last executing test programs: 36m46.186398927s ago: executing program 1 (id=13): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0xfffffffffffffffd, {0x5, 0x12, 0x0, {0x1, 0x6, 0x4030cf7f, 0x8000000000000001, 0x6a2, 0x4, 0x80000000, 0xd, 0xe29, 0x8000, 0x3, 0x0, 0x0, 0x7fdfffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x2) 36m43.010669332s ago: executing program 1 (id=53): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36m42.934917186s ago: executing program 1 (id=57): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 36m41.889479958s ago: executing program 1 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x108540a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1001c80, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 36m41.875640768s ago: executing program 1 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0xb0600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'pimreg1\x00', 0xb1cc1e839e2df7d5}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36m41.776299534s ago: executing program 1 (id=85): creat(&(0x7f0000000040)='./bus\x00', 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000700)={0x0, 0x693f, 0x1, [0xaf, 0xffffffffffffffc5, 0x7ffffffffdffffff, 0x400, 0x29], [0x0, 0x7, 0xeffffffffffffefe, 0x4, 0x4, 0x10, 0xffffffffffbffffe, 0x3f, 0x5, 0x81, 0x40, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x8000, 0x4, 0x9, 0x202, 0x0, 0x9, 0x4000000009, 0xa, 0xd35a, 0x7fffffffffffffff, 0x9, 0x93, 0x23, 0x7, 0x20000005, 0x8fff, 0x7fff, 0x7, 0x1, 0x3, 0x3, 0xfa, 0x7fffffffffffffff, 0x1, 0x81, 0x7, 0x1, 0xa, 0xb8, 0xffffffffffffffff, 0x81, 0xe69e, 0x5, 0x2, 0x9, 0x8000, 0x6, 0x3, 0x7f, 0x405, 0x7ffffffd, 0x200, 0x4, 0x128a000, 0x2, 0x0, 0x1, 0x9, 0x200, 0x400, 0x6, 0xd, 0x756e, 0x6, 0x5, 0x2, 0x10000000000003, 0x3, 0x3fd, 0xb, 0x15, 0x2007, 0x1, 0x5, 0xc, 0xc51c, 0xfa18, 0xffffffffffffffff, 0x2, 0x81, 0x8, 0x9, 0x1, 0x52, 0x5, 0xca, 0x2, 0xc, 0xffff800000000000, 0xc7f8, 0x10088, 0xfffffffd, 0x49, 0x7, 0xffffffffffffffff, 0x1, 0x7, 0xfffffffffffffffe, 0xcd, 0xf, 0x1, 0x82, 0xd9f, 0x10000000000006, 0x4, 0x4, 0x0, 0x0, 0x82, 0x4000002d, 0x8, 0x7, 0x9, 0x44]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 36m41.776108574s ago: executing program 32 (id=85): creat(&(0x7f0000000040)='./bus\x00', 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000700)={0x0, 0x693f, 0x1, [0xaf, 0xffffffffffffffc5, 0x7ffffffffdffffff, 0x400, 0x29], [0x0, 0x7, 0xeffffffffffffefe, 0x4, 0x4, 0x10, 0xffffffffffbffffe, 0x3f, 0x5, 0x81, 0x40, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x8000, 0x4, 0x9, 0x202, 0x0, 0x9, 0x4000000009, 0xa, 0xd35a, 0x7fffffffffffffff, 0x9, 0x93, 0x23, 0x7, 0x20000005, 0x8fff, 0x7fff, 0x7, 0x1, 0x3, 0x3, 0xfa, 0x7fffffffffffffff, 0x1, 0x81, 0x7, 0x1, 0xa, 0xb8, 0xffffffffffffffff, 0x81, 0xe69e, 0x5, 0x2, 0x9, 0x8000, 0x6, 0x3, 0x7f, 0x405, 0x7ffffffd, 0x200, 0x4, 0x128a000, 0x2, 0x0, 0x1, 0x9, 0x200, 0x400, 0x6, 0xd, 0x756e, 0x6, 0x5, 0x2, 0x10000000000003, 0x3, 0x3fd, 0xb, 0x15, 0x2007, 0x1, 0x5, 0xc, 0xc51c, 0xfa18, 0xffffffffffffffff, 0x2, 0x81, 0x8, 0x9, 0x1, 0x52, 0x5, 0xca, 0x2, 0xc, 0xffff800000000000, 0xc7f8, 0x10088, 0xfffffffd, 0x49, 0x7, 0xffffffffffffffff, 0x1, 0x7, 0xfffffffffffffffe, 0xcd, 0xf, 0x1, 0x82, 0xd9f, 0x10000000000006, 0x4, 0x4, 0x0, 0x0, 0x82, 0x4000002d, 0x8, 0x7, 0x9, 0x44]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 36m40.534084507s ago: executing program 0 (id=109): syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x200020, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 36m40.387095126s ago: executing program 0 (id=111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x1, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 36m40.247414314s ago: executing program 0 (id=114): utimensat(0xffffffffffffff9c, &(0x7f0000019440)='.\x00', &(0x7f0000000080)={{}, {0x0, 0xffffffffffffffff}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000000)='./file2\x00', 0x1808001, &(0x7f0000000080)=ANY=[], 0x1, 0x556e, &(0x7f0000004000)="$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") r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 36m39.734833244s ago: executing program 0 (id=123): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x800008, &(0x7f0000000000)={[{@init_itable}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x515, &(0x7f00000040c0)="$eJzs3b9vW1sdAPDvdeImzUtf+uAhAQJeeRQKquokbhtVXWgXEKoqISomhjYkbhTFrqPYFU3okI7slajEBH8CGwNSJwY2NthYyoBUoAI1SAxG99pJ3cRJDHHi1v58pBufH66/58Q959intU8AQ+tcRGxGxKmIuBcRU63ypHXFjeaV3u/1q8cLW68eLyTRaNz5e5LVp2XR9mdSH7QeczwifvDdiB8ne+PW1jdW5svl0lorP12vrE7X1jcuLedaJcW52bmZa5evFnvW108qv375neVbP/ztb7784g+b3/pp2qzJn53J6tr70UvNrudjsq1sNCJuHUewPhlt/f3h/ZOOts9ExKfZ+J+KkezZBAAGWaMxFY2p9jwAMOjS9/+TkeQKrb2AycjlCoXmHt7HMZErV2v1i1PVhw8WI9vDOhv53P3lcmmmtVd4NvJJmp/N0m/yxbfyT0uXI+KjiHg6djqrLyxUy4v9fOEDAEPsg13r/7/Gmus/ADDgxvvdAADgxFn/AWD4WP8BYPj8D+u/TwcCwIDw/h8Aho/1HwCGz6Hr/5OTaQcAcCK+f/t2ejW2mt9/vf1N3ZcWS7WVQuXhQmGhurZaWKpWl8qlwkKjcdjjlavV1dkrO9na+sbdSvXhg/rd5cr8UuluKX+cnQEAuvLRJ8//lC76m9dPZ1e0neVgrYbBlut3A4C+Gel3A4C+8XkeGF5dvMe3DQADrsMRvW/Z978IPXP4K7yvLnzB/j8Mq6Ps/9s7gPfb/7f//+2etwM4edZwGF6NRuLMfwAYMvb4gSP9+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMqcnsSnKF7CzwzfRnrlCIOBMRZyOf3F8ul2Yi4sOI+ONYfizNz/a70QDAEeX+mrTO/7owdX5yd+2p5N9j2W1E/OQXd37+aL5eX5tNy/+xU15/lpafrq8VT/WjAwBAuxt7i7L1u5jdjraXv371eGH7OsEWxsubzcNF07hbratZMxrNBo5HPiIm/plEe4PT1ysjPYi/+SQiPr/d//F41BZhMtsDaZ58ujt+GvtMz+O3//53x8+91d9cVpfe5rPfxWe7iva5HrQYBsfzm815sjX20iHeGn+5OJfddh7/49kMdXTp/JeO6609819uZ/4b2RM/ycb8uZ38wS15eeV339tT2Jhq1j2J+OJop/jJTvyk8/ybP99lH//8pa98ul9d45cRFzr2f/tE6ko2zU7XK6vTtfWNS8uV+aXSUulBsTg3Ozdz7fLV4nS2R938+ftOMf52/eKH+8VP+z+xT/zxg/sfX++y/7/6z70fffWA+N/8Wufn/+MD4qdr4je6jD8/cWPf47vT+Iv79P+Q5z8udhn/xV82Fru8KwBwAmrrGyvz5XJp7ZBE+lrzsPtIdJ9I39u/A83IErEZ0asHzDYlIqLjfdJX1O9Gl48rkbwbzehFot8zE3Dc3gz6frcEAAAAAAAAAAAAAADYT219Y2Ws86e1epbodx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYXP8NAAD//ztTwv0=") ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) syz_pidfd_open(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002500)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 36m39.411368152s ago: executing program 0 (id=127): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000180)="c94522e546f93f6dedf11f15", 0xc}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8d81a5d0c98199e5, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 36m39.200308634s ago: executing program 0 (id=129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 36m39.187694146s ago: executing program 33 (id=129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 36m25.085627129s ago: executing program 4 (id=357): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0xfffffffffffffffe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) 36m22.090226964s ago: executing program 4 (id=398): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004851) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x108) 36m22.069266925s ago: executing program 4 (id=399): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36m21.97661873s ago: executing program 4 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x108540a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1001c80, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 36m21.930613344s ago: executing program 4 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5498a8b52a905021) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RLOCK(r2, &(0x7f0000000480)={0x8, 0x35, 0x1, 0x1}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 36m21.860135558s ago: executing program 4 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x22e00e0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000700), 0x0, 0x0, 0x3) 36m21.783509342s ago: executing program 34 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x22e00e0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000700), 0x0, 0x0, 0x3) 1.857966211s ago: executing program 3 (id=14874): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x11e, 0x1, &(0x7f0000000140), 0x4) 1.788407595s ago: executing program 3 (id=14879): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 1.788245915s ago: executing program 3 (id=14880): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18090000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000e0000850000000f000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.787881115s ago: executing program 3 (id=14882): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd70000009000002"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.52828375s ago: executing program 3 (id=14894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.52801014s ago: executing program 3 (id=14896): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x80000000, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x4, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, 0x0) 985.332652ms ago: executing program 7 (id=14936): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002022cd2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 948.537764ms ago: executing program 7 (id=14938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004080) 900.887127ms ago: executing program 7 (id=14943): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, 0x0, 0x0, 0x12008010, 0x0, 0x0) 856.06361ms ago: executing program 7 (id=14945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 832.046151ms ago: executing program 7 (id=14949): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002022cd2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 777.283825ms ago: executing program 7 (id=14951): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c20969"}, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 346.45181ms ago: executing program 6 (id=14988): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x802, 0x10, @mcast2, @empty, 0x10, 0x0, 0xe7, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x88364000) openat$tun(0xffffffffffffff9c, 0x0, 0x48245, 0x0) 213.928408ms ago: executing program 2 (id=14992): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 165.463201ms ago: executing program 6 (id=14994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 165.154911ms ago: executing program 2 (id=14995): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010000009356f70f00000a0000000000000000000000140005"], 0x30}}, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000200)=0x2, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r3], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc4, &(0x7f00000005c0)=""/196, 0x41000, 0x1a, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x3, 0x5, 0x0, 0x2}, {0x3, 0x5, 0x5, 0x5}, {0x1, 0x5, 0xc, 0xa}, {0x5, 0x3, 0xd, 0xb}, {0x1, 0x3, 0xf, 0x5}, {0x5, 0x2, 0x9, 0x3}], 0x10, 0x2}, 0x94) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d9311000000f8dbdf25010000000c0003000300000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) 164.987401ms ago: executing program 5 (id=14996): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) 164.794281ms ago: executing program 6 (id=14997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003840)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 164.725661ms ago: executing program 5 (id=14998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a02000000000018010000202078250000000000202020791af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 145.912172ms ago: executing program 6 (id=14999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 145.360312ms ago: executing program 2 (id=15000): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c"], 0x40}, 0x2000c0c4) 134.779353ms ago: executing program 5 (id=15001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 103.821604ms ago: executing program 2 (id=15002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 103.376004ms ago: executing program 5 (id=15003): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 78.051625ms ago: executing program 2 (id=15004): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b80a000500000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 77.545036ms ago: executing program 6 (id=15005): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 67.069877ms ago: executing program 5 (id=15006): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 51.219098ms ago: executing program 2 (id=15007): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 50.870778ms ago: executing program 6 (id=15008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 5 (id=15009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): LM_F_REPLACE [ 1723.743345][ T4272] IPv6: NLM_F_CREATE should be set when creating new route [ 1723.754072][ T4272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1723.761341][ T4272] IPv6: NLM_F_CREATE should be set when creating new route [ 1723.790700][ T4273] bridge0: port 1(macsec1) entered blocking state [ 1723.797316][ T4273] bridge0: port 1(macsec1) entered disabled state [ 1723.854469][ T4280] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2889491942/2889491943 [ 1723.863848][ T4280] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2889491942/2889491943 [ 1725.160118][ T4285] bridge0: port 1(macsec1) entered blocking state [ 1725.198631][ T4285] bridge0: port 1(macsec1) entered disabled state [ 1725.214287][ T4286] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3749187710/3749187711 [ 1725.282641][ T4286] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3749187710/3749187711 [ 1725.509858][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13165'. [ 1725.551746][ T4302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.559052][ T4302] IPv6: NLM_F_CREATE should be set when creating new route [ 1725.676651][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13166'. [ 1726.423507][ T4317] bridge0: port 1(macsec1) entered blocking state [ 1726.440934][ T4317] bridge0: port 1(macsec1) entered disabled state [ 1726.463184][ T4319] bridge0: port 3(macsec1) entered blocking state [ 1726.474054][ T4319] bridge0: port 3(macsec1) entered disabled state [ 1726.490838][ T4320] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2963426420/2963426421 [ 1726.513205][ T4320] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2963426420/2963426421 [ 1726.535371][ T4321] tipc: Failed to remove unknown binding: 66,1,1/405408208:1751215635/1751215636 [ 1726.575398][ T4321] tipc: Failed to remove unknown binding: 66,1,1/405408208:1751215635/1751215636 [ 1726.740854][ T4326] device bridge0 entered promiscuous mode [ 1726.752791][ T4326] bridge0: port 1(macsec1) entered blocking state [ 1726.764482][ T4326] bridge0: port 1(macsec1) entered disabled state [ 1726.772048][ T4326] device bridge0 left promiscuous mode [ 1726.900851][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13176'. [ 1726.938475][ T4339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1726.945832][ T4339] IPv6: NLM_F_CREATE should be set when creating new route [ 1727.163463][ T4349] device bridge0 entered promiscuous mode [ 1727.169831][ T4349] bridge0: port 1(macsec1) entered blocking state [ 1727.176309][ T4349] bridge0: port 1(macsec1) entered disabled state [ 1727.183998][ T4349] device bridge0 left promiscuous mode [ 1727.231919][ T4351] tipc: Failed to remove unknown binding: 66,1,1/4:3672836356/3672836357 [ 1727.240769][ T4351] tipc: Failed to remove unknown binding: 66,1,1/4:3672836356/3672836357 [ 1727.297685][ T4353] device bridge0 entered promiscuous mode [ 1727.304448][ T4353] bridge0: port 1(macsec1) entered blocking state [ 1727.311343][ T4353] bridge0: port 1(macsec1) entered disabled state [ 1727.320447][ T4353] device bridge0 left promiscuous mode [ 1727.370509][ T4353] tipc: Failed to remove unknown binding: 66,1,1/4:2318514574/2318514575 [ 1727.379084][ T4353] tipc: Failed to remove unknown binding: 66,1,1/4:2318514574/2318514575 [ 1727.412196][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13181'. [ 1727.429117][ T4356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.436450][ T4356] IPv6: NLM_F_CREATE should be set when creating new route [ 1727.446894][ T4356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13181'. [ 1727.484710][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13182'. [ 1727.503364][ T4358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.510688][ T4358] IPv6: NLM_F_CREATE should be set when creating new route [ 1727.558143][ T4360] device bridge0 entered promiscuous mode [ 1727.571213][ T4360] bridge0: port 1(macsec1) entered blocking state [ 1727.585511][ T4360] bridge0: port 1(macsec1) entered disabled state [ 1727.601582][ T4360] device bridge0 left promiscuous mode [ 1727.621987][ T4362] tipc: Failed to remove unknown binding: 66,1,1/4:177910873/177910874 [ 1727.630843][ T4362] tipc: Failed to remove unknown binding: 66,1,1/4:177910873/177910874 [ 1727.724822][ T4370] bridge0: port 3(macsec1) entered blocking state [ 