last executing test programs: 35m15.456333445s ago: executing program 32 (id=47): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e24, @multicast2}, 0x10) 34m9.047316217s ago: executing program 33 (id=143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 32m40.19737946s ago: executing program 34 (id=369): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="0f7e998cc1ac58617ce1fbb6376c77c41a1a96b4da7f665ab0ba10e31828f922d42984ff743aac0de669573cb8490d9622b55de7abb7777c2c5473a9b854b8f54eb00eaf004cb9065dc006f418a81d78f32c142c339a6153e387b37cc066c279ec19836cafe0082c2c47d464ed86915b009ccddd71b99513c218ea2cdf784e4dd085c94749052a82fa29778594c24d47b723ecfba4c79e7a22f04cade3acdf", @ANYRES32, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0xfd, 0x1ee, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000020000000b"], 0x612000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_freeze_timeout', 0x101, 0x0) write$binfmt_aout(r1, &(0x7f0000002280)={{0x107, 0x2, 0xff, 0x80000001, 0x32, 0xfff, 0x15f}}, 0x20) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800410, &(0x7f0000000000)=ANY=[], 0x1, 0x692, &(0x7f0000001140)="$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") r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getpid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x4, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 31m3.546670452s ago: executing program 35 (id=642): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 30m23.367340015s ago: executing program 36 (id=744): ioperm(0x9, 0x3, 0x163f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xffffffffffffffff) 29m29.288541969s ago: executing program 37 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 29m21.927393457s ago: executing program 38 (id=1018): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0afeff0000000073014e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 29m18.49459916s ago: executing program 39 (id=1029): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 29m15.197456386s ago: executing program 40 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 29m10.018565085s ago: executing program 41 (id=1044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x803, r2}) r3 = eventfd2(0x30f1, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2, 0x1}) 28m38.164570942s ago: executing program 42 (id=1080): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 27m41.581675547s ago: executing program 43 (id=1280): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) 27m37.537642833s ago: executing program 44 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000003000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 27m34.07059197s ago: executing program 45 (id=1305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001080)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 27m30.203145582s ago: executing program 46 (id=1316): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x832b, 0x0) sendto$inet6(r0, &(0x7f0000000480)="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", 0xcbd, 0x4, &(0x7f0000001480)={0xa, 0x4e20, 0x4, @mcast1, 0x5}, 0x1c) 20m28.758730309s ago: executing program 8 (id=3328): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) 20m27.8835667s ago: executing program 8 (id=3332): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x5, 0x4) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c", 0x6f, 0x4008044, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20m27.187835042s ago: executing program 8 (id=3334): lseek(0xffffffffffffffff, 0x10001, 0x0) 20m26.588947648s ago: executing program 8 (id=3339): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x800) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 20m25.836789216s ago: executing program 8 (id=3341): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x7, 0x4) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x18848, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 20m25.213313006s ago: executing program 8 (id=3345): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x308}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc804) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@mcast1, 0x10, r3}) getpid() r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000e000/0xa000)=nil, 0x3000, 0x3}) mount(0x0, 0x0, 0x0, 0x1111001, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 20m9.880730436s ago: executing program 47 (id=3345): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x308}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc804) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@mcast1, 0x10, r3}) getpid() r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000e000/0xa000)=nil, 0x3000, 0x3}) mount(0x0, 0x0, 0x0, 0x1111001, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 17m32.239536157s ago: executing program 0 (id=4093): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000006480)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5558, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 17m27.249165451s ago: executing program 0 (id=4107): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x40}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) 17m26.605342018s ago: executing program 0 (id=4110): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xaa9, 0x0, 0x0, 0x6, 0x8, 0x44, 0x4d, 0x40}) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000140)={0x3, 0x0, 0x9}) 17m25.893062183s ago: executing program 0 (id=4113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 17m24.201753078s ago: executing program 0 (id=4117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 17m23.29637043s ago: executing program 0 (id=4120): socket(0x1000000000000010, 0x80802, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJPaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep25qN6FJ7Cj+fKTRvDdv4u/3NZ336pfGL4CRdT0i9iNiIiI+jYjZ7HouO+Kj9pHc9+Tg/srhwf2VXLRan/wjl7Yn16LraxLXstcsRsQPvhPx49zzcRu7exvL1WplO6vPN2tb843dvVvrteW1ylpls1xeWlxa+OD2++Vz6+tbtYms9OXHv9//xk+TtGayK939OE/trheO4iTGI+J7FxFsCMay/kwMOxFeSj4iXo+It9PnfzbG0u8mAHCVtVqz0ZrtrgMAV10+XQPL5UvZWsBM5POlUnsN742YzlfrjebNu/WdzdX2WtlcFPJ316uVhWytcC4KuaS+mJaf1svH6rcj4rWI+PnkVFovrdSrq8P8hw8AjLBrx+b/f0+2538A4IorDjsBAGDgzP8AMHrM/wAwesz/ADB62vP/1LDTAAAGyPt/ABg95n8AGCnf//jj5GgdZp9/vfrZ7s5G/bNbq5XGRqm2s1JaqW9vldbq9bX0M3tqJ71etV7fWnwvdu7NfXOr0Zxv7O7dqdV3Npt30s/1vlMppHftD6BnAEA/r7316E+5ZEb+cCo9omsvh8JQMwMuWn7YCQBDMzbsBIChsdsXjK4zvMe3PABXRI8tep9R7PULQq1Wq3VxKQEX7MYXrP/DqOpa//e/gGHEWP+H0WX9H0ZXq5U77Z7/cdobAYDLzRo/0Ofn/69n599kPxz40erxOx5eZFYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwuXX2/y1le4HPRD5fKkW8EhFzUcjdXa9WFiLi1Yj442RhMqkvDjlnAOCs8n/NZft/3Zh9d+aZpjevHRUnIuInv/zkF/eWm83tP0RM5P452bnefJhdLw8+ewDgZJ15Oj13vZF/cnB/pXMMMp+/fTsiiu34hwcTcXgUfzzG03MxChEx/a9cVm/Lda1dnMX+g4j4fK/+52ImXQNp73x6PH4S+5VBxJ/qxM8/Ez+f5tY+J38WnzuHXGDUPErGn496PX/5uJ6eez//xXSEOrts/EteauUwHQOfxu+Mf2N9xr/rp43x3u++2y5NPd/2IOKL4xGd2Idd408nfq5P/HdPGf/PX3rz7X5trV9F3Ije8btjzTdrW/ON3b1b67XltcpaZbNcXlpcWvjg9vvl+XSNer7/bPD3D2++2q8t6f90n/jFE/r/1VP2/9f//fSHX3lB/K+/0yt+Pt54QfxkTvzaKeMvT/+22K8tib/ap/8nff9vnjL+47/sPbdtOAAwPI3dvY3larWy/bKFw7N9uYLC/1FI/spegjR6Fr41qFgT0bvpZ++0n+ljTa3WS8XqN2Kcx6obcBkcPfQR8Z9hJwMAAAAAAAAAAAAAAPQ0iN9YGnYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLr+FwAA//8Xqc+p") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) socket$inet(0x2, 0x4, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x0, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00'}) socket$inet6(0xa, 0x802, 0x0) 17m6.291842287s ago: executing program 48 (id=4120): socket(0x1000000000000010, 0x80802, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) socket$inet(0x2, 0x4, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x0, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00'}) socket$inet6(0xa, 0x802, 0x0) 12m54.469448533s ago: executing program 9 (id=4963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 12m53.337569312s ago: executing program 9 (id=4967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) 12m51.865582294s ago: executing program 9 (id=4973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000", 0x23) 12m51.046849321s ago: executing program 9 (id=4977): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 12m49.886349782s ago: executing program 9 (id=4983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) 12m48.569419713s ago: executing program 9 (id=4990): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='-'], 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 12m33.125638172s ago: executing program 49 (id=4990): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='-'], 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 6m37.757841812s ago: executing program 2 (id=6966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) 6m37.426004169s ago: executing program 2 (id=6969): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0x0, 0x0, 0x1, '&\x00', 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) 6m37.014173024s ago: executing program 2 (id=6974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x9}}, 0x14}}, 0x20040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 6m36.745778167s ago: executing program 2 (id=6979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c"}}}}}}}, 0x0) 6m36.354680122s ago: executing program 2 (id=6982): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x32, 0x0, 0x1, 0x1}, 0x28) 6m35.938140286s ago: executing program 2 (id=6985): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xd9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 6m26.67411983s ago: executing program 5 (id=7033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)='<', 0x1, 0x4000800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/173, 0xad}], 0x4}, 0x2}], 0x2, 0x22, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffbd, 0x40040, 0x0, 0xfffffffffffffe7f) 6m26.124557014s ago: executing program 5 (id=7037): bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 6m25.733672773s ago: executing program 5 (id=7038): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x4000007ff, 0x0, 0x0, r2}) 6m25.224359801s ago: executing program 5 (id=7041): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=r0], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$char_usb(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m22.004200946s ago: executing program 5 (id=7046): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m21.378348816s ago: executing program 5 (id=7048): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$xdp(0x2c, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m20.59894704s ago: executing program 50 (id=6985): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xd9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 6m6.147264475s ago: executing program 51 (id=7048): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$xdp(0x2c, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 15.088068407s ago: executing program 4 (id=8856): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 14.689790995s ago: executing program 4 (id=8861): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, 0x0, &(0x7f0000000340)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 6.47015627s ago: executing program 7 (id=8905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.946306431s ago: executing program 4 (id=8906): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e24, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000480)='bond_slave_0\x00', 0x0, 0x6000000, 0x3}) 3.946156359s ago: executing program 7 (id=8909): socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 3.715094191s ago: executing program 4 (id=8910): r0 = socket$rds(0x15, 0x5, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r4, &(0x7f0000000240)='./bus/file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000040601e4ff0000000000009c0f0000030500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x1e, 0x4, 0x0) close_range(r11, 0xffffffffffffffff, 0x200000000000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) 2.800134837s ago: executing program 3 (id=8911): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xa200, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 2.690070154s ago: executing program 7 (id=8912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) statx(r1, &(0x7f0000006400)='./file0\x00', 0x1000, 0x7ff, 0x0) 2.564549552s ago: executing program 6 (id=8913): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002", @ANYRES32=0x1, @ANYBLOB="fd"], 0x50) 2.519223373s ago: executing program 1 (id=8914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@debug={'debug', 0x3d, 0x10}}, {@access_user}]}}) 2.461874558s ago: executing program 3 (id=8915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bind$inet6(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x5c, 0x10}) syz_emit_ethernet(0x293, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x2, 0x2, 0x285, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa0, 0x3, [], "e526072a076ae0e6d6b16c8a0418f874f080afbf32d91cc256a695f1885b4c2b244fda5dd83cbf9c93ad17a6c5ca3e896f400d5c9789b7ecec780c32c8d7b8a8b293b95ff25efc770397d378df205dec379ca2638b7e3d2c821a123cdeb374c9553e094c235921e77404505bffee3a7d36d0976275bfeeb83aed74f325b28c3b00bc1f83d9a18f73ac26eae75e31f27100fa4fd332b00cc052e54afe4811be2b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4b4244ba48ac0eb230732ddc4f5366c66a66a56b34e9f57dfb0af6dbec17de1363d1e62edff835d955caeb3d1f9ad337ffd8618afb765a445d8704139498331a513b9596f91021cb9f36d7d92b8c9bee3e330c39cebdc1ebc0d8443a32e2b1216843deb27a221bd7ee20bcd37e5cd2b432660c5ea886aa221e387f3ebc7e84adcf026ec054554f02fb21ba9bdc4459c1"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xef], "be89a95f0f7c82b59657248ffcface0514e989700a893445ea9d5c0bb0ebeb34261392057a5733842f2a56c903d411ee258968773189c70196f443819d8d18767359d3acb3c6b3b8e6aed6f70cbb7a4e9c4fcbdd7d0844efd7cfdbd2198d8af6141e34ab7cf2abaa7987ea5dcc24b6eb31c34f6ed11afab0f9443bd167bae19c77727de95abc4fdc82a2e73b18388cac3a050f1644b1f38019a1754d2912c3c693be525b10d4e3e2e17d28e861d6f481bfcc98113350887ba19c4f08759a100ffab1257dc3fded45f816d718fd125a9053d14e7ba9223349b904ab1e1ac286ae841b"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xc, 0x3, 0x0, 0x1, 0x5, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfc}, 0x2, {0x10, 0x8, 0x3, 0x1e, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "3214db542e56943b1e25aed4442a56a85d32bd9f42"}}}}}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004) 2.424072713s ago: executing program 4 (id=8916): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x6, r2, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000200)="f1dff3", 0x3}], 0x1) dup3(r4, r0, 0x6700000000000000) 2.217091488s ago: executing program 6 (id=8917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x4000cdd) close_range(r3, 0xffffffffffffffff, 0x0) 1.958130767s ago: executing program 3 (id=8918): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 1.929867177s ago: executing program 1 (id=8919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f00000000c0)=0x73, 0x1) 1.888083895s ago: executing program 7 (id=8920): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) 1.794845446s ago: executing program 4 (id=8921): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="680200002700"], 0x268}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 1.64609003s ago: executing program 6 (id=8922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) 1.579111979s ago: executing program 3 (id=8923): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r3], 0x30}, 0x0) 1.548624151s ago: executing program 1 (id=8924): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 1.29024512s ago: executing program 6 (id=8925): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f00000026c0), 0x0, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.233087441s ago: executing program 7 (id=8926): r0 = socket$rds(0x15, 