last executing test programs: 21m58.866918491s ago: executing program 1 (id=581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) 21m56.214864401s ago: executing program 1 (id=593): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xd89c, 0xc000, 0x1, 0x20002f7}) r0 = syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b7, 0x40, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = socket(0xa, 0x3, 0xff) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r1, 0x0, 0x300, 0x0, 0x0, 0x2}]) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000280)=[{}, {}], 0x0, 0x0) 21m54.603454655s ago: executing program 1 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b98e0200000f32410f2062450f01d1643e440fc7190f005e7b0f6ab2af746817c482d0f3513cc4e1d81618f2470f584f0066ba4100b800000000ef", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21m54.024995045s ago: executing program 1 (id=605): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x884) 21m53.345095346s ago: executing program 1 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0x810c9365, 0x0) 21m52.772817081s ago: executing program 1 (id=614): socket(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 21m37.496805969s ago: executing program 32 (id=614): socket(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 20m16.324077385s ago: executing program 3 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001200010a00000000000000000ae5ffff"], 0x26}}, 0x0) unshare(0x64000600) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 20m14.084426895s ago: executing program 3 (id=1090): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) io_getevents(r3, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 20m12.678516312s ago: executing program 3 (id=1098): r0 = syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x1, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x30, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r5, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 20m11.36857529s ago: executing program 3 (id=1102): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10188ca, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ca, &(0x7f0000000180)="$eJzs3U+LG2UcB/Df7GYn4x/IHjyJ0AF78FTc3sRLFmlB3JMlB/Wgi92CbILQwoJajD159eLBg69AEHwhvfgOBK+CNysUHpnJpDNZY0ykqbT7+Vzy7DPPd57nmQzZ2UN++9Erk9ObZdy6d/eXKIosdoYxjAdZ7MdOzH0VC4bfBADwNHuQUvyeZjbJZRFRbG9ZAMAWrff7v9c2f3oiywIAtujGe++/c3h0dO3dIoq4Pvn6bFT9ZV+9zo4f3opPYhwn8XoM4mFE/aCwF/XTQtW8nlKa9srKflyeTM9GVXLy4f3m/Ie/RdT5gxjEft316Gmjzr99dO2gnOnkp9U6nm/mH1b5qzGIlx6FF/JXl+RjlMdrr3bWfyUG8fPH8WmM42a9iDb/5UFZvpW+/eOLD6rlVflsejbq1+NaafcJvzUAAAAAAAAAAAAAAAAAAAAAADzDrjS1c/pRXorLk6qrqb+z+zDy6sdybn+xPs8sn81P1K0PlFKapvi+U1KwTM3ANt+Ll3vdwoIAAAAAAAAAAAAAAAAAAABwcd357PPT4/H45PZjacyrAfQi4s8bEf/1PMNOz6VYPbjfzHk8Hu80zYUx9/NuT+zOx2QRK5dRbeIxXZZ/azx3fs3zxg8/Vhvc5IRFp+eN5Rvc2/K+Ulv34fQ4Wz5XP+Y9RXOTfJdHtGPyWHPS/J8Opdjk9suXHhpsvPf8hboxXTEmslULe/PX2ZVrerLzu8jrq/q3+N0Yn+w1PZ34uXtjrfc9ilm88yHx4uwlq6t19Lf8iQQAAAAAAAAAAAAAAAAAABdX++3fJQfvrYzuJF8FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAZ0f7//w0a0ya8xuA8bt/5n7cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADABfBXAAAA//99/1sU") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 20m10.434078674s ago: executing program 3 (id=1106): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) 20m9.795650633s ago: executing program 3 (id=1110): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0xe, 0x5b, 0x40, 0x1235, 0x18, 0xf0ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xdd, 0x2d}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0xb, 0x7, 0x800004, 0xfffffff7, 0x4be1}, {0x7, 0x3, 0xe8, 0x6, 0xfffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f0000000000851000000200000085000000d100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', 0x0, 0x10005, &(0x7f00000000c0)=',\x00\x00\x00\x00\x00\x00\x00') r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0xe0) 20m8.366076405s ago: executing program 33 (id=1110): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0xe, 0x5b, 0x40, 0x1235, 0x18, 0xf0ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xdd, 0x2d}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0xb, 0x7, 0x800004, 0xfffffff7, 0x4be1}, {0x7, 0x3, 0xe8, 0x6, 0xfffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f0000000000851000000200000085000000d100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', 0x0, 0x10005, &(0x7f00000000c0)=',\x00\x00\x00\x00\x00\x00\x00') r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0xe0) 18m51.73257502s ago: executing program 5 (id=1416): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x200204) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) 18m50.25734299s ago: executing program 5 (id=1423): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000900)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02cf5aa6a3618000031afb8473a064f1988536d4b588880", 0x7f}, {0x0}, {0x0}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) 18m49.782047233s