last executing test programs: 15.447024716s ago: executing program 0 (id=2480): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) 15.228473501s ago: executing program 0 (id=2482): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 13.302797717s ago: executing program 0 (id=2488): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r2, 0x0, 0x100000000000000}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x7fff, 0x5, 0x1, 0x8}]}) fsopen(&(0x7f0000000000)='ecryptfs\x00', 0x0) 12.698431431s ago: executing program 1 (id=2491): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x317}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000faffffff2a000000180001801400020064756d6d793000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000c40)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001300)={0x6, 0x200, 0x201, 0xfffffffe, 0x2, 0x4, 0x81, 0xa}, &(0x7f0000001340)=0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111640000000000851000000200000085000000a000000095001c00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x6, 0x5}, {0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xf}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x400, 0x0, 0x8000000}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x40}, {0xffffffff, 0x10000000, 0x101}, {0x0, 0xfffffffc, 0x3}, {0x0, 0x0, 0xc, 0xfffffffe, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {0x1000000}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {0x0, 0x0, 0x800}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0xfffffffe, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x10000000, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x2, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x9, 0x4000000, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x2, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0x1f4, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x4040081) recvmmsg(r7, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3}, 0x7}], 0x1, 0x10140, 0x0) 12.370831429s ago: executing program 4 (id=2493): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x3c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r0, 0x0, 0xfce) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(r1, 0x0, &(0x7f0000000400), 0x80000) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x49) write(r5, &(0x7f0000000340)="08000000010000", 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.336821749s ago: executing program 1 (id=2494): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x3, 0x9002, 0x9, 0x1, 0x8, 0x8, 0x9, 0xba3, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) r7 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(r0, r7, &(0x7f0000000080)=0xffffffff, 0x4) 12.260150791s ago: executing program 2 (id=2495): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 11.165067357s ago: executing program 3 (id=2496): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000000)="550449f9307d0c705f3b8ea2607849", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket(0x2b, 0x1, 0xa0c7) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) 10.958442522s ago: executing program 4 (id=2497): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0dfcdfc4004cdb70466518907efd04373a0e64e30bbd8f6d482f0", 0x45) sendmsg$NFT_BATCH(r2, 0x0, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f00000000c0)={0x0, 0x3ff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048010}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 10.951869722s ago: executing program 1 (id=2498): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='i8042', 0x5) 9.716996701s ago: executing program 4 (id=2499): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11", 0x7d}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb24399788", 0xc0}, {&(0x7f0000000040)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000000b40)="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", 0x330}], 0x5}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="8ff6d6b6276fff", 0x7}, {&(0x7f0000000240)="e0a1350a", 0x4}], 0x2}}], 0x2, 0x40080a0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 9.536905635s ago: executing program 3 (id=2500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, r0, 0x4007) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0xffffffff, 0x9, 0x7}) connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x58}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) recvfrom$unix(r1, &(0x7f0000000380)=""/209, 0xd1, 0x40002002, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 9.215034563s ago: executing program 2 (id=2501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf8, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x28}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6b}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2400880a}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xec, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fc"}, {0x18, 0x0, 0x800, "c133a12a91872b3730"}, {0x38, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b21"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0xc, 0x113, 0x9}, {0xc, 0x110, 0x4}], 0x17c}, 0x4000c010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) 8.449701171s ago: executing program 1 (id=2502): syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000180)="5736835aa621fd8ffdc454d411cb70b3e82dd0e803777a7412ac6aa030769af4f33195ee343a5b306b69b388846b9a4e02eba8be3e7715a755d3e4fe4b9d130e", 0x40}], 0x1) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000180)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b00200007039a0705d15b"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000002140)={0x0, 0x0, 0x7}) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d8, 0x0, 0x0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xff03}}, {{@arp={@multicast2, @rand_addr=0x64010100, 0xff, 0xff000000, 0x10, 0xf, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x6, 0x6, 0x40d, 0xf01, 0x5592, 'bridge0\x00', 'team_slave_0\x00', {}, {0xff}, 0x0, 0x302}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @loopback, @empty, 0x7}}}, {{@arp={@rand_addr=0x64010100, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {}, 0xe, 0x1, 0xfff8, 0x0, 0x0, 0x9, 'ip6_vti0\x00', 'netpci0\x00', {}, {}, 0x0, 0x84}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @empty, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 8.419448162s ago: executing program 0 (id=2503): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.205274797s ago: executing program 2 (id=2504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001}, @multicast2, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2], 0x20) 8.178024638s ago: executing program 3 (id=2505): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x317}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000faffffff2a000000180001801400020064756d6d793000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000c40)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001300)={0x6, 0x200, 0x201, 0xfffffffe, 0x2, 0x4, 0x81, 0xa}, &(0x7f0000001340)=0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111640000000000851000000200000085000000a000000095001c00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x6, 0x5}, {0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xf}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x400, 0x0, 0x8000000}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x40}, {0xffffffff, 0x10000000, 0x101}, {0x0, 0xfffffffc, 0x3}, {0x0, 0x0, 0xc, 0xfffffffe, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {0x1000000}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {0x0, 0x0, 0x800}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0xfffffffe, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x10000000, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x2, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x9, 0x4000000, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x2, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0x1f4, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[], 0x14}}, 0x4040081) recvmmsg(r7, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3}, 0x7}], 0x1, 0x10140, 0x0) 7.862488785s ago: executing program 3 (id=2506): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70b08, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r1, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a801400"], 0x94}}, 0x20008841) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x81fd, 0x4) 7.66798923s ago: executing program 0 (id=2507): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x3c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r0, 0x0, 0xfce) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(r1, 0x0, &(0x7f0000000400), 0x80000) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x49) write(r5, &(0x7f0000000340)="08000000010000", 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.525693323s ago: executing program 2 (id=2508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x100000400002}]}) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x102) getdents64(r8, &(0x7f00000000c0)=""/55, 0x37) getdents64(r8, &(0x7f0000001f80)=""/4108, 0x100c) write$dsp(r7, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f00000003c0)=""/109, &(0x7f0000000440)=0x6d) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) 6.417722809s ago: executing program 3 (id=2509): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0dfcdfc4004cdb70466518907efd04373a0e64e30bbd8f6d482f0", 0x45) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f00000000c0)={0x0, 0x3ff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048010}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 6.411818699s ago: executing program 0 (id=2510): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000000)="550449f9307d0c705f3b8ea2607849", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket(0x2b, 0x1, 0xa0c7) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) 4.132081823s ago: executing program 4 (id=2511): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x3, 0x9002, 0x9, 0x1, 0x8, 0x8, 0x9, 0xba3, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) r7 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(r0, r7, &(0x7f0000000080)=0xffffffff, 0x4) 3.445902569s ago: executing program 1 (id=2512): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='i8042', 0x5) 1.26724258s ago: executing program 4 (id=2513): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r2, 0x0, 0x100000000000000}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x7fff, 0x5, 0x1, 0x8}]}) fsopen(&(0x7f0000000000)='ecryptfs\x00', 0x0) 1.148554183s ago: executing program 2 (id=2514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf8, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x28}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6b}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2400880a}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xec, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fc"}, {0x18, 0x0, 0x800, "c133a12a91872b3730"}, {0x38, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b21"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0xc, 0x113, 0x9}, {0xc, 0x110, 0x4}], 0x17c}, 0x4000c010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) 281.364904ms ago: executing program 1 (id=2515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, r0, 0x4007) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0xffffffff, 0x9, 0x7}) connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x58}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) recvfrom$unix(r1, &(0x7f0000000380)=""/209, 0xd1, 0x40002002, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 178.478006ms ago: executing program 2 (id=2516): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c", 0x317}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000faffffff2a000000180001801400020064756d6d793000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000c40)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001300)={0x6, 0x200, 0x201, 0xfffffffe, 0x2, 0x4, 0x81, 0xa}, &(0x7f0000001340)=0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111640000000000851000000200000085000000a000000095001c00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x6, 0x5}, {0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xf}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x400, 0x0, 0x8000000}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x40}, {0xffffffff, 0x10000000, 0x101}, {0x0, 0xfffffffc, 0x3}, {0x0, 0x0, 0xc, 0xfffffffe, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {0x1000000}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {0x0, 0x0, 0x800}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0xfffffffe, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x10000000, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x2, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x9, 0x4000000, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x2, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0x1f4, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[], 0x14}}, 0x4040081) recvmmsg(r7, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3}, 0x7}], 0x1, 0x10140, 0x0) 147.060297ms ago: executing program 3 (id=2517): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 0s ago: executing program 4 (id=2518): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): .127: device has no bulk endpoints [ 411.503777][ T7360] safe_serial 4-1:189.127: safe_serial converter detected [ 411.550691][ T7360] safe_serial: probe of 4-1:189.127 failed with error -22 [ 411.612218][ T7360] usb 4-1: USB disconnect, device number 11 [ 414.877703][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.957062][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.751732][ T8350] tipc: Enabled bearer , priority 0 [ 415.936207][ T8352] device syzkaller0 entered promiscuous mode [ 416.086506][ T8356] tipc: Resetting bearer [ 416.142739][ T8349] tipc: Resetting bearer [ 416.270877][ T8349] tipc: Disabling bearer [ 416.347087][ T8361] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 419.462157][ T4283] Bluetooth: Unexpected start frame (len 10) [ 419.466322][ T26] audit: type=1800 audit(1786419251.076:20): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1045" name="UDC" dev="configfs" ino=45801 res=0 errno=0 [ 420.544253][ T8409] device syzkaller0 entered promiscuous mode [ 424.330720][ T4283] Bluetooth: Unexpected start frame (len 10) [ 424.342919][ T26] audit: type=1800 audit(1786419255.956:21): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1059" name="UDC" dev="configfs" ino=45874 res=0 errno=0 [ 424.953296][ T8454] device veth0 entered promiscuous mode [ 427.523094][ T4283] Bluetooth: Unexpected start frame (len 10) [ 427.529605][ T26] audit: type=1800 audit(1786419259.136:22): pid=8485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1072" name="UDC" dev="configfs" ino=45941 res=0 errno=0 [ 427.767316][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 427.796843][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 428.062848][ T8453] device veth0 left promiscuous mode [ 429.305420][ T8513] CacheFiles: Failed to register: -2 [ 433.267428][ T4283] Bluetooth: Unexpected start frame (len 10) [ 433.317035][ T26] audit: type=1800 audit(1786419264.936:23): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1083" name="UDC" dev="configfs" ino=46760 res=0 errno=0 [ 433.584030][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 433.616557][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 433.942211][ T8546] device veth0 entered promiscuous mode [ 434.435047][ T8560] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 437.594062][ T8546] device veth0 left promiscuous mode [ 437.968242][ T26] audit: type=1800 audit(1786419269.586:24): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1094" name="UDC" dev="configfs" ino=46026 res=0 errno=0 [ 438.574675][ T8599] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 439.568035][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.253610][ T8611] device veth0 entered promiscuous mode [ 444.324650][ T8615] CacheFiles: Failed to register: -2 [ 444.594377][ T4283] Bluetooth: Unexpected start frame (len 10) [ 445.295362][ T8606] device veth0 left promiscuous mode [ 445.705606][ T8637] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 450.957423][ T8662] CacheFiles: Failed to register: -2 [ 451.020257][ T8667] device veth0 entered promiscuous mode [ 452.060698][ T8666] device veth0 left promiscuous mode [ 452.463286][ T8705] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 454.959762][ T4283] Bluetooth: Unexpected start frame (len 10) [ 456.228287][ T8737] CacheFiles: Failed to register: -2 [ 456.266754][ T8739] device veth0 entered promiscuous mode [ 456.487521][ T8748] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 456.517977][ T8748] tipc: Enabled bearer , priority 10 [ 456.594205][ T8757] device syzkaller0 entered promiscuous mode [ 456.689056][ T4317] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 456.877910][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 456.902239][ T8738] device veth0 left promiscuous mode [ 456.962243][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 456.982149][ T4317] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 456.997689][ T4317] usb 3-1: can't read configurations, error -71 [ 457.364472][ T8767] loop4: detected capacity change from 0 to 1764 [ 457.599925][ T4316] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 457.615197][ T22] tipc: Node number set to 1357104878 [ 459.385814][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 459.392980][ T4316] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 459.433506][ T4316] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.459409][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.431991][ T8782] tipc: Enabled bearer , priority 0 [ 460.472213][ T8782] device syzkaller0 entered promiscuous mode [ 460.526219][ T8782] tipc: Resetting bearer [ 460.558970][ T8781] tipc: Resetting bearer [ 460.617945][ T8781] tipc: Disabling bearer [ 460.680986][ T8786] device syzkaller0 entered promiscuous mode [ 461.151919][ T7578] usb 4-1: USB disconnect, device number 12 [ 461.301848][ T8799] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 461.311442][ T8799] tipc: Enabled bearer , priority 10 [ 461.737068][ T8803] loop1: detected capacity change from 0 to 1764 [ 461.852522][ T4283] Bluetooth: hci3: link tx timeout [ 461.857707][ T4283] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 461.865369][ T4283] Bluetooth: hci3: link tx timeout [ 461.870621][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 464.566047][ T8817] device syzkaller0 entered promiscuous mode [ 465.096990][ T4316] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 465.298713][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 465.320004][ T4316] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 465.422061][ T4316] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.463174][ T4316] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.496939][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.548238][ T4316] usbtmc 4-1:16.0: bulk endpoints not found [ 466.942156][ T8838] loop4: detected capacity change from 0 to 1764 [ 468.691105][ T4318] usb 4-1: USB disconnect, device number 13 [ 468.854823][ T8844] device syzkaller0 entered promiscuous mode [ 469.188803][ T8847] tipc: Enabled bearer , priority 0 [ 469.219158][ T8847] device syzkaller0 entered promiscuous mode [ 469.282759][ T8846] tipc: Resetting bearer [ 469.361694][ T8846] tipc: Disabling bearer [ 469.699782][ T8853] tipc: Enabling of bearer rejected, already enabled [ 470.323747][ T8858] device syzkaller0 entered promiscuous mode [ 470.334064][ T8858] tipc: Enabled bearer , priority 0 [ 470.343504][ T8857] tipc: Resetting bearer [ 470.401991][ T8857] tipc: Disabling bearer [ 473.125754][ T4316] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 473.327475][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 473.335357][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 473.374892][ T4316] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 473.402186][ T4316] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 473.449920][ T4316] usb 3-1: config 14 has no interface number 0 [ 473.476641][ T4316] usb 3-1: config 14 has no interface number 1 [ 473.497402][ T4316] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 473.533204][ T4316] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 473.560472][ T4316] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 473.594312][ T4316] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.650007][ T4316] usb 3-1: config 14 interface 57 has no altsetting 0 [ 473.693064][ T4316] usb 3-1: config 14 interface 228 has no altsetting 0 [ 473.719888][ T4316] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 473.756390][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.781110][ T4316] usb 3-1: Product: syz [ 473.790775][ T4316] usb 3-1: Manufacturer: syz [ 473.805840][ T4316] usb 3-1: SerialNumber: syz [ 474.264481][ T4316] legousbtower 3-1:14.57: interrupt endpoints not found [ 474.340754][ T4283] Bluetooth: Unexpected start frame (len 10) [ 474.475871][ T4316] legousbtower 3-1:14.228: interrupt endpoints not found [ 474.534834][ T4316] usb 3-1: USB disconnect, device number 16 [ 474.676572][ T8876] loop1: detected capacity change from 0 to 1764 [ 474.777354][ T8879] device syzkaller0 entered promiscuous mode [ 475.070069][ T8885] input: syz1 as /devices/virtual/input/input34 [ 475.317111][ T8888] tipc: Enabled bearer , priority 0 [ 475.329873][ T8888] device syzkaller0 entered promiscuous mode [ 475.355218][ T8887] tipc: Resetting bearer [ 475.391109][ T8887] tipc: Disabling bearer [ 476.176754][ T8896] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 476.185514][ T8896] tipc: Enabled bearer , priority 10 [ 478.605924][ T4278] tipc: Node number set to 2233118722 [ 479.803260][ T8909] loop3: detected capacity change from 0 to 1764 [ 480.660749][ T4278] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 480.855866][ T4278] usb 4-1: Using ep0 maxpacket: 32 [ 480.863399][ T4278] usb 4-1: unable to get BOS descriptor or descriptor too short [ 480.887184][ T4278] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 480.931567][ T4278] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 480.941062][ T4278] usb 4-1: config 14 has no interface number 0 [ 480.973723][ T4278] usb 4-1: config 14 has no interface number 1 [ 480.994696][ T8920] device syzkaller0 entered promiscuous mode [ 481.002018][ T4278] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 481.027369][ T4278] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 481.043208][ T8920] tipc: Enabled bearer , priority 0 [ 481.062906][ T4278] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 481.092113][ T4278] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.111422][ T4278] usb 4-1: config 14 interface 57 has no altsetting 0 [ 481.121152][ T4278] usb 4-1: config 14 interface 228 has no altsetting 0 [ 481.131704][ T8919] tipc: Resetting bearer [ 481.223378][ T4278] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 481.237122][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.246292][ T4278] usb 4-1: Product: syz [ 481.250631][ T4278] usb 4-1: Manufacturer: syz [ 481.255395][ T4278] usb 4-1: SerialNumber: syz [ 481.358311][ T8919] tipc: Disabling bearer [ 481.628858][ T8926] input: syz1 as /devices/virtual/input/input35 [ 481.758221][ T4278] legousbtower 4-1:14.57: interrupt endpoints not found [ 481.989382][ T4278] legousbtower 4-1:14.228: interrupt endpoints not found [ 482.011894][ T4278] usb 4-1: USB disconnect, device number 14 [ 482.232094][ T8935] tipc: Enabled bearer , priority 0 [ 482.249499][ T8935] device syzkaller0 entered promiscuous mode [ 482.280434][ T8934] tipc: Resetting bearer [ 482.326996][ T8934] tipc: Disabling bearer [ 482.846169][ T8937] device syzkaller0 entered promiscuous mode [ 485.515570][ T8943] loop0: detected capacity change from 0 to 1764 [ 487.368058][ T8969] device syzkaller0 entered promiscuous mode [ 487.419318][ T8969] tipc: Enabled bearer , priority 0 [ 487.448269][ T8968] tipc: Resetting bearer [ 487.509055][ T8968] tipc: Disabling bearer [ 487.617963][ T7360] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 487.822384][ T8973] loop0: detected capacity change from 0 to 1764 [ 487.950535][ T7360] usb 2-1: Using ep0 maxpacket: 32 [ 488.095632][ T7360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.171206][ T7360] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 488.188906][ T7360] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 488.222008][ T7360] usb 2-1: config 14 has no interface number 0 [ 488.239426][ T7360] usb 2-1: config 14 has no interface number 1 [ 488.262791][ T7360] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 488.304028][ T7360] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 488.378943][ T7360] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 488.407660][ T7360] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.441445][ T7360] usb 2-1: config 14 interface 57 has no altsetting 0 [ 488.468811][ T7360] usb 2-1: config 14 interface 228 has no altsetting 0 [ 488.572629][ T7360] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 488.581897][ T7360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.598345][ T7360] usb 2-1: Product: syz [ 488.611201][ T7360] usb 2-1: Manufacturer: syz [ 488.652355][ T7360] usb 2-1: SerialNumber: syz [ 488.859723][ T8982] device syzkaller0 entered promiscuous mode [ 489.124230][ T7360] legousbtower 2-1:14.57: interrupt endpoints not found [ 489.302414][ T8988] ieee802154 phy1 wpan1: encryption failed: -22 [ 489.363649][ T7360] legousbtower 2-1:14.228: interrupt endpoints not found [ 489.391326][ T7360] usb 2-1: USB disconnect, device number 17 [ 489.943486][ T9005] loop3: detected capacity change from 0 to 1764 [ 490.387564][ T9011] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 490.439165][ T9011] kvm: pic: non byte read [ 490.449560][ T9011] kvm: pic: level sensitive irq not supported [ 490.449688][ T9011] kvm: pic: non byte read [ 490.491168][ T9011] kvm: pic: level sensitive irq not supported [ 490.491230][ T9011] kvm: pic: non byte read [ 490.515983][ T9011] kvm: pic: level sensitive irq not supported [ 490.516028][ T9011] kvm: pic: non byte read [ 490.555767][ T9011] kvm: pic: level sensitive irq not supported [ 490.555829][ T9011] kvm: pic: non byte read [ 490.575377][ T9011] kvm: pic: level sensitive irq not supported [ 490.575470][ T9011] kvm: pic: non byte read [ 490.598153][ T9011] kvm: pic: level sensitive irq not supported [ 490.598623][ T9011] kvm: pic: non byte read [ 491.101115][ T9023] device syzkaller0 entered promiscuous mode [ 491.112248][ T9023] tipc: Enabled bearer , priority 0 [ 491.154694][ T9022] tipc: Resetting bearer [ 491.255012][ T9022] tipc: Disabling bearer [ 492.516260][ T9041] loop1: detected capacity change from 0 to 1764 [ 492.720715][ T4278] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 492.757491][ T9043] device syzkaller0 entered promiscuous mode [ 492.905773][ T4278] usb 5-1: Using ep0 maxpacket: 32 [ 492.916143][ T4278] usb 5-1: unable to get BOS descriptor or descriptor too short [ 492.925530][ T4278] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 492.943417][ T4278] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 492.952138][ T4278] usb 5-1: config 14 has no interface number 0 [ 492.963641][ T4278] usb 5-1: config 14 has no interface number 1 [ 492.972038][ T4278] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 492.989486][ T4278] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 493.004196][ T4278] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 493.022678][ T4278] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.040702][ T4278] usb 5-1: config 14 interface 57 has no altsetting 0 [ 493.047931][ T4278] usb 5-1: config 14 interface 228 has no altsetting 0 [ 493.057276][ T4278] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 493.071110][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.080961][ T4278] usb 5-1: Product: syz [ 493.085178][ T4278] usb 5-1: Manufacturer: syz [ 493.098099][ T4278] usb 5-1: SerialNumber: syz [ 493.529359][ T4278] legousbtower 5-1:14.57: interrupt endpoints not found [ 493.756495][ T4278] legousbtower 5-1:14.228: interrupt endpoints not found [ 493.787575][ T4278] usb 5-1: USB disconnect, device number 19 [ 501.008158][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.967884][ T9076] loop2: detected capacity change from 0 to 1764 [ 505.553942][ T9078] device syzkaller0 entered promiscuous mode [ 505.582069][ T9078] tipc: Enabled bearer , priority 0 [ 505.612490][ T9077] tipc: Resetting bearer [ 505.665737][ T4283] Bluetooth: hci3: command 0x0405 tx timeout [ 505.731835][ T9077] tipc: Disabling bearer [ 506.048359][ T4278] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 506.255889][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 506.288956][ T4278] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.390356][ T4278] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 506.410404][ T4278] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 506.439000][ T4278] usb 3-1: config 14 has no interface number 0 [ 506.466235][ T4278] usb 3-1: config 14 has no interface number 1 [ 506.494614][ T4278] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 506.532595][ T4278] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 506.560473][ T4278] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 506.581571][ T4278] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.596203][ T4278] usb 3-1: config 14 interface 57 has no altsetting 0 [ 506.603185][ T4278] usb 3-1: config 14 interface 228 has no altsetting 0 [ 506.630813][ T4278] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 506.647974][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.660835][ T4278] usb 3-1: Product: syz [ 506.665154][ T4278] usb 3-1: Manufacturer: syz [ 506.671812][ T4278] usb 3-1: SerialNumber: syz [ 507.098888][ T9095] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 507.110020][ T4278] legousbtower 3-1:14.57: interrupt endpoints not found [ 507.325173][ T4278] legousbtower 3-1:14.228: interrupt endpoints not found [ 507.354484][ T4278] usb 3-1: USB disconnect, device number 17 [ 509.556897][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.565489][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.537194][ T4316] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 510.677819][ T9131] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 510.729078][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.749731][ T4316] usb 4-1: config 0 has no interfaces? [ 510.752131][ T9131] kvm: pic: non byte read [ 510.765464][ T4316] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 510.775370][ T9131] kvm: pic: level sensitive irq not supported [ 510.775432][ T9131] kvm: pic: non byte read [ 510.796119][ T9131] kvm: pic: level sensitive irq not supported [ 510.796180][ T9131] kvm: pic: non byte read [ 510.815837][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.840191][ T4316] usb 4-1: config 0 descriptor?? [ 510.851510][ T9131] kvm: pic: level sensitive irq not supported [ 510.851570][ T9131] kvm: pic: non byte read [ 510.879333][ T9131] kvm: pic: level sensitive irq not supported [ 510.879395][ T9131] kvm: pic: non byte read [ 510.896505][ T9131] kvm: pic: level sensitive irq not supported [ 510.896565][ T9131] kvm: pic: non byte read [ 510.912736][ T9131] kvm: pic: level sensitive irq not supported [ 510.912797][ T9131] kvm: pic: non byte read [ 511.149149][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'. [ 511.280572][ T4316] usb 4-1: USB disconnect, device number 15 [ 512.311225][ T9162] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 512.657360][ T9157] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 513.554796][ T9178] device syzkaller0 entered promiscuous mode [ 513.568792][ T9178] tipc: Enabled bearer , priority 0 [ 513.587068][ T9177] tipc: Resetting bearer [ 513.647819][ T9177] tipc: Disabling bearer [ 513.701773][ T8604] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 513.976178][ T8604] usb 3-1: Using ep0 maxpacket: 32 [ 514.076127][ T8604] usb 3-1: unable to get BOS descriptor or descriptor too short [ 514.167679][ T8604] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 514.175997][ T8604] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 514.184275][ T8604] usb 3-1: config 14 has no interface number 0 [ 514.226608][ T8604] usb 3-1: config 14 has no interface number 1 [ 514.232872][ T8604] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 514.275481][ T8604] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 514.303726][ T8604] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 514.332377][ T8604] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.362757][ T8604] usb 3-1: config 14 interface 57 has no altsetting 0 [ 514.378418][ T8604] usb 3-1: config 14 interface 228 has no altsetting 0 [ 514.499150][ T8604] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 514.508467][ T8604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.524594][ T8604] usb 3-1: Product: syz [ 514.528843][ T8604] usb 3-1: Manufacturer: syz [ 514.533492][ T8604] usb 3-1: SerialNumber: syz [ 515.237313][ T8604] legousbtower 3-1:14.57: interrupt endpoints not found [ 515.663178][ T8604] legousbtower 3-1:14.228: interrupt endpoints not found [ 515.708904][ T8604] usb 3-1: USB disconnect, device number 18 [ 518.022462][ T9215] overlayfs: failed to verify origin (262/file1, ino=1448, err=-116) [ 518.034223][ T9215] overlayfs: failed to verify origin (262/file1, ino=1448, err=-116) [ 519.352445][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 526.606737][ T4283] Bluetooth: hci3: link tx timeout [ 526.612289][ T4283] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 526.621668][ T4283] Bluetooth: hci3: link tx timeout [ 526.629997][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 529.567350][ T9343] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 531.605759][ T9374] CacheFiles: Failed to register: -2 [ 533.185816][ T9381] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 533.385759][ T9381] usb 4-1: Using ep0 maxpacket: 8 [ 533.401201][ T9381] usb 4-1: config 0 has no interfaces? [ 533.421577][ T9381] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 533.452138][ T9381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.492797][ T9381] usb 4-1: config 0 descriptor?? [ 533.724677][ T9381] usb 4-1: USB disconnect, device number 16 [ 534.277687][ T9401] loop0: detected capacity change from 0 to 1764 [ 534.323156][ T9398] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 534.363144][ T9404] tipc: Enabled bearer , priority 0 [ 534.389183][ T9403] tipc: Disabling bearer [ 534.753377][ T9410] device syzkaller0 entered promiscuous mode [ 534.764970][ T9410] tipc: Enabling of bearer rejected, failed to enable media [ 535.282149][ T9419] CacheFiles: Failed to register: -2 [ 537.696316][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.715995][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.793793][ T9438] loop2: detected capacity change from 0 to 1764 [ 540.636854][ T9463] device syzkaller0 entered promiscuous mode [ 540.768891][ T9469] device syzkaller0 entered promiscuous mode [ 540.801222][ T9469] tipc: Enabling of bearer rejected, failed to enable media [ 544.126668][ T9500] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 546.919263][ T9519] device syzkaller0 entered promiscuous mode [ 548.668924][ T4318] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 548.867563][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.924407][ T4318] usb 2-1: config 0 has no interfaces? [ 548.930452][ T4318] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.944562][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.978603][ T4318] usb 2-1: config 0 descriptor?? [ 549.191257][ T4314] usb 2-1: USB disconnect, device number 18 [ 554.193928][ T9576] device syzkaller0 entered promiscuous mode [ 555.429043][ T9578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.435288][ T9578] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 555.533519][ T9578] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 555.582275][ T9578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 555.603587][ T9578] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 555.692658][ T9578] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 555.734078][ T9578] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 555.751340][ T9592] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1379'. [ 555.790566][ T9578] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 555.838504][ T9578] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 555.885405][ T9578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.185802][ T4314] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 556.404272][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.295742][ T4314] usb 2-1: config 0 has no interfaces? [ 557.301273][ T4314] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.338555][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.384464][ T4314] usb 2-1: config 0 descriptor?? [ 557.507717][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 558.469970][ T4314] usb 2-1: USB disconnect, device number 19 [ 558.525989][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 558.532212][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 558.538417][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 559.742322][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 559.832155][ T9623] device syzkaller0 entered promiscuous mode [ 560.605844][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 560.613179][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 562.449392][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.479722][ T9685] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1392'. [ 565.999800][ T9694] input: syz1 as /devices/virtual/input/input43 [ 569.454416][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.504799][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.504126][ T9723] device syzkaller0 entered promiscuous mode [ 570.728660][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 570.746734][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 571.594178][ T9734] device syzkaller0 entered promiscuous mode [ 571.852194][ T9742] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1410'. [ 575.582195][ T9772] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 575.661503][ T9772] binder: 9770:9772 unknown command 1074553619 [ 575.668009][ T9772] binder: 9770:9772 ioctl c0306201 200000000040 returned -22 [ 584.280168][ T9794] device syzkaller0 entered promiscuous mode [ 584.803538][ T9856] device syzkaller0 entered promiscuous mode [ 590.266731][ T9635] Bluetooth: hci3: link tx timeout [ 590.272255][ T9635] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 590.280359][ T9635] Bluetooth: hci3: link tx timeout [ 590.285496][ T9635] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 596.762140][ T9912] device syzkaller0 entered promiscuous mode [ 598.723692][ T9928] device syzkaller0 entered promiscuous mode [ 603.027453][ T9954] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 608.361260][ T9381] libceph: connect (1)[c::]:6789 error -101 [ 608.379943][ T9381] libceph: mon0 (1)[c::]:6789 connect error [ 608.687845][ T9381] libceph: connect (1)[c::]:6789 error -101 [ 608.712187][ T9381] libceph: mon0 (1)[c::]:6789 connect error [ 609.256342][ T9381] libceph: connect (1)[c::]:6789 error -101 [ 609.262460][ T9381] libceph: mon0 (1)[c::]:6789 connect error [ 609.400036][ T9977] ceph: No mds server is up or the cluster is laggy [ 609.432794][ T9988] device syzkaller0 entered promiscuous mode [ 611.235638][ T7578] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 611.628352][ T7578] usb 3-1: Using ep0 maxpacket: 8 [ 611.740989][ T7578] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.765654][ T7578] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.775438][ T7578] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.818247][ T7578] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.874539][ T7578] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.883885][ T7578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.248853][ T7578] usb 3-1: GET_CAPABILITIES returned 0 [ 612.257743][ T7578] usbtmc 3-1:16.0: can't read capabilities [ 614.194915][ T7578] usb 3-1: USB disconnect, device number 19 [ 614.586960][ T26] audit: type=1800 audit(1786419445.209:25): pid=10036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1482" name="UDC" dev="configfs" ino=51805 res=0 errno=0 [ 617.845994][ T4316] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 618.104625][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 618.148046][ T4316] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.164608][ T4316] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.187995][ T4316] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.225705][ T4316] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.272660][ T4316] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.291993][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.535211][ T4316] usb 2-1: GET_CAPABILITIES returned 0 [ 618.540912][ T4316] usbtmc 2-1:16.0: can't read capabilities [ 620.657423][ T4316] usb 2-1: USB disconnect, device number 20 [ 620.863357][ T9635] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 620.872890][ T26] audit: type=1800 audit(1786419451.489:26): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1493" name="UDC" dev="configfs" ino=51883 res=0 errno=0 [ 621.331697][ T4316] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 621.695698][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 621.849771][ T4316] usb 2-1: config 0 has no interfaces? [ 621.855304][ T4316] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 621.908298][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.945210][ T4316] usb 2-1: config 0 descriptor?? [ 622.247913][T10098] device syzkaller0 entered promiscuous mode [ 622.258365][ T4315] usb 2-1: USB disconnect, device number 21 [ 622.475162][ T7578] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 622.906172][ T7578] usb 3-1: unable to get BOS descriptor or descriptor too short [ 622.983174][ T7578] usb 3-1: config 189 has an invalid interface number: 127 but max is 0 [ 622.991860][ T7578] usb 3-1: config 189 has no interface number 0 [ 623.010507][ T7578] usb 3-1: config 189 interface 127 has no altsetting 0 [ 623.147019][ T7578] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 623.156126][ T7578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.181459][ T7578] usb 3-1: Product: syz [ 623.205637][ T7578] usb 3-1: Manufacturer: syz [ 623.215514][ T7578] usb 3-1: SerialNumber: syz [ 624.674831][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.058078][ T4315] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 625.116831][ T9635] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 625.117082][ T26] audit: type=1800 audit(1786419455.739:27): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1505" name="UDC" dev="configfs" ino=52541 res=0 errno=0 [ 625.164656][ T7578] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 625.184488][ T7578] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 625.216395][ T7578] usbserial_generic 3-1:189.127: device has no bulk endpoints [ 625.243834][ T7578] safe_serial 3-1:189.127: safe_serial converter detected [ 625.276319][ T7578] safe_serial: probe of 3-1:189.127 failed with error -22 [ 625.330139][ T7578] usb 3-1: USB disconnect, device number 20 [ 625.337408][ T9835] udevd[9835]: setting owner of /dev/bus/usb/003/020 to uid=0, gid=0 failed: No such file or directory [ 625.373324][ T4315] usb 2-1: Using ep0 maxpacket: 8 [ 625.471094][T10138] binder: 10136:10138 ioctl c0306201 200000000080 returned -14 [ 625.489882][ T4315] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.499854][ T4315] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.539059][ T4315] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.580818][ T4315] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.645655][ T4315] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.678304][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.788403][T10144] device gre1 entered promiscuous mode [ 625.852883][ T9635] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 625.990392][ T4315] usb 2-1: GET_CAPABILITIES returned 0 [ 626.866059][ T4315] usbtmc 2-1:16.0: can't read capabilities [ 628.200045][ T129] usb 2-1: USB disconnect, device number 22 [ 630.275464][T10163] device syzkaller0 entered promiscuous mode [ 640.114164][T10189] device syzkaller0 entered promiscuous mode [ 648.299265][T10276] device syzkaller0 entered promiscuous mode [ 653.987738][ T4281] Bluetooth: hci3: link tx timeout [ 653.992914][ T4281] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 654.000946][ T4281] Bluetooth: hci3: link tx timeout [ 654.006132][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 654.353183][T10316] device syzkaller0 entered promiscuous mode [ 660.407936][T10346] device syzkaller0 entered promiscuous mode [ 660.688854][ T4281] Bluetooth: Unexpected start frame (len 10) [ 660.721146][ T26] audit: type=1800 audit(1786419491.339:28): pid=10352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1562" name="UDC" dev="configfs" ino=52921 res=0 errno=0 [ 662.278638][T10350] input: syz0 as /devices/virtual/input/input44 [ 663.774867][T10377] device syzkaller0 entered promiscuous mode [ 664.408169][ T8649] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 664.675014][ T8649] usb 4-1: Using ep0 maxpacket: 32 [ 664.771349][ T8649] usb 4-1: unable to get BOS descriptor or descriptor too short [ 664.830300][ T8649] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 664.838537][ T8649] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 664.872084][ T8649] usb 4-1: config 14 has no interface number 0 [ 664.880517][ T8649] usb 4-1: config 14 has no interface number 1 [ 664.895271][ T8649] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 664.920217][ T8649] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 664.946408][ T8649] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 664.972616][ T8649] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.031862][ T8649] usb 4-1: config 14 interface 57 has no altsetting 0 [ 665.042817][ T8649] usb 4-1: config 14 interface 228 has no altsetting 0 [ 665.129863][ T8649] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 665.143537][ T8649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.171269][ T8649] usb 4-1: Product: syz [ 665.175455][ T8649] usb 4-1: Manufacturer: syz [ 665.201062][ T8649] usb 4-1: SerialNumber: syz [ 665.680590][ T8649] legousbtower 4-1:14.57: interrupt endpoints not found [ 665.751130][ T26] audit: type=1800 audit(1786419496.369:29): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1573" name="UDC" dev="configfs" ino=53409 res=0 errno=0 [ 667.081399][ T8649] legousbtower 4-1:14.228: interrupt endpoints not found [ 667.123698][ T8649] usb 4-1: USB disconnect, device number 17 [ 668.374140][T10400] input: syz0 as /devices/virtual/input/input45 [ 671.141233][T10422] device syzkaller0 entered promiscuous mode [ 671.705832][T10432] binder_alloc: 10431: binder_alloc_buf, no vma [ 671.745333][ T4314] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 672.924887][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 673.075111][ T4314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 673.120632][ T4314] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 673.134006][ T4314] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 673.153042][ T4314] usb 5-1: config 14 has no interface number 0 [ 673.169863][ T4314] usb 5-1: config 14 has no interface number 1 [ 673.181622][ T4314] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 673.207946][ T4314] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 673.231941][ T4314] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 673.265735][ T4314] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.290361][ T4314] usb 5-1: config 14 interface 57 has no altsetting 0 [ 673.303003][ T4314] usb 5-1: config 14 interface 228 has no altsetting 0 [ 673.411539][T10440] input: syz0 as /devices/virtual/input/input46 [ 673.500870][ T4314] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 673.530140][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.573050][ T4314] usb 5-1: Product: syz [ 673.595734][ T4314] usb 5-1: Manufacturer: syz [ 673.622670][ T4314] usb 5-1: SerialNumber: syz [ 673.717246][T10442] device syzkaller0 entered promiscuous mode [ 674.107364][ T4314] legousbtower 5-1:14.57: interrupt endpoints not found [ 674.344664][ T4314] legousbtower 5-1:14.228: interrupt endpoints not found [ 674.379422][ T4314] usb 5-1: USB disconnect, device number 20 [ 674.723877][T10451] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 677.337777][ T26] audit: type=1800 audit(1786419507.949:30): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1598" name="UDC" dev="configfs" ino=53613 res=0 errno=0 [ 677.598053][T10481] binder_alloc: 10479: binder_alloc_buf, no vma [ 678.638135][T10476] input: syz0 as /devices/virtual/input/input47 [ 680.070482][T10493] device syzkaller0 entered promiscuous mode [ 680.801297][T10524] device syzkaller0 entered promiscuous mode [ 683.242783][T10539] input: syz0 as /devices/virtual/input/input48 [ 685.336788][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.406501][T10573] device syzkaller0 entered promiscuous mode [ 687.491761][T10578] device syzkaller0 entered promiscuous mode [ 689.576555][T10598] input: syz0 as /devices/virtual/input/input49 [ 691.057335][T10619] device syzkaller0 entered promiscuous mode [ 691.091957][T10619] tipc: Enabled bearer , priority 0 [ 691.131213][T10618] tipc: Resetting bearer [ 691.209387][T10618] tipc: Disabling bearer [ 694.641540][T10649] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 700.496746][T10697] CacheFiles: Failed to register: -95 [ 701.025818][T10705] device syzkaller0 entered promiscuous mode [ 710.840961][ T4281] Bluetooth: Unexpected start frame (len 10) [ 710.847830][ T26] audit: type=1800 audit(1786419541.459:31): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1675" name="UDC" dev="configfs" ino=54430 res=0 errno=0 [ 