0x5, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r4, &(0x7f0000000240)='./bus/file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000040601e4ff0000000000009c0f0000030500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x1e, 0x4, 0x0) close_range(r11, 0xffffffffffffffff, 0x200000000000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) 1.226160058s ago: executing program 1 (id=8927): ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x2}, 0x8) 1.15814915s ago: executing program 3 (id=8928): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 1.011734534s ago: executing program 6 (id=8929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 866.596814ms ago: executing program 1 (id=8930): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002c000f012bbd7000ffdbdf25057c00000c000180fd8c0800", @ANYRES32=0x0, @ANYBLOB="08000380040004"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 398.707809ms ago: executing program 3 (id=8931): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x6, r2, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000200)="f1df", 0x2}], 0x1) dup3(r4, r0, 0x6700000000000000) 350.288617ms ago: executing program 7 (id=8932): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f02f839e0ff008001fffffe1ffff81", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 350.061764ms ago: executing program 1 (id=8933): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x24, 0x4, 0xa, 0xe71c2717975a5bd7, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 0s ago: executing program 6 (id=8934): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="1800000015006b05", 0x8}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) recvmsg$unix(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001040)=""/4084, 0xfffffe67}], 0x1}, 0x2100) kernel console output (not intermixed with test programs): 1983.690640][T28840] loop1: detected capacity change from 0 to 128 [ 1983.833634][ T30] kauditd_printk_skb: 326 callbacks suppressed [ 1983.833708][ T30] audit: type=1800 audit(1763579025.526:3990): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7254" name="bus" dev="loop1" ino=1048939 res=0 errno=0 [ 1984.100034][T28840] syz.1.7254: attempt to access beyond end of device [ 1984.100034][T28840] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1984.241059][T28850] tipc: Enabled bearer , priority 0 [ 1984.252060][T28850] syzkaller0: entered promiscuous mode [ 1984.258051][T28850] syzkaller0: entered allmulticast mode [ 1984.296965][T28848] tipc: Resetting bearer [ 1984.356389][T28848] tipc: Disabling bearer [ 1985.979284][T28885] tipc: Enabled bearer , priority 0 [ 1986.008008][T28885] syzkaller0: entered promiscuous mode [ 1986.014452][T28885] syzkaller0: entered allmulticast mode [ 1986.124214][T28882] tipc: Resetting bearer [ 1986.174582][T28882] tipc: Disabling bearer [ 1986.497412][T28892] program syz.7.7293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1987.254181][T28902] syzkaller0: entered promiscuous mode [ 1987.260069][T28902] syzkaller0: entered allmulticast mode [ 1987.344494][T28902] tipc: Enabled bearer , priority 0 [ 1987.417422][T28901] tipc: Resetting bearer [ 1987.473849][T28901] tipc: Disabling bearer [ 1988.331629][T28919] program syz.3.7306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1988.664646][T28923] syzkaller0: entered promiscuous mode [ 1988.670314][T28923] syzkaller0: entered allmulticast mode [ 1988.753862][T28923] tipc: Enabled bearer , priority 0 [ 1988.770878][T28924] loop7: detected capacity change from 0 to 128 [ 1988.791551][T28920] tipc: Resetting bearer [ 1988.798844][ T30] audit: type=1800 audit(1763579030.475:3991): pid=28924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7296" name="bus" dev="loop7" ino=1048940 res=0 errno=0 [ 1988.887332][T28930] syz.7.7296: attempt to access beyond end of device [ 1988.887332][T28930] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1988.927112][T28920] tipc: Disabling bearer [ 1989.036008][T28933] fuse: Bad value for 'fd' [ 1990.575888][T28957] program syz.1.7319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1991.383276][T28963] fuse: Bad value for 'fd' [ 1991.516357][T28966] macsec0: entered promiscuous mode [ 1993.619357][T25427] IPVS: starting estimator thread 0... [ 1993.714395][T29000] IPVS: using max 288 ests per chain, 14400 per kthread [ 1993.762013][T28999] pim6reg1: entered promiscuous mode [ 1993.768052][T28999] pim6reg1: entered allmulticast mode [ 1994.811798][T29013] loop3: detected capacity change from 0 to 128 [ 1994.920326][ T30] audit: type=1800 audit(1763579036.605:3992): pid=28985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7330" name="bus" dev="loop3" ino=1048941 res=0 errno=0 [ 1995.102369][T28985] syz.3.7330: attempt to access beyond end of device [ 1995.102369][T28985] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1999.853793][T25427] IPVS: starting estimator thread 0... [ 1999.921255][T29086] loop4: detected capacity change from 0 to 128 [ 1999.974175][T29088] IPVS: using max 240 ests per chain, 12000 per kthread [ 1999.988986][ T30] audit: type=1800 audit(1763579041.654:3993): pid=29086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7360" name="bus" dev="loop4" ino=1048942 res=0 errno=0 [ 2000.041190][T29091] syz.4.7360: attempt to access beyond end of device [ 2000.041190][T29091] loop4: rw=2049, sector=1009, nr_sectors = 32 limit=128 [ 2001.396903][T29109] xt_hashlimit: max too large, truncated to 1048576 [ 2001.557920][T29113] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7381'. [ 2004.048037][T29141] loop1: detected capacity change from 0 to 128 [ 2004.157728][ T30] audit: type=1800 audit(1763579045.844:3994): pid=29141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7392" name="bus" dev="loop1" ino=1048943 res=0 errno=0 [ 2004.331086][T29146] syz.1.7392: attempt to access beyond end of device [ 2004.331086][T29146] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2004.921910][T29152] tipc: Enabled bearer , priority 0 [ 2005.048786][T29152] syzkaller0: entered promiscuous mode [ 2005.055720][T29152] syzkaller0: entered allmulticast mode [ 2005.063286][T29152] tipc: Resetting bearer [ 2005.145180][T29151] tipc: Resetting bearer [ 2005.308707][T29151] tipc: Disabling bearer [ 2006.411641][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2006.965552][T29173] kvm: pic: non byte write [ 2008.387011][T29194] fuse: Bad value for 'fd' [ 2008.491511][T29195] loop7: detected capacity change from 0 to 128 [ 2008.560865][ T30] audit: type=1800 audit(1763579050.243:3995): pid=29195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7413" name="bus" dev="loop7" ino=1048944 res=0 errno=0 [ 2008.753889][T29195] syz.7.7413: attempt to access beyond end of device [ 2008.753889][T29195] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2009.293740][T29210] kvm: pic: non byte write [ 2010.379524][T29229] fuse: Bad value for 'fd' [ 2010.690433][T29233] syzkaller0: entered promiscuous mode [ 2010.696398][T29233] syzkaller0: entered allmulticast mode [ 2010.850151][T29237] syzkaller0: entered promiscuous mode [ 2010.856104][T29237] syzkaller0: entered allmulticast mode [ 2010.954550][T29237] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2011.001105][T29240] kvm: pic: non byte write [ 2011.921601][T29252] loop4: detected capacity change from 0 to 128 [ 2011.987981][T25427] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2011.997683][ T30] audit: type=1800 audit(1763579053.653:3996): pid=29252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7435" name="bus" dev="loop4" ino=1048945 res=0 errno=0 [ 2012.126184][T29257] syz.4.7435: attempt to access beyond end of device [ 2012.126184][T29257] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2012.262518][T25427] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.273490][T25427] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2012.290651][T25427] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2012.301206][T25427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.357305][T25427] usb 7-1: config 0 descriptor?? [ 2012.376520][T25427] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2013.014893][T29271] fuse: Bad value for 'fd' [ 2015.075549][T25427] usb 7-1: USB disconnect, device number 2 [ 2015.102275][T29301] loop3: detected capacity change from 0 to 128 [ 2015.220235][ T30] audit: type=1800 audit(1763579056.873:3997): pid=29306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7455" name="bus" dev="loop3" ino=1048946 res=0 errno=0 [ 2015.277652][T29306] syz.3.7455: attempt to access beyond end of device [ 2015.277652][T29306] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2017.016090][T23856] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2017.191914][T23856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.203520][T23856] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2017.217425][T23856] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2017.227110][T23856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.261642][T23856] usb 4-1: config 0 descriptor?? [ 2017.334173][T23856] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2017.897474][T29347] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7476'. [ 2018.043644][T29343] loop4: detected capacity change from 0 to 128 [ 2018.083890][ T30] audit: type=1800 audit(1763579059.752:3998): pid=29343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7473" name="bus" dev="loop4" ino=1048947 res=0 errno=0 [ 2018.142725][T29349] syz.4.7473: attempt to access beyond end of device [ 2018.142725][T29349] loop4: rw=2049, sector=953, nr_sectors = 88 limit=128 [ 2018.251551][T29351] netlink: 'syz.7.7477': attribute type 10 has an invalid length. [ 2018.259853][T29351] syz_tun: entered promiscuous mode [ 2019.993247][T25427] usb 4-1: USB disconnect, device number 7 [ 2020.217911][T29379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7488'. [ 2020.469940][T29384] netlink: 'syz.3.7490': attribute type 10 has an invalid length. [ 2020.503400][T29384] syz_tun: entered promiscuous mode [ 2020.564409][T29384] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2020.687685][T29385] syzkaller0: entered promiscuous mode [ 2020.693364][T29385] syzkaller0: entered allmulticast mode [ 2020.758688][T29383] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2021.148392][T29387] tipc: Enabled bearer , priority 0 [ 2021.208448][T29388] syzkaller0: entered promiscuous mode [ 2021.214179][T29388] syzkaller0: entered allmulticast mode [ 2021.266078][T29387] tipc: Resetting bearer [ 2021.274248][T29386] tipc: Resetting bearer [ 2021.305193][T29386] tipc: Disabling bearer [ 2023.224778][T29418] netlink: 'syz.7.7504': attribute type 10 has an invalid length. [ 2023.683965][T29421] tipc: Enabled bearer , priority 0 [ 2023.715205][T29421] syzkaller0: entered promiscuous mode [ 2023.721481][T29421] syzkaller0: entered allmulticast mode [ 2023.785616][T29421] tipc: Resetting bearer [ 2023.892544][T29420] tipc: Resetting bearer [ 2023.956545][T29420] tipc: Disabling bearer [ 2024.547581][T29433] netlink: 'syz.7.7510': attribute type 1 has an invalid length. [ 2024.555682][T29433] netlink: 'syz.7.7510': attribute type 2 has an invalid length. [ 2024.598042][T29433] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7510'. [ 2025.817666][T29449] netlink: 'syz.7.7516': attribute type 10 has an invalid length. [ 2026.214480][T29453] syzkaller0: entered promiscuous mode [ 2026.220584][T29453] syzkaller0: entered allmulticast mode [ 2026.501914][T29457] tipc: Enabled bearer , priority 0 [ 2026.512814][T29457] syzkaller0: entered promiscuous mode [ 2026.523949][T29457] syzkaller0: entered allmulticast mode [ 2026.602281][T29458] tipc: Resetting bearer [ 2026.624580][T29456] tipc: Resetting bearer [ 2026.658700][T29456] tipc: Disabling bearer [ 2027.187259][ T30] audit: type=1326 audit(1763579068.862:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2458f749 code=0x7ffc0000 [ 2027.210493][ T30] audit: type=1326 audit(1763579068.862:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2458f749 code=0x7ffc0000 [ 2027.233509][ T30] audit: type=1326 audit(1763579068.862:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2458f749 code=0x7ffc0000 [ 2027.259827][ T30] audit: type=1326 audit(1763579068.872:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2458f749 code=0x7ffc0000 [ 2027.284522][ T30] audit: type=1326 audit(1763579068.922:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2458f749 code=0x7ffc0000 [ 2027.307474][ T30] audit: type=1326 audit(1763579068.972:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2458f749 code=0x7ffc0000 [ 2027.330345][ T30] audit: type=1326 audit(1763579068.972:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c2458f783 code=0x7ffc0000 [ 2027.356565][ T30] audit: type=1326 audit(1763579068.972:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3c2458f807 code=0x7ffc0000 [ 2027.381349][ T30] audit: type=1326 audit(1763579068.972:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3c24546bdd code=0x7ffc0000 [ 2027.404090][ T30] audit: type=1326 audit(1763579068.972:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29461 comm="syz.6.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3c245c3e89 code=0x7ffc0000 [ 2027.454941][T29468] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 2027.566725][T25429] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2027.732599][T25429] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.743554][T25429] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2027.761882][T25429] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2027.775778][T25429] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.816013][T25429] usb 8-1: config 0 descriptor?? [ 2027.847410][T25429] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2027.873134][T29472] netlink: 'syz.4.7526': attribute type 1 has an invalid length. [ 2027.881488][T29472] netlink: 'syz.4.7526': attribute type 2 has an invalid length. [ 2028.447181][T29482] v: renamed from vlan0 [ 2028.575125][T29485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7530'. [ 2028.960882][T29493] syzkaller0: entered promiscuous mode [ 2028.966983][T29493] syzkaller0: entered allmulticast mode [ 2029.006813][T23855] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2029.129068][T29496] netlink: 'syz.4.7533': attribute type 10 has an invalid length. [ 2029.173746][T23855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2029.186035][T23855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.196618][T23855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2029.210193][T23855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2029.220840][T23855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.239821][T23855] usb 4-1: config 0 descriptor?? [ 2029.664338][T23855] hid_parser_main: 8 callbacks suppressed [ 2029.664432][T23855] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2029.678708][T23855] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2029.686346][T23855] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2029.695370][T23855] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2029.703583][T23855] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2029.729881][T23855] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2030.018611][T25432] usb 4-1: USB disconnect, device number 8 [ 2030.314256][T25429] usb 8-1: USB disconnect, device number 7 [ 2031.059457][T29514] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7538'. [ 2031.667936][T29523] syzkaller0: entered promiscuous mode [ 2031.673833][T29523] syzkaller0: entered allmulticast mode [ 2031.742071][T29527] netlink: 'syz.3.7543': attribute type 1 has an invalid length. [ 2031.751503][T29527] netlink: 'syz.3.7543': attribute type 2 has an invalid length. [ 2031.766119][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7543'. [ 