1727.731526][ T4370] bridge0: port 3(macsec1) entered disabled state [ 1727.802147][ T4370] tipc: Failed to remove unknown binding: 66,1,1/405408208:33479172/33479173 [ 1727.818342][ T4370] tipc: Failed to remove unknown binding: 66,1,1/405408208:33479172/33479173 [ 1728.204562][ T4384] device bridge0 entered promiscuous mode [ 1728.212148][ T4384] bridge0: port 3(macsec1) entered blocking state [ 1728.219559][ T4384] bridge0: port 3(macsec1) entered disabled state [ 1728.227180][ T4384] device bridge0 left promiscuous mode [ 1728.366174][ T4388] device bridge0 entered promiscuous mode [ 1728.478026][ T4388] bridge0: port 3(macsec1) entered blocking state [ 1728.568443][ T4388] bridge0: port 3(macsec1) entered disabled state [ 1728.708437][ T4388] device bridge0 left promiscuous mode [ 1728.754583][ T4396] device bridge0 entered promiscuous mode [ 1728.761007][ T4396] bridge0: port 1(macsec1) entered blocking state [ 1728.767558][ T4396] bridge0: port 1(macsec1) entered disabled state [ 1728.774951][ T4396] device bridge0 left promiscuous mode [ 1728.842677][ T4398] tipc: Failed to remove unknown binding: 66,1,1/4:2982292037/2982292038 [ 1728.851735][ T4398] tipc: Failed to remove unknown binding: 66,1,1/4:2982292037/2982292038 [ 1730.775376][ T4410] bridge0: port 1(macsec1) entered blocking state [ 1730.781904][ T4410] bridge0: port 1(macsec1) entered disabled state [ 1731.182485][ T4416] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3384672179/3384672180 [ 1731.207131][ T4416] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3384672179/3384672180 [ 1731.387009][ T4424] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1731.398637][ T4424] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1732.391444][ T4433] bridge0: port 3(macsec1) entered blocking state [ 1732.409084][ T4433] bridge0: port 3(macsec1) entered disabled state [ 1732.419887][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13204'. [ 1732.436512][ T4438] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13204'. [ 1732.987832][ T4433] tipc: Failed to remove unknown binding: 66,1,1/405408208:2993200476/2993200477 [ 1733.021025][ T4433] tipc: Failed to remove unknown binding: 66,1,1/405408208:2993200476/2993200477 [ 1734.017775][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13209'. [ 1734.293632][ T4460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1734.301069][ T4460] IPv6: NLM_F_CREATE should be set when creating new route [ 1736.494433][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13211'. [ 1736.516864][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13212'. [ 1736.536459][ T4456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13209'. [ 1736.550877][ T4466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1736.558177][ T4466] IPv6: NLM_F_CREATE should be set when creating new route [ 1736.616092][ T4467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1736.623522][ T4467] IPv6: NLM_F_CREATE should be set when creating new route [ 1736.888418][ T4481] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1736.900216][ T4481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1738.713628][ T4509] device bridge0 entered promiscuous mode [ 1738.720217][ T4509] bridge0: port 3(macsec1) entered blocking state [ 1738.727474][ T4509] bridge0: port 3(macsec1) entered disabled state [ 1738.735411][ T4509] device bridge0 left promiscuous mode [ 1738.858477][ T4512] device bridge0 entered promiscuous mode [ 1738.865139][ T4512] bridge0: port 1(macsec1) entered blocking state [ 1738.871658][ T4512] bridge0: port 1(macsec1) entered disabled state [ 1738.880202][ T4512] device bridge0 left promiscuous mode [ 1739.071491][ T4523] device bridge0 entered promiscuous mode [ 1739.089884][ T4523] bridge0: port 1(macsec1) entered blocking state [ 1739.135981][ T4523] bridge0: port 1(macsec1) entered disabled state [ 1739.234114][ T4523] device bridge0 left promiscuous mode [ 1739.286851][ T4526] tipc: Failed to remove unknown binding: 66,1,1/1555583039:4224602050/4224602051 [ 1739.387961][ T4526] tipc: Failed to remove unknown binding: 66,1,1/1555583039:4224602050/4224602051 [ 1739.424512][ T4529] bridge0: port 1(macsec1) entered blocking state [ 1739.431200][ T4529] bridge0: port 1(macsec1) entered disabled state [ 1739.482827][ T4528] tipc: Failed to remove unknown binding: 66,1,1/2568204292:940266045/940266046 [ 1739.502810][ T4528] tipc: Failed to remove unknown binding: 66,1,1/2568204292:940266045/940266046 [ 1740.926371][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13234'. [ 1740.965782][ T4547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1740.973130][ T4547] IPv6: NLM_F_CREATE should be set when creating new route [ 1741.022264][ T4547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13234'. [ 1742.960125][ T4574] device bridge0 entered promiscuous mode [ 1742.969331][ T4574] bridge0: port 1(macsec1) entered blocking state [ 1742.975796][ T4574] bridge0: port 1(macsec1) entered disabled state [ 1742.995693][ T4574] device bridge0 left promiscuous mode [ 1743.040702][ T4581] tipc: Failed to remove unknown binding: 66,1,1/4:3006350345/3006350346 [ 1743.053738][ T4581] tipc: Failed to remove unknown binding: 66,1,1/4:3006350345/3006350346 [ 1743.134386][ T4588] bridge0: port 1(macsec1) entered blocking state [ 1743.141033][ T4588] bridge0: port 1(macsec1) entered disabled state [ 1743.404436][ T4591] incfs: Backing dir is not set, filesystem can't be mounted. [ 1743.412346][ T4591] incfs: mount failed -2 [ 1744.132491][ T4588] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2584110412/2584110413 [ 1744.174108][ T4588] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2584110412/2584110413 [ 1744.265876][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13248'. [ 1744.322030][ T4599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1744.329350][ T4599] IPv6: NLM_F_CREATE should be set when creating new route [ 1744.387630][ T4603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1744.720805][ T4618] device bridge0 entered promiscuous mode [ 1744.727406][ T4618] bridge0: port 1(macsec1) entered blocking state [ 1744.733932][ T4618] bridge0: port 1(macsec1) entered disabled state [ 1744.742723][ T4618] device bridge0 left promiscuous mode [ 1744.786790][ T4619] tipc: Failed to remove unknown binding: 66,1,1/1555583039:2602006641/2602006642 [ 1744.806478][ T4619] tipc: Failed to remove unknown binding: 66,1,1/1555583039:2602006641/2602006642 [ 1745.459240][ T4629] bridge0: port 1(macsec1) entered blocking state [ 1745.465716][ T4629] bridge0: port 1(macsec1) entered disabled state [ 1745.484984][ T4631] device bridge0 entered promiscuous mode [ 1745.491382][ T4631] bridge0: port 3(macsec1) entered blocking state [ 1745.497869][ T4631] bridge0: port 3(macsec1) entered disabled state [ 1745.626157][ T4631] device bridge0 left promiscuous mode [ 1745.870570][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13260'. [ 1745.886542][ T4642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1745.893812][ T4642] IPv6: NLM_F_CREATE should be set when creating new route [ 1745.926849][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13261'. [ 1745.943588][ T4644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1745.950902][ T4644] IPv6: NLM_F_CREATE should be set when creating new route [ 1745.988001][ T4644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13261'. [ 1746.040786][ T4651] device bridge0 entered promiscuous mode [ 1746.050411][ T4651] bridge0: port 1(macsec1) entered blocking state [ 1746.057581][ T4651] bridge0: port 1(macsec1) entered disabled state [ 1746.064981][ T4651] device bridge0 left promiscuous mode [ 1746.079164][ T4652] bridge0: port 1(macsec1) entered blocking state [ 1746.095512][ T4652] bridge0: port 1(macsec1) entered disabled state [ 1746.109373][ T4655] bridge0: port 3(macsec1) entered blocking state [ 1746.116181][ T4655] bridge0: port 3(macsec1) entered disabled state [ 1746.143459][ T4656] tipc: Failed to remove unknown binding: 66,1,1/2568204292:4110709502/4110709503 [ 1746.152806][ T4656] tipc: Failed to remove unknown binding: 66,1,1/2568204292:4110709502/4110709503 [ 1746.167920][ T4651] tipc: Failed to remove unknown binding: 66,1,1/1555583039:2407502150/2407502151 [ 1746.177432][ T4651] tipc: Failed to remove unknown binding: 66,1,1/1555583039:2407502150/2407502151 [ 1746.215285][ T4660] device bridge0 entered promiscuous mode [ 1746.221325][ T4655] tipc: Failed to remove unknown binding: 66,1,1/405408208:1218628471/1218628472 [ 1746.222510][ T4660] bridge0: port 1(macsec1) entered blocking state [ 1746.237154][ T4660] bridge0: port 1(macsec1) entered disabled state [ 1746.558837][ T4662] incfs: Backing dir is not set, filesystem can't be mounted. [ 1746.566398][ T4662] incfs: mount failed -2 [ 1747.241016][ T4655] tipc: Failed to remove unknown binding: 66,1,1/405408208:1218628471/1218628472 [ 1747.268101][ T4660] device bridge0 left promiscuous mode [ 1747.287344][ T4664] bridge0: port 1(macsec1) entered blocking state [ 1747.294048][ T4664] bridge0: port 1(macsec1) entered disabled state [ 1747.325427][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13269'. [ 1747.338372][ T4669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1747.345709][ T4669] IPv6: NLM_F_CREATE should be set when creating new route [ 1747.358728][ T4672] tipc: Failed to remove unknown binding: 66,1,1/2568204292:319064655/319064656 [ 1747.378461][ T4672] tipc: Failed to remove unknown binding: 66,1,1/2568204292:319064655/319064656 [ 1747.480879][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13273'. [ 1747.576734][ T4681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1747.584028][ T4681] IPv6: NLM_F_CREATE should be set when creating new route [ 1747.678997][ T4679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1747.686309][ T4679] IPv6: NLM_F_CREATE should be set when creating new route [ 1747.721765][ T4683] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13272'. [ 1747.822257][ T4685] bridge0: port 1(macsec1) entered blocking state [ 1747.828728][ T4685] bridge0: port 1(macsec1) entered disabled state [ 1747.863293][ T4691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13277'. [ 1747.887032][ T4686] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2273105813/2273105814 [ 1747.896443][ T4686] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2273105813/2273105814 [ 1747.902068][ T4694] device bridge0 entered promiscuous mode [ 1747.914547][ T4694] bridge0: port 1(macsec1) entered blocking state [ 1747.921067][ T4694] bridge0: port 1(macsec1) entered disabled state [ 1747.928571][ T4694] device bridge0 left promiscuous mode [ 1747.960218][ T4697] tipc: Failed to remove unknown binding: 66,1,1/4:3748597818/3748597819 [ 1747.968779][ T4697] tipc: Failed to remove unknown binding: 66,1,1/4:3748597818/3748597819 [ 1748.000174][ T4699] bridge0: port 1(macsec1) entered blocking state [ 1748.008643][ T4699] bridge0: port 1(macsec1) entered disabled state [ 1748.018844][ T4696] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13276'. [ 1748.045933][ T4703] device bridge0 entered promiscuous mode [ 1748.052236][ T4703] bridge0: port 1(macsec1) entered blocking state [ 1748.059759][ T4703] bridge0: port 1(macsec1) entered disabled state [ 1748.067366][ T4703] device bridge0 left promiscuous mode [ 1748.082723][ T4699] tipc: Failed to remove unknown binding: 66,1,1/2568204292:1894462940/1894462941 [ 1748.092020][ T4699] tipc: Failed to remove unknown binding: 66,1,1/2568204292:1894462940/1894462941 [ 1748.160832][ T4706] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1748.424013][ T4705] tipc: Failed to remove unknown binding: 66,1,1/4:1622712912/1622712913 [ 1748.433996][ T4705] tipc: Failed to remove unknown binding: 66,1,1/4:1622712912/1622712913 [ 1748.448801][ T4708] bridge0: port 1(macsec1) entered blocking state [ 1748.456703][ T4708] bridge0: port 1(macsec1) entered disabled state [ 1748.506753][ T4713] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3423193600/3423193601 [ 1748.516149][ T4713] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3423193600/3423193601 [ 1749.582960][ T4721] bridge0: port 3(macsec1) entered blocking state [ 1749.589719][ T4721] bridge0: port 3(macsec1) entered disabled state [ 1749.640353][ T4723] device bridge0 entered promiscuous mode [ 1749.646738][ T4723] bridge0: port 1(macsec1) entered blocking state [ 1749.653292][ T4723] bridge0: port 1(macsec1) entered disabled state [ 1749.661037][ T4726] overlayfs: missing 'workdir' [ 1749.669913][ T4723] device bridge0 left promiscuous mode [ 1749.684813][ T4724] tipc: Failed to remove unknown binding: 66,1,1/405408208:2064206330/2064206331 [ 1749.745151][ T4727] device bridge0 entered promiscuous mode [ 1749.753291][ T4724] tipc: Failed to remove unknown binding: 66,1,1/405408208:2064206330/2064206331 [ 1749.764295][ T4727] bridge0: port 1(macsec1) entered blocking state [ 1749.770933][ T4727] bridge0: port 1(macsec1) entered disabled state [ 1749.783732][ T4728] tipc: Failed to remove unknown binding: 66,1,1/4:1711312084/1711312085 [ 1749.800868][ T4727] device bridge0 left promiscuous mode [ 1749.826261][ T4731] tipc: Failed to remove unknown binding: 66,1,1/1555583039:3328378290/3328378291 [ 1749.842846][ T4728] tipc: Failed to remove unknown binding: 66,1,1/4:1711312084/1711312085 [ 1749.864571][ T4732] device bridge0 entered promiscuous mode [ 1749.872875][ T4731] tipc: Failed to remove unknown binding: 66,1,1/1555583039:3328378290/3328378291 [ 1749.882871][ T4732] bridge0: port 3(macsec1) entered blocking state [ 1749.898350][ T4732] bridge0: port 3(macsec1) entered disabled state [ 1749.910973][ T4732] device bridge0 left promiscuous mode [ 1749.951217][ T4742] device bridge0 entered promiscuous mode [ 1749.957843][ T4742] bridge0: port 1(macsec1) entered blocking state [ 1749.964768][ T4742] bridge0: port 1(macsec1) entered disabled state [ 1749.972981][ T4742] device bridge0 left promiscuous mode [ 1750.019422][ T4744] tipc: Failed to remove unknown binding: 66,1,1/1555583039:746708691/746708692 [ 1750.043766][ T4744] tipc: Failed to remove unknown binding: 66,1,1/1555583039:746708691/746708692 [ 1750.156205][ T4750] device bridge0 entered promiscuous mode [ 1750.169475][ T4750] bridge0: port 1(macsec1) entered blocking state [ 1750.183396][ T4750] bridge0: port 1(macsec1) entered disabled state [ 1750.316140][ T4750] device bridge0 left promiscuous mode [ 1750.586425][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13294'. [ 1750.601962][ T4755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.609386][ T4755] IPv6: NLM_F_CREATE should be set when creating new route [ 1751.061121][ T4761] bridge0: port 3(macsec1) entered blocking state [ 1751.180505][ T4761] bridge0: port 3(macsec1) entered disabled state [ 1751.189069][ T4762] tipc: Failed to remove unknown binding: 66,1,1/405408208:3028999068/3028999069 [ 1751.255792][ T4762] tipc: Failed to remove unknown binding: 66,1,1/405408208:3028999068/3028999069 [ 1751.279620][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13297'. [ 1752.042024][ T4770] device bridge0 entered promiscuous mode [ 1752.057642][ T4770] bridge0: port 3(macsec1) entered blocking state [ 1752.069904][ T4770] bridge0: port 3(macsec1) entered disabled state [ 1752.077283][ T4770] device bridge0 left promiscuous mode [ 1752.410621][ T4778] device bridge0 entered promiscuous mode [ 1752.447372][ T4778] bridge0: port 3(macsec1) entered blocking state [ 1752.537747][ T4778] bridge0: port 3(macsec1) entered disabled state [ 1752.651551][ T4778] device bridge0 left promiscuous mode [ 1753.548780][ T4788] incfs: Backing dir is not set, filesystem can't be mounted. [ 1753.556899][ T4788] incfs: mount failed -2 [ 1754.465869][ T4790] bridge0: port 3(macsec1) entered blocking state [ 1754.476092][ T4790] bridge0: port 3(macsec1) entered disabled state [ 1755.107607][ T4797] tipc: Failed to remove unknown binding: 66,1,1/405408208:1340398976/1340398977 [ 1755.120501][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13306'. [ 1755.129650][ T4797] tipc: Failed to remove unknown binding: 66,1,1/405408208:1340398976/1340398977 [ 1755.146600][ T4801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1755.153908][ T4801] IPv6: NLM_F_CREATE should be set when creating new route [ 1755.317655][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13308'. [ 1755.331129][ T4809] device bridge0 entered promiscuous mode [ 1755.337528][ T4809] bridge0: port 3(macsec1) entered blocking state [ 1755.344003][ T4809] bridge0: port 3(macsec1) entered disabled state [ 1755.351427][ T4809] device bridge0 left promiscuous mode [ 1755.378921][ T4811] bridge0: port 3(macsec1) entered blocking state [ 1755.385785][ T4811] bridge0: port 3(macsec1) entered disabled state [ 1755.447174][ T4815] tipc: Failed to remove unknown binding: 66,1,1/405408208:2927355165/2927355166 [ 1755.472855][ T4815] tipc: Failed to remove unknown binding: 66,1,1/405408208:2927355165/2927355166 [ 1756.994124][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13318'. [ 1757.038180][ T4840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1757.045457][ T4840] IPv6: NLM_F_CREATE should be set when creating new route [ 1757.090891][ T4840] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13318'. [ 1757.204964][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13320'. [ 1757.226253][ T4847] device bridge0 entered promiscuous mode [ 1757.233549][ T4847] bridge0: port 3(macsec1) entered blocking state [ 1757.240292][ T4847] bridge0: port 3(macsec1) entered disabled state [ 1757.248127][ T4847] device bridge0 left promiscuous mode [ 1760.356816][ T4849] device bridge0 entered promiscuous mode [ 1760.367484][ T4849] bridge0: port 1(macsec1) entered blocking state [ 1760.377631][ T4849] bridge0: port 1(macsec1) entered disabled state [ 1760.406493][ T4849] device bridge0 left promiscuous mode [ 1760.430316][ T4859] tipc: Failed to remove unknown binding: 66,1,1/4:4082353794/4082353795 [ 1760.478092][ T4859] tipc: Failed to remove unknown binding: 66,1,1/4:4082353794/4082353795 [ 1761.605797][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13329'. [ 1761.620817][ T4876] device bridge0 entered promiscuous mode [ 1761.644846][ T4876] bridge0: port 3(macsec1) entered blocking state [ 1761.665636][ T4876] bridge0: port 3(macsec1) entered disabled state [ 1761.697133][ T4876] device bridge0 left promiscuous mode [ 1761.738349][ T4875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1761.745791][ T4875] IPv6: NLM_F_CREATE should be set when creating new route [ 1761.760658][ T4879] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13329'. [ 1761.793318][ T4881] bridge0: port 1(macsec1) entered blocking state [ 1761.803618][ T4881] bridge0: port 1(macsec1) entered disabled state [ 1761.881263][ T4889] tipc: Failed to remove unknown binding: 66,1,1/2568204292:1045413260/1045413261 [ 1761.930566][ T4889] tipc: Failed to remove unknown binding: 66,1,1/2568204292:1045413260/1045413261 [ 1761.956302][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13333'. [ 1762.294717][ T4897] bridge0: port 1(macsec1) entered blocking state [ 1762.380998][ T4897] bridge0: port 1(macsec1) entered disabled state [ 1762.568719][ T4899] tipc: Failed to remove unknown binding: 66,1,1/2568204292:788615046/788615047 [ 1762.635227][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13335'. [ 1763.520524][ T4899] tipc: Failed to remove unknown binding: 66,1,1/2568204292:788615046/788615047 [ 1763.592491][ T4908] device bridge0 entered promiscuous mode [ 1763.631891][ T4908] bridge0: port 3(macsec1) entered blocking state [ 1763.638368][ T4908] bridge0: port 3(macsec1) entered disabled state [ 1763.646964][ T4908] device bridge0 left promiscuous mode [ 1763.774714][ T4920] bridge0: port 3(macsec1) entered blocking state [ 1763.783783][ T4920] bridge0: port 3(macsec1) entered disabled state [ 1763.806899][ T4922] device bridge0 entered promiscuous mode [ 1763.814034][ T4922] bridge0: port 3(macsec1) entered blocking state [ 1763.820487][ T4922] bridge0: port 3(macsec1) entered disabled state [ 1763.865012][ T4922] device bridge0 left promiscuous mode [ 1763.881098][ T4925] tipc: Failed to remove unknown binding: 66,1,1/405408208:3597191167/3597191168 [ 1763.901153][ T4929] device bridge0 entered promiscuous mode [ 1763.914257][ T4924] tipc: Failed to remove unknown binding: 66,1,1/4:2359596781/2359596782 [ 1763.925815][ T4929] bridge0: port 1(macsec1) entered blocking state [ 1763.938401][ T4925] tipc: Failed to remove unknown binding: 66,1,1/405408208:3597191167/3597191168 [ 1763.947814][ T4924] tipc: Failed to remove unknown binding: 66,1,1/4:2359596781/2359596782 [ 1763.956490][ T4929] bridge0: port 1(macsec1) entered disabled state [ 1763.973726][ T4929] device bridge0 left promiscuous mode [ 1763.993903][ T4931] bridge0: port 3(macsec1) entered blocking state [ 1764.013799][ T4931] bridge0: port 3(macsec1) entered disabled state [ 1764.044403][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13345'. [ 1764.091211][ T4937] device bridge0 entered promiscuous mode [ 1764.106814][ T4938] tipc: Failed to remove unknown binding: 66,1,1/405408208:1890832056/1890832057 [ 1764.119827][ T4937] bridge0: port 1(macsec1) entered blocking state [ 1764.129996][ T4938] tipc: Failed to remove unknown binding: 66,1,1/405408208:1890832056/1890832057 [ 1764.139467][ T4937] bridge0: port 1(macsec1) entered disabled state [ 1764.151050][ T4937] device bridge0 left promiscuous mode [ 1764.157437][ T4943] tipc: Failed to remove unknown binding: 66,1,1/1555583039:1234951186/1234951187 [ 1764.166942][ T4943] tipc: Failed to remove unknown binding: 66,1,1/1555583039:1234951186/1234951187 [ 1768.645763][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13354'. [ 1768.689562][ T4964] bridge0: port 1(macsec1) entered blocking state [ 1768.706122][ T4964] bridge0: port 1(macsec1) entered disabled state [ 1768.737438][ T4965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1768.744726][ T4965] IPv6: NLM_F_CREATE should be set when creating new route [ 1768.779176][ T4968] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3159437712/3159437713 [ 1768.795796][ T4969] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13354'. [ 1768.805091][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13356'. [ 1768.859797][ T4968] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3159437712/3159437713 [ 1770.849404][ T4976] netlink: 68 bytes leftover after parsing attributes in process `syz.7.13358'. [ 1770.963463][ T4988] device bridge0 entered promiscuous mode [ 1770.970173][ T4988] bridge0: port 1(macsec1) entered blocking state [ 1770.976671][ T4988] bridge0: port 1(macsec1) entered disabled state [ 1770.984078][ T4988] device bridge0 left promiscuous mode [ 1772.006500][ T4988] tipc: Failed to remove unknown binding: 66,1,1/4:3942736866/3942736867 [ 1772.015429][ T4988] tipc: Failed to remove unknown binding: 66,1,1/4:3942736866/3942736867 [ 1775.362393][ T5012] device bridge0 entered promiscuous mode [ 1775.368772][ T5012] bridge0: port 3(macsec1) entered blocking state [ 1775.376537][ T5012] bridge0: port 3(macsec1) entered disabled state [ 1775.384830][ T5012] device bridge0 left promiscuous mode [ 1775.395993][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13367'. [ 1775.407380][ T5019] bridge0: port 3(macsec1) entered blocking state [ 1775.413920][ T5019] bridge0: port 3(macsec1) entered disabled state [ 1775.433659][ T5018] device bridge0 entered promiscuous mode [ 1775.446127][ T5018] bridge0: port 1(macsec1) entered blocking state [ 1775.452975][ T5018] bridge0: port 1(macsec1) entered disabled state [ 1775.467337][ T5024] tipc: Failed to remove unknown binding: 66,1,1/405408208:3397348239/3397348240 [ 1775.478307][ T5018] device bridge0 left promiscuous mode [ 1775.493443][ T5026] tipc: Failed to remove unknown binding: 66,1,1/4:3538205819/3538205820 [ 1775.511522][ T5024] tipc: Failed to remove unknown binding: 66,1,1/405408208:3397348239/3397348240 [ 1775.537015][ T5026] tipc: Failed to remove unknown binding: 66,1,1/4:3538205819/3538205820 [ 1775.670271][ T5037] device bridge0 entered promiscuous mode [ 1780.523849][ T5045] tipc: Failed to remove unknown binding: 66,1,1/4:1000901720/1000901721 [ 1780.532463][ T5045] tipc: Failed to remove unknown binding: 66,1,1/4:1000901720/1000901721 [ 1780.573048][ T5037] bridge0: port 1(macsec1) entered blocking state [ 1780.586102][ T5037] bridge0: port 1(macsec1) entered disabled state [ 1780.670654][ T5037] device bridge0 left promiscuous mode [ 1780.680314][ T5054] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13377'. [ 1780.695134][ T5053] tipc: Failed to remove unknown binding: 66,1,1/2568204292:1419367001/1419367002 [ 1780.709288][ T5047] bridge0: port 1(macsec1) entered blocking state [ 1780.716105][ T5047] bridge0: port 1(macsec1) entered disabled state [ 1780.737314][ T5053] tipc: Failed to remove unknown binding: 66,1,1/2568204292:1419367001/1419367002 [ 1780.932977][ T5060] device bridge0 entered promiscuous mode [ 1780.939423][ T5060] bridge0: port 1(macsec1) entered blocking state [ 1780.946152][ T5060] bridge0: port 1(macsec1) entered disabled state [ 1780.953992][ T5060] device bridge0 left promiscuous mode [ 1780.993049][ T5061] tipc: Failed to remove unknown binding: 66,1,1/4:2945368017/2945368018 [ 1780.993495][ T5063] device bridge0 entered promiscuous mode [ 1781.001983][ T5061] tipc: Failed to remove unknown binding: 66,1,1/4:2945368017/2945368018 [ 1781.010301][ T5063] bridge0: port 3(macsec1) entered blocking state [ 1781.022293][ T5063] bridge0: port 3(macsec1) entered disabled state [ 1781.031805][ T5063] device bridge0 left promiscuous mode [ 1781.063737][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13382'. [ 1783.878173][ T5085] device bridge0 entered promiscuous mode [ 1783.891408][ T5082] tipc: Failed to remove unknown binding: 66,1,1/1555583039:3228998980/3228998981 [ 1783.900759][ T5082] tipc: Failed to remove unknown binding: 66,1,1/1555583039:3228998980/3228998981 [ 1783.912006][ T5085] bridge0: port 1(macsec1) entered blocking state [ 1783.919473][ T5085] bridge0: port 1(macsec1) entered disabled state [ 1783.958418][ T5089] tipc: Failed to remove unknown binding: 66,1,1/4:2742521122/2742521123 [ 1783.967455][ T5085] device bridge0 left promiscuous mode [ 1783.984550][ T5089] tipc: Failed to remove unknown binding: 66,1,1/4:2742521122/2742521123 [ 1784.044401][ T5088] tipc: Failed to remove unknown binding: 66,1,1/2568204292:1731367672/1731367673 [ 1785.987538][ T5100] bridge0: port 3(macsec1) entered blocking state [ 1785.994100][ T5100] bridge0: port 3(macsec1) entered disabled state [ 1786.537473][ T5111] bridge0: port 3(macsec1) entered blocking state [ 1786.545633][ T5111] bridge0: port 3(macsec1) entered disabled state [ 1786.555620][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13395'. [ 1786.574629][ T5107] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13394'. [ 1786.598660][ T5114] device bridge0 entered promiscuous mode [ 1786.623380][ T5114] bridge0: port 1(macsec1) entered blocking state [ 1786.635641][ T5114] bridge0: port 1(macsec1) entered disabled state [ 1786.656263][ T5114] device bridge0 left promiscuous mode [ 1786.687669][ T5118] tipc: Failed to remove unknown binding: 66,1,1/1555583039:4153536793/4153536794 [ 1786.736374][ T5118] tipc: Failed to remove unknown binding: 66,1,1/1555583039:4153536793/4153536794 [ 1786.784504][ T5123] bridge0: port 3(macsec1) entered blocking state [ 1786.811503][ T5123] bridge0: port 3(macsec1) entered disabled state [ 1786.852538][ T5128] device bridge0 entered promiscuous mode [ 1786.876288][ T5128] bridge0: port 3(macsec1) entered blocking state [ 1786.883180][ T5128] bridge0: port 3(macsec1) entered disabled state [ 1786.893563][ T5128] device bridge0 left promiscuous mode [ 1786.910077][ T5129] tipc: Failed to remove unknown binding: 66,1,1/4:2629494293/2629494294 [ 1786.925002][ T5129] tipc: Failed to remove unknown binding: 66,1,1/4:2629494293/2629494294 [ 1788.026992][ T5134] device bridge0 entered promiscuous mode [ 1788.042600][ T5134] bridge0: port 1(macsec1) entered blocking state [ 1788.063535][ T5134] bridge0: port 1(macsec1) entered disabled state [ 1789.147935][ T5134] device bridge0 left promiscuous mode [ 1789.159581][ T5138] tipc: Failed to remove unknown binding: 66,1,1/4:1480828047/1480828048 [ 1789.194249][ T5138] tipc: Failed to remove unknown binding: 66,1,1/4:1480828047/1480828048 [ 1789.234297][ T5151] bridge0: port 1(macsec1) entered blocking state [ 1789.240863][ T5151] bridge0: port 1(macsec1) entered disabled state [ 1789.374107][ T5152] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2380761814/2380761815 [ 1789.383677][ T5152] tipc: Failed to remove unknown binding: 66,1,1/2568204292:2380761814/2380761815 [ 1790.598507][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13409'. [ 1790.684965][ T5167] tipc: Failed to remove unknown binding: 66,1,1/4:341606363/341606364 [ 1790.697395][ T5167] tipc: Failed to remove unknown binding: 66,1,1/4:341606363/341606364 [ 1797.190063][ T5179] device bridge0 entered promiscuous mode [ 1797.196454][ T5179] bridge0: port 1(macsec1) entered blocking state [ 1797.203245][ T5179] bridge0: port 1(macsec1) entered disabled state [ 1797.211208][ T5179] device bridge0 left promiscuous mode [ 1797.249438][ T5180] tipc: Failed to remove unknown binding: 66,1,1/4:4239387473/4239387474 [ 1797.258205][ T5180] tipc: Failed to remove unknown binding: 66,1,1/4:4239387473/4239387474 [ 1797.371711][ T5182] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13416'. [ 1797.931157][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13420'. [ 1801.455418][ T5201] overlayfs: missing 'workdir' [ 1802.699539][ T5208] tipc: Failed to remove unknown binding: 66,1,1/405408208:857221341/857221342 [ 1802.727297][ T5208] tipc: Failed to remove unknown binding: 66,1,1/405408208:857221341/857221342 [ 1803.983684][ T5218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13425'. [ 1804.104002][ T5225] tipc: Failed to remove unknown binding: 66,1,1/1555583039:1581299964/1581299965 [ 1804.115155][ T5225] tipc: Failed to remove unknown binding: 66,1,1/1555583039:1581299964/1581299965 [ 1807.783363][ T5239] device bridge0 entered promiscuous mode [ 1807.804625][ T5239] bridge0: port 3(macsec1) entered blocking state [ 1808.233073][ T5239] bridge0: port 3(macsec1) entered disabled state [ 1809.631389][ T5247] overlayfs: missing 'workdir' [ 1810.337682][ T5258] tipc: Failed to remove unknown binding: 66,1,1/1555583039:4189310490/4189310491 [ 1810.425850][ T5258] tipc: Failed to remove unknown binding: 66,1,1/1555583039:4189310490/4189310491 [ 1810.930793][ T5239] device bridge0 left promiscuous mode [ 1810.942481][ T5255] device bridge0 entered promiscuous mode [ 1810.949088][ T5255] bridge0: port 1(macsec1) entered blocking state [ 1810.955537][ T5255] bridge0: port 1(macsec1) entered disabled state [ 1810.962843][ T5255] device bridge0 left promiscuous mode [ 1810.997233][ T5261] device bridge0 entered promiscuous mode [ 1811.053110][ T5261] bridge0: port 3(macsec1) entered blocking state [ 1811.059679][ T5261] bridge0: port 3(macsec1) entered disabled state [ 1811.067527][ T5261] device bridge0 left promiscuous mode [ 1816.279493][ T5292] overlayfs: missing 'workdir' [ 1820.600666][ T5309] bridge0: port 1(macsec1) entered blocking state [ 1820.607228][ T5309] bridge0: port 1(macsec1) entered disabled state [ 1825.798685][ T5335] device bridge0 entered promiscuous mode [ 1825.832053][ T5335] bridge0: port 1(macsec1) entered blocking state [ 1825.848688][ T5335] bridge0: port 1(macsec1) entered disabled state [ 1825.890851][ T5335] device bridge0 left promiscuous mode [ 1825.941086][ T5339] bridge0: port 3(macsec1) entered blocking state [ 1825.946248][ T5336] tipc: Failed to remove unknown binding: 66,1,1/4:463059432/463059433 [ 1825.986969][ T5339] bridge0: port 3(macsec1) entered disabled state [ 1826.020022][ T5340] overlayfs: missing 'workdir' [ 1826.112167][ T5336] tipc: Failed to remove unknown binding: 66,1,1/4:463059432/463059433 [ 1828.641748][ T5368] bridge0: port 1(macsec1) entered blocking state [ 1828.648219][ T5368] bridge0: port 1(macsec1) entered disabled state [ 1829.456759][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13468'. [ 1829.503189][ T5368] tipc: Failed to remove unknown binding: 66,1,1/2568204292:4293745383/4293745384 [ 1829.514833][ T5368] tipc: Failed to remove unknown binding: 66,1,1/2568204292:4293745383/4293745384 [ 1829.772823][ T5381] bridge0: port 3(macsec1) entered blocking state [ 1829.780913][ T5381] bridge0: port 3(macsec1) entered disabled state [ 1829.797143][ T5385] device bridge0 entered promiscuous mode [ 1829.803406][ T5385] bridge0: port 1(macsec1) entered blocking state [ 1829.810040][ T5385] bridge0: port 1(macsec1) entered disabled state [ 1829.827329][ T5385] device bridge0 left promiscuous mode [ 1829.865827][ T5381] tipc: Failed to remove unknown binding: 66,1,1/405408208:1967524394/1967524395 [ 1829.866080][ T5388] tipc: Failed to remove unknown binding: 66,1,1/4:783782020/783782021 [ 1829.892169][ T5381] tipc: Failed to remove unknown binding: 66,1,1/405408208:1967524394/1967524395 [ 1829.912144][ T5388] tipc: Failed to remove unknown binding: 66,1,1/4:783782020/783782021 [ 1830.704788][ T5407] device bridge0 entered promiscuous mode [ 1830.711482][ T5407] bridge0: port 1(macsec1) entered blocking state [ 1830.718343][ T5407] bridge0: port 1(macsec1) entered disabled state [ 1830.727206][ T5407] device bridge0 left promiscuous mode [ 1830.741444][ T5408] device bridge0 entered promiscuous mode [ 1830.747892][ T5408] bridge0: port 3(macsec1) entered blocking state [ 1830.754488][ T5408] bridge0: port 3(macsec1) entered disabled state [ 1830.761950][ T5408] device bridge0 left promiscuous mode [ 1830.777893][ T5409] tipc: Failed to remove unknown binding: 66,1,1/1555583039:591698549/591698550 [ 1830.787382][ T5409] tipc: Failed to remove unknown binding: 66,1,1/1555583039:591698549/591698550 [ 1832.675713][ T5450] device bridge0 entered promiscuous mode [ 1832.682344][ T5450] bridge0: port 3(macsec1) entered blocking state [ 1832.688913][ T5450] bridge0: port 3(macsec1) entered disabled state [ 1832.702731][ T5450] device bridge0 left promiscuous mode [ 1833.329881][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13498'. [ 1835.093780][ T5505] bridge0: port 1(macsec1) entered blocking state [ 1835.100425][ T5505] bridge0: port 1(macsec1) entered disabled state [ 1835.219823][ T5505] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3069143888/3069143889 [ 1835.233789][ T5505] tipc: Failed to remove unknown binding: 66,1,1/2568204292:3069143888/3069143889 [ 1847.937104][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13557'. [ 1850.682731][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13568'. [ 1851.947399][ T5727] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1854.063879][ T5783] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1857.182179][ T5797] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1857.194296][ T5797] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1860.959237][ T5834] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1861.825445][ T5851] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1861.837223][ T5851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1867.315615][ T5891] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1867.327357][ T5891] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1869.542600][ T5902] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1869.554261][ T5902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1874.171316][ T5936] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1874.183091][ T5936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1877.331406][ T5981] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1877.343047][ T5981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1879.863502][ T5993] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1879.875270][ T5993] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1882.667222][ T6028] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1882.678969][ T6028] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1887.208782][ T6065] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1887.220579][ T6065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1891.098739][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13673'. [ 1893.227248][ T6154] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1893.239067][ T6154] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1897.457654][ T6199] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1897.469555][ T6199] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1898.960218][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13699'. [ 1901.836357][ T6245] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1901.848141][ T6245] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1904.289074][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13710'. [ 1909.012812][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13721'. [ 1910.554350][ T6321] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1914.270771][ T6356] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1914.282758][ T6356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1915.278008][ T6365] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1915.289722][ T6365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1917.018559][ T6396] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1919.144384][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13750'. [ 1921.718817][ T6450] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1922.716856][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13762'. [ 1923.932008][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13767'. [ 1924.739842][ T6510] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1924.751834][ T6510] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1925.932574][ T6508] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1926.428434][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13773'. [ 1929.539686][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13786'. [ 1930.533403][ T6587] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1930.545126][ T6587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1931.605843][ T6589] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1931.663585][ T6589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1932.732762][ T6614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13797'. [ 1938.985749][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13804'. [ 1939.347822][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13808'. [ 1942.123646][ T6695] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1942.135442][ T6695] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1943.241073][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13818'. [ 1943.278835][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13819'. [ 1943.611743][ T6713] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1943.623540][ T6713] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1948.951113][ T6770] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1948.963265][ T6770] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1951.863677][ T6787] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1951.875451][ T6787] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1953.282946][ T6797] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1957.107352][ T6855] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1957.118996][ T6855] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1960.250837][ T6879] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1960.262708][ T6879] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1964.949134][ T6940] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1964.961302][ T6940] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1967.179239][ T6956] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1967.191329][ T6956] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1969.522158][ T6963] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1969.533834][ T6963] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1970.423577][ T6968] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1970.435363][ T6968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1973.374044][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13901'. [ 1975.183827][ T7031] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1975.195630][ T7031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1978.267915][ T7070] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1978.279839][ T7070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1979.161357][ T7085] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1979.172991][ T7085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1983.527399][ T7132] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1986.424802][ T7183] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1995.507477][ T7250] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1995.644485][ T7250] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2002.078796][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13971'. [ 2009.443529][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13982'. [ 2010.613903][ T7367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13984'. [ 2015.714554][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13995'. [ 2016.264464][ T7422] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13999'. [ 2020.061999][ T7448] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2020.074133][ T7448] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2021.822904][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14008'. [ 2021.923121][ T7459] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2021.934877][ T7459] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2022.655684][ T7469] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2022.667423][ T7469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2024.008410][ T7481] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14012'. [ 2024.531621][ T7495] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2024.543488][ T7495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2026.337191][ T7509] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2026.349077][ T7509] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2026.781040][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14019'. [ 2034.094136][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14031'. [ 2034.148017][ T7562] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14031'. [ 2038.313257][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14044'. [ 2038.327911][ T7605] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14044'. [ 2049.093228][ T7642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14052'. [ 2049.324055][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14057'. [ 2050.905307][ T7677] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2050.917802][ T7679] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14061'. [ 2052.236885][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14068'. [ 2053.821430][ T7710] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2053.833214][ T7710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2055.050957][ T7720] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2057.850093][ T7737] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14076'. [ 2058.085725][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14079'. [ 2058.718888][ T7754] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2058.730673][ T7754] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2059.270649][ T7764] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2062.562304][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14092'. [ 2063.944736][ T7821] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2063.956376][ T7821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2064.333662][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14099'. [ 2064.861858][ T7835] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2064.873491][ T7835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2065.406752][ T7836] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2066.284774][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14103'. [ 2066.424547][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14105'. [ 2067.064628][ T7859] overlayfs: missing 'lowerdir' [ 2067.584022][ T7862] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2067.754869][ T7866] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2068.380467][ T7875] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2068.392208][ T7875] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2069.780815][ T7885] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2071.116271][ T7898] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2072.158662][ T7912] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2072.380148][ T7914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2074.319968][ T7929] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2074.876705][ T7941] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2075.743295][ T7955] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2076.628647][ T7973] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2076.712445][ T7975] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2076.724183][ T7975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2076.901111][ T7982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14136'. [ 2077.308081][ T7983] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2077.609312][ T7993] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2079.477771][ T8004] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2079.489417][ T8004] overlayfs: missing 'lowerdir' [ 2081.231526][ T8024] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2081.270295][ T8020] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2081.271816][ T8022] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2081.625743][ T8030] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2081.802052][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14150'. [ 2082.030682][ T8043] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2082.042570][ T8043] overlayfs: missing 'lowerdir' [ 2083.009942][ T8042] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2083.459735][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14152'. [ 2085.166965][ T8066] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2086.673898][ T8081] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2086.702928][ T8075] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2087.226300][ T8086] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14164'. [ 2087.559200][ T8087] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2090.134822][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14175'. [ 2090.389167][ T8147] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2090.400993][ T8147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2092.378981][ T8176] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2096.377403][ T8222] netlink: 68 bytes leftover after parsing attributes in process `syz.5.14192'. [ 2098.453248][ T8243] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2103.167596][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14201'. [ 2104.555621][ T8263] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14204'. [ 2106.685530][ T8288] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2109.125917][ T8308] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14216'. [ 2111.486730][ T8332] netlink: 68 bytes leftover after parsing attributes in process `syz.5.14222'. [ 2111.905251][ T8348] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2112.181553][ T8351] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14228'. [ 2121.825517][ T8425] fuse: Bad value for 'user_id' [ 2155.576603][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14261'. [ 2157.069247][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14276'. [ 2157.119295][ T8488] device bridge_slave_1 left promiscuous mode [ 2157.131905][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 2157.147257][ T8488] device bridge_slave_0 left promiscuous mode [ 2157.161492][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 2157.218930][ T8489] netlink: 'syz.2.14275': attribute type 41 has an invalid length. [ 2157.260175][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14281'. [ 2157.286025][ T8501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8501 comm=syz.2.14281 [ 2157.298909][ T8503] futex_wake_op: syz.6.14282 tries to shift op by 32; fix this program [ 2158.472338][ T8525] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 2158.521223][ T30] audit: type=1400 audit(2000000628.733:1357): avc: denied { relabelto } for pid=8524 comm="syz.6.14291" name="2790" dev="tmpfs" ino=14918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2158.641915][ T30] audit: type=1400 audit(2000000628.733:1358): avc: denied { associate } for pid=8524 comm="syz.6.14291" name="2790" dev="tmpfs" ino=14918 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2158.696901][ T30] audit: type=1400 audit(2000000628.761:1359): avc: denied { write } for pid=709 comm="syz-executor" name="2790" dev="tmpfs" ino=14918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2158.727621][ T30] audit: type=1400 audit(2000000628.761:1360): avc: denied { remove_name } for pid=709 comm="syz-executor" name="binderfs" dev="tmpfs" ino=14922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2158.755836][ T30] audit: type=1400 audit(2000000628.761:1361): avc: denied { rmdir } for pid=709 comm="syz-executor" name="2790" dev="tmpfs" ino=14918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2158.859923][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14298'. [ 2158.882709][ T8550] xt_CT: No such helper "syz0" [ 2162.441318][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14307'. [ 2163.035281][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14314'. [ 2163.050845][ T8587] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8587 comm=syz.7.14314 [ 2163.304971][ T8593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8593 