716.462376][T10817] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1687'. [ 716.485880][T10811] device syzkaller0 entered promiscuous mode [ 717.317306][T10821] device syzkaller0 entered promiscuous mode [ 717.426547][ T4281] Bluetooth: hci3: link tx timeout [ 717.431788][ T4281] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 717.440044][ T4281] Bluetooth: hci3: link tx timeout [ 717.445179][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 717.619647][T10826] device syzkaller0 entered promiscuous mode [ 717.685449][T10827] tipc: Enabled bearer , priority 0 [ 717.722080][T10826] tipc: Resetting bearer [ 717.776341][T10825] tipc: Resetting bearer [ 717.857218][T10825] tipc: Disabling bearer [ 719.748534][T10853] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1700'. [ 722.065839][T10870] device syzkaller0 entered promiscuous mode [ 722.107654][T10870] tipc: Enabled bearer , priority 0 [ 722.152997][T10872] device syzkaller0 entered promiscuous mode [ 722.198933][T10870] tipc: Resetting bearer [ 722.291433][T10867] tipc: Resetting bearer [ 722.351921][T10867] tipc: Disabling bearer [ 722.595752][T10879] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1711'. [ 726.197652][T10918] binder: 10916:10918 ioctl c0306201 200000000080 returned -14 [ 726.234113][T10918] binder: 10916:10918 ioctl c0306201 2000000003c0 returned -14 [ 726.578260][T10929] CacheFiles: Failed to register: -2 [ 726.860183][T10931] device syzkaller0 entered promiscuous mode [ 726.896338][T10931] tipc: Enabled bearer , priority 0 [ 727.797265][T10938] tipc: Resetting bearer [ 727.821877][T10930] tipc: Resetting bearer [ 727.911033][T10930] tipc: Disabling bearer [ 728.009183][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 728.018392][ T26] audit: type=1800 audit(1786419558.639:32): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1733" name="UDC" dev="configfs" ino=55592 res=0 errno=0 [ 732.302884][T10978] CacheFiles: Failed to register: -2 [ 733.139567][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 733.170381][ T26] audit: type=1800 audit(1786419563.789:33): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1744" name="UDC" dev="configfs" ino=55661 res=0 errno=0 [ 735.666233][T11006] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 737.473000][T11013] overlayfs: failed to verify origin (368/file1, ino=2051, err=-116) [ 737.484512][T11013] overlayfs: failed to verify origin (368/file1, ino=2051, err=-116) [ 738.748443][T11015] binder: BINDER_SET_CONTEXT_MGR already set [ 738.787210][T11015] binder: 11014:11015 ioctl 4018620d 200000000040 returned -16 [ 738.805771][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 738.813523][ T26] audit: type=1800 audit(1786419569.429:34): pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1755" name="UDC" dev="configfs" ino=56389 res=0 errno=0 [ 741.974823][T11042] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 742.224667][T11045] binder: 11044:11045 ioctl c0306201 200000000080 returned -14 [ 742.306473][T11045] binder: 11044:11045 ioctl c0306201 2000000003c0 returned -14 [ 743.363372][T11057] overlayfs: failed to verify origin (359/file1, ino=1965, err=-116) [ 743.371751][T11057] overlayfs: failed to verify origin (359/file1, ino=1965, err=-116) [ 744.340282][T11059] device syzkaller0 entered promiscuous mode [ 744.452066][T11059] tipc: Enabled bearer , priority 0 [ 744.596812][T11059] tipc: Resetting bearer [ 744.705005][T11058] tipc: Resetting bearer [ 746.847561][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.591850][T11058] tipc: Disabling bearer [ 754.968110][T11103] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 760.377384][T11143] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 762.961448][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1796'. [ 762.987685][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1796'. [ 764.457897][T11177] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 766.931547][T11187] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1806'. [ 769.163413][T11207] overlayfs: failed to verify origin (352/file1, ino=1950, err=-116) [ 769.174805][T11207] overlayfs: failed to verify origin (352/file1, ino=1950, err=-116) [ 770.279569][ T26] audit: type=1800 audit(1786419600.899:35): pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1815" name="UDC" dev="configfs" ino=57054 res=0 errno=0 [ 770.285095][ T4281] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 771.357764][T11234] tipc: Enabling of bearer rejected, failed to enable media [ 771.735665][T11243] input: syz0 as /devices/virtual/input/input50 [ 772.360725][T11250] binder: 11249:11250 ioctl c0306201 200000000080 returned -14 [ 772.452126][T11250] binder: BINDER_SET_CONTEXT_MGR already set [ 772.501309][T11250] binder: 11249:11250 ioctl 4018620d 200000000040 returned -16 [ 772.578749][T11251] binder: 11249:11251 ioctl c0306201 2000000003c0 returned -14 [ 773.394919][T11260] overlayfs: failed to verify origin (357/file1, ino=1986, err=-116) [ 773.406385][T11260] overlayfs: failed to verify origin (357/file1, ino=1986, err=-116) [ 775.868878][T11277] device syzkaller0 entered promiscuous mode [ 775.904380][T11277] tipc: Enabling of bearer rejected, failed to enable media [ 776.076600][T11278] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 776.347609][T11284] CacheFiles: Failed to register: -2 [ 776.923429][T11290] input: syz0 as /devices/virtual/input/input51 [ 777.143292][T11292] binder: 11291:11292 ioctl c0306201 2000000003c0 returned -14 [ 777.377121][T11294] input: syz0 as /devices/virtual/input/input52 [ 778.114133][T11301] overlayfs: failed to verify origin (389/file1, ino=2181, err=-116) [ 778.125974][T11301] overlayfs: failed to verify origin (389/file1, ino=2181, err=-116) [ 779.899641][T11315] device syzkaller0 entered promiscuous mode [ 779.939942][T11315] tipc: Enabled bearer , priority 0 [ 780.007592][T11315] tipc: Resetting bearer [ 780.243241][T11314] tipc: Resetting bearer [ 780.472537][T11322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.815116][T11314] tipc: Disabling bearer [ 781.292205][ T4281] Bluetooth: hci3: link tx timeout [ 781.297471][ T4281] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 781.305194][ T4281] Bluetooth: hci3: link tx timeout [ 781.310435][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 783.725931][T11353] input: syz0 as /devices/virtual/input/input53 [ 785.406553][T11360] overlayfs: failed to verify origin (393/file1, ino=2213, err=-116) [ 785.418475][T11360] overlayfs: failed to verify origin (393/file1, ino=2213, err=-116) [ 789.148328][T11390] input: syz0 as /devices/virtual/input/input54 [ 789.370337][T11392] device syzkaller0 entered promiscuous mode [ 789.397918][T11392] tipc: Enabled bearer , priority 0 [ 789.577832][T11392] tipc: Resetting bearer [ 791.409317][T11391] tipc: Resetting bearer [ 791.628383][T11391] tipc: Disabling bearer [ 793.650813][T11415] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 794.540338][T11424] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 794.666255][T11424] binder: 11422:11424 unknown command 1074553619 [ 794.672707][T11424] binder: 11422:11424 ioctl c0306201 200000000040 returned -22 [ 798.775976][T11457] binder: BINDER_SET_CONTEXT_MGR already set [ 798.852647][T11457] binder: 11456:11457 ioctl 4018620d 200000000040 returned -16 [ 800.205305][T11475] input: syz0 as /devices/virtual/input/input55 [ 800.906751][T11477] device syzkaller0 entered promiscuous mode [ 800.932944][T11477] tipc: Enabled bearer , priority 0 [ 800.971730][T11477] tipc: Resetting bearer [ 801.002956][T11476] tipc: Resetting bearer [ 801.072034][T11476] tipc: Disabling bearer [ 802.217731][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 803.099122][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.457934][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 803.474689][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 803.513666][ T14] usb 2-1: Product: syz [ 803.546676][ T14] usb 2-1: Manufacturer: syz [ 803.573960][ T14] usb 2-1: SerialNumber: syz [ 804.570890][ T14] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 806.278126][ T14] usb 2-1: USB disconnect, device number 23 [ 806.310432][ T14] usblp0: removed [ 806.622888][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 806.658377][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 807.138324][T11514] input: syz0 as /devices/virtual/input/input56 [ 807.551642][T11517] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 807.686454][T11517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 809.191155][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.490758][ T4320] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 809.582691][T11530] random: crng reseeded on system resumption [ 811.444752][ T4320] usb 2-1: device descriptor read/all, error -71 [ 812.206060][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 812.244953][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 812.966797][T11561] device syzkaller0 entered promiscuous mode [ 812.985138][T11561] tipc: Enabled bearer , priority 0 [ 813.069334][T11561] tipc: Resetting bearer [ 813.118122][T11560] tipc: Resetting bearer [ 813.231561][T11560] tipc: Disabling bearer [ 814.701773][T11578] overlayfs: failed to verify origin (364/file1, ino=1978, err=-116) [ 814.778182][T11578] overlayfs: failed to verify origin (364/file1, ino=1978, err=-116) [ 817.337708][T11593] capability: warning: `syz.4.1924' uses 32-bit capabilities (legacy support in use) [ 820.478289][T11584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 820.532774][T11584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 820.571856][T11584] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 820.625774][T11584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 820.923606][T11606] tmpfs: Unknown parameter 'usrquota' [ 820.962050][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 821.003338][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 822.569780][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 822.575958][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 822.612206][ T9635] Bluetooth: hci4: command 0x0c1a tx timeout [ 822.693507][ T9635] Bluetooth: hci3: command 0x0c1a tx timeout [ 825.803658][T11640] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 827.727408][T11652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1939'. [ 830.176529][ T9635] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 830.533703][T11674] tipc: Enabled bearer , priority 10 [ 830.850619][T11678] loop5: detected capacity change from 0 to 7 [ 830.891577][T11678] Dev loop5: unable to read RDB block 7 [ 830.897539][T11678] loop5: AHDI p1 p2 p3 [ 830.902257][T11678] loop5: partition table partially beyond EOD, truncated [ 830.914315][T11678] loop5: p1 start 1601398130 is beyond EOD, truncated [ 831.057879][T11679] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 831.154612][ T4316] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 831.964024][T11678] loop5: p2 start 1702059890 is beyond EOD, truncated [ 833.901244][ T9635] Bluetooth: hci3: command 0x0405 tx timeout [ 838.520035][T11720] input: syz0 as /devices/virtual/input/input57 [ 838.637555][T11722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.115368][T11724] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 840.187728][T11731] device syzkaller0 entered promiscuous mode [ 840.311527][T11731] tipc: Enabled bearer , priority 0 [ 840.432998][T11731] tipc: Resetting bearer [ 840.553416][T11729] tipc: Resetting bearer [ 840.580623][T11738] tmpfs: Unknown parameter 'grpquota' [ 840.687102][T11729] tipc: Disabling bearer [ 843.671497][T11773] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 845.066285][T11791] device syzkaller0 entered promiscuous mode [ 845.159658][ T9635] Bluetooth: hci3: link tx timeout [ 845.165225][ T9635] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 845.173471][ T9635] Bluetooth: hci3: link tx timeout [ 845.178893][ T9635] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 845.832050][T11791] tipc: Enabled bearer , priority 0 [ 846.051623][T11791] tipc: Resetting bearer [ 846.152284][T11790] tipc: Resetting bearer [ 846.348920][T11790] tipc: Disabling bearer [ 846.444446][T11801] overlayfs: failed to verify origin (415/file1, ino=2337, err=-116) [ 846.452714][T11801] overlayfs: failed to verify origin (415/file1, ino=2337, err=-116) [ 846.866174][T11813] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1990'. [ 847.184818][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.198986][T11822] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 847.241413][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.158714][T11828] kAFS: No cell specified [ 848.868854][T11837] overlayfs: failed to verify origin (418/file1, ino=2363, err=-116) [ 848.880178][T11837] overlayfs: failed to verify origin (418/file1, ino=2363, err=-116) [ 849.835592][T11849] overlayfs: unrecognized mount option "/" or missing value [ 849.983077][T11849] input: syz0 as /devices/virtual/input/input58 [ 850.900768][T11855] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2003'. [ 851.008457][T11857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.061939][T11857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.179952][T11863] random: crng reseeded on system resumption [ 852.482417][T11874] kAFS: No cell specified [ 853.275008][ T4316] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 855.030190][ T4316] usb 3-1: unable to read config index 0 descriptor/all [ 855.067893][ T4316] usb 3-1: can't read configurations, error -71 [ 855.447532][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 857.021929][ T9635] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 857.127483][T11918] device syzkaller0 entered promiscuous mode [ 857.177854][T11918] tipc: Enabled bearer , priority 0 [ 857.244499][T11920] tipc: Resetting bearer [ 857.277878][T11917] tipc: Resetting bearer [ 857.326541][T11917] tipc: Disabling bearer [ 860.465671][T11953] Invalid ELF header magic: != ELF [ 861.368658][ T9635] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 861.926860][T11968] overlayfs: failed to clone upperpath [ 862.947435][T11983] device syzkaller0 entered promiscuous mode [ 863.001431][T11983] tipc: Enabled bearer , priority 0 [ 863.074799][T11983] tipc: Resetting bearer [ 863.110666][T11982] tipc: Resetting bearer [ 863.195350][T11982] tipc: Disabling bearer [ 863.435769][T11993] binder: 11992:11993 ioctl c0306201 200000000080 returned -14 [ 863.466691][T11993] binder: 11992:11993 ioctl c0306201 2000000003c0 returned -14 [ 863.542101][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 863.639084][T11997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 863.728055][ T9635] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 863.758417][T11999] device macvlan2 entered promiscuous mode [ 863.812830][T11999] device bond2 entered promiscuous mode [ 863.847582][T11999] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 863.922129][T11999] device bond2 left promiscuous mode [ 865.888117][T12034] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 869.568991][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.580450][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.657183][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.419112][T12099] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 870.425966][T12099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 870.464933][T12099] vhci_hcd vhci_hcd.0: Device attached [ 871.317998][T12100] vhci_hcd: connection closed [ 871.323083][ T6713] vhci_hcd: stop threads [ 871.874068][ T6713] vhci_hcd: release socket [ 872.694963][ T6713] vhci_hcd: disconnect device [ 872.765489][ T4316] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 872.773036][ T4316] usb 33-1: enqueue for inactive port 0 [ 872.903692][ T4316] vhci_hcd: vhci_device speed not set [ 873.574869][T12122] overlayfs: failed to clone upperpath [ 873.659305][T12124] binder: 12123:12124 ioctl c0306201 200000000080 returned -14 [ 873.713620][T12124] binder: 12123:12124 ioctl c0306201 2000000003c0 returned -14 [ 878.600996][T12147] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 878.607556][T12147] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 878.644750][T12147] vhci_hcd vhci_hcd.0: Device attached [ 878.734600][T12149] vhci_hcd: connection closed [ 878.745182][ T6725] vhci_hcd: stop threads [ 878.778046][ T6725] vhci_hcd: release socket [ 878.782579][ T6725] vhci_hcd: disconnect device [ 878.920001][T12158] overlayfs: failed to clone upperpath [ 884.673919][T12184] overlayfs: failed to resolve './file2': -2 [ 885.021301][T12193] overlayfs: failed to verify origin (440/file1, ino=2491, err=-116) [ 885.029573][T12193] overlayfs: failed to verify origin (440/file1, ino=2491, err=-116) [ 