2032.847120][T25432] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2032.975202][T29542] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7550'. [ 2033.038388][T25432] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2033.051801][T25432] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2033.061343][T25432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.083475][T25432] usb 2-1: config 0 descriptor?? [ 2033.100318][T25432] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2033.281121][T25429] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2033.452846][T25429] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.464099][T25429] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.474714][T25429] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2033.491568][T25429] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2033.503601][T25429] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.575777][T25429] usb 8-1: config 0 descriptor?? [ 2033.710984][T29552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7553'. [ 2034.004926][T25429] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2034.012877][T25429] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2034.025677][T25429] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2034.033479][T25429] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2034.041298][T25429] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 2034.064697][T25429] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2034.107272][T25432] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2034.263242][T25429] usb 8-1: USB disconnect, device number 8 [ 2034.311852][T25432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2034.323893][T25432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2034.334935][T25432] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2034.349256][T25432] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2034.359445][T25432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.396257][T25432] usb 4-1: config 0 descriptor?? [ 2034.631857][T29552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.641845][T29552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.883010][T25432] usbhid 4-1:0.0: can't add hid device: -71 [ 2034.889865][T25432] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2034.922430][T25432] usb 4-1: USB disconnect, device number 9 [ 2035.288734][T29561] syzkaller0: entered promiscuous mode [ 2035.294500][T29561] syzkaller0: entered allmulticast mode [ 2035.323878][T17599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2035.346715][T17599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2035.361912][T17599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2035.401636][T17599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2035.448593][T17599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2035.558063][T29564] lo speed is unknown, defaulting to 1000 [ 2036.013603][T23855] usb 2-1: USB disconnect, device number 4 [ 2036.106569][T29568] netlink: 'syz.6.7559': attribute type 1 has an invalid length. [ 2036.115735][T29568] netlink: 'syz.6.7559': attribute type 2 has an invalid length. [ 2036.171390][T29577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7559'. [ 2036.173527][T29573] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7561'. [ 2036.379183][T29564] chnl_net:caif_netlink_parms(): no params data found [ 2037.379945][T29592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7566'. [ 2037.456164][T29597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7568'. [ 2037.495231][T29596] netlink: 'syz.7.7567': attribute type 4 has an invalid length. [ 2037.503981][T29596] netlink: 'syz.7.7567': attribute type 5 has an invalid length. [ 2037.512448][T29596] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.7567'. [ 2037.523162][T17599] Bluetooth: hci0: command tx timeout [ 2037.827608][T25432] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2037.852848][T29564] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.861339][T29564] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.872067][T29564] bridge_slave_0: entered allmulticast mode [ 2037.881805][T29564] bridge_slave_0: entered promiscuous mode [ 2037.904641][T29564] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.912739][T29564] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.921339][T29564] bridge_slave_1: entered allmulticast mode [ 2037.930886][T29564] bridge_slave_1: entered promiscuous mode [ 2038.069065][T29564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2038.086608][T25432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.102741][T25432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2038.114182][T25432] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2038.127642][T25432] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2038.136897][T25432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.177924][T29564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2038.242147][T25432] usb 4-1: config 0 descriptor?? [ 2038.358152][T29564] team0: Port device team_slave_0 added [ 2038.393497][T29564] team0: Port device team_slave_1 added [ 2038.583095][T29564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2038.590703][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2038.616853][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.630901][T29564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2038.640686][T29612] netlink: 'syz.1.7574': attribute type 1 has an invalid length. [ 2038.649882][T29612] netlink: 'syz.1.7574': attribute type 2 has an invalid length. [ 2038.655643][T29564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2038.665003][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2038.692643][T29564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2038.700216][T29609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7574'. [ 2038.715128][T25432] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2038.722999][T25432] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2038.731254][T25432] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2038.739038][T25432] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2038.746740][T25432] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 2038.767138][T25432] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2038.975959][T25432] usb 4-1: USB disconnect, device number 10 [ 2039.028189][T29564] hsr_slave_0: entered promiscuous mode [ 2039.043113][T29564] hsr_slave_1: entered promiscuous mode [ 2039.056060][T29564] debugfs: 'hsr0' already exists in 'hsr' [ 2039.063186][T29564] Cannot create hsr debugfs directory [ 2039.590509][T17599] Bluetooth: hci0: command tx timeout [ 2039.794239][T29625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7579'. [ 2040.463405][T29564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2040.540574][T29564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2040.646035][T29564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2040.699163][T29640] tipc: Enabling of bearer rejected, failed to enable media [ 2040.719802][T29564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2040.760356][T29640] syzkaller0: entered promiscuous mode [ 2040.766042][T29640] syzkaller0: entered allmulticast mode [ 2040.936333][T29643] syzkaller0: entered promiscuous mode [ 2040.942721][T29643] syzkaller0: entered allmulticast mode [ 2041.238934][T29652] netlink: 'syz.1.7586': attribute type 10 has an invalid length. [ 2041.300519][T29652] syz_tun: entered promiscuous mode [ 2041.376788][T29652] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2041.467190][T29655] netlink: 'syz.6.7588': attribute type 1 has an invalid length. [ 2041.481668][T29655] netlink: 'syz.6.7588': attribute type 2 has an invalid length. [ 2041.515259][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7588'. [ 2042.097433][T29564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.223642][T29564] 8021q: adding VLAN 0 to HW filter on device team0 [ 2042.349177][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.356644][T15973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2042.496850][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.504448][T15973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2042.764840][T29564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2042.776380][T29564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2043.228436][ T9375] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2043.274732][T29683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7596'. [ 2043.436223][ T9375] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2043.444575][T29686] tipc: Enabling of bearer rejected, failed to enable media [ 2043.449765][ T9375] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2043.467416][ T9375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.473595][T29686] syzkaller0: entered promiscuous mode [ 2043.481598][T29686] syzkaller0: entered allmulticast mode [ 2043.546913][ T9375] usb 7-1: config 0 descriptor?? [ 2043.595324][ T9375] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2043.674554][T23856] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2043.886088][T23856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.897471][T23856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.909524][T23856] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2043.923394][T23856] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2043.933673][T23856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.965937][T23856] usb 8-1: config 0 descriptor?? [ 2044.085273][T29564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2044.222831][T29683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.233781][T29683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.502092][T23856] usbhid 8-1:0.0: can't add hid device: -71 [ 2044.509253][T23856] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2044.527547][T23856] usb 8-1: USB disconnect, device number 9 [ 2044.937409][T29708] netlink: 'syz.1.7603': attribute type 1 has an invalid length. [ 2044.946032][T29708] netlink: 'syz.1.7603': attribute type 2 has an invalid length. [ 2044.991124][T29708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7603'. [ 2045.600668][T29720] tipc: Started in network mode [ 2045.605771][T29720] tipc: Node identity , cluster identity 4711 [ 2045.612526][T29720] tipc: Failed to obtain node identity [ 2045.618380][T29720] tipc: Enabling of bearer rejected, failed to enable media [ 2045.690769][T29723] syzkaller0: entered promiscuous mode [ 2045.696600][T29723] syzkaller0: entered allmulticast mode [ 2045.720801][T29564] veth0_vlan: entered promiscuous mode [ 2045.771966][T29564] veth1_vlan: entered promiscuous mode [ 2046.102996][T29564] veth0_macvtap: entered promiscuous mode [ 2046.142662][T29564] veth1_macvtap: entered promiscuous mode [ 2046.221230][ T9375] usb 7-1: USB disconnect, device number 3 [ 2046.269516][T29564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2046.324707][T29564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2046.380305][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.447087][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.485788][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.534120][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.616529][T29732] fuse: Bad value for 'group_id' [ 2046.621916][T29732] fuse: Bad value for 'group_id' [ 2046.623564][T29730] tipc: Enabling of bearer rejected, failed to enable media [ 2046.690389][T29733] syzkaller0: entered promiscuous mode [ 2046.701754][T29733] syzkaller0: entered allmulticast mode [ 2047.079693][T29740] fuse: Bad value for 'group_id' [ 2047.084824][T29740] fuse: Bad value for 'group_id' [ 2047.356767][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7614'. [ 2047.599715][T29752] netlink: 'syz.3.7616': attribute type 1 has an invalid length. [ 2047.607641][T29752] netlink: 'syz.3.7616': attribute type 2 has an invalid length. [ 2047.665799][T29752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7616'. [ 2047.710824][T29755] tipc: Enabled bearer , priority 0 [ 2047.727990][T29755] syzkaller0: entered promiscuous mode [ 2047.734649][T29755] syzkaller0: entered allmulticast mode [ 2047.777665][T29755] tipc: Resetting bearer [ 2047.788876][T23855] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2047.803351][T29753] tipc: Resetting bearer [ 2047.817115][T29753] tipc: Disabling bearer [ 2048.056292][T23855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.068575][T23855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.080593][T23855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2048.094372][T23855] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2048.103826][T23855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.209538][T23855] usb 7-1: config 0 descriptor?? [ 2048.424804][T29746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.438063][T29746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.704138][T23855] usbhid 7-1:0.0: can't add hid device: -71 [ 2048.711419][T23855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2048.731588][T23855] usb 7-1: USB disconnect, device number 4 [ 2048.840837][T29774] fuse: Bad value for 'group_id' [ 2048.850223][T29774] fuse: Bad value for 'group_id' [ 2049.267297][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 2049.267373][ T30] audit: type=1326 audit(1763579090.950:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.297386][ T30] audit: type=1326 audit(1763579090.950:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.320350][ T30] audit: type=1326 audit(1763579090.950:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.343455][ T30] audit: type=1326 audit(1763579090.950:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.367661][ T30] audit: type=1326 audit(1763579090.960:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.385942][T29781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7623'. [ 2049.390945][ T30] audit: type=1326 audit(1763579090.960:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.423245][ T30] audit: type=1326 audit(1763579090.960:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.447504][ T30] audit: type=1326 audit(1763579090.960:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.470653][ T30] audit: type=1326 audit(1763579090.960:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.494403][ T30] audit: type=1326 audit(1763579090.960:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.3.7623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2049.779943][T29787] fuse: Bad value for 'group_id' [ 2049.785189][T29787] fuse: Bad value for 'group_id' [ 2050.440850][T29799] netlink: 'syz.3.7630': attribute type 1 has an invalid length. [ 2050.449046][T29799] netlink: 'syz.3.7630': attribute type 2 has an invalid length. [ 2050.480811][T29799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7630'. [ 2050.982509][T29814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7633'. [ 2051.328645][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.336909][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.411197][T23855] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2051.474809][ T3771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.483209][ T3771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.633763][T23855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2051.645291][T23855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2051.655845][T23855] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2051.670419][T23855] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2051.679927][T23855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.748443][T23855] usb 8-1: config 0 descriptor?? [ 2051.985418][T29825] fuse: Bad value for 'group_id' [ 2051.990976][T29825] fuse: Bad value for 'group_id' [ 