ago: executing program 5 (id=1426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb0615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 18m48.452978248s ago: executing program 5 (id=1431): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x20000) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) 18m46.697133829s ago: executing program 5 (id=1436): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 18m46.333629249s ago: executing program 5 (id=1440): fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 18m45.143195904s ago: executing program 34 (id=1440): fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 18m40.069154477s ago: executing program 4 (id=1467): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x60000003}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000580)={0xa0002008}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000)="93", 0x1, 0x80, 0x0, 0x0) 18m38.729150604s ago: executing program 4 (id=1471): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b000000050000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000001600000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) capset(&(0x7f00000020c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000, 0x1000}) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 18m38.148205963s ago: executing program 4 (id=1475): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @local}}, 0x4, 0x7, 0x4, 0x1, 0x5}}, 0x0) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 18m37.535321289s ago: executing program 4 (id=1479): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 18m37.133166678s ago: executing program 4 (id=1481): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioperm(0x2, 0x7ff, 0x5c0c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18m36.318332522s ago: executing program 4 (id=1485): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x44}}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001000000000904ff00028b8647000905e8ff000900000009050a"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f0000000200)={{0x12, 0x1, 0x1, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xff, 0x40, 0x31, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "2bc33f"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x7, 0x4, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x2, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x6, 0xb2}}}}}]}}]}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0), 0x0, 0x8) write$binfmt_elf64(r2, 0x0, 0x18c6) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) 18m34.740919014s ago: executing program 35 (id=1485): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x44}}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001000000000904ff00028b8647000905e8ff000900000009050a"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f0000000200)={{0x12, 0x1, 0x1, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xff, 0x40, 0x31, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "2bc33f"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x7, 0x4, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x2, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x6, 0xb2}}}}}]}}]}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0), 0x0, 0x8) write$binfmt_elf64(r2, 0x0, 0x18c6) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) 11.190333062s ago: executing program 6 (id=6336): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x0, 0x26}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xd611, '\x00', 0x0, r0, 0x1, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8000, '\x00', 0x0, r0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) 10.602555646s ago: executing program 6 (id=6339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 9.942219135s ago: executing program 6 (id=6343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x19}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)="83", 0x1}], 0x1}, 0x5) 9.252164655s ago: executing program 6 (id=6344): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) 6.258438538s ago: executing program 7 (id=6352): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x114a, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x2}, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x8013}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1ac90}]}, 0x28}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 4.828433787s ago: executing program 0 (id=6357): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8a) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x7}}, './file1\x00'}) 4.719541355s ago: executing program 7 (id=6358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x40010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r4, 0x125f, 0x0) 4.190145393s ago: executing program 2 (id=6360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r4, &(0x7f0000000180)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de525e4a40e81692d09dce17509aa2c4d9143a753919b35217e30c412490e6a4baa", 