885.315952][T12203] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 885.322492][T12203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 885.380685][T12203] vhci_hcd vhci_hcd.0: Device attached [ 885.472865][T12204] vhci_hcd: connection closed [ 885.473938][ T6733] vhci_hcd: stop threads [ 885.502559][ T6733] vhci_hcd: release socket [ 885.507472][ T6733] vhci_hcd: disconnect device [ 885.764227][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.787319][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.181252][T12222] overlayfs: failed to resolve './file2': -2 [ 887.247537][T12241] overlayfs: failed to verify origin (413/file1, ino=2244, err=-116) [ 887.255787][T12241] overlayfs: failed to verify origin (413/file1, ino=2244, err=-116) [ 887.505013][T12251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.537026][T12251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.645963][T12256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 887.652523][T12256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 887.686665][T12256] vhci_hcd vhci_hcd.0: Device attached [ 887.768655][T12257] vhci_hcd: connection closed [ 887.769227][ T4489] vhci_hcd: stop threads [ 887.801398][ T4489] vhci_hcd: release socket [ 887.836750][ T4489] vhci_hcd: disconnect device [ 888.454201][T12274] random: crng reseeded on system resumption [ 892.594702][T12296] overlayfs: failed to verify origin (449/file1, ino=2549, err=-116) [ 892.602934][T12296] overlayfs: failed to verify origin (449/file1, ino=2549, err=-116) [ 894.690731][ T4315] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 895.017823][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 895.054356][ T4315] usb 4-1: no configurations [ 895.059107][ T4315] usb 4-1: can't read configurations, error -22 [ 895.281686][ T4315] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 895.338384][T12330] random: crng reseeded on system resumption [ 898.006079][T12330] input: syz0 as /devices/virtual/input/input59 [ 898.192164][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 898.550989][ T4315] usb 4-1: device descriptor read/all, error -71 [ 898.582097][ T4315] usb usb4-port1: attempt power cycle [ 898.777412][T12338] overlayfs: failed to verify origin (420/file1, ino=2290, err=-116) [ 898.785693][T12338] overlayfs: failed to verify origin (420/file1, ino=2290, err=-116) [ 899.003559][T12344] overlayfs: missing 'workdir' [ 901.853677][T12352] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 904.767040][T12361] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 904.773615][T12361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 904.944221][T12361] vhci_hcd vhci_hcd.0: Device attached [ 905.267060][T12363] vhci_hcd: connection closed [ 905.273624][ T6713] vhci_hcd: stop threads [ 905.283486][ T6713] vhci_hcd: release socket [ 905.293674][ T6713] vhci_hcd: disconnect device [ 908.318790][T12386] overlayfs: failed to verify origin (451/file1, ino=2569, err=-116) [ 908.396981][T12386] overlayfs: failed to verify origin (451/file1, ino=2569, err=-116) [ 908.421266][ T9635] Bluetooth: hci3: link tx timeout [ 908.426465][ T9635] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 908.434125][ T9635] Bluetooth: hci3: link tx timeout [ 908.439454][ T9635] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 908.598626][T12396] random: crng reseeded on system resumption [ 908.673485][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2148'. [ 909.633731][T12400] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 910.186392][T12405] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2148'. [ 910.754833][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2149'. [ 912.319146][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 912.367895][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 912.463808][T12411] ceph: No mds server is up or the cluster is laggy [ 913.752442][T12428] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 913.970037][T12433] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 913.976610][T12433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 914.011256][T12433] vhci_hcd vhci_hcd.0: Device attached [ 914.097629][T12434] vhci_hcd: connection closed [ 914.098674][ T6713] vhci_hcd: stop threads [ 914.119995][ T6713] vhci_hcd: release socket [ 914.124420][ T6713] vhci_hcd: disconnect device [ 914.269791][ T4314] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 914.458862][T12438] overlayfs: failed to clone upperpath [ 914.750946][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 914.777076][T12441] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 916.843188][ T4314] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 916.850833][ T4314] usb 4-1: can't read configurations, error -71 [ 917.091448][ T9635] Bluetooth: hci2: unexpected event for opcode 0x200a [ 917.439532][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.702061][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.132413][T12465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2167'. [ 923.640448][ T4364] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 923.944219][ T9635] Bluetooth: hci3: unexpected event for opcode 0x200a [ 923.960681][ T4364] usb 4-1: Using ep0 maxpacket: 32 [ 925.020856][ T4364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 925.062022][ T4364] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 925.083249][ T4364] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 925.102098][ T4364] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 925.127109][ T4364] usb 4-1: config 14 has no interface number 0 [ 925.133305][ T4364] usb 4-1: config 14 has no interface number 1 [ 925.183131][ T4364] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 925.275506][ T4364] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 925.328540][ T4364] usb 4-1: config 14 interface 57 has no altsetting 0 [ 925.360375][ T4364] usb 4-1: config 14 interface 228 has no altsetting 0 [ 925.451755][T12512] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 925.478782][T12516] overlayfs: failed to clone upperpath [ 925.621224][ T4364] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 925.630991][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.659024][ T4364] usb 4-1: Product: syz [ 925.675681][ T4364] usb 4-1: Manufacturer: syz [ 925.695081][ T4364] usb 4-1: SerialNumber: syz [ 925.992210][ T4364] usb 4-1: can't set config #14, error -71 [ 926.032132][ T4364] usb 4-1: USB disconnect, device number 24 [ 926.445725][ T9635] Bluetooth: hci3: unexpected event for opcode 0x200a [ 927.468623][T12558] overlayfs: failed to verify origin (434/file1, ino=2377, err=-116) [ 927.480961][T12558] overlayfs: failed to verify origin (434/file1, ino=2377, err=-116) [ 928.786281][ T7] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 928.836487][T12575] device syzkaller0 entered promiscuous mode [ 929.077692][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 929.195563][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 929.287782][ T7] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 929.296137][ T7] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 929.304406][ T7] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 929.379903][ T7] usb 4-1: config 14 has no interface number 0 [ 929.411419][ T7] usb 4-1: config 14 has no interface number 1 [ 929.434663][ T7] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 929.475090][ T7] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 929.497194][ T7] usb 4-1: config 14 interface 57 has no altsetting 0 [ 929.504007][ T7] usb 4-1: config 14 interface 228 has no altsetting 0 [ 929.642882][ T7] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 929.663116][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.703501][ T7] usb 4-1: Product: syz [ 929.707966][ T7] usb 4-1: Manufacturer: syz [ 929.712587][ T7] usb 4-1: SerialNumber: syz [ 930.213665][ T7] legousbtower 4-1:14.57: interrupt endpoints not found [ 930.667976][ T7] legousbtower 4-1:14.228: interrupt endpoints not found [ 931.057129][ T7] usb 4-1: USB disconnect, device number 25 [ 931.237672][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.592713][T12608] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 931.671464][T12608] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 932.246005][T12612] overlayfs: failed to verify origin (440/file1, ino=2419, err=-116) [ 932.257248][T12612] overlayfs: failed to verify origin (440/file1, ino=2419, err=-116) [ 932.886029][ T9635] Bluetooth: hci1: unexpected event for opcode 0x6540 [ 933.168940][T12621] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 940.655262][T12657] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 940.790758][T12657] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 941.867152][ T4314] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 942.198329][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 942.367545][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 942.401007][T12670] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 942.437763][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2226'. [ 942.515707][ T4314] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 942.523906][ T4314] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 942.552706][ T4314] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 942.605663][ T4314] usb 2-1: config 14 has no interface number 0 [ 942.611864][ T4314] usb 2-1: config 14 has no interface number 1 [ 942.668068][ T4314] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 942.719926][ T4314] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 942.761294][ T4314] usb 2-1: config 14 interface 57 has no altsetting 0 [ 942.784181][ T4314] usb 2-1: config 14 interface 228 has no altsetting 0 [ 943.038196][ T4314] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 943.055654][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.092394][ T4314] usb 2-1: Product: syz [ 943.115063][ T4314] usb 2-1: Manufacturer: syz [ 943.136725][ T4314] usb 2-1: SerialNumber: syz [ 943.693622][ T4314] legousbtower 2-1:14.57: interrupt endpoints not found [ 944.101988][ T4314] legousbtower 2-1:14.228: interrupt endpoints not found [ 944.397663][ T4314] usb 2-1: USB disconnect, device number 26 [ 945.741887][T12708] overlayfs: failed to clone upperpath [ 946.766391][T12710] random: crng reseeded on system resumption [ 946.841502][T12712] overlayfs: failed to clone upperpath [ 948.181514][T12747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2254'. [ 948.257766][T12749] binder: BINDER_SET_CONTEXT_MGR already set [ 948.263801][T12749] binder: 12748:12749 ioctl 4018620d 200000000040 returned -16 [ 948.831637][T12766] binder: BINDER_SET_CONTEXT_MGR already set [ 948.861839][T12766] binder: 12765:12766 ioctl 4018620d 200000004a80 returned -16 [ 949.059891][ T9635] Bluetooth: hci3: unexpected cc 0x0c05 length: 4 > 1 [ 949.066811][ T9635] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 949.841736][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2269'. [ 949.902754][T12788] binder: BINDER_SET_CONTEXT_MGR already set [ 949.923597][T12788] binder: 12787:12788 ioctl 4018620d 200000004a80 returned -16 [ 950.019867][T12747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 950.036526][T12747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 950.075517][T12747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 950.105904][T12747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 950.288999][T12794] input: syz0 as /devices/virtual/input/input60 [ 951.738135][ T8649] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 952.846625][ T9635] Bluetooth: hci4: command 0x0c1a tx timeout [ 952.852678][ T9635] Bluetooth: hci2: command 0x0c1a tx timeout [ 952.866720][ T9635] Bluetooth: hci1: command 0x0c1a tx timeout [ 952.872748][ T9635] Bluetooth: hci3: command 0x0c1a tx timeout [ 954.188394][T12834] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 955.399005][T12844] usbip-vudc usbip-vudc.0: gadget not bound [ 955.588894][ T8604] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 955.861362][ T8604] usb 4-1: device descriptor read/64, error -71 [ 956.205473][ T8604] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 956.435618][ T8604] usb 4-1: device descriptor read/64, error -71 [ 956.570849][ T8604] usb usb4-port1: attempt power cycle [ 957.118592][ T8604] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 957.197378][ T8604] usb 4-1: device descriptor read/8, error -71 [ 957.386886][ T26] audit: type=1800 audit(1786419785.004:36): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2296" name="c_ssize" dev="configfs" ino=62130 res=0 errno=0 [ 957.639063][T12879] overlayfs: failed to verify origin (484/file1, ino=2773, err=-116) [ 957.727590][T12879] overlayfs: failed to verify origin (484/file1, ino=2773, err=-116) [ 958.177915][ T4314] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 958.388531][ T8604] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 958.646699][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.646737][ T8604] usb 4-1: device not accepting address 29, error -71 [ 958.667093][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.698511][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 958.713387][ T8604] usb usb4-port1: unable to enumerate USB device [ 958.745246][ T4314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 958.793684][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.884927][ T4314] usb 3-1: config 0 descriptor?? [ 958.892103][ T1046] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 958.902914][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 102438) [ 958.915001][ T1046] Buffer I/O error on device sda1, logical block 102400 [ 958.922565][ T1046] device offline error, dev sda, sector 827686 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 958.933681][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 103460) [ 958.945310][ T1046] Buffer I/O error on device sda1, logical block 103422 [ 958.952346][ T1046] Buffer I/O error on device sda1, logical block 103423 [ 958.959380][ T1046] device offline error, dev sda, sector 831670 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 958.969856][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 103958) [ 958.981648][ T1046] Buffer I/O error on device sda1, logical block 103920 [ 958.988765][ T1046] Buffer I/O error on device sda1, logical block 103921 [ 958.995784][ T1046] Buffer I/O error on device sda1, logical block 103922 [ 959.002751][ T1046] Buffer I/O error on device sda1, logical block 103923 [ 959.009757][ T1046] Buffer I/O error on device sda1, logical block 103924 [ 959.016767][ T1046] Buffer I/O error on device sda1, logical block 103925 [ 959.023732][ T1046] Buffer I/O error on device sda1, logical block 103926 [ 959.031772][ T1046] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 959.042274][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2033 starting block 96294) [ 959.053833][ T1046] device offline error, dev sda, sector 778518 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 959.064316][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2033 starting block 97314) [ 959.075896][ T1046] device offline error, dev sda, sector 782630 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 959.086380][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2033 starting block 97828) [ 959.097961][ T1046] device offline error, dev sda, sector 741686 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 959.108445][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 92710) [ 959.120018][ T1046] device offline error, dev sda, sector 745782 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 959.130511][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2034 starting block 93222) [ 959.142389][ T1046] device offline error, dev sda, sector 704854 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 959.152882][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88106) [ 959.164444][ T1046] device offline error, dev sda, sector 704886 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 959.174936][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88110) [ 959.235097][T12890] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 959.244323][ T3600] Aborting journal on device sda1-8. [ 959.257389][ T53] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 959.266868][ T3600] JBD2: I/O error when updating journal superblock for sda1-8. [ 959.305759][T12890] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 959.361454][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 959.396647][T12889] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2301: Detected aborted journal [ 959.407315][T12888] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2302: Detected aborted journal [ 959.436979][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 959.447898][ T4258] EXT4-fs (sda1): I/O error while writing superblock [ 959.454610][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 959.485649][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 959.494346][T12884] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2299: Detected aborted journal [ 959.518061][T12884] EXT4-fs (sda1): previous I/O error to superblock detected [ 959.529274][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 959.535182][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 959.549933][T12884] EXT4-fs (sda1): I/O error while writing superblock [ 959.554466][T12888] EXT4-fs (sda1): previous I/O error to superblock detected [ 959.566708][T12884] EXT4-fs (sda1): Remounting filesystem read-only [ 959.575788][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 959.584088][ T4258] EXT4-fs (sda1): previous I/O error to superblock detected [ 959.586485][T12884] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2299: Detected aborted journal [ 959.591994][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 959.610619][T12888] EXT4-fs (sda1): I/O error while writing superblock [ 959.617422][ T4258] EXT4-fs (sda1): I/O error while writing superblock [ 959.624235][T12888] EXT4-fs (sda1): Remounting filesystem read-only [ 959.632046][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 959.640620][T12884] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2299: Detected aborted journal [ 959.658587][T12888] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2302: Detected aborted journal [ 959.669839][T12889] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2301: Detected aborted journal [ 959.685065][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 959.694149][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 959.723390][ T4314] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 959.786536][ T4314] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 959.993614][T12904] udevd[12904]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 960.225599][T12912] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 961.359320][ T4315] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 963.645362][T12890] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 964.596381][T12925] device syzkaller0 entered promiscuous mode [ 964.603524][ T4258] EXT4-fs error: 60 callbacks suppressed [ 964.603537][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 964.641202][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 964.654601][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 964.671525][ T4258] EXT4-fs: 85 callbacks suppressed [ 964.671537][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 964.711524][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 964.723303][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 964.845567][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 964.877683][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 964.963299][ T8649] usb 3-1: USB disconnect, device number 24 [ 964.974997][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 965.014622][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 965.070702][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 965.097611][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 965.123616][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 965.192493][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 965.248162][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 965.254773][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 965.292385][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 965.348987][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 965.393476][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 965.445287][T12928] EXT4-fs (sda1): Remounting filesystem read-only [ 965.649575][T12930] overlayfs: failed to clone upperpath [ 965.861141][ T8649] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 966.095208][T12803] Bluetooth: hci3: unexpected event for opcode 0x200a [ 966.244276][ T8649] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 966.258054][ T8649] usb 2-1: config 0 has no interface number 0 [ 966.284896][ T8649] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.346247][T12937] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2316'. [ 966.435103][ T8649] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 966.448083][ T8649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.476685][ T8649] usb 2-1: Product: syz [ 966.480904][ T8649] usb 2-1: Manufacturer: syz [ 966.509038][ T8649] usb 2-1: SerialNumber: syz [ 966.539143][ T8649] usb 2-1: config 0 descriptor?? [ 966.597196][ T8649] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 968.452519][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 968.983289][ T8649] usb 2-1: USB disconnect, device number 27 [ 968.990205][ T8649] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 969.653731][T12948] EXT4-fs error: 42 callbacks suppressed [ 969.653742][T12948] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2320: Detected aborted journal [ 969.767506][T12949] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2321: Detected aborted journal [ 969.827053][T12948] EXT4-fs: 27 callbacks suppressed [ 969.827067][T12948] EXT4-fs (sda1): Remounting filesystem read-only [ 969.871854][T12949] EXT4-fs (sda1): Remounting filesystem read-only [ 970.524166][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 970.563914][T12949] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2321: Detected aborted journal [ 970.581000][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 970.640174][T12954] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2322: Detected aborted journal [ 970.673074][T12954] EXT4-fs (sda1): Remounting filesystem read-only [ 970.697507][T12954] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2322: Detected aborted journal [ 970.724520][T12954] EXT4-fs (sda1): Remounting filesystem read-only [ 970.731148][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 970.746621][T12948] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2320: Detected aborted journal [ 970.761251][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 970.781107][T12948] EXT4-fs (sda1): Remounting filesystem read-only [ 970.864638][T12956] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:22: reading directory lblock 0 [ 970.872076][T12955] device syzkaller0 entered promiscuous mode [ 970.893968][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 970.913124][T12958] EXT4-fs (sda1): Remounting filesystem read-only [ 970.945486][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 970.964022][T12958] EXT4-fs (sda1): Remounting filesystem read-only [ 972.556064][T12803] Bluetooth: hci3: link tx timeout [ 972.561219][T12803] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 972.569000][T12803] Bluetooth: hci3: link tx timeout [ 972.574124][T12803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 972.908863][T12964] overlayfs: failed to verify origin (457/file1, ino=2519, err=-116) [ 973.038468][T12964] overlayfs: failed to verify origin (457/file1, ino=2519, err=-116) [ 975.031983][T12983] EXT4-fs error: 32 callbacks suppressed [ 975.032000][T12983] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2329: Detected aborted journal [ 975.076423][T12983] EXT4-fs: 23 callbacks suppressed [ 975.076435][T12983] EXT4-fs (sda1): Remounting filesystem read-only [ 976.094670][T12986] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2330: Detected aborted journal [ 976.147354][T12986] EXT4-fs (sda1): Remounting filesystem read-only [ 976.149438][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 976.176103][T12986] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2330: Detected aborted journal [ 976.194492][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 976.213387][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 976.229508][T12986] EXT4-fs (sda1): Remounting filesystem read-only [ 976.256951][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 976.274115][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 976.300616][T12986] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2330: Detected aborted journal [ 976.315824][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 976.328025][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 976.344361][T12986] EXT4-fs (sda1): Remounting filesystem read-only [ 976.356829][T12986] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2330: Detected aborted journal [ 976.374221][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 976.385971][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 976.419065][T12986] EXT4-fs (sda1): Remounting filesystem read-only [ 976.425662][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 976.501802][T12988] overlayfs: failed to clone upperpath [ 979.035512][T12985] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2329'. [ 979.309562][T12994] random: crng reseeded on system resumption [ 979.487536][T12999] tipc: Enabling of bearer rejected, failed to enable media [ 980.633874][ T4258] EXT4-fs error: 26 callbacks suppressed [ 980.633892][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 980.744527][ T4258] EXT4-fs: 14 callbacks suppressed [ 980.745143][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 981.925882][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 981.987292][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 982.048568][T13012] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2335: Detected aborted journal [ 982.153344][T13012] EXT4-fs (sda1): Remounting filesystem read-only [ 982.285329][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 982.336584][T13014] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2336: Detected aborted journal [ 982.356557][T13012] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2335: Detected aborted journal [ 982.380456][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 982.408032][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 982.463612][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 982.485502][T13012] EXT4-fs (sda1): Remounting filesystem read-only [ 982.494391][T13014] EXT4-fs (sda1): Remounting filesystem read-only [ 982.509601][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 982.529622][T13014] EXT4-fs (sda1): Remounting filesystem read-only [ 982.594865][T13014] EXT4-fs (sda1): Remounting filesystem read-only [ 982.623965][T13014] EXT4-fs (sda1): Remounting filesystem read-only [ 982.663193][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 982.676950][T13017] EXT4-fs (sda1): Remounting filesystem read-only [ 982.870133][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 982.902968][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 982.913786][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 982.926718][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 982.938296][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 983.030517][T13019] 9pnet_virtio: no channels available for device syz [ 984.155936][T13025] overlayfs: failed to clone upperpath [ 984.350989][T13031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2343'. [ 984.577710][T13034] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 986.475251][ T4258] EXT4-fs error: 56 callbacks suppressed [ 986.475268][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 986.494159][T13047] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2346: Detected aborted journal [ 986.509100][T13055] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2349: Detected aborted journal [ 986.586191][ T4258] EXT4-fs: 47 callbacks suppressed [ 986.586203][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 986.611482][T13055] EXT4-fs (sda1): Remounting filesystem read-only [ 986.642915][T13047] EXT4-fs (sda1): Remounting filesystem read-only [ 986.662378][T13055] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2349: Detected aborted journal [ 986.746461][T13055] EXT4-fs (sda1): Remounting filesystem read-only [ 986.850247][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 986.872342][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 986.902672][T13057] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2350: Detected aborted journal [ 986.938988][T13057] EXT4-fs (sda1): Remounting filesystem read-only [ 986.961968][T13057] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2350: Detected aborted journal [ 986.987457][T13057] EXT4-fs (sda1): Remounting filesystem read-only [ 987.013303][T12803] Bluetooth: hci2: unexpected event for opcode 0x200a [ 987.014024][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 987.163833][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 987.201979][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 987.278034][T13060] EXT4-fs (sda1): Remounting filesystem read-only [ 987.416008][T13060] EXT4-fs (sda1): Remounting filesystem read-only [ 987.455314][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 987.539664][T13061] overlayfs: failed to verify origin (466/file1, ino=2576, err=-116) [ 987.547909][T13061] overlayfs: failed to verify origin (466/file1, ino=2576, err=-116) [ 987.762956][T13065] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 989.012350][T13067] random: crng reseeded on system resumption [ 990.070532][T13080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2356'. [ 991.778266][T13089] EXT4-fs error: 48 callbacks suppressed [ 991.778282][T13089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2360: Detected aborted journal [ 991.816298][T13103] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2365: Detected aborted journal [ 991.843549][T13101] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2364: Detected aborted journal [ 991.888792][T13103] EXT4-fs: 33 callbacks suppressed [ 991.888803][T13103] EXT4-fs (sda1): Remounting filesystem read-only [ 991.904371][T13101] EXT4-fs (sda1): Remounting filesystem read-only [ 991.923649][T13089] EXT4-fs (sda1): Remounting filesystem read-only [ 991.931871][T13101] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2364: Detected aborted journal [ 991.979465][T13103] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2365: Detected aborted journal [ 991.998846][T13101] EXT4-fs (sda1): Remounting filesystem read-only [ 992.044877][T13101] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2364: Detected aborted journal [ 992.076302][T13103] EXT4-fs (sda1): Remounting filesystem read-only [ 992.085703][T13101] EXT4-fs (sda1): Remounting filesystem read-only [ 992.129786][T13102] overlayfs: failed to verify origin (447/file1, ino=2484, err=-116) [ 992.138024][T13102] overlayfs: failed to verify origin (447/file1, ino=2484, err=-116) [ 992.175135][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 992.225717][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 992.308392][T13107] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2367: Detected aborted journal [ 992.361492][T13107] EXT4-fs (sda1): Remounting filesystem read-only [ 992.370866][T13109] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2368: Detected aborted journal [ 992.393799][T13108] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2369: Detected aborted journal [ 992.400763][T13107] EXT4-fs (sda1): Remounting filesystem read-only [ 992.407431][T13109] EXT4-fs (sda1): Remounting filesystem read-only [ 992.537059][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.376500][T13130] random: crng reseeded on system resumption [ 996.248077][T13140] overlayfs: failed to clone upperpath [ 996.411416][T13142] random: crng reseeded on system resumption [ 998.693651][T13141] EXT4-fs error: 38 callbacks suppressed [ 998.693763][T13141] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2378: Detected aborted journal [ 998.710865][T13141] EXT4-fs: 28 callbacks suppressed [ 998.711006][T13141] EXT4-fs (sda1): Remounting filesystem read-only [ 998.730208][T13141] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2378: Detected aborted journal [ 998.741308][T13141] EXT4-fs (sda1): Remounting filesystem read-only [ 999.256429][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 999.279649][T13150] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2380: Detected aborted journal [ 999.345676][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 999.374268][T13151] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2381: Detected aborted journal [ 999.394487][T13150] EXT4-fs (sda1): Remounting filesystem read-only [ 999.419117][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 999.432097][T13152] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2382: Detected aborted journal [ 999.443184][T13151] EXT4-fs (sda1): Remounting filesystem read-only [ 999.467001][T13150] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2380: Detected aborted journal [ 