2052.175964][T23855] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2052.183937][T23855] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2052.191823][T23855] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2052.199672][T23855] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2052.207941][T23855] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2052.297620][T23855] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2052.437122][T23855] usb 8-1: USB disconnect, device number 10 [ 2053.124479][T29845] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2053.136938][T29845] overlayfs: missing 'lowerdir' [ 2054.550126][T25052] Bluetooth: hci2: command 0x0406 tx timeout [ 2055.323558][T29895] lo speed is unknown, defaulting to 1000 [ 2059.398721][T29983] lo speed is unknown, defaulting to 1000 [ 2060.588339][T30007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7703'. [ 2061.049843][ T9375] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2061.265112][ T9375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.276720][ T9375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2061.288443][ T9375] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2061.303549][ T9375] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2061.313919][ T9375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.357724][ T9375] usb 7-1: config 0 descriptor?? [ 2061.525910][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7708'. [ 2061.663274][T30025] lo speed is unknown, defaulting to 1000 [ 2061.813563][ T9375] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 2061.821664][ T9375] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 2061.829320][ T9375] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 2061.837335][ T9375] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 2061.845112][ T9375] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 2061.966044][ T9375] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2062.075550][ T9375] usb 7-1: USB disconnect, device number 5 [ 2063.632770][T30052] syzkaller0: entered promiscuous mode [ 2063.638547][T30052] syzkaller0: entered allmulticast mode [ 2064.805903][T17599] Bluetooth: hci1: command 0x0406 tx timeout [ 2065.297707][T30076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7727'. [ 2065.643812][T25432] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2065.850204][T25432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2065.861395][T25432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2065.871944][T25432] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2065.885176][T25432] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2065.894605][T25432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.016678][T30092] syzkaller0: entered promiscuous mode [ 2066.027329][T30092] syzkaller0: entered allmulticast mode [ 2066.068583][T25432] usb 5-1: config 0 descriptor?? [ 2066.302886][T30098] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2066.498125][T25432] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 2066.505998][T25432] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 2066.513891][T25432] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 2066.521611][T25432] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 2066.529248][T25432] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 2066.587876][T25432] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2066.712571][T30102] syzkaller0: entered promiscuous mode [ 2066.718246][T30102] syzkaller0: entered allmulticast mode [ 2066.755751][T23842] usb 5-1: USB disconnect, device number 9 [ 2067.850137][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2068.665608][T30129] syzkaller0: entered promiscuous mode [ 2068.671781][T30129] syzkaller0: entered allmulticast mode [ 2068.996289][T30132] tipc: Started in network mode [ 2069.001821][T30132] tipc: Node identity 7e05ddc3a1ab, cluster identity 4711 [ 2069.009838][T30132] tipc: Enabled bearer , priority 10 [ 2070.120881][T30148] loop4: detected capacity change from 0 to 512 [ 2070.121436][ T9375] tipc: Node number set to 3752779203 [ 2070.155000][T30148] EXT4-fs: Ignoring removed i_version option [ 2070.161562][T30148] EXT4-fs: Ignoring removed bh option [ 2070.275225][T30148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2070.308985][T30148] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2070.345983][T30151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7754'. [ 2070.674461][T29564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2070.741792][T23842] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2070.940612][T23842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2070.953646][T23842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2070.965568][T23842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2070.979440][T23842] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2070.989045][T23842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.003420][T23842] usb 4-1: config 0 descriptor?? [ 2071.451462][T23842] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 2071.459190][T23842] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 2071.467027][T23842] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 2071.477617][T23842] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 2071.486063][T23842] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 2071.525619][T30170] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 2071.617434][T23842] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2071.718045][T23842] usb 4-1: USB disconnect, device number 11 [ 2072.495224][ T9375] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2072.690912][ T9375] usb 8-1: Using ep0 maxpacket: 32 [ 2072.702798][ T9375] usb 8-1: config 0 has no interfaces? [ 2072.771117][ T9375] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2072.780397][ T9375] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2072.789374][ T9375] usb 8-1: Product: syz [ 2072.794004][ T9375] usb 8-1: Manufacturer: syz [ 2072.798772][ T9375] usb 8-1: SerialNumber: syz [ 2072.849394][ T9375] usb 8-1: config 0 descriptor?? [ 2072.899599][T30193] tipc: Enabled bearer , priority 0 [ 2072.928636][T30193] syzkaller0: entered promiscuous mode [ 2072.934622][T30193] syzkaller0: entered allmulticast mode [ 2072.979532][T30193] tipc: Resetting bearer [ 2073.000440][T30191] tipc: Resetting bearer [ 2073.043366][T30191] tipc: Disabling bearer [ 2073.076545][T23842] usb 8-1: USB disconnect, device number 11 [ 2073.565008][T30200] syzkaller0: entered promiscuous mode [ 2073.570922][T30200] syzkaller0: entered allmulticast mode [ 2074.020515][T30210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7778'. [ 2074.125757][T30212] netlink: 'syz.4.7779': attribute type 1 has an invalid length. [ 2074.134184][T30212] netlink: 'syz.4.7779': attribute type 2 has an invalid length. [ 2074.193722][T30212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7779'. [ 2074.451225][T25432] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2074.643872][T25432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.659781][T25432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.673081][T25432] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2074.691656][T25432] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2074.701252][T25432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.763790][T25432] usb 8-1: config 0 descriptor?? [ 2075.013240][T30226] tipc: Started in network mode [ 2075.018375][T30226] tipc: Node identity ea90215ec698, cluster identity 4711 [ 2075.027166][T30226] tipc: Enabled bearer , priority 0 [ 2075.076291][T30226] syzkaller0: entered promiscuous mode [ 2075.082356][T30226] syzkaller0: entered allmulticast mode [ 2075.152932][T30226] tipc: Resetting bearer [ 2075.179876][T30225] tipc: Resetting bearer [ 2075.197425][T25432] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2075.205563][T25432] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2075.214197][T25432] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2075.221926][T25432] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2075.229605][T25432] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 2075.305711][T30225] tipc: Disabling bearer [ 2075.364479][T25432] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2075.641554][T25432] usb 8-1: USB disconnect, device number 12 [ 2075.812946][T30239] netlink: 'syz.4.7786': attribute type 10 has an invalid length. [ 2075.899679][T30239] syz_tun: entered promiscuous mode [ 2075.973558][T30239] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2076.468574][T30248] syzkaller0: entered promiscuous mode [ 2076.477236][T30248] syzkaller0: entered allmulticast mode [ 2078.143277][T30263] fuse: Unknown parameter 'group_i00000000000000000000' [ 2078.192084][T30266] netlink: 'syz.6.7796': attribute type 1 has an invalid length. [ 2078.200080][T30266] netlink: 'syz.6.7796': attribute type 2 has an invalid length. [ 2078.355304][T30266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7796'. [ 2079.325149][T30281] tipc: Enabled bearer , priority 0 [ 2079.475754][T30277] tipc: Resetting bearer [ 2079.623750][T30274] tipc: Disabling bearer [ 2079.697540][T30287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7801'. [ 2080.049503][T30292] netlink: 'syz.7.7803': attribute type 10 has an invalid length. [ 2080.071652][T23855] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2080.152674][T17599] Bluetooth: hci3: command 0x0406 tx timeout [ 2080.184899][T30294] syzkaller0: entered promiscuous mode [ 2080.190739][T30294] syzkaller0: entered allmulticast mode [ 2080.303273][T23855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.315121][T23855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2080.325408][T23855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2080.339079][T23855] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2080.348579][T23855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.441800][T23855] usb 7-1: config 0 descriptor?? [ 2080.605639][T30298] tipc: Enabled bearer , priority 0 [ 2080.686868][T30296] tipc: Disabling bearer [ 2080.866158][T23855] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 2080.876936][T23855] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 2080.885503][T23855] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 2080.893364][T23855] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 2080.903450][T23855] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 2080.948477][T23855] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2081.187244][T25432] usb 7-1: USB disconnect, device number 6 [ 2081.375357][T30311] netlink: 'syz.1.7811': attribute type 1 has an invalid length. [ 2081.383669][T30311] netlink: 'syz.1.7811': attribute type 2 has an invalid length. [ 2081.392755][ T9375] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2081.407890][T30311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7811'. [ 2081.587774][ T9375] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2081.597538][ T9375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.606033][ T9375] usb 8-1: Product: syz [ 2081.610360][ T9375] usb 8-1: Manufacturer: syz [ 2081.619567][ T9375] usb 8-1: SerialNumber: syz [ 2081.848186][ T9375] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2081.860581][ T9375] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2081.871658][ T9375] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2081.963144][ T9375] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 2082.109473][ T9375] usb 8-1: USB disconnect, device number 13 [ 2082.483060][T30327] tipc: Enabled bearer , priority 0 [ 2082.502541][T30327] syzkaller0: entered promiscuous mode [ 2082.508187][T30327] syzkaller0: entered allmulticast mode [ 2082.555879][T30327] tipc: Resetting bearer [ 2082.586581][T30326] tipc: Resetting bearer [ 2082.600822][T30326] tipc: Disabling bearer [ 2082.859634][T30332] netlink: 'syz.7.7817': attribute type 10 has an invalid length. [ 2083.136110][T30337] tipc: Enabled bearer , priority 0 [ 2083.160692][T30337] syzkaller0: entered promiscuous mode [ 2083.166525][T30337] syzkaller0: entered allmulticast mode [ 2083.186415][T30335] syzkaller0: entered promiscuous mode [ 2083.200097][T30335] syzkaller0: entered allmulticast mode [ 2083.288040][T30337] tipc: Resetting bearer [ 2083.309358][T30340] tipc: Enabling of bearer rejected, failed to enable media [ 2083.330627][T30336] tipc: Resetting bearer [ 2083.414727][T30336] tipc: Disabling bearer [ 2084.151271][T30352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7824'. [ 2084.451800][T30359] netlink: 'syz.3.7828': attribute type 1 has an invalid length. [ 2084.459902][T30359] netlink: 'syz.3.7828': attribute type 2 has an invalid length. [ 2084.495244][T30359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7828'. [ 2084.552408][T25432] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2084.719162][T25432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2084.730650][T25432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2084.742449][T25432] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2084.742659][T25432] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2084.742794][T25432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.781195][T25432] usb 8-1: config 0 descriptor?? [ 2085.208056][T25432] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2085.217809][T25432] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2085.225692][T25432] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2085.233642][T25432] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2085.241274][T25432] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2085.335072][T25432] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2085.508306][T30374] netlink: 'syz.6.7831': attribute type 10 has an invalid length. [ 2085.602600][T23855] usb 8-1: USB disconnect, device number 14 [ 2085.632530][T30374] syz_tun: entered promiscuous mode [ 2085.734004][T30374] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2086.430290][T30384] tipc: Enabled bearer , priority 0 [ 2086.464199][T30384] syzkaller0: entered promiscuous mode [ 2086.469868][T30384] syzkaller0: entered allmulticast mode [ 2086.609490][T30383] tipc: Resetting bearer [ 2086.666034][T30383] tipc: Disabling bearer [ 2086.701618][T30390] syzkaller0: entered promiscuous mode [ 2086.712276][T30390] syzkaller0: entered allmulticast mode [ 2086.953537][T30392] tipc: Enabling of bearer rejected, failed to enable media [ 2088.057775][T30409] netlink: 'syz.3.7844': attribute type 1 has an invalid length. [ 2088.068302][T30409] netlink: 'syz.3.7844': attribute type 2 has an invalid length. [ 2088.104383][T30409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7844'. [ 2088.439862][T30412] netlink: 'syz.1.7845': attribute type 10 has an invalid length. [ 2088.990999][T30419] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7847'. [ 2089.342514][T25429] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2089.387747][T30423] tipc: Enabled bearer , priority 0 [ 2089.413838][T30423] syzkaller0: entered promiscuous mode [ 2089.419610][T30423] syzkaller0: entered allmulticast mode [ 2089.474810][T30422] tipc: Resetting bearer [ 2089.528948][T25429] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.543181][T25429] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.554147][T25429] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2089.565365][T30422] tipc: Disabling bearer [ 2089.567352][T25429] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2089.582384][T25429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.639721][T25429] usb 7-1: config 0 descriptor?? [ 2090.069584][T25429] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2090.077536][T25429] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2090.085476][T25429] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2090.093251][T25429] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2090.100992][T25429] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 