0x3b, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xd8}, 0x14) 4.119460512s ago: executing program 0 (id=6361): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="8871a32229de4e63129dff", 0xb}], 0x1}, 0x240480c3) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 4.06615321s ago: executing program 7 (id=6362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c8}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x4008800) 3.79804635s ago: executing program 8 (id=6363): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.543372218s ago: executing program 0 (id=6364): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3.543026284s ago: executing program 2 (id=6365): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r0, &(0x7f0000000040)="19bf1a2a7cbcf529da6092933e611b69424c3e36b4b60371b5d00b261cd042d345572fb81a87d48feeaf6be3e1b20f2d2f51e510f2dbd9f5776e3a10f8df45858f1cb83d76cdffc2e0732528f8d192a7ccd96a3203191c8077f8ec", 0x5b, 0x40000, &(0x7f00000001c0)={0x11, 0x9, r1, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) socket$inet(0x2, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x192, &(0x7f0000009480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$msr(r2, &(0x7f0000000200)=""/143, 0x8f) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 2.943477441s ago: executing program 2 (id=6366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xd}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x2, 0x0, 0x200, 0x4, 0xffffd6bd, 0x7, 0x1ff, 0xafcb, 0x0, 0x3ff, 0x5, 0x6, 0x7, 0x3ced8426, 0x40, 0x2, 0x6, 0x3, 0x1, 0x80, 0xf, 0x31222761, 0x9, 0x7, 0x1ff, 0x6, 0x444, 0x1672, 0x4, 0xace, 0xfffffffb, 0x13, 0x4, 0xe, 0xd9e, 0x3bf, 0x4, 0x6, 0xe20, 0x5, 0x6, 0x73, 0x7, 0x3, 0x6, 0xf265, 0x10000, 0x9, 0x2, 0x4, 0x4, 0xfffff801, 0x9ad, 0x80000001, 0x806181, 0xfffffff8, 0x4, 0x100, 0xa, 0xfffffffb, 0x9644, 0x3, 0x80, 0x2cf84e49, 0x10, 0x7fffffff, 0x6, 0x9, 0x1, 0xff0d, 0xf7, 0xfffffff8, 0x200, 0x0, 0x5, 0x7623, 0xa, 0x1, 0xc, 0x4ca, 0x2, 0xfffffffe, 0x5, 0x7, 0xc, 0x7fff, 0x1, 0x4, 0x47, 0x1807, 0x1, 0x641, 0x0, 0x7fffffff, 0x1, 0xfffffffc, 0x8, 0x7fff, 0x6, 0x2, 0x5, 0x4, 0xa, 0x8, 0x6c1, 0x9, 0x10, 0x4, 0x3, 0x1c, 0xfffff3b3, 0x9, 0x5, 0x1ff, 0xe7fa, 0x0, 0x8, 0x3, 0xe2, 0x78, 0x10001, 0x4, 0x4, 0x6, 0x1, 0x7, 0x2, 0x5, 0x80, 0x60, 0x6e, 0x7, 0x8, 0x6, 0xc6f, 0xfff, 0x0, 0x9, 0xd0, 0x8001, 0xe, 0x7, 0x9, 0xffffff49, 0x1000, 0x4, 0x2, 0xa0000000, 0x7d, 0xfffffffd, 0x9, 0x1, 0x6, 0x0, 0x82e2, 0x1, 0x91, 0x2, 0x6, 0xb, 0xffffffff, 0x8, 0x0, 0x7, 0x3, 0x401, 0x8, 0x5, 0x3, 0x0, 0x729, 0x7f, 0xc8cf, 0x1, 0x9, 0x5, 0x7, 0x669, 0x7ff, 0x100, 0x8, 0x7fffffff, 0x7ff, 0x4, 0x8, 0x7f, 0xfc7, 0x180, 0x400, 0x1, 0x800, 0x100, 0x8001, 0x5f, 0x3, 0xfffffffc, 0xc, 0x7, 0x58b, 0x5743, 0x7f, 0x5, 0x3, 0x3, 0x0, 0x6, 0x8, 0x7, 0x1bd4000, 0xffffffff, 0x6, 0xab7, 0xf, 0x80, 0x8, 0x9, 0x8000, 0xf9, 0x5, 0x0, 0x64ede896, 0x8c, 0x9, 0xce, 0xa6, 0xd, 0x13cb, 0x4, 0x6c, 0x7, 0x0, 0x1ff, 0x3, 0xff, 0xf427, 0x85, 0x0, 0x2, 0x1, 0x9, 0xd68, 0x4, 0x10, 0x80000000, 0xffffff7f, 0x6, 0x0, 0x10001, 0x0, 0x5, 0x4, 0x4, 0x4, 0x2, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) 2.804545304s ago: executing program 8 (id=6367): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.591016903s ago: executing program 7 (id=6368): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.339562042s ago: executing program 2 (id=6369): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x85, 0x697, &(0x7f0000001240)="$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") ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x7, 0x4, 0x1, 0x6, 0x7, "00120dd608f500001e20000080c90a008000"}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/179, &(0x7f0000000140)=""/92}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r2}) 2.14757308s ago: executing program 8 (id=6370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4040800) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 2.047333519s ago: executing program 0 (id=6371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x5, 0xd28, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.580183836s ago: executing program 8 (id=6372): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a80)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x10}}}}, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xd4aa6c3a0ba5a270, 0x0, 0x0, 0x9, 0x8001, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x5, 0xea, 0x32, 0x0, @multicast2, @loopback}}}}}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000240)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 1.506120183s ago: executing program 0 (id=6373): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 1.393670536s ago: executing program 6 (id=6374): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x401}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.339820553s ago: executing program 2 (id=6375): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$inet(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0, @ANYRESHEX], 