comm=syz.6.14315 [ 2163.333851][ T8593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8593 comm=syz.6.14315 [ 2164.010774][ T8598] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14317'. [ 2164.598297][ T8612] futex_wake_op: syz.7.14322 tries to shift op by 32; fix this program [ 2166.121405][ T8649] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2166.162813][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14334'. [ 2166.285919][ T8662] xt_CT: No such helper "syz0" [ 2166.303326][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14338'. [ 2166.377044][ T8665] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2166.388822][ T8665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2166.768405][ T8666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2166.775723][ T8666] IPv6: NLM_F_CREATE should be set when creating new route [ 2166.996883][ T8671] fuse: Unknown parameter 'f ' [ 2167.718185][ T30] audit: type=1400 audit(2000000637.367:1362): avc: denied { create } for pid=8689 comm="syz.3.14347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2167.804823][ T8694] netlink: 300 bytes leftover after parsing attributes in process `syz.3.14347'. [ 2167.820630][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14349'. [ 2167.927283][ T8630] netlink: 'syz.5.14326': attribute type 4 has an invalid length. [ 2167.949549][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14351'. [ 2168.002947][ T8630] netlink: 'syz.5.14326': attribute type 4 has an invalid length. [ 2168.030514][ T8705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2168.037841][ T8705] IPv6: NLM_F_CREATE should be set when creating new route [ 2168.092410][ T8630] netlink: 'syz.5.14326': attribute type 4 has an invalid length. [ 2168.103723][ T8711] cgroup: name respecified [ 2168.251446][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14359'. [ 2168.277034][ T8719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8719 comm=syz.5.14359 [ 2168.414888][ T8728] xt_CT: No such helper "syz0" [ 2168.442419][ T30] audit: type=1326 audit(2000000638.050:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.456177][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14363'. [ 2168.489764][ T30] audit: type=1326 audit(2000000638.068:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.513579][ T30] audit: type=1326 audit(2000000638.068:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.538365][ T30] audit: type=1326 audit(2000000638.068:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.576884][ T30] audit: type=1326 audit(2000000638.068:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.600909][ T30] audit: type=1326 audit(2000000638.068:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.624819][ T30] audit: type=1326 audit(2000000638.068:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.648878][ T30] audit: type=1326 audit(2000000638.068:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.672847][ T30] audit: type=1326 audit(2000000638.068:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.14364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9fa20f79 code=0x7ffc0000 [ 2168.750750][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14366'. [ 2168.764735][ T8741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2168.772052][ T8741] IPv6: NLM_F_CREATE should be set when creating new route [ 2169.860324][ T8764] xt_CT: No such helper "syz0" [ 2170.344411][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14377'. [ 2170.380202][ T8772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2170.387486][ T8772] IPv6: NLM_F_CREATE should be set when creating new route [ 2170.441821][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14379'. [ 2170.593374][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14384'. [ 2170.619287][ T8791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8791 comm=syz.6.14384 [ 2170.694558][ T8797] xt_CT: No such helper "syz0" [ 2170.728660][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14389'. [ 2170.772427][ T8806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2170.779716][ T8806] IPv6: NLM_F_CREATE should be set when creating new route [ 2170.844170][ T8801] 9pnet: Could not find request transport: rdma [ 2172.987020][ T8840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2172.994294][ T8840] IPv6: NLM_F_CREATE should be set when creating new route [ 2173.186405][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 2173.186451][ T30] audit: type=1400 audit(2000000642.474:1478): avc: denied { create } for pid=8853 comm="syz.5.14406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2174.905264][ T8905] overlayfs: missing 'lowerdir' [ 2175.070661][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2175.268107][ T8914] netlink: 'syz.6.14428': attribute type 1 has an invalid length. [ 2175.573196][ T8920] __nla_validate_parse: 9 callbacks suppressed [ 2175.573216][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14431'. [ 2175.637750][ T8927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2175.645032][ T8927] IPv6: NLM_F_CREATE should be set when creating new route [ 2176.710705][ T8951] xt_hashlimit: size too large, truncated to 1048576 [ 2176.745489][ T8955] netlink: 68 bytes leftover after parsing attributes in process `syz.7.14440'. [ 2176.762905][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14446'. [ 2176.776861][ T8958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2176.784126][ T8958] IPv6: NLM_F_CREATE should be set when creating new route [ 2176.825982][ T8961] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 2176.836985][ T8961] fuse: Unknown parameter 'uid' [ 2176.866879][ T8965] xt_hashlimit: size too large, truncated to 1048576 [ 2179.742452][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14457'. [ 2179.757691][ T8983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2179.764965][ T8983] IPv6: NLM_F_CREATE should be set when creating new route [ 2179.785835][ T8987] netlink: 'syz.7.14458': attribute type 1 has an invalid length. [ 2179.936394][ T8995] xt_hashlimit: size too large, truncated to 1048576 [ 2180.439871][ T9014] netlink: 'syz.3.14469': attribute type 1 has an invalid length. [ 2180.604577][ T9025] netlink: 260 bytes leftover after parsing attributes in process `syz.7.14474'. [ 2180.640204][ T9025] netlink: 104 bytes leftover after parsing attributes in process `syz.7.14474'. [ 2180.649362][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14474'. [ 2180.847590][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.876934][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.914803][ T9029] device bridge_slave_0 entered promiscuous mode [ 2180.963549][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.014236][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.032877][ T9029] device bridge_slave_1 entered promiscuous mode [ 2181.207333][ T2704] tipc: Disabling bearer [ 2181.217963][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.225035][ T9029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2181.232366][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.239511][ T9029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2181.248274][ T2704] tipc: Left network mode [ 2181.319667][ T2673] bridge0: port 1(bridge_slave_0) entered disabled state [ 2181.327451][ T2673] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.335464][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2181.343039][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2181.365373][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2181.373821][ T2673] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.380891][ T2673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2181.389272][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2181.397508][ T2673] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.404592][ T2673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2181.436614][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2181.453074][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2181.475586][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2181.501399][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2181.517152][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2181.527708][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2181.550206][ T9029] device veth0_vlan entered promiscuous mode [ 2181.573579][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2181.603424][ T9029] device veth1_macvtap entered promiscuous mode [ 2181.625127][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2181.646031][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2181.772903][ T9012] netlink: 'syz.6.14467': attribute type 4 has an invalid length. [ 2181.786363][ T9064] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14472'. [ 2181.808262][ T2704] device veth5 left promiscuous mode [ 2181.813661][ T2704] bridge4: port 1(veth5) entered disabled state [ 2191.168597][ T9072] loop3: detected capacity change from 0 to 512 [ 2191.301791][ T2704] tipc: Disabling bearer [ 2191.307217][ T2704] tipc: Left network mode [ 2191.527724][ T9083] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2191.539842][ T9083] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2193.324612][ T9103] x_tables: ip6_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 352 [ 2193.347037][ T9103] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12052 sclass=netlink_xfrm_socket pid=9103 comm=syz.7.14496 [ 2193.381536][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.390247][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.401065][ T9079] device bridge_slave_0 entered promiscuous mode [ 2193.413065][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.421024][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.589326][ T30] audit: type=1400 audit(2000000661.425:1479): avc: denied { create } for pid=9094 comm="syz.5.14494" dev="anon_inodefs" ino=141994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2193.654535][ T9079] device bridge_slave_1 entered promiscuous mode [ 2193.670125][ T30] audit: type=1400 audit(2000000661.435:1480): avc: denied { ioctl } for pid=9094 comm="syz.5.14494" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=141994 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2193.801669][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.808853][ T9079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.816183][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.823236][ T9079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.917620][ T2713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.925245][ T2713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.933086][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2193.941018][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2194.008396][ T9123] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2194.020121][ T9123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2194.281420][ T30] audit: type=1400 audit(2000000662.202:1481): avc: denied { read write } for pid=9122 comm="syz.3.14497" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2194.354505][ T9127] netlink: 260 bytes leftover after parsing attributes in process `syz.5.14502'. [ 2194.364404][ T30] audit: type=1400 audit(2000000662.202:1482): avc: denied { open } for pid=9122 comm="syz.3.14497" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2194.395318][ T9127] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14502'. [ 2194.517825][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14502'. [ 2194.733514][T30893] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 2194.759283][ T30] audit: type=1400 audit(2000000662.211:1483): avc: denied { ioctl } for pid=9122 comm="syz.3.14497" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2194.859656][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2194.868407][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2194.876886][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.883986][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.892061][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2194.900503][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2195.030596][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.037679][ T2713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2195.069725][ T9079] device veth0_vlan entered promiscuous mode [ 2195.084293][ T9079] device veth1_macvtap entered promiscuous mode [ 2195.129168][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2195.140319][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2195.149623][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2195.157758][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2195.166806][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2195.175574][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2195.184525][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2199.640651][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2199.648940][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2199.657227][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2199.715099][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2199.758169][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2199.766569][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2199.774929][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2199.783295][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2199.861812][T30893] usb 4-1: device descriptor read/all, error -71 [ 2199.933664][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2199.951415][ T9165] loop3: detected capacity change from 0 to 256 [ 2199.991228][ T9165] exfat: Deprecated parameter 'utf8' [ 2199.996718][ T9165] exfat: Deprecated parameter 'namecase' [ 2200.002473][ T9165] exfat: Deprecated parameter 'utf8' [ 2200.064930][ T9165] /dev/loop3: Can't open blockdev [ 2200.216705][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2201.136813][ T2704] device veth1_macvtap left promiscuous mode [ 2201.142894][ T2704] device veth0_vlan left promiscuous mode [ 2201.414170][ T9188] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2201.426329][ T9188] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2201.690442][ T9189] loop6: detected capacity change from 0 to 1024 [ 2204.030227][ T9189] EXT4-fs (loop6): Ignoring removed orlov option [ 2204.191150][ T9189] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 2204.570345][ T9202] loop6: detected capacity change from 0 to 256 [ 2204.652482][ T9202] exfat: Deprecated parameter 'utf8' [ 2204.658117][ T9202] exfat: Deprecated parameter 'namecase' [ 2204.663897][ T9202] exfat: Deprecated parameter 'utf8' [ 2204.686428][ T9202] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 2205.223069][ T9196] loop3: detected capacity change from 0 to 262144 [ 2205.752291][ T9129] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2206.040933][ T9129] usb 4-1: device descriptor read/64, error -71 [ 2206.457948][ T9129] usb 4-1: device descriptor read/64, error -71 [ 2206.746629][ T9129] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2207.035190][ T9129] usb 4-1: device descriptor read/64, error -71 [ 2207.452109][ T9129] usb 4-1: device descriptor read/64, error -71 [ 2207.580527][ T9129] usb usb4-port1: attempt power cycle [ 2207.736188][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.743788][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.751665][ T9180] device bridge_slave_0 entered promiscuous mode [ 2207.764599][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14527'. [ 2207.787667][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.796528][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.804015][ T9180] device bridge_slave_1 entered promiscuous mode [ 2207.827565][ T9219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9219 comm=syz.5.14527 [ 2207.921613][ T2704] ------------[ cut here ]------------ [ 2207.928443][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.928531][ T2704] WARNING: CPU: 0 PID: 2704 at net/ipv6/xfrm6_tunnel.c:337 xfrm6_tunnel_net_exit+0xc0/0x130 [ 2207.935563][ T9180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.935827][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.960101][ T9180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.974487][ T2704] Modules linked in: [ 2207.986615][ T2704] CPU: 0 PID: 2704 Comm: kworker/u4:187 Not tainted syzkaller #0 [ 2207.994666][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2207.998762][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2208.012153][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.019558][ T2704] Workqueue: netns cleanup_net [ 2208.024469][ T2704] RIP: 0010:xfrm6_tunnel_net_exit+0xc0/0x130 [ 2208.030584][ T2704] Code: e8 15 54 71 fd 4b 83 3c 3e 00 75 19 e8 99 25 32 fd 