2090.244196][T25429] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2090.338394][T25429] usb 7-1: USB disconnect, device number 7 [ 2090.762748][T30443] tipc: Enabling of bearer rejected, failed to enable media [ 2091.709330][T30454] netlink: 'syz.7.7859': attribute type 10 has an invalid length. [ 2092.239216][T30459] netlink: 'syz.1.7860': attribute type 1 has an invalid length. [ 2092.248023][T30459] netlink: 'syz.1.7860': attribute type 2 has an invalid length. [ 2092.320464][T30463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7860'. [ 2093.285307][T30480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7867'. [ 2093.644366][T23855] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2093.724588][T30484] tipc: Enabling of bearer rejected, failed to enable media [ 2093.831064][T23855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2093.844418][T23855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.855181][T23855] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2093.868596][T23855] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2093.878043][T23855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.985060][T23855] usb 8-1: config 0 descriptor?? [ 2094.485105][T23855] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 2094.499564][T23855] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 2094.507564][T23855] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 2094.515764][T23855] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 2094.525976][T23855] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 2095.103630][T23855] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2095.146570][T23855] usb 8-1: USB disconnect, device number 15 [ 2095.918648][T30511] syzkaller0: entered promiscuous mode [ 2095.924598][T30511] syzkaller0: entered allmulticast mode [ 2096.146403][T30515] netlink: 'syz.1.7880': attribute type 1 has an invalid length. [ 2096.154590][T30515] netlink: 'syz.1.7880': attribute type 2 has an invalid length. [ 2096.225543][T30515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7880'. [ 2096.334498][T30521] tipc: Enabling of bearer rejected, failed to enable media [ 2098.468953][T30553] lo speed is unknown, defaulting to 1000 [ 2099.880893][T30561] syzkaller0: entered promiscuous mode [ 2099.887424][T30561] syzkaller0: entered allmulticast mode [ 2100.993524][T30570] tipc: Enabling of bearer rejected, failed to enable media [ 2103.269425][T30592] netlink: 'syz.4.7906': attribute type 1 has an invalid length. [ 2103.839057][T23855] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2103.858450][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 2104.012205][ T12] dvmrp8 (unregistering): left allmulticast mode [ 2104.224293][T23855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2104.238376][T23855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2104.251802][T23855] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2104.262718][T23855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.338166][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 2104.338247][ T30] audit: type=1326 audit(1763579145.994:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.369436][ T30] audit: type=1326 audit(1763579146.004:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.393233][ T30] audit: type=1326 audit(1763579146.004:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.416843][ T30] audit: type=1326 audit(1763579146.004:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.439829][ T30] audit: type=1326 audit(1763579146.004:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.466865][ T30] audit: type=1326 audit(1763579146.014:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.491244][ T30] audit: type=1326 audit(1763579146.014:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.514433][ T30] audit: type=1326 audit(1763579146.014:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.537282][ T30] audit: type=1326 audit(1763579146.014:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.561583][ T30] audit: type=1326 audit(1763579146.144:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.7.7909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e318f749 code=0x7ffc0000 [ 2104.589948][T23855] usb 7-1: config 0 descriptor?? [ 2104.630605][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2104.717197][T30599] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7908'. [ 2104.764853][T30601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7909'. [ 2104.787120][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2104.841420][ T12] bond0 (unregistering): Released all slaves [ 2104.869826][ T12] bond1 (unregistering): Released all slaves [ 2105.237296][T23855] usbhid 7-1:0.0: can't add hid device: -71 [ 2105.244133][T23855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2105.267356][T23855] usb 7-1: USB disconnect, device number 8 [ 2105.301984][T30605] tipc: Enabling of bearer rejected, failed to enable media [ 2105.313085][ T12] tipc: Left network mode [ 2105.856814][ T12] hsr_slave_0: left promiscuous mode [ 2105.871580][ T12] hsr_slave_1: left promiscuous mode [ 2105.880963][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2105.922505][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2105.953468][ T12] veth0_to_hsr: left allmulticast mode [ 2106.519470][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2106.546518][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2106.923301][T30632] tipc: Enabling of bearer rejected, failed to enable media [ 2107.140143][T30636] tipc: Enabled bearer , priority 0 [ 2107.228284][T30636] tipc: Resetting bearer [ 2107.425868][T30634] tipc: Disabling bearer [ 2107.892277][T30660] tipc: Enabled bearer , priority 0 [ 2107.911795][T30660] syzkaller0: entered promiscuous mode [ 2107.917815][T30660] syzkaller0: entered allmulticast mode [ 2107.930070][T30658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7923'. [ 2107.962245][T30662] tipc: Enabled bearer , priority 0 [ 2107.992798][T30662] syzkaller0: entered promiscuous mode [ 2107.998752][T30662] syzkaller0: entered allmulticast mode [ 2108.017871][T30660] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2108.072457][T30661] tipc: Resetting bearer [ 2108.094378][T30661] tipc: Disabling bearer [ 2108.132080][T30659] tipc: Resetting bearer [ 2108.208770][T30659] tipc: Disabling bearer [ 2108.285197][T25432] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2108.460867][T25432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2108.472883][T25432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.485832][T25432] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2108.497896][T25432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.556912][T25432] usb 8-1: config 0 descriptor?? [ 2109.201283][T25432] usbhid 8-1:0.0: can't add hid device: -71 [ 2109.208205][T25432] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2109.262514][T30681] netlink: 'syz.4.7932': attribute type 1 has an invalid length. [ 2109.272824][T30681] netlink: 'syz.4.7932': attribute type 2 has an invalid length. [ 2109.324712][T25432] usb 8-1: USB disconnect, device number 16 [ 2109.357693][T30682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7932'. [ 2110.145667][ T3558] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2110.264770][T23842] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2110.315237][ T3558] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 2110.323752][ T3558] bridge2 (unregistering): left promiscuous mode [ 2110.335910][ T3558] bridge2 (unregistering): left allmulticast mode [ 2110.445076][T23842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.456748][T23842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2110.466914][T23842] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2110.481701][T23842] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2110.491435][T23842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.506931][T23842] usb 7-1: config 0 descriptor?? [ 2110.522067][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2110.546136][ T3558] bond_slave_0: left promiscuous mode [ 2110.567521][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2110.579884][ T3558] bond_slave_1: left promiscuous mode [ 2110.620086][ T3558] bond0 (unregistering): Released all slaves [ 2110.650738][ T3558] bond1 (unregistering): Released all slaves [ 2110.678538][ T3558] bond2 (unregistering): Released all slaves [ 2110.941975][T23842] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 2110.950244][T23842] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 2110.960162][T23842] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 2110.969629][T23842] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 2110.979273][T23842] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 2110.988988][ T3558] tipc: Left network mode [ 2111.106435][T23842] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2111.230464][T23842] usb 7-1: USB disconnect, device number 9 [ 2111.363474][ T3558] hsr_slave_0: left promiscuous mode [ 2111.383133][ T3558] hsr_slave_1: left promiscuous mode [ 2111.390982][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2111.399336][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2111.453644][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2111.461718][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2111.536695][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 2111.536769][ T30] audit: type=1326 audit(1763579153.214:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.566291][ T30] audit: type=1326 audit(1763579153.214:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.589416][ T30] audit: type=1326 audit(1763579153.214:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.595150][ T3558] veth1_macvtap: left promiscuous mode [ 2111.612524][ T30] audit: type=1326 audit(1763579153.214:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.618677][ T3558] veth0_macvtap: left promiscuous mode [ 2111.641042][ C0] vkms_vblank_simulate: vblank timer overrun [ 2111.645301][ T30] audit: type=1326 audit(1763579153.214:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.649262][ T3558] veth1_vlan: left promiscuous mode [ 2111.652889][ T30] audit: type=1326 audit(1763579153.214:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.675381][ C0] vkms_vblank_simulate: vblank timer overrun [ 2111.675760][ T3558] veth0_vlan: left promiscuous mode [ 2111.717800][ T30] audit: type=1326 audit(1763579153.214:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.744704][ T30] audit: type=1326 audit(1763579153.214:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.769031][ T30] audit: type=1326 audit(1763579153.214:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2111.792069][ T30] audit: type=1326 audit(1763579153.214:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30713 comm="syz.4.7943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2112.113149][T30718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7943'. [ 2112.395312][T25429] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2112.570685][T25429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.582322][T25429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2112.592572][T25429] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2112.602219][T25429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.275907][T25429] usb 4-1: config 0 descriptor?? [ 2114.493315][T25429] usbhid 4-1:0.0: can't add hid device: -71 [ 2114.502010][T25429] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2114.543800][T30748] netlink: 'syz.7.7953': attribute type 1 has an invalid length. [ 2114.552300][T30748] netlink: 'syz.7.7953': attribute type 2 has an invalid length. [ 2114.602658][T25429] usb 4-1: USB disconnect, device number 12 [ 2114.645637][T30748] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7953'. [ 2115.375518][ T3558] team_slave_1 (unregistering): left promiscuous mode [ 2115.478307][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 2115.500775][ T3558] team_slave_0 (unregistering): left promiscuous mode [ 2115.808507][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 2117.406423][T23842] lo speed is unknown, defaulting to 1000 [ 2117.412863][T23842] infiniband syz2: ib_query_port failed (-19) [ 2117.697385][T30766] tipc: Enabled bearer , priority 0 [ 2117.717863][T30766] syzkaller0: entered promiscuous mode [ 2117.723603][T30766] syzkaller0: entered allmulticast mode [ 2117.756322][ T3558] IPVS: stop unused estimator thread 0... [ 2117.963798][T30767] tipc: Resetting bearer [ 2118.081498][T30765] tipc: Resetting bearer [ 2118.201683][T30765] tipc: Disabling bearer [ 2118.438029][ T8270] ip6gretap0 (unregistering): left promiscuous mode [ 2118.829115][ T8270] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 2118.837907][ T8270] bridge0 (unregistering): left promiscuous mode [ 2118.844518][ T8270] bridge0 (unregistering): left allmulticast mode [ 2119.314586][ T8270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2119.393591][T30775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7960'. [ 2119.440104][ T8270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2119.514147][ T8270] bond0 (unregistering): Released all slaves [ 2119.540557][ T8270] bond1 (unregistering): Released all slaves [ 2119.561069][ T8270] bond2 (unregistering): Released all slaves [ 2119.581521][ T8270] bond3 (unregistering): Released all slaves [ 2119.602633][ T8270] bond4 (unregistering): Released all slaves [ 2119.629072][ T8270] bond5 (unregistering): Released all slaves [ 2120.161563][T25432] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2120.366912][T25432] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.378411][T25432] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2120.388513][T25432] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2120.401892][T25432] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2120.411806][T25432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.659866][ T8270] tipc: Left network mode [ 2120.690379][T25432] usb 7-1: config 0 descriptor?? [ 2120.878428][T30787] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7964'. [ 2120.967207][ T8270] hsr_slave_0: left promiscuous mode [ 2121.015292][ T8270] hsr_slave_1: left promiscuous mode [ 2121.024348][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2121.082772][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2121.118756][T25432] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2121.126691][T25432] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2121.134346][T25432] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2121.154295][T25432] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2121.164151][T25432] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2121.358284][T25432] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2121.423522][T25432] usb 7-1: USB disconnect, device number 10 [ 2121.585218][ T8270] team_slave_1 (unregistering): left promiscuous mode [ 2121.633284][ T8270] team0 (unregistering): Port device team_slave_1 removed [ 2121.743493][ T8270] team_slave_0 (unregistering): left promiscuous mode [ 2121.756230][ T8270] team0 (unregistering): Port device team_slave_0 removed [ 2122.481787][ T8270] IPVS: stop unused estimator thread 0... [ 2122.931175][T30805] tipc: Enabled bearer , priority 0 [ 2122.978453][T30805] syzkaller0: entered promiscuous mode [ 2122.984216][T30805] syzkaller0: entered allmulticast mode [ 2123.140303][T30805] tipc: Resetting bearer [ 2123.238870][T30804] tipc: Resetting bearer [ 2123.319692][T30804] tipc: Disabling bearer [ 2123.375739][ T8270] bridge_slave_1: left allmulticast mode [ 2123.381687][ T8270] bridge_slave_1: left promiscuous mode [ 2123.388876][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.631216][ T8270] bridge_slave_0: left allmulticast mode [ 2123.637828][ T8270] bridge_slave_0: left promiscuous mode [ 2123.644536][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.437449][T30824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7976'. [ 2126.170236][ T8270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2127.077271][ T8270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2127.965552][ T8270] bond0 (unregistering): Released all slaves [ 2128.096890][T30864] tipc: Enabling of bearer rejected, failed to enable media [ 2128.506978][ T8270] tipc: Left network mode [ 2129.239928][ T8270] hsr_slave_0: left promiscuous mode [ 2129.324463][ T8270] hsr_slave_1: left promiscuous mode [ 2129.332398][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2129.378441][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2129.444157][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2131.308894][ T8270] team0 (unregistering): Port device team_slave_1 removed [ 2131.404764][ T8270] team0 (unregistering): Port device team_slave_0 removed [ 2131.734539][T30874] tipc: Enabling of bearer rejected, failed to enable media [ 2132.334861][T30909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7997'. [ 2133.043137][T30921] tipc: Enabled bearer , priority 0 [ 2133.097610][T30922] syzkaller0: entered promiscuous mode [ 2133.103335][T30922] syzkaller0: entered allmulticast mode [ 2133.261835][T30916] tipc: Resetting bearer [ 2133.376434][T30915] tipc: Resetting bearer [ 2133.453128][T30915] tipc: Disabling bearer [ 2133.955998][T30929] tipc: Enabling of bearer rejected, failed to enable media [ 2134.898897][T30938] tipc: Enabled bearer , priority 0 [ 2135.074272][T30940] tipc: Resetting bearer [ 2135.211969][T30936] tipc: Disabling bearer [ 2136.409120][T30957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8012'. [ 2137.020019][T30963] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8013'. [ 2137.942105][T30971] tipc: Enabled bearer , priority 0 [ 2137.989863][T30971] syzkaller0: entered promiscuous mode [ 2137.995641][T30971] syzkaller0: entered allmulticast mode [ 2138.174559][T30971] tipc: Resetting bearer [ 2138.268618][T30970] tipc: Resetting bearer [ 2138.331489][T30970] tipc: Disabling bearer [ 2138.865376][T30978] tipc: Enabled bearer , priority 0 [ 2138.938354][T30977] tipc: Disabling bearer [ 2139.639336][T30985] tipc: Enabled bearer , priority 0 [ 2139.701193][T30987] syzkaller0: entered promiscuous mode [ 2139.707006][T30987] syzkaller0: entered allmulticast mode [ 2139.865915][T30985] tipc: Resetting bearer [ 2139.948772][T30984] tipc: Resetting bearer [ 2139.991781][T30984] tipc: Disabling bearer [ 2141.002638][T31006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8025'. [ 2141.655961][T31015] tipc: Enabled bearer , priority 0 [ 2141.700177][T31017] tipc: Enabled bearer , priority 0 [ 2141.709539][T31015] syzkaller0: entered promiscuous mode [ 2141.715192][T31015] syzkaller0: entered allmulticast mode [ 2141.763372][T31016] tipc: Disabling bearer [ 2141.813941][T31015] tipc: Resetting bearer [ 2141.866284][T31012] tipc: Resetting bearer [ 2141.897817][T31012] tipc: Disabling bearer [ 2142.405328][T31028] syzkaller0: entered promiscuous mode [ 2142.411645][T31028] syzkaller0: entered allmulticast mode [ 2142.875199][T31044] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8041'. [ 2144.306090][T31071] tipc: Enabled bearer , priority 0 [ 2144.348902][T31071] syzkaller0: entered promiscuous mode [ 2144.354569][T31071] syzkaller0: entered allmulticast mode [ 2144.386023][T31071] tipc: Resetting bearer [ 2144.459425][T31069] tipc: Resetting bearer [ 2144.511693][T31069] tipc: Disabling bearer [ 2144.584745][T31082] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8053'. [ 2147.627312][T31123] tipc: Enabled bearer , priority 0 [ 2147.638291][T31123] syzkaller0: entered promiscuous mode [ 2147.640797][T31124] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8065'. [ 2147.643936][T31123] syzkaller0: entered allmulticast mode [ 2147.730137][T31128] tipc: Resetting bearer [ 2147.800567][T31120] tipc: Resetting bearer [ 2147.860644][T31120] tipc: Disabling bearer [ 2148.202835][T31134] syzkaller0: entered promiscuous mode [ 2148.208794][T31134] syzkaller0: entered allmulticast mode [ 2150.186031][T31174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8078'. [ 2150.399592][T31177] tipc: Enabled bearer , priority 0 [ 2150.429460][T31177] syzkaller0: entered promiscuous mode [ 2150.441834][T31177] syzkaller0: entered allmulticast mode [ 2150.467239][T31177] tipc: Resetting bearer [ 2150.519623][T31175] tipc: Resetting bearer [ 2150.562440][T31175] tipc: Disabling bearer [ 2151.174388][T31191] syzkaller0: entered promiscuous mode [ 2151.180171][T31191] syzkaller0: entered allmulticast mode [ 2151.440641][T31195] kvm: emulating exchange as write [ 2152.440484][T23856] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 2152.655274][T23856] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.668527][T23856] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2152.705507][T31223] overlayfs: failed to resolve './file1': -2 [ 2152.746615][T23856] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2152.756477][T23856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.764889][T23856] usb 8-1: Product: syz [ 2152.769400][T23856] usb 8-1: Manufacturer: syz [ 2152.774177][T23856] usb 8-1: SerialNumber: syz [ 2153.194614][T31172] loop7: detected capacity change from 0 to 1024 [ 2153.231464][T31172] hfsplus: Unknown parameter 'rootcontext' [ 2153.369058][T23856] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 2153.449882][T23856] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2153.486366][T23856] usb 8-1: USB disconnect, device number 17 [ 2153.809177][T31242] syzkaller0: entered promiscuous mode [ 2153.817202][T31242] syzkaller0: entered allmulticast mode [ 2155.240919][T31269] overlayfs: failed to resolve './file1': -2 [ 2156.745285][T31294] syzkaller0: entered promiscuous mode [ 2156.753984][T31294] syzkaller0: entered allmulticast mode [ 2159.772730][T31356] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8139'. [ 2160.461344][T17599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2160.476761][T17599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2160.486449][T17599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2160.501080][T17599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2160.540944][T17599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2162.639570][T25052] Bluetooth: hci4: command tx timeout [ 2162.897129][T31366] chnl_net:caif_netlink_parms(): no params data found [ 2164.635137][ T12] dvmrp8 (unregistering): left allmulticast mode [ 2164.695535][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2164.705239][ T12] bridge1 (unregistering): left promiscuous mode [ 2164.713943][ T12] bridge1 (unregistering): left allmulticast mode [ 2164.752775][T25052] Bluetooth: hci4: command tx timeout [ 2165.002738][T31412] fuse: Unknown parameter 'user_id00000000000000000000' [ 2165.139786][ T12] bond1 (unregistering): Released all slaves [ 2165.162535][ T12] bond2 (unregistering): Released all slaves [ 2165.317591][T31406] syzkaller0: entered promiscuous mode [ 2165.325639][T31406] syzkaller0: entered allmulticast mode [ 2165.522747][ T12] tipc: Left network mode [ 2165.800225][T31366] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.807815][T31366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.818217][T31366] bridge_slave_0: entered allmulticast mode [ 2165.827707][T31366] bridge_slave_0: entered promiscuous mode [ 2165.896093][T31415] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8159'. [ 2165.963430][T31366] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.971193][T31366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.978896][T31366] bridge_slave_1: entered allmulticast mode [ 2165.988365][T31366] bridge_slave_1: entered promiscuous mode [ 2166.056795][ T12] hsr_slave_0: left promiscuous mode [ 2166.080552][ T12] hsr_slave_1: left promiscuous mode [ 2166.088441][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2166.121214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2166.845047][T25052] Bluetooth: hci4: command tx timeout [ 2166.889480][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2166.922824][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2167.559975][T31366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2167.650311][T31366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2167.671870][ T12] IPVS: stop unused estimator thread 0... [ 2167.883084][T31366] team0: Port device team_slave_0 added [ 2167.914132][T31366] team0: Port device team_slave_1 added [ 2168.027256][T31366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2168.035678][T31366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2168.067212][T31366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2168.074558][T31366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2168.085205][T31366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2168.113101][T31366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2168.403423][T31366] hsr_slave_0: entered promiscuous mode [ 2168.413492][T31366] hsr_slave_1: entered promiscuous mode [ 2168.515511][T31454] fuse: Unknown parameter 'user_id00000000000000000000' [ 2168.730274][T31456] syzkaller0: entered promiscuous mode [ 2168.735941][T31456] syzkaller0: entered allmulticast mode [ 2168.770930][T31458] tipc: Enabled bearer , priority 0 [ 2168.854365][T31458] syzkaller0: entered promiscuous mode [ 2168.860202][T31458] syzkaller0: entered allmulticast mode [ 2168.886999][T25052] Bluetooth: hci4: command tx timeout [ 2169.203096][T31461] tipc: Resetting bearer [ 2169.310426][T31457] tipc: Resetting bearer [ 2169.352620][T31457] tipc: Disabling bearer [ 2170.264534][T31366] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2170.293648][T31366] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2170.333331][T31366] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2170.363870][T31366] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2171.148040][T31366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2171.299115][T31366] 8021q: adding VLAN 0 to HW filter on device team0 [ 2171.367140][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 2171.374840][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2171.437247][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 2171.444810][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2172.202595][T31496] tipc: Enabled bearer , priority 0 [ 2172.299966][T31496] syzkaller0: entered promiscuous mode [ 2172.305638][T31496] syzkaller0: entered allmulticast mode [ 2172.596358][T31498] syzkaller0: entered promiscuous mode [ 2172.602294][T31498] syzkaller0: entered allmulticast mode [ 2172.637319][T31496] tipc: Resetting bearer [ 2172.932304][T31495] tipc: Resetting bearer [ 2172.968729][T31495] tipc: Disabling bearer [ 2173.178337][T31366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2173.205000][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 2173.205070][ T30] audit: type=1326 audit(1763579214.868:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2173.234366][ T30] audit: type=1326 audit(1763579214.878:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2173.257279][ T30] audit: type=1326 audit(1763579214.878:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2173.284029][ T30] audit: type=1326 audit(1763579214.928:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2173.308515][ T30] audit: type=1326 audit(1763579214.928:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f214f78f783 code=0x7ffc0000 [ 2173.331155][ T30] audit: type=1326 audit(1763579214.928:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f214f78f807 code=0x7ffc0000 [ 2173.353892][ T30] audit: type=1326 audit(1763579214.928:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f214f746bdd code=0x7ffc0000 [ 2173.381893][ T30] audit: type=1326 audit(1763579214.928:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f214f7c3e89 code=0x7ffc0000 [ 2173.406278][ T30] audit: type=1326 audit(1763579214.948:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f214f746357 code=0x7ffc0000 [ 2173.429241][ T30] audit: type=1326 audit(1763579214.948:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31507 comm="syz.3.8187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f214f7463b6 code=0x7ffc0000 [ 2173.453768][T31510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8187'. [ 2174.219708][T31523] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8191'. [ 2174.999034][T31531] syz.3.8192 (31531) used greatest stack depth: 2440 bytes left [ 2175.352589][T31366] veth0_vlan: entered promiscuous mode [ 2175.476800][T31366] veth1_vlan: entered promiscuous mode [ 2175.701259][T31366] veth0_macvtap: entered promiscuous mode [ 2175.776200][T31366] veth1_macvtap: entered promiscuous mode [ 2175.806877][T31544] tipc: Enabled bearer , priority 0 [ 2175.924300][T31546] syzkaller0: entered promiscuous mode [ 2175.929970][T31546] syzkaller0: entered allmulticast mode [ 2176.012447][T31547] syzkaller0: entered promiscuous mode [ 2176.018118][T31547] syzkaller0: entered allmulticast mode [ 2176.099340][T31366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2176.417763][T31551] tipc: Resetting bearer [ 2176.459989][T31366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2176.482247][T31543] tipc: Resetting bearer [ 2176.533029][T31543] tipc: Disabling bearer [ 2176.607287][ T3558] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2176.668521][ T7818] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2176.730677][ T7818] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2176.775266][T15973] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2177.176215][T31558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8201'. [ 2177.856951][T31576] tipc: Enabling of bearer rejected, failed to enable media [ 2178.895976][T31586] syzkaller0: entered promiscuous mode [ 2178.901851][T31586] syzkaller0: entered allmulticast mode [ 2179.249950][T31593] tipc: Enabling of bearer rejected, failed to enable media [ 2180.490030][T31625] fuse: Unknown parameter '0x0000000000000004' [ 2181.175170][ T7818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2181.183445][ T7818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2181.319211][ T7818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2181.327442][ T7818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2181.612146][T31641] syzkaller0: entered promiscuous mode [ 2181.617810][T31641] syzkaller0: entered allmulticast mode [ 2181.994246][T31648] tipc: Enabling of bearer rejected, failed to enable media [ 2182.598314][T31664] fuse: Unknown parameter 'fd0x0000000000000004' [ 2184.240017][T25052] Bluetooth: Wrong link type (-57) [ 2184.565703][T31696] tipc: Enabling of bearer rejected, failed to enable media [ 2184.673596][T31702] fuse: Unknown parameter 'fd0x0000000000000004' [ 2187.352040][T31742] fuse: Unknown parameter 'fd0x0000000000000004' [ 2187.837735][T31749] tipc: Enabling of bearer rejected, failed to enable media [ 2190.752207][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2190.830148][T31784] netlink: 'syz.4.8275': attribute type 27 has an invalid length. [ 2192.004340][T31800] tipc: Enabling of bearer rejected, failed to enable media [ 2192.343454][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8284'. [ 2193.254711][T31821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8288'. [ 2194.746621][T31841] loop7: detected capacity change from 0 to 512 [ 2194.766538][T31841] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2194.819032][T31841] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.8295: iget: bogus i_mode (5) [ 2194.845547][T31841] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.8295: couldn't read orphan inode 15 (err -117) [ 2194.965459][T31841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2194.978352][T31841] ext2 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2195.722986][T31852] tipc: Enabling of bearer rejected, failed to enable media [ 2197.905537][T31366] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2199.715235][T31898] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001 [ 2199.725735][T31898] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2199.733359][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2199.753345][T25429] IPVS: starting estimator thread 0... [ 2199.838076][T31901] loop6: detected capacity change from 0 to 256 [ 2199.874009][T31899] IPVS: using max 240 ests per chain, 12000 per kthread [ 2200.069173][T31901] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 2200.300696][T31897] tipc: Enabling of bearer rejected, failed to enable media [ 2203.509813][T31933] loop3: detected capacity change from 0 to 1024 [ 2206.319564][T31957] loop4: detected capacity change from 0 to 1024 [ 2206.395957][T31957] EXT4-fs: Ignoring removed nobh option [ 2206.610072][T31957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2206.796000][T31957] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.8332: Allocating blocks 385-513 which overlap fs metadata [ 2206.899181][T31957] EXT4-fs (loop4): pa ffff888123668850: logic 16, phys. 129, len 24 [ 2206.907712][T31957] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2206.966941][T31964] loop7: detected capacity change from 0 to 128 [ 2207.235557][T29564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2207.240017][T31964] tipc: Started in network mode [ 2207.250267][T31964] tipc: Node identity 4, cluster identity 4711 [ 2207.257769][T31964] tipc: Node number set to 4 [ 2209.518366][T32004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8353'. [ 2209.774783][T32008] loop3: detected capacity change from 0 to 128 [ 2210.058813][T32008] tipc: Cannot configure node identity twice [ 2210.494139][T32022] netlink: 'syz.7.8360': attribute type 3 has an invalid length. [ 2212.436241][T32041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8366'. [ 2212.775467][T25429] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2212.998356][T32047] loop4: detected capacity change from 0 to 128 [ 2213.026425][T25429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.037934][T25429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.048024][T25429] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2213.061423][T25429] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2213.070777][T25429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.431989][T25429] usb 2-1: config 0 descriptor?? [ 2213.649769][T32041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.659659][T32041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.074381][T25429] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 2214.082181][T25429] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 2214.089993][T25429] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 2214.098096][T25429] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 2214.105856][T25429] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 2214.306155][T25429] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2214.395402][T25429] usb 2-1: USB disconnect, device number 5 [ 2216.074669][T32069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8377'. [ 2217.527218][T32086] loop7: detected capacity change from 0 to 128 [ 2218.857107][T32092] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.866528][T32092] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.168422][T32092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2219.192119][T32092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2221.882579][ T4545] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2221.932800][ T4545] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2221.986323][ T4545] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.045862][T30822] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.842192][T32143] loop1: detected capacity change from 0 to 128 [ 2223.107508][T32143] tipc: Cannot configure node identity twice [ 2224.124977][T32158] batadv_slave_0: entered promiscuous mode [ 2224.311289][T32161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8406'. [ 2225.780592][T32181] loop7: detected capacity change from 0 to 128 [ 2227.292626][T32208] netlink: 'syz.4.8425': attribute type 1 has an invalid length. [ 2227.301653][T32208] netlink: 'syz.4.8425': attribute type 2 has an invalid length. [ 2228.254546][T32226] loop6: detected capacity change from 0 to 128 [ 2228.398705][T32226] tipc: Cannot configure node identity twice [ 2229.363161][T32242] tipc: Enabled bearer , priority 0 [ 2229.374721][T32242] syzkaller0: entered promiscuous mode [ 2229.380703][T32242] syzkaller0: entered allmulticast mode [ 2229.417486][T32242] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2229.451236][T32242] tipc: Resetting bearer [ 2229.462641][T32239] tipc: Resetting bearer [ 2229.490499][T32239] tipc: Disabling bearer [ 2230.464689][T32256] netlink: 'syz.3.8445': attribute type 1 has an invalid length. [ 2230.472978][T32256] netlink: 'syz.3.8445': attribute type 2 has an invalid length. [ 2230.605755][T32258] loop4: detected capacity change from 0 to 128 [ 2231.757763][T32272] overlayfs: missing 'lowerdir' [ 2231.976396][T32274] tipc: Enabled bearer , priority 0 [ 2231.985944][T32274] syzkaller0: entered promiscuous mode [ 2231.991587][T32274] syzkaller0: entered allmulticast mode [ 2232.008347][T32274] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2232.031276][T32274] tipc: Resetting bearer [ 2232.095777][T32273] tipc: Resetting bearer [ 2232.108638][T32273] tipc: Disabling bearer [ 2233.317106][T32292] loop7: detected capacity change from 0 to 128 [ 2233.554394][T32296] netlink: 'syz.1.8461': attribute type 1 has an invalid length. [ 2233.562501][T32296] netlink: 'syz.1.8461': attribute type 2 has an invalid length. [ 2233.724462][T32298] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 2234.523760][T32313] overlayfs: missing 'lowerdir' [ 2234.968167][T32321] team0: No ports can be present during mode change [ 2235.144826][T32325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8471'. [ 2235.154780][T32325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2235.207416][T32325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2235.263978][T32327] loop4: detected capacity change from 0 to 128 [ 2235.274563][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 2235.274635][ T30] audit: type=1326 audit(1763579276.943:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32322 comm="syz.6.8472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2458f749 code=0x7fc00000 [ 2235.893975][T32340] netlink: 'syz.6.8478': attribute type 1 has an invalid length. [ 2235.902378][T32340] netlink: 'syz.6.8478': attribute type 2 has an invalid length. [ 2237.327450][T32360] overlayfs: missing 'lowerdir' [ 2237.653545][T32364] loop6: detected capacity change from 0 to 512 [ 2237.719818][T32364] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2237.776547][T32370] loop1: detected capacity change from 0 to 128 [ 2237.836324][T32364] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.8486: iget: bogus i_mode (5) [ 2237.896922][T32364] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8486: couldn't read orphan inode 15 (err -117) [ 2237.949226][T32370] tipc: Cannot configure node identity twice [ 2237.981004][T32364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2237.999184][T32364] ext2 filesystem being mounted at /272/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2238.196764][T32376] netlink: 'syz.4.8491': attribute type 4 has an invalid length. [ 2238.278464][T32377] netlink: 'syz.3.8492': attribute type 1 has an invalid length. [ 2238.287963][T32377] netlink: 'syz.3.8492': attribute type 2 has an invalid length. [ 2239.411290][T28340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2239.794971][T32400] syzkaller0: entered promiscuous mode [ 2239.801189][T32400] syzkaller0: entered allmulticast mode [ 2239.997075][T32402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8500'. [ 2240.049202][T32402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8500'. [ 2240.249988][T32408] loop4: detected capacity change from 0 to 128 [ 2240.594728][T32412] kvm: pic: non byte write [ 2240.799799][T32422] loop3: detected capacity change from 0 to 512 [ 2240.825095][T32422] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2240.906632][T32422] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.8507: iget: bogus i_mode (5) [ 2240.921976][T32422] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8507: couldn't read orphan inode 15 (err -117) [ 2240.939366][T32422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2240.952537][T32422] ext2 filesystem being mounted at /307/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2241.462059][T32426] netlink: 'syz.4.8508': attribute type 1 has an invalid length. [ 2241.470481][T32426] netlink: 'syz.4.8508': attribute type 2 has an invalid length. [ 2242.218937][T28158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2243.200069][T32452] loop4: detected capacity change from 0 to 128 [ 2244.193402][T32469] loop4: detected capacity change from 0 to 512 [ 2244.261517][T32469] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 2244.309946][T32469] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.8521: iget: bogus i_mode (5) [ 2244.395899][T32473] netlink: 'syz.3.8524': attribute type 1 has an invalid length. [ 2244.404113][T32473] netlink: 'syz.3.8524': attribute type 2 has an invalid length. [ 2244.455632][T32469] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.8521: couldn't read orphan inode 15 (err -117) [ 2244.548647][T32469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2244.561922][T32469] ext2 filesystem being mounted at /198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2245.929694][T29564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2246.279806][T32499] loop4: detected capacity change from 0 to 128 [ 2246.318548][T32503] syzkaller0: entered promiscuous mode [ 2246.324388][T32503] syzkaller0: entered allmulticast mode [ 2247.355239][T32520] netlink: 'syz.4.8540': attribute type 1 has an invalid length. [ 2247.363389][T32520] netlink: 'syz.4.8540': attribute type 2 has an invalid length. [ 2249.379462][T32536] netlink: 'syz.1.8545': attribute type 1 has an invalid length. [ 2249.476979][T32536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2249.488929][T32540] syzkaller0: entered promiscuous mode [ 2249.494580][T32540] syzkaller0: entered allmulticast mode [ 2249.843268][T32549] loop6: detected capacity change from 0 to 128 [ 2249.953534][T32537] bond1: (slave veth5): Enslaving as an active interface with a down link [ 2250.132244][T32536] bond1: (slave dummy0): making interface the new active one [ 2250.145088][T32536] dummy0: entered promiscuous mode [ 2250.151982][T32536] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2250.287255][T32549] tipc: Cannot configure node identity twice [ 2250.296937][T32553] loop4: detected capacity change from 0 to 512 [ 2250.398596][T32553] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2250.451538][T32553] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.8550: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0) [ 2250.567693][T32553] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.8550: couldn't read orphan inode 13 (err -117) [ 2250.631231][T32553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2250.821756][T32560] netlink: 'syz.6.8554': attribute type 1 has an invalid length. [ 2250.830318][T32560] netlink: 'syz.6.8554': attribute type 2 has an invalid length. [ 2250.937813][T29564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2252.219565][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2253.002073][ T30] audit: type=1326 audit(1763579294.641:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.025219][ T30] audit: type=1326 audit(1763579294.641:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.053092][ T30] audit: type=1326 audit(1763579294.661:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.077662][ T30] audit: type=1326 audit(1763579294.661:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.100636][ T30] audit: type=1326 audit(1763579294.661:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.123866][ T30] audit: type=1326 audit(1763579294.661:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.148106][ T30] audit: type=1326 audit(1763579294.661:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.175665][ T30] audit: type=1326 audit(1763579294.661:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.200294][ T30] audit: type=1326 audit(1763579294.661:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2253.224211][ T30] audit: type=1326 audit(1763579294.661:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32588 comm="syz.1.8565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6d6098f749 code=0x7ffc0000 [ 2254.129422][T32603] netlink: 'syz.3.8571': attribute type 1 has an invalid length. [ 2254.137752][T32603] netlink: 'syz.3.8571': attribute type 2 has an invalid length. [ 2254.753196][T32612] veth0_to_team: entered promiscuous mode [ 2254.759419][T32612] veth0_to_team: entered allmulticast mode [ 2255.801810][T32624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8580'. [ 2256.895107][T32641] netlink: 'syz.3.8587': attribute type 1 has an invalid length. [ 2256.903236][T32641] netlink: 'syz.3.8587': attribute type 2 has an invalid length. [ 2259.149204][T32672] netlink: 312 bytes leftover after parsing attributes in process `syz.6.8599'. [ 2259.712592][T32680] netlink: 'syz.6.8603': attribute type 1 has an invalid length. [ 2259.723932][T32680] netlink: 'syz.6.8603': attribute type 2 has an invalid length. [ 2261.328000][T32107] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 2261.526963][T32107] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.537834][T32107] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2261.911895][T32107] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2261.921454][T32107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.930146][T32107] usb 7-1: Product: syz [ 2261.934482][T32107] usb 7-1: Manufacturer: syz [ 2261.939353][T32107] usb 7-1: SerialNumber: syz [ 2262.102247][ T7818] dummy0: left promiscuous mode [ 2262.280115][T32712] loop3: detected capacity change from 0 to 512 [ 2262.315473][T32712] EXT4-fs: Ignoring removed mblk_io_submit option [ 2262.322418][T32712] EXT4-fs: inline encryption not supported [ 2262.328887][T32712] EXT4-fs: Ignoring removed mblk_io_submit option [ 2262.378094][T32712] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2262.385151][T32712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2262.467702][T32712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 2262.479028][T32107] usb 7-1: 0:2 : does not exist [ 2262.518418][T32712] System zones: 1-12 [ 2262.536994][T32712] EXT4-fs (loop3): 1 truncate cleaned up [ 2262.544904][T32712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2262.892306][T32107] usb 7-1: USB disconnect, device number 11 [ 2262.926638][T32712] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 2263.207375][T28158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2263.449673][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8622'. [ 2263.475562][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8622'. [ 2266.093949][ T308] cgroup: No subsys list or none specified [ 2268.247986][ T353] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8659'. [ 2268.257586][ T353] netlink: 59 bytes leftover after parsing attributes in process `syz.6.8659'. [ 2268.270512][ T353] netlink: 59 bytes leftover after parsing attributes in process `syz.6.8659'. [ 2268.821461][ T362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8663'. [ 2268.996935][ T362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8663'. [ 2269.029804][ T362] bond2 (unregistering): Released all slaves [ 2271.323226][ T420] loop7: detected capacity change from 0 to 1024 [ 2271.386156][ T420] EXT4-fs: inline encryption not supported [ 2271.392881][ T420] EXT4-fs: Ignoring removed nobh option [ 2271.399090][ T420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2271.490443][ T420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2271.599056][ T420] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.8687: corrupted in-inode xattr: e_name out of bounds [ 2271.829425][T31366] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2273.538973][ T475] loop7: detected capacity change from 0 to 256 [ 2273.640336][ T475] syz.7.8709: attempt to access beyond end of device [ 2273.640336][ T475] loop7: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 2274.781045][ T499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8719'. [ 2275.197259][ T504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8721'. [ 2275.237945][ T504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8721'. [ 2276.013231][ T517] loop7: detected capacity change from 0 to 64 [ 2279.329878][ T542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8734'. [ 2279.401293][ T548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8734'. [ 2280.273147][ T568] loop6: detected capacity change from 0 to 64 [ 2283.623912][ T610] syzkaller0: entered promiscuous mode [ 2283.629758][ T610] syzkaller0: entered allmulticast mode [ 2284.321714][ T622] netlink: 'syz.3.8768': attribute type 4 has an invalid length. [ 2284.329934][ T622] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8768'. [ 2284.336436][ T626] loop6: detected capacity change from 0 to 64 [ 2284.968587][T17599] Bluetooth: hci4: command 0x0406 tx timeout [ 2285.106543][ T632] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8774'. [ 2287.123664][ T646] syzkaller0: entered promiscuous mode [ 2287.129604][ T646] syzkaller0: entered allmulticast mode [ 2287.912464][ T665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8785'. [ 2288.522103][ T676] loop4: detected capacity change from 0 to 64 [ 2289.807178][ T688] syzkaller0: entered promiscuous mode [ 2289.814123][ T688] syzkaller0: entered allmulticast mode [ 2291.573225][ T709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8801'. [ 2292.228777][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 2292.228856][ T30] audit: type=1326 audit(2000000026.099:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.351049][ T30] audit: type=1326 audit(2000000026.139:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.379068][ T30] audit: type=1326 audit(2000000026.139:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.403605][ T30] audit: type=1326 audit(2000000026.139:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.426268][ T30] audit: type=1326 audit(2000000026.139:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.449478][ T30] audit: type=1326 audit(2000000026.139:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.476851][ T30] audit: type=1326 audit(2000000026.139:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.480877][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8807'. [ 2292.501518][ T30] audit: type=1326 audit(2000000026.169:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.531786][ T30] audit: type=1326 audit(2000000026.169:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.554597][ T30] audit: type=1326 audit(2000000026.189:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d858f749 code=0x7ffc0000 [ 2292.813216][ T734] loop7: detected capacity change from 0 to 64 [ 2293.365761][ T736] syzkaller0: entered promiscuous mode [ 2293.371728][ T736] syzkaller0: entered allmulticast mode [ 2296.167980][ T758] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8819'. [ 2296.847081][ T770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8825'. [ 2296.920216][ T777] loop3: detected capacity change from 0 to 64 [ 2297.244459][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 2297.244629][ T30] audit: type=1326 audit(2000000031.119:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.472903][ T30] audit: type=1326 audit(2000000031.159:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.497674][ T30] audit: type=1326 audit(2000000031.179:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.521325][ T30] audit: type=1326 audit(2000000031.179:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.544407][ T30] audit: type=1326 audit(2000000031.189:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.567193][ T30] audit: type=1326 audit(2000000031.209:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.590120][ T30] audit: type=1326 audit(2000000031.219:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.613587][ T30] audit: type=1326 audit(2000000031.219:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.636566][ T30] audit: type=1326 audit(2000000031.229:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2297.659466][ T30] audit: type=1326 audit(2000000031.229:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=766 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d609c2005 code=0x7ffc0000 [ 2299.604192][ T803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8837'. [ 2300.929272][ T821] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8843'. [ 2300.967866][ T821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8843'. [ 2302.465126][ T835] syzkaller0: entered promiscuous mode [ 2302.471043][ T835] syzkaller0: entered allmulticast mode [ 2304.564336][ T872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8866'. [ 2304.682523][ T877] kAFS: unable to lookup cell 'syz0&.ìv}.ba¡^Ž‹0¬' [ 2306.220299][ T898] overlayfs: cannot append lower layer [ 2307.107858][ T911] overlay: Unknown parameter '/' [ 2309.874380][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 2309.874454][ T30] audit: type=1326 audit(2000000043.749:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2309.914873][ T30] audit: type=1326 audit(2000000043.789:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2309.937963][ T30] audit: type=1326 audit(2000000043.789:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2309.961160][ T30] audit: type=1326 audit(2000000043.789:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2310.085953][ T962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8892'. [ 2310.139467][ T962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8892'. [ 2310.170113][ T30] audit: type=1326 audit(2000000043.869:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2310.193856][ T30] audit: type=1326 audit(2000000043.869:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2310.216919][ T30] audit: type=1326 audit(2000000043.869:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2310.239774][ T30] audit: type=1326 audit(2000000043.899:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2310.263959][ T30] audit: type=1326 audit(2000000043.899:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2310.287602][ T30] audit: type=1326 audit(2000000043.899:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=955 comm="syz.3.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f214f78f749 code=0x7ffc0000 [ 2313.800395][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2314.957627][ T1002] loop4: detected capacity change from 0 to 128 [ 2317.325114][ T1053] loop7: detected capacity change from 0 to 128 [ 2318.046470][ T1070] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8933'. [ 2318.232255][ T1073] ===================================================== [ 2318.239973][ T1073] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 2318.247220][ T1073] batadv_get_vid+0x2d0/0x3b0 [ 2318.252281][ T1073] batadv_interface_tx+0x2e5/0x1e60 [ 2318.257683][ T1073] dev_hard_start_xmit+0x22f/0xa30 [ 2318.263328][ T1073] __dev_queue_xmit+0x3c51/0x5e60 [ 2318.268649][ T1073] __bpf_redirect+0x162d/0x1760 [ 2318.273754][ T1073] bpf_clone_redirect+0x366/0x530 [ 2318.279170][ T1073] ___bpf_prog_run+0x1297/0xeba0 [ 2318.284336][ T1073] __bpf_prog_run512+0xc5/0x100 [ 2318.289481][ T1073] bpf_test_run+0x496/0xd80 [ 2318.294243][ T1073] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 2318.300070][ T1073] bpf_prog_test_run+0x5c2/0xa40 [ 2318.305158][ T1073] __sys_bpf+0x873/0xeb0 [ 2318.309742][ T1073] __x64_sys_bpf+0xa4/0xf0 [ 2318.314340][ T1073] x64_sys_call+0x3550/0x3e30 [ 2318.319543][ T1073] do_syscall_64+0xd9/0xfa0 [ 2318.324346][ T1073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.330638][ T1073] [ 2318.333041][ T1073] Uninit was created at: [ 2318.337638][ T1073] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 2318.344006][ T1073] kmalloc_reserve+0x13c/0x4b0 [ 2318.349150][ T1073] pskb_expand_head+0x1fc/0x1610 [ 2318.354356][ T1073] skb_ensure_writable+0x44e/0x510 [ 2318.359879][ T1073] bpf_clone_redirect+0x1c1/0x530 [ 2318.365111][ T1073] ___bpf_prog_run+0x1297/0xeba0 [ 2318.370400][ T1073] __bpf_prog_run512+0xc5/0x100 [ 2318.375405][ T1073] bpf_test_run+0x496/0xd80 [ 2318.380295][ T1073] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 2318.385931][ T1073] bpf_prog_test_run+0x5c2/0xa40 [ 2318.391164][ T1073] __sys_bpf+0x873/0xeb0 [ 2318.395537][ T1073] __x64_sys_bpf+0xa4/0xf0 [ 2318.400315][ T1073] x64_sys_call+0x3550/0x3e30 [ 2318.405172][ T1073] do_syscall_64+0xd9/0xfa0 [ 2318.410116][ T1073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.416172][ T1073] [ 2318.418797][ T1073] CPU: 0 UID: 0 PID: 1073 Comm: syz.7.8932 Not tainted syzkaller #0 PREEMPT(none) [ 2318.428380][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2318.438767][ T1073] ===================================================== [ 2318.445813][ T1073] Disabling lock debugging due to kernel taint [ 2318.452285][ T1073] Kernel panic - not syncing: kmsan.panic set ... [ 2318.458826][ T1073] CPU: 0 UID: 0 PID: 1073 Comm: syz.7.8932 Tainted: G B syzkaller #0 PREEMPT(none) [ 2318.469872][ T1073] Tainted: [B]=BAD_PAGE [ 2318.474103][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2318.484285][ T1073] Call Trace: [ 2318.487655][ T1073] [ 2318.490657][ T1073] __dump_stack+0x26/0x30 [ 2318.495141][ T1073] dump_stack_lvl+0x53/0x270 [ 2318.499871][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.505834][ T1073] dump_stack+0x1e/0x25 [ 2318.510121][ T1073] vpanic+0x435/0xd30 [ 2318.514348][ T1073] panic+0x15d/0x160 [ 2318.518422][ T1073] kmsan_report+0x31c/0x320 [ 2318.523055][ T1073] ? __msan_warning+0x1b/0x30 [ 2318.527859][ T1073] ? batadv_get_vid+0x2d0/0x3b0 [ 2318.532926][ T1073] ? batadv_interface_tx+0x2e5/0x1e60 [ 2318.538458][ T1073] ? dev_hard_start_xmit+0x22f/0xa30 [ 2318.543902][ T1073] ? __dev_queue_xmit+0x3c51/0x5e60 [ 2318.549281][ T1073] ? __bpf_redirect+0x162d/0x1760 [ 2318.554464][ T1073] ? bpf_clone_redirect+0x366/0x530 [ 2318.559830][ T1073] ? ___bpf_prog_run+0x1297/0xeba0 [ 2318.565063][ T1073] ? __bpf_prog_run512+0xc5/0x100 [ 2318.570295][ T1073] ? bpf_test_run+0x496/0xd80 [ 2318.575132][ T1073] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 2318.580932][ T1073] ? bpf_prog_test_run+0x5c2/0xa40 [ 2318.586225][ T1073] ? __sys_bpf+0x873/0xeb0 [ 2318.590774][ T1073] ? __x64_sys_bpf+0xa4/0xf0 [ 2318.595621][ T1073] ? x64_sys_call+0x3550/0x3e30 [ 2318.600625][ T1073] ? do_syscall_64+0xd9/0xfa0 [ 2318.605460][ T1073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.611666][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.616915][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.622884][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.628159][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.634119][ T1073] ? batadv_interface_tx+0x61/0x1e60 [ 2318.639567][ T1073] ? filter_irq_stacks+0x49/0x190 [ 2318.644895][ T1073] ? stack_depot_save_flags+0x35/0x7b0 [ 2318.650560][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.655834][ T1073] __msan_warning+0x1b/0x30 [ 2318.660456][ T1073] batadv_get_vid+0x2d0/0x3b0 [ 2318.665468][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.671460][ T1073] batadv_interface_tx+0x2e5/0x1e60 [ 2318.676907][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.682183][ T1073] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2318.688723][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.693999][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.700060][ T1073] ? __pfx_batadv_interface_tx+0x10/0x10 [ 2318.705889][ T1073] dev_hard_start_xmit+0x22f/0xa30 [ 2318.711201][ T1073] __dev_queue_xmit+0x3c51/0x5e60 [ 2318.716478][ T1073] ? skb_release_data+0xa12/0xac0 [ 2318.721657][ T1073] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 2318.728098][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.733371][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.739325][ T1073] ? __dev_queue_xmit+0x30c/0x5e60 [ 2318.745164][ T1073] __bpf_redirect+0x162d/0x1760 [ 2318.750183][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.755530][ T1073] bpf_clone_redirect+0x366/0x530 [ 2318.760838][ T1073] ___bpf_prog_run+0x1297/0xeba0 [ 2318.766090][ T1073] __bpf_prog_run512+0xc5/0x100 [ 2318.771082][ T1073] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2318.777600][ T1073] ? kmsan_internal_poison_memory+0x78/0x90 [ 2318.783667][ T1073] ? kmsan_internal_poison_memory+0x4a/0x90 [ 2318.789734][ T1073] ? kmsan_slab_alloc+0xde/0x160 [ 2318.794807][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.800052][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.806022][ T1073] ? bpf_test_run+0x41/0xd80 [ 2318.810775][ T1073] ? filter_irq_stacks+0x49/0x190 [ 2318.816036][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.821331][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.826592][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.831852][ T1073] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2318.838384][ T1073] ? kmsan_get_metadata+0x150/0x160 [ 2318.843740][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.849700][ T1073] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2318.855304][ T1073] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2318.860895][ T1073] bpf_test_run+0x496/0xd80 [ 2318.865550][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.870792][ T1073] ? kmsan_get_metadata+0xfb/0x160 [ 2318.876111][ T1073] ? bpf_test_run+0x2f7/0xd80 [ 2318.880955][ T1073] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2318.886905][ T1073] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 2318.892569][ T1073] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2318.898582][ T1073] bpf_prog_test_run+0x5c2/0xa40 [ 2318.903792][ T1073] __sys_bpf+0x873/0xeb0 [ 2318.908191][ T1073] __x64_sys_bpf+0xa4/0xf0 [ 2318.912806][ T1073] x64_sys_call+0x3550/0x3e30 [ 2318.917641][ T1073] do_syscall_64+0xd9/0xfa0 [ 2318.922389][ T1073] ? irqentry_exit+0x16/0x60 [ 2318.927210][ T1073] ? clear_bhb_loop+0x40/0x90 [ 2318.932026][ T1073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.938057][ T1073] RIP: 0033:0x7f040a78f749 [ 2318.942573][ T1073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2318.962308][ T1073] RSP: 002b:00007f040b542038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2318.970855][ T1073] RAX: ffffffffffffffda RBX: 00007f040a9e5fa0 RCX: 00007f040a78f749 [ 2318.978943][ T1073] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2318.987020][ T1073] RBP: 00007f040a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 2318.995090][ T1073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2319.003172][ T1073] R13: 00007f040a9e6038 R14: 00007f040a9e5fa0 R15: 00007fff1f979158 [ 2319.011298][ T1073] [ 2319.014831][ T1073] Kernel Offset: disabled [ 2319.019212][ T1073] Rebooting in 86400 seconds..