0x0) 1.339457871s ago: executing program 7 (id=6376): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1.062262033s ago: executing program 8 (id=6377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 893.892536ms ago: executing program 7 (id=6378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 676.80291ms ago: executing program 6 (id=6379): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000140)={0x810100, 0xbdd6746b, 0x4, 0x1, 0x1106, 0xd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) 433.282567ms ago: executing program 8 (id=6380): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2089c6"], 0x0, 0x0}) 342.007068ms ago: executing program 0 (id=6381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x10, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffff10, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xfffffffd, 0x5, 0x5, 0x9, 0x2, 0x9, 0x13, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000700)="f83cac0259c8e3f2bada30fbc99b", 0xe, 0xc080, &(0x7f00000001c0)={0x11, 0x86dd, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 0s ago: executing program 2 (id=6382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): 993.410905][T16137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 993.419525][T16137] vhci_hcd vhci_hcd.0: Device attached [ 993.441334][T16133] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(20) [ 993.448122][T16133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 993.456551][T16133] vhci_hcd vhci_hcd.0: Device attached [ 993.505874][T16137] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 993.543972][T16133] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 993.555249][T16133] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 993.674508][T16148] vhci_hcd: connection closed [ 993.675661][ T6582] vhci_hcd vhci_hcd.8: stop threads [ 993.686532][ T6582] vhci_hcd vhci_hcd.8: release socket [ 993.692517][ T6582] vhci_hcd vhci_hcd.8: disconnect device [ 993.706661][T16146] vhci_hcd: connection closed [ 993.707109][T16140] vhci_hcd: connection closed [ 993.709458][T16141] vhci_hcd: connection closed [ 993.712059][T16135] vhci_hcd: connection reset by peer [ 993.726266][ T6582] vhci_hcd vhci_hcd.8: stop threads [ 993.727286][T16138] vhci_hcd: connection closed [ 993.734890][ T6582] vhci_hcd vhci_hcd.8: release socket [ 993.746101][ T6582] vhci_hcd vhci_hcd.8: disconnect device [ 993.762808][ T6582] vhci_hcd vhci_hcd.8: stop threads [ 993.768185][ T6582] vhci_hcd vhci_hcd.8: release socket [ 993.773971][ T6582] vhci_hcd vhci_hcd.8: disconnect device [ 993.799857][ T6582] vhci_hcd vhci_hcd.8: stop threads [ 993.805250][ T6582] vhci_hcd vhci_hcd.8: release socket [ 993.811588][ T6582] vhci_hcd vhci_hcd.8: disconnect device [ 993.828353][ T6582] vhci_hcd vhci_hcd.8: stop threads [ 993.834715][ T6582] vhci_hcd vhci_hcd.8: release socket [ 993.840811][ T6582] vhci_hcd vhci_hcd.8: disconnect device [ 993.900632][ T6582] vhci_hcd vhci_hcd.8: stop threads [ 993.906042][ T6582] vhci_hcd vhci_hcd.8: release socket [ 993.911814][ T6582] vhci_hcd vhci_hcd.8: disconnect device [ 994.154604][T16160] netem: change failed [ 994.618328][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 994.618400][ T30] audit: type=1326 audit(2000000452.805:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 994.722105][ T30] audit: type=1326 audit(2000000452.805:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 994.747451][ T30] audit: type=1326 audit(2000000452.885:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 994.772838][ T30] audit: type=1326 audit(2000000452.885:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 994.795772][ T30] audit: type=1326 audit(2000000452.885:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 995.054533][ T30] audit: type=1326 audit(2000000452.915:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 995.080110][ T30] audit: type=1326 audit(2000000452.915:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 995.102742][ T30] audit: type=1326 audit(2000000452.915:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 996.256938][T16190] netem: change failed [ 998.431180][T13390] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 999.279997][T16234] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 1005.480497][T16301] loop8: detected capacity change from 0 to 512 [ 1005.513542][T16301] EXT4-fs: Ignoring removed nobh option [ 1005.668179][T16301] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1005.683435][T16301] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 1005.694197][T16301] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3324: Corrupt directory, running e2fsck is recommended [ 1005.778224][T16301] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1005.839741][T16301] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.3324: corrupted in-inode xattr: invalid ea_ino [ 