49 81 ff f8 07 00 00 74 1b e8 8b 25 32 fd 49 83 c7 08 eb c9 e8 80 25 32 fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 2208.050349][ T2704] RSP: 0018:ffffc90006d67c30 EFLAGS: 00010293 [ 2208.050489][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.056901][ T2704] RAX: ffffffff8437a780 RBX: ffff88811bf73000 RCX: ffff888156a58000 [ 2208.064042][ T9129] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2208.071603][ T2704] RDX: 0000000000000000 RSI: ffffc90006d67a20 RDI: ffff88811aac8000 [ 2208.087626][ T2704] RBP: ffffc90006d67c50 R08: 0000000000000003 R09: 0000000000000004 [ 2208.095712][ T9223] loop6: detected capacity change from 0 to 40427 [ 2208.096599][ T2704] R10: dffffc0000000000 R11: fffff52000dacf24 R12: dffffc0000000000 [ 2208.110534][ T2704] R13: dffffc0000000000 R14: ffff88811aac8000 R15: 0000000000000000 [ 2208.118791][ T2704] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2208.129043][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2208.137489][ T2429] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.137735][ T2704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2208.144570][ T2429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2208.151833][ T2704] CR2: 00007faf3a2356c0 CR3: 000000010d730000 CR4: 00000000003506b0 [ 2208.159743][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2208.166646][ T2704] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 2208.175662][ T2429] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.183014][ T2704] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2208.189540][ T2429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2208.197702][ T2704] Call Trace: [ 2208.208323][ T2704] [ 2208.211433][ T2704] cleanup_net+0x593/0xae0 [ 2208.215880][ T2704] ? ops_init+0x4a0/0x4a0 [ 2208.220374][ T2704] ? __schedule+0xb76/0x14c0 [ 2208.225394][ T2704] process_one_work+0x6be/0xba0 [ 2208.228658][ T9223] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 2208.230284][ T2704] worker_thread+0xa59/0x1200 [ 2208.243405][ T2704] kthread+0x411/0x500 [ 2208.247595][ T2704] ? worker_clr_flags+0x190/0x190 [ 2208.252646][ T2704] ? kthread_blkcg+0xd0/0xd0 [ 2208.257852][ T2704] ret_from_fork+0x1f/0x30 [ 2208.262314][ T2704] [ 2208.264092][ T9223] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2208.266262][ T2704] ---[ end trace a6893c0d1df372f5 ]--- [ 2208.275533][ T9129] usb 4-1: device descriptor read/8, error -71 [ 2208.280386][ T2704] ------------[ cut here ]------------ [ 2208.290958][ T2704] WARNING: CPU: 0 PID: 2704 at net/ipv6/xfrm6_tunnel.c:340 xfrm6_tunnel_net_exit+0x115/0x130 [ 2208.300194][ T9223] F2FS-fs (loop6): invalid crc value [ 2208.302239][ T2704] Modules linked in: [ 2208.310924][ T2704] CPU: 0 PID: 2704 Comm: kworker/u4:187 Tainted: G W syzkaller #0 [ 2208.320588][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2208.320779][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2208.338808][ T2704] Workqueue: netns cleanup_net [ 2208.344103][ T2704] RIP: 0010:xfrm6_tunnel_net_exit+0x115/0x130 [ 2208.350549][ T2704] Code: fd 4b 83 bc 3e 00 08 00 00 00 75 19 e8 44 25 32 fd 49 81 ff f8 07 00 00 74 1b e8 36 25 32 fd 49 83 c7 08 eb c5 e8 2b 25 32 fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 1b 25 32 fd 5b 41 5c 41 5e 41 [ 2208.361279][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2208.372110][ T2704] RSP: 0018:ffffc90006d67c30 EFLAGS: 00010293 [ 2208.384355][ T9223] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2208.384782][ T2704] RAX: ffffffff8437a7d5 RBX: ffff88811aac8800 RCX: ffff888156a58000 [ 2208.398882][ T2704] RDX: 0000000000000000 RSI: ffffc90006d67a20 RDI: ffff88811aac8808 [ 2208.407014][ T2704] RBP: ffffc90006d67c50 R08: 0000000000000003 R09: 0000000000000004 [ 2208.415199][ T2704] R10: dffffc0000000000 R11: fffff52000dacf24 R12: dffffc0000000000 [ 2208.423186][ T2704] R13: dffffc0000000000 R14: ffff88811aac8000 R15: 0000000000000008 [ 2208.436138][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2208.449591][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2208.453140][ T2704] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2208.463413][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2208.475982][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2208.483406][ T2704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2208.487191][ T9180] device veth0_vlan entered promiscuous mode [ 2208.508029][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2208.510729][ T2704] CR2: 00007effc3765060 CR3: 0000000123866000 CR4: 00000000003506b0 [ 2208.525704][ T9180] device veth1_macvtap entered promiscuous mode [ 2208.527469][ T2704] DR0: 0000000000000000 DR1: 0000000000000006 DR2: 0000000000009951 [ 2208.543450][ T2704] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2208.544005][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2208.552064][ T2704] Call Trace: [ 2208.571577][ T9223] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2208.580906][ T2704] [ 2208.584149][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2208.588871][ T2704] cleanup_net+0x593/0xae0 [ 2208.592570][ T9129] usb 4-1: device descriptor read/8, error -71 [ 2208.604780][ T2704] ? ops_init+0x4a0/0x4a0 [ 2208.611165][ T9223] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2208.615306][ T2704] ? __schedule+0xb76/0x14c0 [ 2208.643361][ T2704] process_one_work+0x6be/0xba0 [ 2208.660399][ T2704] worker_thread+0xa59/0x1200 [ 2208.679351][ T30] audit: type=1400 audit(2000000675.681:1484): avc: denied { ioctl } for pid=9222 comm="syz.6.14526" path="/7/bus/bus" dev="loop6" ino=10 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2208.687169][ T2704] kthread+0x411/0x500 [ 2208.723016][ T2704] ? worker_clr_flags+0x190/0x190 [ 2208.729159][ T2704] ? kthread_blkcg+0xd0/0xd0 [ 2208.733833][ T2704] ret_from_fork+0x1f/0x30 [ 2208.738531][ T2704] [ 2208.741687][ T2704] ---[ end trace a6893c0d1df372f6 ]--- [ 2208.795207][ T2704] ------------[ cut here ]------------ [ 2208.833312][ T2704] WARNING: CPU: 0 PID: 2704 at net/xfrm/xfrm_state.c:2754 xfrm_state_fini+0x289/0x2e0 [ 2208.845770][ T2704] Modules linked in: [ 2208.849735][ T2704] CPU: 0 PID: 2704 Comm: kworker/u4:187 Tainted: G W syzkaller #0 [ 2208.860527][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2208.893061][ T2704] Workqueue: netns cleanup_net [ 2208.901244][ T2704] RIP: 0010:xfrm_state_fini+0x289/0x2e0 [ 2208.914807][ T2704] Code: 43 80 3c 2c 00 74 08 48 89 df e8 62 ec 88 fd 48 8b 3b 44 89 f6 e8 d7 20 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d7 bd 49 fd <0f> 0b e9 e1 fd ff ff e8 cb bd 49 fd 0f 0b e9 49 fe ff ff e8 bf bd [ 2208.935664][ T2704] RSP: 0018:ffffc90006d67c10 EFLAGS: 00010293 [ 2208.942927][ T2704] RAX: ffffffff84200f29 RBX: ffff88811bf73000 RCX: ffff888156a58000 [ 2208.951346][ T2704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888156a58000 [ 2208.966837][ T2704] RBP: ffffc90006d67c38 R08: ffffffff86d85667 R09: 1ffffffff0db0acc [ 2208.996819][ T2704] R10: dffffc0000000000 R11: fffffbfff0db0acd R12: 1ffffffff0db08a4 [ 2209.007831][ T2704] R13: dffffc0000000000 R14: ffff88811bf73a80 R15: dffffc0000000000 [ 2209.016011][ T2704] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2209.025188][ T2704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2209.031788][ T2704] CR2: 000000110c2f2a26 CR3: 000000010d6fa000 CR4: 00000000003506b0 [ 2209.041169][ T2704] DR0: 0000000000000000 DR1: 0000000000000006 DR2: 0000000000009951 [ 2209.057043][ T2704] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2209.065351][ T2704] Call Trace: [ 2209.069102][ T2704] [ 2209.072083][ T2704] xfrm_net_exit+0x25/0x60 [ 2209.076625][ T2704] cleanup_net+0x593/0xae0 [ 2209.081315][ T2704] ? ops_init+0x4a0/0x4a0 [ 2209.085693][ T2704] ? __schedule+0xb76/0x14c0 [ 2209.090617][ T2704] process_one_work+0x6be/0xba0 [ 2209.147995][ T2704] worker_thread+0xa59/0x1200 [ 2209.155009][ T2704] kthread+0x411/0x500 [ 2209.159191][ T2704] ? worker_clr_flags+0x190/0x190 [ 2209.164424][ T2704] ? kthread_blkcg+0xd0/0xd0 [ 2209.169026][ T2704] ret_from_fork+0x1f/0x30 [ 2209.174366][ T2704] [ 2209.177576][ T2704] ---[ end trace a6893c0d1df372f7 ]--- [ 2209.228370][ T2704] tipc: Left network mode [ 2209.291912][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.299035][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.307077][ T9275] device bridge_slave_0 entered promiscuous mode [ 2209.314508][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.322231][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.335311][ T9275] device bridge_slave_1 entered promiscuous mode [ 2209.461989][ T9129] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2209.485298][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.492449][ T9275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2209.499759][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.506810][ T9275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2209.514383][T25033] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2209.558583][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2209.566482][ T2673] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.575683][ T9129] usb 4-1: Using ep0 maxpacket: 32 [ 2209.581896][ T2673] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.612436][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2209.621284][ T2673] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.628825][ T2673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2209.638607][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2209.647825][ T2673] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.654901][ T2673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2209.687168][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2209.695316][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2209.722494][ T9129] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 2209.722664][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2209.731865][ T9129] usb 4-1: config 0 has no interface number 0 [ 2209.741657][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2209.753465][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2209.761051][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2209.771378][ T9275] device veth0_vlan entered promiscuous mode [ 2209.782646][T25033] usb 3-1: Using ep0 maxpacket: 16 [ 2209.796853][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2209.807341][ T9275] device veth1_macvtap entered promiscuous mode [ 2209.817663][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2209.826175][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2209.842588][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2209.850998][ T2673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2209.896870][ T30] audit: type=1400 audit(2000000676.813:1485): avc: denied { create } for pid=9326 comm="syz.6.14568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2209.911183][T25033] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2209.919814][ T30] audit: type=1400 audit(2000000676.831:1486): avc: denied { bind } for pid=9326 comm="syz.6.14568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2209.939294][T25033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2209.954144][ T9129] usb 4-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=4b.2d [ 2209.966704][T25033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2209.976871][T25033] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2209.986748][T25033] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2209.990583][ T9129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.006826][ T30] audit: type=1400 audit(2000000676.831:1487): avc: denied { write } for pid=9326 comm="syz.6.14568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2210.013519][ T9129] usb 4-1: Product: syz [ 2210.036747][ T9129] usb 4-1: Manufacturer: syz [ 2210.046970][ T9129] usb 4-1: SerialNumber: syz [ 2210.061535][ T9129] usb 4-1: config 0 descriptor?? [ 2210.082176][T25033] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2210.102191][T25033] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2210.110360][T25033] usb 3-1: Manufacturer: syz [ 2210.118294][T25033] usb 3-1: config 0 descriptor?? [ 2210.123525][ T2704] device veth1_macvtap left promiscuous mode [ 2210.129671][ T2704] device veth0_vlan left promiscuous mode [ 2210.153318][ T9334] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 2210.165088][ T9334] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 2210.210874][ T9325] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2210.488264][ T9325] usb 6-1: Using ep0 maxpacket: 8 [ 2210.553230][ T7959] usb 4-1: USB disconnect, device number 16 [ 2210.616583][ T9325] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2210.624923][ T9325] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2210.634975][ T9325] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2210.644845][ T9325] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2210.654980][ T9325] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2210.668115][ T9325] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2210.677208][ T9325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.776873][ T9129] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2211.033510][ T9129] usb 7-1: Using ep0 maxpacket: 32 [ 2211.163812][ T9129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.174811][ T9129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2211.184925][ T9129] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2211.194147][ T9129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.206850][ T9129] usb 7-1: config 0 descriptor?? [ 2211.251811][ T9129] hub 7-1:0.0: USB hub found [ 2211.482579][ T9129] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2211.528574][ T9381] UDC core: couldn't find an available UDC or it's busy: -16 [ 2211.536061][ T9381] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2211.536063][ T9325] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2211.792514][ T9325] usb 4-1: Using ep0 maxpacket: 32 [ 2211.943462][ T9129] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 2211.952081][ T9129] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 2211.995717][ T9325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2212.081211][ T9325] usb 4-1: config 251 has an invalid interface number: 6 but max is 0 [ 2212.089444][ T9325] usb 4-1: config 251 has no interface number 0 [ 2212.095769][ T9325] usb 4-1: config 251 interface 6 has no altsetting 0 [ 2212.273631][ T9325] usb 4-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=ea.98 [ 2212.282826][ T9325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.290864][ T9325] usb 4-1: Product: syz [ 2212.295056][ T9325] usb 4-1: Manufacturer: syz [ 2212.299672][ T9325] usb 4-1: SerialNumber: syz [ 2212.416804][ T9129] usb 3-1: USB disconnect, device number 2 [ 2212.626581][ T9359] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 2213.113134][T30971] usb 6-1: USB disconnect, device number 3 [ 2213.235801][ T9359] usbhid 7-1:0.0: reset_resume error -1 [ 2213.481777][ T9191] usb 7-1: USB disconnect, device number 9 [ 2213.556538][T30971] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2213.692567][ T9350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.700151][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.708625][ T9350] device bridge_slave_0 entered promiscuous mode [ 2213.716501][ T9350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.724273][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.734589][ T9350] device bridge_slave_1 entered promiscuous mode [ 2213.803596][ T2704] ------------[ cut here ]------------ [ 2213.814818][ T2704] WARNING: CPU: 0 PID: 2704 at net/xfrm/xfrm_state.c:2754 xfrm_state_fini+0x289/0x2e0 [ 2213.824582][T30971] usb 6-1: Using ep0 maxpacket: 32 [ 2213.841160][ T2704] Modules linked in: [ 2213.848622][ T2704] CPU: 0 PID: 2704 Comm: kworker/u4:187 Tainted: G W syzkaller #0 [ 2213.858824][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2213.869198][ T2704] Workqueue: netns cleanup_net [ 2213.874010][ T2704] RIP: 0010:xfrm_state_fini+0x289/0x2e0 [ 2213.880126][ T2704] Code: 43 80 3c 2c 00 74 08 48 89 df e8 62 ec 88 fd 48 8b 3b 44 89 f6 e8 d7 20 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d7 bd 49 fd <0f> 0b e9 e1 fd ff ff e8 cb bd 49 fd 0f 0b e9 49 fe ff ff e8 bf bd [ 2213.894395][ T9350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.902793][ T2704] RSP: 0018:ffffc90006d67c10 EFLAGS: 00010293 [ 2213.906846][ T9350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2213.913594][ T2704] RAX: ffffffff84200f29 RBX: ffff888122c48000 RCX: ffff888156a58000 [ 2213.920361][ T9350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.928745][ T2704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888156a58000 [ 2213.935188][ T9350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2213.950926][ T2704] RBP: ffffc90006d67c38 R08: ffffffff86d85667 R09: 1ffffffff0db0acc [ 2213.959048][ T2704] R10: dffffc0000000000 R11: fffffbfff0db0acd R12: 1ffffffff0db08a4 [ 2213.967227][ T2704] R13: dffffc0000000000 R14: ffff888122c48a80 R15: dffffc0000000000 [ 2213.975322][ T2704] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2213.985595][ T2704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2213.992254][ T2704] CR2: 0000001b33c10ff8 CR3: 0000000136023000 CR4: 00000000003506a0 [ 2213.994180][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2214.000680][ T2704] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 2214.009600][T30971] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2214.025399][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2214.033258][T30971] usb 6-1: config 0 has no interface number 0 [ 2214.039754][T30971] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2214.047086][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2214.054139][ T2704] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2214.062596][ T2704] Call Trace: [ 2214.065930][ T2704] [ 2214.068904][ T2704] xfrm_net_exit+0x25/0x60 [ 2214.068966][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2214.074339][ T2704] cleanup_net+0x593/0xae0 [ 2214.085935][ T2704] ? ops_init+0x4a0/0x4a0 [ 2214.087185][ T2429] bridge0: port 1(bridge_slave_0) entered blocking state [ 2214.090364][ T2704] process_one_work+0x6be/0xba0 [ 2214.097333][ T2429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2214.098880][ T7959] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2214.103533][ T2704] worker_thread+0xa59/0x1200 [ 2214.122173][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2214.123334][ T2704] kthread+0x411/0x500 [ 2214.132834][ T2429] bridge0: port 2(bridge_slave_1) entered blocking state [ 2214.141538][ T2429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2214.142251][ T2704] ? worker_clr_flags+0x190/0x190 [ 2214.154165][ T2704] ? kthread_blkcg+0xd0/0xd0 [ 2214.159640][ T2704] ret_from_fork+0x1f/0x30 [ 2214.164141][ T2704] [ 2214.168530][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2214.176077][ T2704] ---[ end trace a6893c0d1df372f8 ]--- [ 2214.193954][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2214.205365][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2214.224820][ T9350] device veth0_vlan entered promiscuous mode [ 2214.231328][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2214.239404][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2214.241057][T30971] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2214.249277][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2214.256463][T30971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.271023][T30971] usb 6-1: Product: syz [ 2214.275993][ T2704] tipc: Disabling bearer [ 2214.280999][T30971] usb 6-1: Manufacturer: syz [ 2214.281144][ T2704] tipc: Disabling bearer [ 2214.285635][T30971] usb 6-1: SerialNumber: syz [ 2214.296386][T30971] usb 6-1: config 0 descriptor?? [ 2214.296797][ T2704] tipc: Left network mode [ 2214.310777][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2214.320571][ T9350] device veth1_macvtap entered promiscuous mode [ 2214.331472][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2214.348429][T30971] smsc75xx v1.0.0 [ 2214.353324][ T2429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2214.491389][ T9419] usb 4-1: USB disconnect, device number 17 [ 2214.508113][ T9191] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 2214.508499][ T7959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.529104][ T7959] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2214.538442][ T7959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.552846][ T7959] usb 3-1: config 0 descriptor?? [ 2214.920915][ T30] audit: type=1400 audit(2000000681.518:1488): avc: denied { create } for pid=9462 comm="syz.3.14619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2214.967688][ T9191] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 2214.976167][ T9191] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 2214.984356][ T9191] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2214.990429][ T2704] device vlan2 left promiscuous mode [ 2214.993429][ T9191] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2214.998924][ T2704] device veth1 left promiscuous mode [ 2215.009445][ T9191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2215.009472][ T9191] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2215.017175][ T2704] bridge0: port 2(vlan2) entered disabled state [ 2215.044840][T30971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 2215.045141][ T2704] device veth13 left promiscuous mode [ 2215.056220][ T7959] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 2215.062231][ T2704] bridge0: port 1(veth13) entered disabled state [ 2215.069610][T30971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2215.087202][ T7959] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input9 [ 2215.175085][ T7959] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2215.267716][T30971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2215.278635][T30971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2215.288536][T30971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2215.299015][T30971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 2215.299682][ T9191] usb 7-1: string descriptor 0 read error: -22 [ 2215.308597][T30971] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 2215.321605][ T9191] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2215.330785][ T9191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.341588][ T9191] usb 7-1: config 0 descriptor?? [ 2215.363231][ T9418] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 2215.385178][ T9191] hub 7-1:0.0: bad descriptor, ignoring hub [ 2215.391195][ T9191] hub: probe of 7-1:0.0 failed with error -5 [ 2215.398185][ T9191] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input10 [ 2215.607081][ T30] audit: type=1400 audit(2000000682.154:1489): avc: denied { append } for pid=9417 comm="syz.6.14602" name="event4" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2215.608293][T25033] usb 7-1: USB disconnect, device number 10 [ 2215.630833][ C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -19 [ 2216.731579][ T9129] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2216.963222][T30971] usb 3-1: USB disconnect, device number 3 [ 2216.988102][ T9129] usb 7-1: Using ep0 maxpacket: 8 [ 2217.107480][T30893] usb 6-1: USB disconnect, device number 4 [ 2217.116453][ T9129] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2217.129525][ T9129] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2217.142587][ T9129] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2217.154297][ T9129] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2217.167717][ T9129] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2217.176999][ T9129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.426544][T30971] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2217.565393][T30893] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 2217.683003][T30971] usb 3-1: Using ep0 maxpacket: 32 [ 2217.811352][T30971] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2217.961076][T30893] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2217.969791][T30893] usb 6-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 2217.982403][T30971] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2217.991520][T30971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.999801][T30971] usb 3-1: Product: syz [ 2218.004409][T30971] usb 3-1: Manufacturer: syz [ 2218.009031][T30971] usb 3-1: SerialNumber: syz [ 2218.015380][T30971] usb 3-1: config 0 descriptor?? [ 2218.154546][ T9501] tipc: Started in network mode [ 2218.159563][ T9501] tipc: Node identity 92d60f256aca, cluster identity 4711 [ 2218.167253][ T9501] tipc: Enabled bearer , priority 0 [ 2218.186420][T30893] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2218.198953][T30893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2218.202674][ T9501] device syzkaller0 entered promiscuous mode [ 2218.207526][T30893] usb 6-1: Product: syz [ 2218.219037][T30893] usb 6-1: Manufacturer: syz [ 2218.223679][T30893] usb 6-1: SerialNumber: syz [ 2218.238440][ T9500] tipc: Resetting bearer [ 2218.249359][T30893] usb 6-1: config 0 descriptor?? [ 2218.266568][ T9500] tipc: Disabling bearer [ 2218.560357][T30893] cdc_ether 6-1:0.0: skipping garbage [ 2218.565803][T30893] usb 6-1: bad CDC descriptors [ 2218.570914][T30893] usb 6-1: unsupported MDLM descriptors [ 2218.577462][T30893] usb 6-1: USB disconnect, device number 5 [ 2218.794836][ T9191] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2219.051406][ T9191] usb 4-1: Using ep0 maxpacket: 16 [ 2219.108760][ T9556] device syzkaller0 entered promiscuous mode [ 2219.179758][ T9191] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2219.190819][ T9191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2219.372436][ T9191] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2219.381528][ T9191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.404212][ T9191] usb 4-1: Product: syz [ 2219.408394][ T9191] usb 4-1: Manufacturer: syz [ 2219.413000][ T9191] usb 4-1: SerialNumber: syz [ 2219.437040][ T9191] usb 4-1: config 0 descriptor?? [ 2219.543495][ T9419] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2219.655281][T25033] usb 7-1: USB disconnect, device number 11 [ 2219.737040][ T9191] usb 4-1: USB disconnect, device number 18 [ 2219.792079][ T9596] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2219.822798][ T9419] usb 6-1: Using ep0 maxpacket: 16 [ 2219.949495][ T9419] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 2219.957806][ T9419] usb 6-1: config 0 has no interface number 0 [ 2220.131257][ T9419] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice=d0.24 [ 2220.140480][ T9419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.148551][ T9419] usb 6-1: Product: syz [ 2220.152793][ T9419] usb 6-1: Manufacturer: syz [ 2220.157413][ T9419] usb 6-1: SerialNumber: syz [ 2220.163132][ T9419] usb 6-1: config 0 descriptor?? [ 2220.270122][ T9129] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2220.334269][ T9191] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2220.590879][ T9191] usb 4-1: Using ep0 maxpacket: 16 [ 2220.655233][ T9129] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2220.663841][ T9129] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2220.674158][ T9129] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2220.683468][ T9129] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2220.694475][ T9129] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2220.719263][ T9191] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2220.730322][ T9191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2220.826167][ T9129] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2220.835263][ T9129] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2220.843339][ T9129] usb 7-1: Product: syz [ 2220.847524][ T9129] usb 7-1: Manufacturer: syz [ 2220.890889][ T9129] cdc_wdm 7-1:1.0: skipping garbage [ 2220.896185][ T9129] cdc_wdm 7-1:1.0: skipping garbage [ 2220.900411][ T9419] usb 3-1: USB disconnect, device number 4 [ 2220.901790][ T9191] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2220.923537][ T9129] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2220.930658][ T9191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.938931][ T9191] usb 4-1: Product: syz [ 2220.943189][ T9191] usb 4-1: Manufacturer: syz [ 2220.948409][ T9191] usb 4-1: SerialNumber: syz [ 2220.956348][ T9191] usb 4-1: config 0 descriptor?? [ 2221.323939][ T9191] usb 7-1: USB disconnect, device number 12 [ 2221.435392][ T9129] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2221.991385][ T9129] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2222.000580][ T9129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.008644][ T9129] usb 3-1: Product: syz [ 2222.012881][ T9129] usb 3-1: Manufacturer: syz [ 2222.017478][ T9129] usb 3-1: SerialNumber: syz [ 2222.173054][ T9419] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2222.429620][ T9419] usb 7-1: Using ep0 maxpacket: 16 [ 2222.454220][T25033] usb 6-1: USB disconnect, device number 6 [ 2222.557979][ T9419] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2222.566728][ T9419] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.577013][ T9419] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2222.750470][ T9419] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2222.759575][ T9419] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.767687][ T9419] usb 7-1: Product: syz [ 2222.771876][ T9419] usb 7-1: Manufacturer: syz [ 2222.776459][ T9419] usb 7-1: SerialNumber: syz [ 2222.889322][T25033] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2223.109220][ T30] audit: type=1400 audit(2000000689.179:1490): avc: denied { mounton } for pid=9670 comm="syz.7.14707" path="/26/file0/file0" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2223.156579][T25033] usb 6-1: Using ep0 maxpacket: 16 [ 2223.274327][ T9419] usb 7-1: 0:2 : does not exist [ 2223.284975][T25033] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 2223.293168][T25033] usb 6-1: config 0 has no interface number 0 [ 2223.299302][T25033] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2223.309357][T25033] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2223.408395][ T9129] usb 3-1: USB disconnect, device number 5 [ 2223.488111][T25033] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2223.497581][T25033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.505831][T25033] usb 6-1: Product: syz [ 2223.510308][T25033] usb 6-1: Manufacturer: syz [ 2223.513899][ T9191] usb 4-1: USB disconnect, device number 19 [ 2223.514921][T25033] usb 6-1: SerialNumber: syz [ 2223.532718][T25033] usb 6-1: config 0 descriptor?? [ 2223.547436][ T9686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9686 comm=syz.3.14713 [ 2223.560337][ T9667] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2223.567916][ T9667] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2223.810563][ T9667] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2223.817645][ T9667] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2223.986474][ T9703] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=349689926 (11190077632 ns) > initial count (9226619392 ns). Using initial count to start timer. [ 2224.005548][ T9703] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2224.514373][T25033] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2224.524557][T25033] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2224.535834][T25033] asix: probe of 6-1:0.251 failed with error -71 [ 2224.546083][T25033] usb 6-1: USB disconnect, device number 7 [ 2224.613243][ T9777] binder: 9776:9777 unknown command 0 [ 2224.618702][ T9777] binder: 9776:9777 ioctl c0306201 200000000080 returned -22 [ 2224.671788][ T9784] tipc: Started in network mode [ 2224.676912][ T9784] tipc: Node identity b69d3ee281d, cluster identity 4711 [ 2224.689008][ T9784] tipc: Enabled bearer , priority 0 [ 2224.713044][ T9784] device syzkaller0 entered promiscuous mode [ 2224.722340][ T9783] tipc: Resetting bearer [ 2224.735258][ T9783] tipc: Disabling bearer [ 2224.984755][T30971] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 2225.307549][ T9419] usb 7-1: USB disconnect, device number 13 [ 2225.380294][ T9191] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2225.412349][T30971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2225.455157][T30971] usb 4-1: not running at top speed; connect to a high speed hub [ 2225.551355][T30971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.561661][T30971] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2225.647507][ T9191] usb 6-1: Using ep0 maxpacket: 8 [ 2225.679617][ T9419] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2225.775840][ T9191] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2225.840031][T30971] usb 4-1: string descriptor 0 read error: -22 [ 2225.846344][T30971] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2225.855675][T30971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.915586][T30971] usb 4-1: 0:2 : does not exist [ 2225.968313][ T9191] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2225.977521][ T9191] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2225.985818][ T9191] usb 6-1: Product: syz [ 2225.990223][ T9191] usb 6-1: Manufacturer: syz [ 2225.994867][ T9191] usb 6-1: SerialNumber: syz [ 2226.075158][ T9419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2226.096496][ T9419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2226.106355][ T9419] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2226.129478][ T9419] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2226.138568][ T9419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.147859][ T9419] usb 7-1: config 0 descriptor?? [ 2226.664174][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.671619][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.679485][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.687216][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.694747][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.702673][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.710273][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.717903][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.725324][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.733003][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.740575][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.747991][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.755619][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.763188][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.770730][ T9419] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 2226.778460][ T9419] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 2226.789091][ T9419] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2226.803741][ T9174] udevd[9174]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2226.963244][ T9191] usb 7-1: USB disconnect, device number 14 [ 2227.251134][T30971] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2227.261061][T30971] usb 4-1: USB disconnect, device number 20 [ 2227.437974][ T9419] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2227.476157][ T9174] udevd[9174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2227.672001][ T30] audit: type=1400 audit(2000000693.444:1491): avc: denied { connect } for pid=9888 comm="syz.7.14807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2227.700087][ T9419] usb 3-1: Using ep0 maxpacket: 32 [ 2227.828460][ T9419] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2227.838955][ T9419] usb 3-1: config 0 has no interface number 0 [ 2228.020919][ T9419] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2228.033419][ T9419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.042321][ T9446] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2228.050737][ T9419] usb 3-1: Product: syz [ 2228.059502][ T9419] usb 3-1: Manufacturer: syz [ 2228.068581][ T9419] usb 3-1: SerialNumber: syz [ 2228.080373][ T9419] usb 3-1: config 0 descriptor?? [ 2228.128261][ T9419] smsc95xx v2.0.0 [ 2228.305970][ T9191] usb 6-1: USB disconnect, device number 8 [ 2228.307233][ T9927] xt_TCPMSS: Only works on TCP SYN packets [ 2228.320274][ T9446] usb 7-1: Using ep0 maxpacket: 32 [ 2228.448537][ T9446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.465473][ T9446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2228.503007][ T9446] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2228.535741][ T9446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.564543][ T9446] usb 7-1: config 0 descriptor?? [ 2228.598255][ T9419] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2228.640275][ T9419] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2228.751525][ T9999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14861'. [ 2228.761682][ T9999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14861'. [ 2228.781303][ T30] audit: type=1400 audit(2000000694.492:1492): avc: denied { create } for pid=10000 comm="syz.7.14862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2229.088004][ T9446] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 2229.097835][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14882'. [ 2229.113333][T10041] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14882'. [ 2229.201717][T10062] device syzkaller0 entered promiscuous mode [ 2229.379736][ T7959] usb 7-1: USB disconnect, device number 15 [ 2229.389305][ T9419] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 2229.411050][ T9419] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 2229.501447][ T30] audit: type=1400 audit(2000000695.156:1493): avc: denied { write } for pid=10114 comm="syz.7.14917" path="socket:[147143]" dev="sockfs" ino=147143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2229.538934][ T9446] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2229.589001][T10127] tipc: Started in network mode [ 2229.594001][T10127] tipc: Node identity d614ea3febe6, cluster identity 4711 [ 2229.601219][T10127] tipc: Enabled bearer , priority 0 [ 2229.611139][T10127] device syzkaller0 entered promiscuous mode [ 2229.629565][T10127] tipc: Resetting bearer [ 2229.636750][T10124] tipc: Resetting bearer [ 2229.651369][T10124] tipc: Disabling bearer [ 2229.793902][T10152] netlink: 'syz.5.14935': attribute type 34 has an invalid length. [ 2229.935234][ T9446] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2229.952874][ T9446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2229.967037][ T9446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2229.982741][ T9446] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2230.094909][ T9446] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2230.104077][ T9446] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2230.119220][ T9446] usb 4-1: Manufacturer: syz [ 2230.126715][ T9446] usb 4-1: config 0 descriptor?? [ 2230.469660][ T9419] usb 3-1: USB disconnect, device number 6 [ 2230.603040][T10276] netlink: 'syz.2.14995': attribute type 3 has an invalid length. [ 2230.651607][ T9446] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 2230.664149][ T9446] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 2230.682128][ T9446] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2230.740811][T10302] ================================================================== [ 2230.749041][T10302] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 2230.757217][T10302] Read of size 8 at addr ffff88811861a9c0 by task syz.6.15008/10302 [ 2230.765205][T10302] [ 2230.767558][T10302] CPU: 0 PID: 10302 Comm: syz.6.15008 Tainted: G W syzkaller #0 [ 2230.776495][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2230.786556][T10302] Call Trace: [ 2230.789855][T10302] [ 2230.792796][T10302] __dump_stack+0x21/0x30 [ 2230.797143][T10302] dump_stack_lvl+0x110/0x170 [ 2230.801828][T10302] ? show_regs_print_info+0x20/0x20 [ 2230.807064][T10302] ? load_image+0x3e0/0x3e0 [ 2230.811586][T10302] print_address_description+0x7f/0x2c0 [ 2230.817139][T10302] ? tc_setup_flow_action+0x870/0x3240 [ 2230.822615][T10302] kasan_report+0xf1/0x140 [ 2230.827039][T10302] ? tc_setup_flow_action+0x870/0x3240 [ 2230.832505][T10302] __asan_report_load8_noabort+0x14/0x20 [ 2230.838151][T10302] tc_setup_flow_action+0x870/0x3240 [ 2230.843447][T10302] mall_replace_hw_filter+0x2cc/0x8b0 [ 2230.848828][T10302] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 2230.854910][T10302] ? mall_set_parms+0x520/0x520 [ 2230.859781][T10302] ? tcf_exts_destroy+0xb0/0xb0 [ 2230.864638][T10302] ? pcpu_alloc+0x1170/0x16e0 [ 2230.869320][T10302] ? mall_set_parms+0x1e8/0x520 [ 2230.874187][T10302] mall_change+0x544/0x760 [ 2230.878622][T10302] ? __kasan_check_write+0x14/0x20 [ 2230.883748][T10302] ? mall_get+0xa0/0xa0 [ 2230.887907][T10302] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 2230.893810][T10302] tc_new_tfilter+0x12e5/0x18e0 [ 2230.898669][T10302] ? tcf_gate_entry_destructor+0x20/0x20 [ 2230.904310][T10302] ? security_capable+0x87/0xb0 [ 2230.909190][T10302] ? ns_capable+0x8c/0xf0 [ 2230.913552][T10302] ? netlink_net_capable+0x125/0x160 [ 2230.918846][T10302] ? tcf_gate_entry_destructor+0x20/0x20 [ 2230.924492][T10302] rtnetlink_rcv_msg+0x871/0xce0 [ 2230.929439][T10302] ? rtnetlink_bind+0x80/0x80 [ 2230.934192][T10302] ? avc_has_perm_noaudit+0x391/0x490 [ 2230.939580][T10302] ? memcpy+0x56/0x70 [ 2230.943572][T10302] ? avc_has_perm_noaudit+0x30b/0x490 [ 2230.948961][T10302] ? arch_stack_walk+0xee/0x140 [ 2230.953816][T10302] ? avc_denied+0x1b0/0x1b0 [ 2230.958346][T10302] ? stack_trace_save+0xa6/0xf0 [ 2230.963209][T10302] ? avc_has_perm+0x163/0x250 [ 2230.967898][T10302] ? avc_has_perm_noaudit+0x490/0x490 [ 2230.973276][T10302] ? x64_sys_call+0x4b/0x9a0 [ 2230.977868][T10302] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 2230.983242][T10302] netlink_rcv_skb+0x1f5/0x440 [ 2230.988014][T10302] ? rtnetlink_bind+0x80/0x80 [ 2230.992705][T10302] ? netlink_ack+0xb50/0xb50 [ 2230.997302][T10302] ? __netlink_lookup+0x387/0x3b0 [ 2231.002340][T10302] rtnetlink_rcv+0x1c/0x20 [ 2231.006761][T10302] netlink_unicast+0x876/0xa40 [ 2231.011537][T10302] netlink_sendmsg+0x879/0xb80 [ 2231.016309][T10302] ? netlink_getsockopt+0x530/0x530 [ 2231.021530][T10302] ? do_futex+0xde8/0x2800 [ 2231.025948][T10302] ? security_socket_sendmsg+0x82/0xa0 [ 2231.031412][T10302] ? netlink_getsockopt+0x530/0x530 [ 2231.036621][T10302] ____sys_sendmsg+0x5b7/0x8f0 [ 2231.041397][T10302] ? __sys_sendmsg_sock+0x40/0x40 [ 2231.046435][T10302] ? import_iovec+0x7c/0xb0 [ 2231.050941][T10302] ___sys_sendmsg+0x236/0x2e0 [ 2231.055646][T10302] ? __sys_sendmsg+0x280/0x280 [ 2231.060424][T10302] ? sock_show_fdinfo+0xa0/0xa0 [ 2231.065307][T10302] ? __fdget+0x1a1/0x230 [ 2231.069555][T10302] __x64_sys_sendmsg+0x206/0x2f0 [ 2231.074508][T10302] ? ___sys_sendmsg+0x2e0/0x2e0 [ 2231.079409][T10302] ? __kasan_check_write+0x14/0x20 [ 2231.084553][T10302] ? switch_fpu_return+0x15d/0x2c0 [ 2231.089670][T10302] x64_sys_call+0x4b/0x9a0 [ 2231.094097][T10302] do_syscall_64+0x4c/0xa0 [ 2231.098522][T10302] ? clear_bhb_loop+0x50/0xa0 [ 2231.103200][T10302] ? clear_bhb_loop+0x50/0xa0 [ 2231.107876][T10302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2231.113785][T10302] RIP: 0033:0x7f8956962f79 [ 2231.118204][T10302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2231.137813][T10302] RSP: 002b:00007f89553be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2231.146277][T10302] RAX: ffffffffffffffda RBX: 00007f8956bdcfa0 RCX: 00007f8956962f79 [ 2231.154253][T10302] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 2231.162240][T10302] RBP: 00007f89569f97e0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.170214][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2231.178194][T10302] R13: 00007f8956bdd038 R14: 00007f8956bdcfa0 R15: 00007ffc3f1e4a58 [ 2231.186178][T10302] [ 2231.189203][T10302] [ 2231.191540][T10302] Allocated by task 10302: [ 2231.195959][T10302] __kasan_kmalloc+0xda/0x110 [ 2231.200661][T10302] __kmalloc+0x13d/0x2c0 [ 2231.204945][T10302] tcf_idr_create+0x5f/0x790 [ 2231.209553][T10302] tcf_idr_create_from_flags+0x61/0x70 [ 2231.215021][T10302] tcf_gact_init+0x342/0x570 [ 2231.219619][T10302] tcf_action_init_1+0x3ff/0x6b0 [ 2231.224586][T10302] tcf_action_init+0x233/0x7a0 [ 2231.229357][T10302] tcf_exts_validate+0x24a/0x580 [ 2231.234304][T10302] mall_set_parms+0x48/0x520 [ 2231.238906][T10302] mall_change+0x478/0x760 [ 2231.243331][T10302] tc_new_tfilter+0x12e5/0x18e0 [ 2231.248186][T10302] rtnetlink_rcv_msg+0x871/0xce0 [ 2231.253135][T10302] netlink_rcv_skb+0x1f5/0x440 [ 2231.257900][T10302] rtnetlink_rcv+0x1c/0x20 [ 2231.262323][T10302] netlink_unicast+0x876/0xa40 [ 2231.267095][T10302] netlink_sendmsg+0x879/0xb80 [ 2231.271868][T10302] ____sys_sendmsg+0x5b7/0x8f0 [ 2231.276636][T10302] ___sys_sendmsg+0x236/0x2e0 [ 2231.281321][T10302] __x64_sys_sendmsg+0x206/0x2f0 [ 2231.286261][T10302] x64_sys_call+0x4b/0x9a0 [ 2231.290686][T10302] do_syscall_64+0x4c/0xa0 [ 2231.295106][T10302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2231.301004][T10302] [ 2231.303343][T10302] Last potentially related work creation: [ 2231.309060][T10302] kasan_save_stack+0x3a/0x60 [ 2231.313740][T10302] __kasan_record_aux_stack+0xd2/0x100 [ 2231.319218][T10302] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2231.325031][T10302] call_rcu+0x10b/0xf80 [ 2231.329187][T10302] neigh_parms_release+0x1dd/0x220 [ 2231.334301][T10302] addrconf_ifdown+0x1630/0x18d0 [ 2231.339247][T10302] addrconf_notify+0x3bd/0xde0 [ 2231.344012][T10302] raw_notifier_call_chain+0x90/0x100 [ 2231.349384][T10302] unregister_netdevice_many+0x10a1/0x1aa0 [ 2231.355216][T10302] ip6_tnl_exit_batch_net+0x3d5/0x420 [ 2231.360592][T10302] cleanup_net+0x60a/0xae0 [ 2231.365033][T10302] process_one_work+0x6be/0xba0 [ 2231.369890][T10302] worker_thread+0xa59/0x1200 [ 2231.374590][T10302] kthread+0x411/0x500 [ 2231.378663][T10302] ret_from_fork+0x1f/0x30 [ 2231.383083][T10302] [ 2231.385409][T10302] Second to last potentially related work creation: [ 2231.391991][T10302] kasan_save_stack+0x3a/0x60 [ 2231.396680][T10302] __kasan_record_aux_stack+0xd2/0x100 [ 2231.402137][T10302] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2231.407937][T10302] kvfree_call_rcu+0xb6/0x840 [ 2231.412617][T10302] br_multicast_destroy_mdb_entry+0x90/0xb0 [ 2231.418526][T10302] br_multicast_gc_work+0x1b9/0x230 [ 2231.423741][T10302] process_one_work+0x6be/0xba0 [ 2231.428610][T10302] worker_thread+0xa59/0x1200 [ 2231.433297][T10302] kthread+0x411/0x500 [ 2231.437366][T10302] ret_from_fork+0x1f/0x30 [ 2231.441793][T10302] [ 2231.444118][T10302] The buggy address belongs to the object at ffff88811861a900 [ 2231.444118][T10302] which belongs to the cache kmalloc-192 of size 192 [ 2231.458198][T10302] The buggy address is located 0 bytes to the right of [ 2231.458198][T10302] 192-byte region [ffff88811861a900, ffff88811861a9c0) [ 2231.471827][T10302] The buggy address belongs to the page: [ 2231.477463][T10302] page:ffffea0004618680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11861a [ 2231.487708][T10302] flags: 0x4000000000000200(slab|zone=1) [ 2231.493345][T10302] raw: 4000000000000200 ffffea0005450240 0000000800000008 ffff888100042c00 [ 2231.501950][T10302] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 2231.510530][T10302] page dumped because: kasan: bad access detected [ 2231.516944][T10302] page_owner tracks the page as allocated [ 2231.522657][T10302] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 12971, ts 729531170368, free_ts 729511126849 [ 2231.538908][T10302] post_alloc_hook+0x192/0x1b0 [ 2231.543674][T10302] prep_new_page+0x1c/0x110 [ 2231.548186][T10302] get_page_from_freelist+0x2d3a/0x2dc0 [ 2231.553738][T10302] __alloc_pages+0x1a2/0x460 [ 2231.558341][T10302] new_slab+0xa1/0x4d0 [ 2231.562418][T10302] ___slab_alloc+0x381/0x810 [ 2231.567009][T10302] __slab_alloc+0x49/0x90 [ 2231.571338][T10302] kmem_cache_alloc_trace+0x146/0x270 [ 2231.576707][T10302] __se_sys_io_uring_setup+0x13c9/0x2a30 [ 2231.582344][T10302] __x64_sys_io_uring_setup+0x5b/0x70 [ 2231.587718][T10302] x64_sys_call+0x5f4/0x9a0 [ 2231.592219][T10302] do_syscall_64+0x4c/0xa0 [ 2231.596642][T10302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2231.602537][T10302] page last free stack trace: [ 2231.607202][T10302] free_unref_page_prepare+0x542/0x550 [ 2231.612663][T10302] free_unref_page+0xae/0x540 [ 2231.617354][T10302] __free_pages+0x6c/0x100 [ 2231.621780][T10302] __vunmap+0x86d/0xa00 [ 2231.625944][T10302] free_work+0x5a/0x80 [ 2231.630015][T10302] process_one_work+0x6be/0xba0 [ 2231.634872][T10302] worker_thread+0xa59/0x1200 [ 2231.639566][T10302] kthread+0x411/0x500 [ 2231.643643][T10302] ret_from_fork+0x1f/0x30 [ 2231.648059][T10302] [ 2231.650391][T10302] Memory state around the buggy address: [ 2231.656031][T10302] ffff88811861a880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2231.664092][T10302] ffff88811861a900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.672147][T10302] >ffff88811861a980: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 2231.680201][T10302] ^ [ 2231.686376][T10302] ffff88811861aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2231.694458][T10302] ffff88811861aa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2231.702540][T10302] ================================================================== [ 2231.710615][T10302] Disabling lock debugging due to kernel taint [ 2231.724545][ T30] audit: type=1400 audit(2000000697.233:1494): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2231.749982][ T30] audit: type=1400 audit(2000000697.261:1495): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2231.772652][ T30] audit: type=1400 audit(2000000697.261:1496): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2231.808014][ T30] audit: type=1400 audit(2000000697.261:1497): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2231.830855][ T7959] usb 4-1: USB disconnect, device number 21 [ 2231.835208][ T30] audit: type=1400 audit(2000000697.261:1498): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2231.859053][ T30] audit: type=1400 audit(2000000697.261:1499): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2231.886888][ T30] audit: type=1400 audit(2000000697.261:1500): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1