999.469005][T13151] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2381: Detected aborted journal [ 999.502328][T13155] EXT4-fs (sda1): Remounting filesystem read-only [ 999.515559][T13150] EXT4-fs (sda1): Remounting filesystem read-only [ 999.573821][T13155] EXT4-fs (sda1): Remounting filesystem read-only [ 999.580410][T13151] EXT4-fs (sda1): Remounting filesystem read-only [ 999.601128][T13152] EXT4-fs (sda1): Remounting filesystem read-only [ 999.630072][T13157] EXT4-fs (sda1): Remounting filesystem read-only [ 1000.233919][T13159] overlayfs: failed to verify origin (470/file1, ino=2606, err=-116) [ 1000.246885][T13159] overlayfs: failed to verify origin (470/file1, ino=2606, err=-116) [ 1001.268499][T13174] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2388'. [ 1004.107364][T13194] EXT4-fs error: 46 callbacks suppressed [ 1004.107379][T13194] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2394: Detected aborted journal [ 1004.155513][T13194] EXT4-fs: 32 callbacks suppressed [ 1004.155525][T13194] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.171092][T13194] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2394: Detected aborted journal [ 1004.204102][T13196] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2395: Detected aborted journal [ 1004.247655][T13194] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.285482][T13196] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.352295][T13196] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2395: Detected aborted journal [ 1004.389181][T13196] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.459307][T13198] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2396: Detected aborted journal [ 1004.495491][T13198] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.543518][T13198] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2396: Detected aborted journal [ 1004.574431][T13200] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2397: Detected aborted journal [ 1004.607671][T13198] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.619876][T13200] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.638778][T13200] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2397: Detected aborted journal [ 1004.678079][T13200] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.772930][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1004.854590][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 1004.904715][T13202] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2399: Detected aborted journal [ 1004.925482][T13203] EXT4-fs (sda1): Remounting filesystem read-only [ 1005.598706][T13208] overlayfs: failed to verify origin (503/file1, ino=2882, err=-116) [ 1005.616415][T13208] overlayfs: failed to verify origin (503/file1, ino=2882, err=-116) [ 1007.895568][ T8649] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1008.204856][ T8649] usb 4-1: Using ep0 maxpacket: 32 [ 1008.363099][ T8649] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1008.408458][ T8649] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1008.417102][ T8649] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1008.449310][ T8649] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.480613][ T8649] usb 4-1: config 14 has no interface number 0 [ 1008.509456][ T8649] usb 4-1: config 14 has no interface number 1 [ 1008.526019][ T8649] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1008.582818][ T8649] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1008.631694][ T8649] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1008.651748][ T8649] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1008.799999][ T8649] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1008.821765][ T8649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.846724][ T8649] usb 4-1: Product: syz [ 1008.850935][ T8649] usb 4-1: Manufacturer: syz [ 1008.880441][ T8649] usb 4-1: SerialNumber: syz [ 1009.208620][ T4258] EXT4-fs error: 54 callbacks suppressed [ 1009.208635][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1009.240861][ T4258] EXT4-fs: 44 callbacks suppressed [ 1009.240873][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 1009.245120][T13258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2415: Detected aborted journal [ 1009.324004][T13258] EXT4-fs (sda1): Remounting filesystem read-only [ 1009.342809][ T8649] legousbtower 4-1:14.57: interrupt endpoints not found [ 1009.361287][T13258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2415: Detected aborted journal [ 1009.391725][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 1009.405567][T13258] EXT4-fs (sda1): Remounting filesystem read-only [ 1009.420391][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1009.471967][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1009.570951][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1009.665012][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 1009.762681][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 1009.876376][T13262] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2416: Detected aborted journal [ 1009.984213][T13258] EXT4-fs (sda1): Remounting filesystem read-only [ 1009.992629][T13262] EXT4-fs (sda1): Remounting filesystem read-only [ 1010.002698][T13258] EXT4-fs (sda1): Remounting filesystem read-only [ 1010.038046][T13258] EXT4-fs (sda1): Remounting filesystem read-only [ 1010.102290][T13261] overlayfs: failed to verify origin (505/file1, ino=2902, err=-116) [ 1010.113702][T13261] overlayfs: failed to verify origin (505/file1, ino=2902, err=-116) [ 1010.173815][T13230] EXT4-fs (sda1): Remounting filesystem read-only [ 1010.433727][T13262] EXT4-fs (sda1): Remounting filesystem read-only [ 1010.471020][ T8649] legousbtower 4-1:14.228: interrupt endpoints not found [ 1010.497175][ T8649] usb 4-1: USB disconnect, device number 30 [ 1010.648075][T13268] EXT4-fs (sda1): Remounting filesystem read-only [ 1014.513814][T13299] EXT4-fs error: 44 callbacks suppressed [ 1014.513830][T13299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2426: Detected aborted journal [ 1014.920872][ T4012] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 1014.983577][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1015.545747][ T4258] EXT4-fs: 23 callbacks suppressed [ 1015.545761][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 1015.651016][T13299] EXT4-fs (sda1): Remounting filesystem read-only [ 1015.747696][T13299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2426: Detected aborted journal [ 1015.806805][T13302] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2427: Detected aborted journal [ 1015.861136][T13302] EXT4-fs (sda1): Remounting filesystem read-only [ 1015.867783][T13299] EXT4-fs (sda1): Remounting filesystem read-only [ 1015.890699][T13303] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2428: Detected aborted journal [ 1015.915461][T13302] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2427: Detected aborted journal [ 1015.932302][T13303] EXT4-fs (sda1): Remounting filesystem read-only [ 1015.965813][T13302] EXT4-fs (sda1): Remounting filesystem read-only [ 1015.976021][T13303] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2428: Detected aborted journal [ 1016.007864][ T4012] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 1016.007920][T13303] EXT4-fs (sda1): Remounting filesystem read-only [ 1016.038019][ T4012] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 1016.207581][T13309] EXT4-fs (sda1): Remounting filesystem read-only [ 1016.247629][T13309] EXT4-fs (sda1): Remounting filesystem read-only [ 1016.490698][T13309] EXT4-fs (sda1): Remounting filesystem read-only [ 1016.710580][T13316] overlayfs: failed to clone upperpath [ 1016.906004][T13318] overlayfs: failed to clone upperpath [ 1017.035889][ T4320] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1018.220750][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 1018.380095][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1019.338281][ T4320] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1019.346691][ T4320] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1019.354988][ T4320] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.407237][ T4320] usb 2-1: config 14 has no interface number 0 [ 1019.413606][ T4320] usb 2-1: config 14 has no interface number 1 [ 1019.435983][ T4320] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1019.456554][ T4320] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1019.479198][ T4320] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1019.492014][ T4320] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1019.530798][T13339] EXT4-fs error: 31 callbacks suppressed [ 1019.530810][T13339] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2440: Detected aborted journal [ 1019.589470][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 1019.607578][T13341] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2441: Detected aborted journal [ 1019.636044][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1019.656862][T13339] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2440: Detected aborted journal [ 1019.691713][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1019.703911][T13343] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2442: Detected aborted journal [ 1019.737030][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1019.753601][T13341] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2441: Detected aborted journal [ 1019.759198][ T4320] usb 2-1: string descriptor 0 read error: -71 [ 1019.774521][T13343] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2442: Detected aborted journal [ 1019.785814][ T4320] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1020.877946][T13339] EXT4-fs: 27 callbacks suppressed [ 1020.877960][T13339] EXT4-fs (sda1): Remounting filesystem read-only [ 1021.413817][T13352] EXT4-fs (sda1): Remounting filesystem read-only [ 1021.420672][T13343] EXT4-fs (sda1): Remounting filesystem read-only [ 1021.454400][T13352] EXT4-fs (sda1): Remounting filesystem read-only [ 1021.479448][T13346] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 1021.488293][T13341] EXT4-fs (sda1): Remounting filesystem read-only [ 1021.695261][T13343] EXT4-fs (sda1): Remounting filesystem read-only [ 1021.715678][T13343] EXT4-fs (sda1): Remounting filesystem read-only [ 1021.899218][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.979651][T13355] EXT4-fs (sda1): Remounting filesystem read-only [ 1022.040723][T13355] EXT4-fs (sda1): Remounting filesystem read-only [ 1022.210752][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 1022.300759][T13359] random: crng reseeded on system resumption [ 1022.378811][ T4320] usb 2-1: can't set config #14, error -71 [ 1022.403376][ T4320] usb 2-1: USB disconnect, device number 28 [ 1022.785292][T13364] overlayfs: failed to verify origin (462/file1, ino=2572, err=-116) [ 1022.803577][T13364] overlayfs: failed to verify origin (462/file1, ino=2572, err=-116) [ 1025.810331][T13358] EXT4-fs error: 25 callbacks suppressed [ 1025.810427][T13358] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2447: Detected aborted journal [ 1025.835291][T13358] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2447: Detected aborted journal [ 1025.995297][T13366] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2445: Detected aborted journal [ 1026.099344][T13366] EXT4-fs: 8 callbacks suppressed [ 1026.099848][T13366] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.248370][T13366] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2445: Detected aborted journal [ 1026.332807][T13366] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.372779][T13368] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2448: Detected aborted journal [ 1026.437012][T13368] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.497996][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 1026.525674][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1026.575755][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1026.608191][T13369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2449: Detected aborted journal [ 1026.632310][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1026.658181][T13369] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.675968][T13370] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.686350][T13369] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.708981][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.718061][T13370] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.742692][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.792067][T13368] EXT4-fs (sda1): Remounting filesystem read-only [ 1026.810216][T13371] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1026.958380][T13375] No source specified [ 1028.335217][T13387] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1029.784135][T13391] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 1030.971812][T13406] EXT4-fs error: 39 callbacks suppressed [ 1030.972102][T13406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2461: Detected aborted journal [ 1031.112626][T13406] EXT4-fs: 25 callbacks suppressed [ 1031.112959][T13406] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.205380][T13403] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2459: Detected aborted journal [ 1031.216504][T13403] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.235221][T13403] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2459: Detected aborted journal [ 1031.246821][T13403] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.261643][T13403] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2459: Detected aborted journal [ 1031.272806][T13403] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.336253][T13405] overlayfs: failed to verify origin (512/file1, ino=2958, err=-116) [ 1031.348926][T13405] overlayfs: failed to verify origin (512/file1, ino=2958, err=-116) [ 1031.421343][T13407] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2460: Detected aborted journal [ 1031.521593][T13407] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.544538][T13406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2461: Detected aborted journal [ 1031.608308][T13406] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.663439][T13407] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2460: Detected aborted journal [ 1031.732981][T13407] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.860046][T13410] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:13: reading directory lblock 0 [ 1031.880653][T13412] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:20: reading directory lblock 0 [ 1031.928375][T13411] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2462: Detected aborted journal [ 1031.952149][T13411] EXT4-fs (sda1): Remounting filesystem read-only [ 1031.972644][T13414] random: crng reseeded on system resumption [ 1032.018246][T13415] EXT4-fs (sda1): Remounting filesystem read-only [ 1032.029232][T13411] EXT4-fs (sda1): Remounting filesystem read-only [ 1033.084131][T13422] overlayfs: failed to clone upperpath [ 1034.086388][T13438] No source specified [ 1035.809573][T13455] random: crng reseeded on system resumption [ 1036.018352][T13461] EXT4-fs error: 42 callbacks suppressed [ 1036.018366][T13461] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2477: Detected aborted journal [ 1036.222581][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1036.237075][ T4258] EXT4-fs: 31 callbacks suppressed [ 1036.237087][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 1036.587603][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 1036.652410][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1036.773000][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1036.846546][T13465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2478: Detected aborted journal [ 1036.882407][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1036.901221][T13465] EXT4-fs (sda1): Remounting filesystem read-only [ 1036.910578][T13466] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2479: Detected aborted journal [ 1036.955008][T13465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2478: Detected aborted journal [ 1036.990997][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 1037.033919][T13465] EXT4-fs (sda1): Remounting filesystem read-only [ 1037.049257][T13466] EXT4-fs (sda1): Remounting filesystem read-only [ 1037.070998][T12803] Bluetooth: hci3: link tx timeout [ 1037.076222][T12803] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1037.083899][T12803] Bluetooth: hci3: link tx timeout [ 1037.089251][T12803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1037.104533][T13466] EXT4-fs (sda1): Remounting filesystem read-only [ 1037.180597][T13469] EXT4-fs (sda1): Remounting filesystem read-only [ 1037.235653][T13469] EXT4-fs (sda1): Remounting filesystem read-only [ 1037.394866][T13471] EXT4-fs (sda1): Remounting filesystem read-only [ 1037.427575][T13472] EXT4-fs (sda1): Remounting filesystem read-only [ 1037.452889][T13471] EXT4-fs (sda1): Remounting filesystem read-only [ 1038.426944][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1039.500792][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2489'. [ 1041.322663][T13514] EXT4-fs error: 44 callbacks suppressed [ 1041.322679][T13514] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2495: Detected aborted journal [ 1041.485445][T13514] EXT4-fs: 27 callbacks suppressed [ 1041.485458][T13514] EXT4-fs (sda1): Remounting filesystem read-only [ 1041.505733][T13516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2496: Detected aborted journal [ 1041.519172][T13516] EXT4-fs (sda1): Remounting filesystem read-only [ 1041.559143][T13514] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2495: Detected aborted journal [ 1041.597939][T13516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2496: Detected aborted journal [ 1041.628746][T13514] EXT4-fs (sda1): Remounting filesystem read-only [ 1041.671809][T13516] EXT4-fs (sda1): Remounting filesystem read-only [ 1041.712667][T13518] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1041.741636][T13519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2498: Detected aborted journal [ 1041.760223][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 1041.771944][T13520] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2497: Detected aborted journal [ 1041.825379][T13520] EXT4-fs (sda1): Remounting filesystem read-only [ 1041.979695][T13516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2496: Detected aborted journal [ 1041.991150][T13516] EXT4-fs (sda1): Remounting filesystem read-only [ 1042.504147][T13520] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2497: Detected aborted journal [ 1042.541657][T13525] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1042.665432][T13520] EXT4-fs (sda1): Remounting filesystem read-only [ 1042.693826][T13519] EXT4-fs (sda1): Remounting filesystem read-only [ 1042.709066][T13519] EXT4-fs (sda1): Remounting filesystem read-only [ 1042.972697][T13538] EXT4-fs (sda1): Remounting filesystem read-only [ 1044.337185][T13552] device syzkaller0 entered promiscuous mode [ 1044.652935][T11488] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1044.844862][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2506'. [ 1045.053183][T11488] usb 2-1: Using ep0 maxpacket: 32 [ 1046.361416][ T3638] EXT4-fs error: 48 callbacks suppressed [ 1046.361428][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 1047.780350][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1047.950705][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1048.013659][T13577] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:30: reading directory lblock 0 [ 1048.114226][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1048.243440][T13578] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:30: reading directory lblock 0 [ 1048.296058][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 1048.464859][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 1048.668103][T13580] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2510: Detected aborted journal [ 1048.762772][T13580] EXT4-fs: 26 callbacks suppressed [ 1048.763679][T13580] EXT4-fs (sda1): Remounting filesystem read-only [ 1048.901516][T11488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1049.134490][T11488] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1049.162219][T11488] usb 2-1: can't read configurations, error -71 [ 1049.319513][T13580] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2510: Detected aborted journal [ 1049.574175][T13580] EXT4-fs (sda1): Remounting filesystem read-only [ 1049.927400][T13582] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1050.673431][T13584] EXT4-fs (sda1): Remounting filesystem read-only [ 1050.733080][T13584] EXT4-fs (sda1): Remounting filesystem read-only [ 1050.754725][T13590] EXT4-fs (sda1): Remounting filesystem read-only [ 1050.808112][T13590] EXT4-fs (sda1): Remounting filesystem read-only [ 1051.375708][T13597] EXT4-fs error: 7 callbacks suppressed [ 1051.375721][T13597] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:20: reading directory lblock 0 [ 1051.440581][T13598] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2513: Detected aborted journal [ 1051.471970][T13598] EXT4-fs (sda1): Remounting filesystem read-only [ 1051.504601][T13598] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2513: Detected aborted journal [ 1051.516299][T13599] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:4: reading directory lblock 0 [ 1051.543009][T13601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2514: Detected aborted journal [ 1051.557655][T13602] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:4: reading directory lblock 0 [ 1051.563396][T13598] EXT4-fs (sda1): Remounting filesystem read-only [ 1051.601361][T13601] EXT4-fs (sda1): Remounting filesystem read-only [ 1051.635106][T13601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2514: Detected aborted journal [ 1051.684752][T13601] EXT4-fs (sda1): Remounting filesystem read-only [ 1051.847212][T13590] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2512: Detected aborted journal [ 1051.920429][T13598] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2513: Detected aborted journal [ 1051.943444][T13590] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2512: Detected aborted journal [ 1052.631567][ T3933] ================================================================== [ 1052.639825][ T3933] BUG: KASAN: use-after-free in strlen+0x53/0x60 [ 1052.646315][ T3933] Read of size 1 at addr ffff88813fe3d580 by task dhcpcd/3933 [ 1052.653835][ T3933] [ 1052.656196][ T3933] CPU: 1 PID: 3933 Comm: dhcpcd Not tainted syzkaller #0 [ 1052.663266][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1052.673346][ T3933] Call Trace: [ 1052.676670][ T3933] [ 1052.679665][ T3933] dump_stack_lvl+0x188/0x24e [ 1052.684444][ T3933] ? __lock_acquire+0x7c40/0x7c40 [ 1052.689512][ T3933] ? show_regs_print_info+0x12/0x12 [ 1052.694744][ T3933] ? load_image+0x410/0x410 [ 1052.699289][ T3933] ? __virt_addr_valid+0x467/0x540 [ 1052.704453][ T3933] ? strlen+0x53/0x60 [ 1052.708454][ T3933] print_report+0xa8/0x210 [ 1052.712905][ T3933] kasan_report+0x10b/0x140 [ 1052.717479][ T3933] ? strlen+0x53/0x60 [ 1052.721486][ T3933] strlen+0x53/0x60 [ 1052.725320][ T3933] nla_put_string+0x19/0x30 [ 1052.730010][ T3933] rtnl_fill_ifinfo+0x1b8a/0x1d00 [ 1052.735097][ T3933] ? if_nlmsg_size+0x960/0x960 [ 1052.739883][ T3933] ? __nla_validate_parse+0x1f67/0x2970 [ 1052.745532][ T3933] ? mark_lock+0x94/0x320 [ 1052.749892][ T3933] ? __lock_acquire+0x138a/0x7c40 [ 1052.754952][ T3933] rtnl_dump_ifinfo+0xd80/0x1480 [ 1052.760034][ T3933] ? rtnl_getlink+0xba0/0xba0 [ 1052.764751][ T3933] ? netlink_dump+0x19f/0xcd0 [ 1052.769525][ T3933] ? ____sys_recvmsg+0x2c8/0x5b0 [ 1052.774559][ T3933] ? __x64_sys_recvmsg+0x20d/0x2e0 [ 1052.779729][ T3933] ? trace_kmalloc+0x22/0xa0 [ 1052.784390][ T3933] ? __alloc_skb+0x4e6/0x7d0 [ 1052.789022][ T3933] netlink_dump+0x683/0xcd0 [ 1052.793571][ T3933] ? netlink_lookup+0x200/0x200 [ 1052.798453][ T3933] ? netlink_recvmsg+0x5e3/0xe00 [ 1052.803422][ T3933] ? kmem_cache_free+0xf7/0x2a0 [ 1052.808310][ T3933] netlink_recvmsg+0x68f/0xe00 [ 1052.813114][ T3933] ? netlink_sendmsg+0xbd0/0xbd0 [ 1052.818085][ T3933] ? aa_af_perm+0x340/0x340 [ 1052.822651][ T3933] ? __might_fault+0xa6/0x120 [ 1052.827405][ T3933] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1052.832750][ T3933] ? security_socket_recvmsg+0x85/0xb0 [ 1052.838275][ T3933] ? netlink_sendmsg+0xbd0/0xbd0 [ 1052.843244][ T3933] ____sys_recvmsg+0x2c8/0x5b0 [ 1052.848045][ T3933] ? __sys_recvmsg_sock+0x40/0x40 [ 1052.853106][ T3933] ? import_iovec+0x6f/0xa0 [ 1052.857691][ T3933] ___sys_recvmsg+0x210/0x590 [ 1052.862402][ T3933] ? __sys_recvmsg+0x2a0/0x2a0 [ 1052.867234][ T3933] ? handle_mm_fault+0x288d/0x3d40 [ 1052.872368][ T3933] ? mt_find+0x157/0x830 [ 1052.876676][ T3933] ? do_user_addr_fault+0x8a6/0xb20 [ 1052.881904][ T3933] __x64_sys_recvmsg+0x20d/0x2e0 [ 1052.886873][ T3933] ? ___sys_recvmsg+0x590/0x590 [ 1052.891763][ T3933] ? lockdep_hardirqs_on+0x94/0x140 [ 1052.896983][ T3933] do_syscall_64+0x4c/0xa0 [ 1052.901435][ T3933] ? clear_bhb_loop+0x60/0xb0 [ 1052.906210][ T3933] ? clear_bhb_loop+0x60/0xb0 [ 1052.910917][ T3933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.916843][ T3933] RIP: 0033:0x7f7ece651407 [ 1052.921322][ T3933] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1052.940990][ T3933] RSP: 002b:00007fff5735eec0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1052.949464][ T3933] RAX: ffffffffffffffda RBX: 00007f7ece5c7740 RCX: 00007f7ece651407 [ 1052.957458][ T3933] RDX: 0000000000000000 RSI: 00007fff5735ef50 RDI: 000000000000001a [ 1052.965456][ T3933] RBP: 00007fff5735ef34 R08: 0000000000000000 R09: 0000000000000000 [ 1052.973532][ T3933] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001ff8 [ 1052.981520][ T3933] R13: 00007fff5735ef40 R14: 00007fff5735f030 R15: 0000000000000000 [ 1052.989519][ T3933] [ 1052.992548][ T3933] [ 1052.994882][ T3933] Allocated by task 4277: [ 1052.999229][ T3933] kasan_set_track+0x4b/0x70 [ 1053.003848][ T3933] __kasan_kmalloc+0x8e/0xa0 [ 1053.008469][ T3933] __kmalloc+0xb3/0x240 [ 1053.012648][ T3933] xt_replace_table+0x8c/0x790 [ 1053.017495][ T3933] __do_replace+0x16a/0x980 [ 1053.022075][ T3933] do_ip6t_set_ctl+0xb3d/0xe10 [ 1053.026870][ T3933] nf_setsockopt+0x25f/0x280 [ 1053.031533][ T3933] __sys_setsockopt+0x2bf/0x3d0 [ 1053.036419][ T3933] __x64_sys_setsockopt+0xb1/0xc0 [ 1053.041470][ T3933] do_syscall_64+0x4c/0xa0 [ 1053.045912][ T3933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.051832][ T3933] [ 1053.054173][ T3933] Freed by task 4277: [ 1053.058163][ T3933] kasan_set_track+0x4b/0x70 [ 1053.062785][ T3933] kasan_save_free_info+0x27/0x40 [ 1053.067859][ T3933] ____kasan_slab_free+0x126/0x1f0 [ 1053.073029][ T3933] slab_free_freelist_hook+0x133/0x1b0 [ 1053.078517][ T3933] __kmem_cache_free+0xb6/0x200 [ 1053.083392][ T3933] xt_free_table_info+0x13a/0x160 [ 1053.088441][ T3933] __do_replace+0x7e2/0x980 [ 1053.093060][ T3933] do_ip6t_set_ctl+0xb3d/0xe10 [ 1053.097848][ T3933] nf_setsockopt+0x25f/0x280 [ 1053.102463][ T3933] __sys_setsockopt+0x2bf/0x3d0 [ 1053.107431][ T3933] __x64_sys_setsockopt+0xb1/0xc0 [ 1053.112490][ T3933] do_syscall_64+0x4c/0xa0 [ 1053.116935][ T3933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.122855][ T3933] [ 1053.125199][ T3933] The buggy address belongs to the object at ffff88813fe3d580 [ 1053.125199][ T3933] which belongs to the cache kmalloc-16 of size 16 [ 1053.139135][ T3933] The buggy address is located 0 bytes inside of [ 1053.139135][ T3933] 16-byte region [ffff88813fe3d580, ffff88813fe3d590) [ 1053.152164][ T3933] [ 1053.154501][ T3933] The buggy address belongs to the physical page: [ 1053.160982][ T3933] page:ffffea0004ff8f40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13fe3d [ 1053.171240][ T3933] flags: 0x17ff00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 1053.178900][ T3933] raw: 017ff00000000200 0000000000000000 dead000000000001 ffff8880174413c0 [ 1053.187502][ T3933] raw: 0000000000000000 0000000000800080 00000001ffffffff 0000000000000000 [ 1053.196116][ T3933] page dumped because: kasan: bad access detected [ 1053.202537][ T3933] page_owner tracks the page as allocated [ 1053.208264][ T3933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, tgid 1 (swapper/0), ts 1811110510, free_ts 0 [ 1053.221301][ T3933] register_early_stack+0x95/0xf0 [ 1053.226406][ T3933] init_page_owner+0x2f/0x5b0 [ 1053.231161][ T3933] page_ext_init+0x7f1/0x856 [ 1053.235789][ T3933] kernel_init_freeable+0x3fc/0x5ab [ 1053.241057][ T3933] page_owner free stack trace missing [ 1053.246444][ T3933] [ 1053.248780][ T3933] Memory state around the buggy address: [ 1053.254464][ T3933] ffff88813fe3d480: 00 00 fc fc 00 00 fc fc fa fb fc fc 00 01 fc fc [ 1053.262541][ T3933] ffff88813fe3d500: fa fb fc fc fa fb fc fc 00 02 fc fc fa fb fc fc [ 1053.270617][ T3933] >ffff88813fe3d580: fa fb fc fc fa fb fc fc fa fb fc fc 00 03 fc fc [ 1053.278694][ T3933] ^ [ 1053.282772][ T3933] ffff88813fe3d600: fa fb fc fc 00 01 fc fc 00 01 fc fc 00 01 fc fc [ 1053.290852][ T3933] ffff88813fe3d680: 00 01 fc fc 00 01 fc fc 00 01 fc fc fa fb fc fc [ 1053.298930][ T3933] ================================================================== Aug 11 03:44:32 syzkaller kern.alert kernel: [ 1053.202537][ T3933] page_owner tracks the page as allocated Aug 11 03:44:32 syzkaller kern.alert kernel: [ 1053.208264][ T3933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, tgid 1 (swapper/0), ts 1811110510, free_ts 0 Aug 11 03:44:32 syzkaller kern.alert kernel: [ 1053.241057][ T3933] page_owner free stack trace missing [ 1053.973936][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.368848][ T3933] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1054.376107][ T3933] CPU: 0 PID: 3933 Comm: dhcpcd Not tainted syzkaller #0 [ 1054.383145][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1054.393220][ T3933] Call Trace: [ 1054.396517][ T3933] [ 1054.399473][ T3933] dump_stack_lvl+0x188/0x24e [ 1054.404181][ T3933] ? memcpy+0x3c/0x60 [ 1054.408184][ T3933] ? show_regs_print_info+0x12/0x12 [ 1054.413419][ T3933] ? load_image+0x410/0x410 [ 1054.417952][ T3933] panic+0x2d3/0x710 [ 1054.421866][ T3933] ? bpf_jit_dump+0xd0/0xd0 [ 1054.426400][ T3933] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1054.432411][ T3933] ? _raw_spin_unlock+0x40/0x40 [ 1054.437281][ T3933] ? print_memory_metadata+0x314/0x400 [ 1054.442768][ T3933] check_panic_on_warn+0x80/0xa0 [ 1054.447791][ T3933] ? strlen+0x53/0x60 [ 1054.451791][ T3933] end_report+0x66/0x110 [ 1054.456081][ T3933] kasan_report+0x118/0x140 [ 1054.460611][ T3933] ? strlen+0x53/0x60 [ 1054.464623][ T3933] strlen+0x53/0x60 [ 1054.468460][ T3933] nla_put_string+0x19/0x30 [ 1054.473007][ T3933] rtnl_fill_ifinfo+0x1b8a/0x1d00 [ 1054.478072][ T3933] ? if_nlmsg_size+0x960/0x960 [ 1054.482875][ T3933] ? __nla_validate_parse+0x1f67/0x2970 [ 1054.488476][ T3933] ? mark_lock+0x94/0x320 [ 1054.492842][ T3933] ? __lock_acquire+0x138a/0x7c40 [ 1054.497923][ T3933] rtnl_dump_ifinfo+0xd80/0x1480 [ 1054.502912][ T3933] ? rtnl_getlink+0xba0/0xba0 [ 1054.507653][ T3933] ? netlink_dump+0x19f/0xcd0 [ 1054.512361][ T3933] ? ____sys_recvmsg+0x2c8/0x5b0 [ 1054.517343][ T3933] ? __x64_sys_recvmsg+0x20d/0x2e0 [ 1054.522515][ T3933] ? trace_kmalloc+0x22/0xa0 [ 1054.527151][ T3933] ? __alloc_skb+0x4e6/0x7d0 [ 1054.531804][ T3933] netlink_dump+0x683/0xcd0 [ 1054.536364][ T3933] ? netlink_lookup+0x200/0x200 [ 1054.541255][ T3933] ? netlink_recvmsg+0x5e3/0xe00 [ 1054.546252][ T3933] ? kmem_cache_free+0xf7/0x2a0 [ 1054.551208][ T3933] netlink_recvmsg+0x68f/0xe00 [ 1054.556044][ T3933] ? netlink_sendmsg+0xbd0/0xbd0 [ 1054.561034][ T3933] ? aa_af_perm+0x340/0x340 [ 1054.565605][ T3933] ? __might_fault+0xa6/0x120 [ 1054.570317][ T3933] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1054.575629][ T3933] ? security_socket_recvmsg+0x85/0xb0 [ 1054.581112][ T3933] ? netlink_sendmsg+0xbd0/0xbd0 [ 1054.586080][ T3933] ____sys_recvmsg+0x2c8/0x5b0 [ 1054.590889][ T3933] ? __sys_recvmsg_sock+0x40/0x40 [ 1054.595949][ T3933] ? import_iovec+0x6f/0xa0 [ 1054.600481][ T3933] ___sys_recvmsg+0x210/0x590 [ 1054.605184][ T3933] ? __sys_recvmsg+0x2a0/0x2a0 [ 1054.609975][ T3933] ? handle_mm_fault+0x288d/0x3d40 [ 1054.615106][ T3933] ? mt_find+0x157/0x830 [ 1054.619379][ T3933] ? do_user_addr_fault+0x8a6/0xb20 [ 1054.624606][ T3933] __x64_sys_recvmsg+0x20d/0x2e0 [ 1054.629577][ T3933] ? ___sys_recvmsg+0x590/0x590 [ 1054.634460][ T3933] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.639680][ T3933] do_syscall_64+0x4c/0xa0 [ 1054.644128][ T3933] ? clear_bhb_loop+0x60/0xb0 [ 1054.648832][ T3933] ? clear_bhb_loop+0x60/0xb0 [ 1054.653544][ T3933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.659462][ T3933] RIP: 0033:0x7f7ece651407 [ 1054.663897][ T3933] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1054.683521][ T3933] RSP: 002b:00007fff5735eec0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1054.691962][ T3933] RAX: ffffffffffffffda RBX: 00007f7ece5c7740 RCX: 00007f7ece651407 [ 1054.699964][ T3933] RDX: 0000000000000000 RSI: 00007fff5735ef50 RDI: 000000000000001a [ 1054.707955][ T3933] RBP: 00007fff5735ef34 R08: 0000000000000000 R09: 0000000000000000 [ 1054.715947][ T3933] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001ff8 [ 1054.723940][ T3933] R13: 00007fff5735ef40 R14: 00007fff5735f030 R15: 0000000000000000 [ 1054.731946][ T3933] [ 1054.735558][ T3933] Kernel Offset: disabled [ 1054.739889][ T3933] Rebooting in 86400 seconds..