1005.881849][T16301] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3324: couldn't read orphan inode 15 (err -117) [ 1005.947469][T16301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.987884][ T30] audit: type=1326 audit(2000000464.175:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1006.097603][ T30] audit: type=1326 audit(2000000464.215:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1006.122838][ T30] audit: type=1326 audit(2000000464.215:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1006.145795][ T30] audit: type=1326 audit(2000000464.255:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1006.171134][ T30] audit: type=1326 audit(2000000464.255:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1006.712947][T10463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.322535][T16349] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3341'. [ 1010.703081][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3361'. [ 1014.152355][T16449] loop8: detected capacity change from 0 to 64 [ 1014.356931][T16451] overlayfs: upper fs needs to support d_type. [ 1014.408709][T16451] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1014.432705][T16451] overlayfs: failed to set xattr on upper [ 1014.438715][T16451] overlayfs: ...falling back to redirect_dir=nofollow. [ 1014.446408][T16451] overlayfs: ...falling back to index=off. [ 1014.455240][T16451] overlayfs: ...falling back to uuid=null. [ 1015.742377][T16474] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3395'. [ 1016.092926][T16478] sctp: [Deprecated]: syz.7.3397 (pid 16478) Use of int in maxseg socket option. [ 1016.092926][T16478] Use struct sctp_assoc_value instead [ 1017.432664][T16507] netlink: 'syz.2.3407': attribute type 1 has an invalid length. [ 1018.247114][T16520] sctp: [Deprecated]: syz.7.3413 (pid 16520) Use of int in maxseg socket option. [ 1018.247114][T16520] Use struct sctp_assoc_value instead [ 1019.142509][T16540] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3421'. [ 1020.413170][T16556] sctp: [Deprecated]: syz.0.3429 (pid 16556) Use of int in maxseg socket option. [ 1020.413170][T16556] Use struct sctp_assoc_value instead [ 1021.801107][T16566] loop8: detected capacity change from 0 to 512 [ 1021.833209][T16566] EXT4-fs: Ignoring removed nobh option [ 1021.974053][T16566] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1021.986299][T16566] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 1021.999683][T16566] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3433: Corrupt directory, running e2fsck is recommended [ 1022.108049][T16566] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1022.127399][T16566] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.3433: corrupted in-inode xattr: invalid ea_ino [ 1022.171196][T16566] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3433: couldn't read orphan inode 15 (err -117) [ 1022.217010][T16566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.531609][T16590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1023.123164][T10463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.205012][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.214709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.800134][ T30] audit: type=1326 audit(2000000481.985:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1023.890521][ T30] audit: type=1326 audit(2000000482.025:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1023.915758][ T30] audit: type=1326 audit(2000000482.025:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1023.938453][ T30] audit: type=1326 audit(2000000482.025:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1023.964164][ T30] audit: type=1326 audit(2000000482.025:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1023.986757][ T30] audit: type=1326 audit(2000000482.025:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1024.012249][ T30] audit: type=1326 audit(2000000482.035:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1024.034916][ T30] audit: type=1326 audit(2000000482.035:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1024.060045][ T30] audit: type=1326 audit(2000000482.045:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1024.082758][ T30] audit: type=1326 audit(2000000482.045:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1025.034560][T16622] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3455'. [ 1025.204827][T16625] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3454'. [ 1025.219947][T16628] lo speed is unknown, defaulting to 1000 [ 1025.244663][T16628] lo speed is unknown, defaulting to 1000 [ 1025.255542][T16628] lo speed is unknown, defaulting to 1000 [ 1025.402064][T16628] infiniband «;”: RDMA CMA: cma_listen_on_dev, error -98 [ 1025.554766][T16628] lo speed is unknown, defaulting to 1000 [ 1025.644654][T16628] lo speed is unknown, defaulting to 1000 [ 1025.716363][T16628] lo speed is unknown, defaulting to 1000 [ 1025.728420][T16628] lo