaulting to 1000 [ 1182.379802][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1182.840192][T18701] siw: device registration error -23 [ 1183.301564][T18713] netlink: 'syz.3.4537': attribute type 10 has an invalid length. [ 1183.422701][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1183.963983][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1183.964057][ T30] audit: type=1326 audit(1760560225.324:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.002756][ T30] audit: type=1326 audit(1760560225.324:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.029961][ T30] audit: type=1326 audit(1760560225.324:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.058387][ T30] audit: type=1326 audit(1760560225.334:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.086319][ T30] audit: type=1326 audit(1760560225.334:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.097005][T18723] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4550'. [ 1184.113632][ T30] audit: type=1326 audit(1760560225.344:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.143568][ T30] audit: type=1326 audit(1760560225.344:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.169037][ T30] audit: type=1326 audit(1760560225.374:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.194292][ T30] audit: type=1326 audit(1760560225.374:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.219988][ T30] audit: type=1326 audit(1760560225.374:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.4550" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1184.262477][ C1] ===================================================== [ 1184.269750][ C1] BUG: KMSAN: uninit-value in can_receive+0x12c/0x4a0 [ 1184.276790][ C1] can_receive+0x12c/0x4a0 [ 1184.281446][ C1] can_rcv+0x1ff/0x3b0 [ 1184.285637][ C1] __netif_receive_skb+0x477/0xac0 [ 1184.291006][ C1] process_backlog+0x485/0xa00 [ 1184.295944][ C1] __napi_poll+0xdd/0x8a0 [ 1184.300521][ C1] net_rx_action+0xbc8/0x1c30 [ 1184.305357][ C1] handle_softirqs+0x169/0x6e0 [ 1184.310403][ C1] __do_softirq+0x14/0x1b [ 1184.314981][ C1] do_softirq+0x99/0x100 [ 1184.319497][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1184.324696][ C1] __dev_queue_xmit+0x2df9/0x5e60 [ 1184.329946][ C1] can_send+0xffa/0x1390 [ 1184.334305][ C1] isotp_sendmsg+0x1bd3/0x24e0 [ 1184.339320][ C1] __sock_sendmsg+0x333/0x3d0 [ 1184.344169][ C1] __sys_sendto+0x593/0x720 [ 1184.348906][ C1] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 1184.355053][ C1] ia32_sys_call+0x2942/0x4310 [ 1184.360111][ C1] __do_fast_syscall_32+0xb0/0x150 [ 1184.365419][ C1] do_fast_syscall_32+0x38/0x80 [ 1184.370561][ C1] do_SYSENTER_32+0x1f/0x30 [ 1184.375245][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1184.381858][ C1] [ 1184.384259][ C1] Uninit was created at: [ 1184.388872][ C1] __alloc_frozen_pages_noprof+0x689/0xf00 [ 1184.394870][ C1] alloc_pages_bulk_noprof+0x157b/0x19c0 [ 1184.400802][ C1] __page_pool_alloc_netmems_slow+0x2e5/0xb40 [ 1184.407075][ C1] page_pool_alloc_frag_netmem+0x62a/0xcf0 [ 1184.413206][ C1] skb_pp_cow_data+0x3e3/0x2640 [ 1184.418200][ C1] skb_cow_data_for_xdp+0x79/0xd0 [ 1184.423470][ C1] do_xdp_generic+0x7f5/0x1690 [ 1184.428573][ C1] __netif_receive_skb_core+0x2bc2/0x7150 [ 1184.434467][ C1] __netif_receive_skb+0xcc/0xac0 [ 1184.439757][ C1] process_backlog+0x485/0xa00 [ 1184.444692][ C1] __napi_poll+0xdd/0x8a0 [ 1184.449270][ C1] net_rx_action+0xbc8/0x1c30 [ 1184.454106][ C1] handle_softirqs+0x169/0x6e0 [ 1184.459172][ C1] __do_softirq+0x14/0x1b [ 1184.463660][ C1] [ 1184.466075][ C1] CPU: 1 UID: 0 PID: 18725 Comm: syz.4.4541 Tainted: G W syzkaller #0 PREEMPT(none) [ 1184.477294][ C1] Tainted: [W]=WARN [ 1184.481252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1184.491515][ C1] ===================================================== [ 1184.498817][ C1] Disabling lock debugging due to kernel taint [ 1184.505080][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1184.511741][ C1] CPU: 1 UID: 0 PID: 18725 Comm: syz.4.4541 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1184.522876][ C1] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1184.527987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1184.538171][ C1] Call Trace: [ 1184.541542][ C1] [ 1184.544470][ C1] __dump_stack+0x26/0x30 [ 1184.548970][ C1] dump_stack_lvl+0x53/0x270 [ 1184.553776][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1184.559852][ C1] dump_stack+0x1e/0x25 [ 1184.564183][ C1] vpanic+0x435/0xd30 [ 1184.568341][ C1] panic+0x15d/0x160 [ 1184.572445][ C1] kmsan_report+0x31c/0x320 [ 1184.577554][ C1] ? __msan_warning+0x1b/0x30 [ 1184.582375][ C1] ? can_receive+0x12c/0x4a0 [ 1184.587154][ C1] ? can_rcv+0x1ff/0x3b0 [ 1184.591534][ C1] ? __netif_receive_skb+0x477/0xac0 [ 1184.597006][ C1] ? process_backlog+0x485/0xa00 [ 1184.602154][ C1] ? __napi_poll+0xdd/0x8a0 [ 1184.606841][ C1] ? net_rx_action+0xbc8/0x1c30 [ 1184.611885][ C1] ? handle_softirqs+0x169/0x6e0 [ 1184.617028][ C1] ? __do_softirq+0x14/0x1b [ 1184.621802][ C1] ? do_softirq+0x99/0x100 [ 1184.626392][ C1] ? __local_bh_enable_ip+0xa1/0xb0 [ 1184.631769][ C1] ? __dev_queue_xmit+0x2df9/0x5e60 [ 1184.637124][ C1] ? can_send+0xffa/0x1390 [ 1184.641669][ C1] ? isotp_sendmsg+0x1bd3/0x24e0 [ 1184.646856][ C1] ? __sock_sendmsg+0x333/0x3d0 [ 1184.651966][ C1] ? __sys_sendto+0x593/0x720 [ 1184.656761][ C1] ? __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 1184.663085][ C1] ? ia32_sys_call+0x2942/0x4310 [ 1184.668228][ C1] ? __do_fast_syscall_32+0xb0/0x150 [ 1184.673806][ C1] ? do_fast_syscall_32+0x38/0x80 [ 1184.679006][ C1] ? do_SYSENTER_32+0x1f/0x30 [ 1184.683843][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1184.690501][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.695748][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1184.701690][ C1] ? __netif_receive_skb_core+0x69da/0x7150 [ 1184.707735][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1184.713685][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.718939][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1184.724882][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.730119][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1184.736721][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.741971][ C1] __msan_warning+0x1b/0x30 [ 1184.746582][ C1] can_receive+0x12c/0x4a0 [ 1184.751126][ C1] can_rcv+0x1ff/0x3b0 [ 1184.755311][ C1] ? __pfx_can_rcv+0x10/0x10 [ 1184.760014][ C1] __netif_receive_skb+0x477/0xac0 [ 1184.765310][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.770582][ C1] process_backlog+0x485/0xa00 [ 1184.775523][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1184.780951][ C1] __napi_poll+0xdd/0x8a0 [ 1184.785422][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.790662][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1184.796607][ C1] net_rx_action+0xbc8/0x1c30 [ 1184.801432][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1184.807379][ C1] ? sched_clock_cpu+0x59/0xa80 [ 1184.812347][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.817640][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1184.822903][ C1] handle_softirqs+0x169/0x6e0 [ 1184.827876][ C1] __do_softirq+0x14/0x1b [ 1184.832346][ C1] do_softirq+0x99/0x100 [ 1184.836739][ C1] [ 1184.839819][ C1] [ 1184.842814][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1184.847996][ C1] __dev_queue_xmit+0x2df9/0x5e60 [ 1184.853150][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.858395][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1184.864904][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1184.870157][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1184.876105][ C1] ? __dev_queue_xmit+0x30c/0x5e60 [ 1184.881383][ C1] can_send+0xffa/0x1390 [ 1184.885757][ C1] isotp_sendmsg+0x1bd3/0x24e0 [ 1184.890701][ C1] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1184.895943][ C1] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1184.901189][ C1] __sock_sendmsg+0x333/0x3d0 [ 1184.906029][ C1] __sys_sendto+0x593/0x720 [ 1184.910667][ C1] ? stack_depot_save_flags+0x35/0x7b0 [ 1184.916310][ C1] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 1184.922474][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1184.928991][ C1] ia32_sys_call+0x2942/0x4310 [ 1184.933924][ C1] __do_fast_syscall_32+0xb0/0x150 [ 1184.939204][ C1] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 1184.945092][ C1] do_fast_syscall_32+0x38/0x80 [ 1184.950109][ C1] do_SYSENTER_32+0x1f/0x30 [ 1184.954772][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1184.961251][ C1] RIP: 0023:0xf7fb7539 [ 1184.965413][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1184.985148][ C1] RSP: 002b:00000000f54a5430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1184.993692][ C1] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54a5444 [ 1185.001752][ C1] RDX: 0000000000000000 RSI: 00000000f54a5560 RDI: 00000000f7445ff4 [ 1185.009814][ C1] RBP: 00000000f54a5560 R08: 0000000000000000 R09: 0000000000000000 [ 1185.017878][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1185.025932][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1185.034021][ C1] [ 1185.037394][ C1] Kernel Offset: disabled [ 1185.041753][ C1] Rebooting in 86400 seconds..