speed is unknown, defaulting to 1000 [ 1025.760946][T16628] lo speed is unknown, defaulting to 1000 [ 1025.778737][T16628] lo speed is unknown, defaulting to 1000 [ 1025.824768][T16636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1026.324428][T16643] netem: change failed [ 1026.378619][T16645] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1026.385349][T16645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.393725][T16645] vhci_hcd vhci_hcd.0: Device attached [ 1026.447145][T16649] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(12) [ 1026.453954][T16649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.462617][T16649] vhci_hcd vhci_hcd.0: Device attached [ 1026.511204][T16645] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(11) [ 1026.518010][T16645] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1026.526374][T16645] vhci_hcd vhci_hcd.0: Device attached [ 1026.623298][T16645] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(14) [ 1026.630108][T16645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.641055][T16645] vhci_hcd vhci_hcd.0: Device attached [ 1026.682112][T13390] usb 49-1: new low-speed USB device number 10 using vhci_hcd [ 1026.710958][T16649] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(18) [ 1026.717767][T16649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.726068][T16649] vhci_hcd vhci_hcd.0: Device attached [ 1026.783477][T16645] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(17) [ 1026.790293][T16645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.798586][T16645] vhci_hcd vhci_hcd.0: Device attached [ 1026.848301][T16649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1026.862837][T16645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1026.898452][T16645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1026.976544][T16663] vhci_hcd: connection closed [ 1026.977776][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1026.988240][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1026.994531][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1027.014963][T16658] vhci_hcd: connection closed [ 1027.015424][T16647] vhci_hcd: connection reset by peer [ 1027.018592][T16652] vhci_hcd: connection closed [ 1027.022445][T16650] vhci_hcd: connection closed [ 1027.032608][T16655] vhci_hcd: connection closed [ 1027.064569][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1027.075924][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1027.081719][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1027.125433][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1027.131841][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1027.137502][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1027.158596][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1027.164479][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1027.170324][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1027.184984][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1027.190766][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1027.201379][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1027.238961][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1027.245890][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1027.247129][T16671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3470'. [ 1027.251757][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1027.986343][T16687] siw: device registration error -23 [ 1028.818073][T16698] netlink: 300 bytes leftover after parsing attributes in process `syz.7.3482'. [ 1028.827871][T16698] tipc: Invalid UDP bearer configuration [ 1028.828068][T16698] tipc: Enabling of bearer rejected, failed to enable media [ 1029.786082][T16717] siw: device registration error -23 [ 1030.929536][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1031.204055][T16742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3499'. [ 1031.789703][T13390] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1032.566793][T16760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1032.882625][T16762] tipc: Enabling of bearer rejected, failed to enable media [ 1032.938868][T16762] netem: change failed [ 1033.053898][T16767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1033.125906][T16764] loop8: detected capacity change from 0 to 2048 [ 1033.261547][T16764] loop8: p3 < > p4 < > [ 1033.265922][T16764] loop8: partition table partially beyond EOD, truncated [ 1033.305094][T16764] loop8: p3 start 4284289 is beyond EOD, truncated [ 1034.597097][T16789] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1035.145414][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1035.840011][T16812] tipc: Enabling of bearer rejected, failed to enable media [ 1035.885430][T16812] netem: change failed [ 1036.776149][T16826] netlink: 'syz.7.3539': attribute type 2 has an invalid length. [ 1036.818827][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3540'. [ 1037.380742][T16836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3542'. [ 1037.696393][T16842] tipc: Enabling of bearer rejected, failed to enable media [ 1037.754137][T16842] netem: change failed [ 1039.389594][T13363] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1039.565330][T13363] usb 9-1: Using ep0 maxpacket: 32 [ 1039.594667][T13363] usb 9-1: config 1 has an invalid interface number: 2 but max is 1 [ 1039.603464][T13363] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.615808][T13363] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1039.635924][T13363] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.647671][T13363] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.658538][T13363] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.672327][T13363] usb 9-1: config 1 interface 2 has no altsetting 0 [ 1039.767471][T13363] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1039.777260][T13363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.785866][T13363] usb 9-1: Product: syz [ 1039.790265][T13363] usb 9-1: Manufacturer: syz [ 1039.795014][T13363] usb 9-1: SerialNumber: syz [ 1039.870953][T13363] usb 9-1: selecting invalid altsetting 1 [ 1040.395391][T16880] tipc: Enabling of bearer rejected, failed to enable media [ 1040.512089][T13363] cdc_ncm 9-1:1.0: SET_NTB_FORMAT failed [ 1040.552424][T13363] usb 9-1: selecting invalid altsetting 1 [ 1040.579919][T13363] cdc_ncm 9-1:1.0: bind() failure [ 1040.644988][T13363] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1040.652280][T13363] cdc_ncm 9-1:1.1: bind() failure [ 1040.740071][T13363] usb 9-1: USB disconnect, device number 12 [ 1041.423696][T16894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3564'. [ 1041.830900][T13363] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1042.019675][T13363] usb 9-1: Using ep0 maxpacket: 8 [ 1042.040346][T13363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.051972][T13363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.063617][T13363] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1042.079334][T13363] usb 9-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1042.088573][T13363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.202262][T13363] usb 9-1: config 0 descriptor?? [ 1042.694406][T13363] logitech 0003:046D:C293.0007: bogus close delimiter [ 1042.701815][T13363] logitech 0003:046D:C293.0007: item 0 1 2 10 parsing failed [ 1042.731194][T13363] logitech 0003:046D:C293.0007: parse failed [ 1042.737857][T13363] logitech 0003:046D:C293.0007: probe with driver logitech failed with error -22 [ 1042.894963][T13363] usb 9-1: USB disconnect, device number 13 [ 1044.571458][T16944] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3587'. [ 1045.129766][T13363] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1045.317892][T13363] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.328637][T13363] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1045.343927][T13363] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1045.351385][T13363] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1045.360697][T13363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.453852][T13363] usb 9-1: config 0 descriptor?? [ 1045.918553][T13363] magicmouse 0003:05AC:0265.0008: item fetching failed at offset 4/5 [ 1045.938069][T13363] magicmouse 0003:05AC:0265.0008: magicmouse hid parse failed [ 1045.946739][T13363] magicmouse 0003:05AC:0265.0008: probe with driver magicmouse failed with error -22 [ 1046.109433][T13363] usb 9-1: USB disconnect, device number 14 [ 1047.103305][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1047.103379][ T30] audit: type=1326 audit(2000000505.295:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16982 comm="syz.8.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1047.221811][ T30] audit: type=1326 audit(2000000505.335:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16982 comm="syz.8.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1047.245018][ T30] audit: type=1326 audit(2000000505.335:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16982 comm="syz.8.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1047.268074][ T30] audit: type=1326 audit(2000000505.335:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16982 comm="syz.8.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1048.618265][T17006] netlink: 'syz.2.3612': attribute type 1 has an invalid length. [ 1048.779625][T13376] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1048.808951][T17006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1048.967986][T13376] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1048.982788][T13376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1049.067969][T13376] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1049.077660][T13376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.091899][T13376] usb 9-1: Product: syz [ 1049.096343][T13376] usb 9-1: Manufacturer: syz [ 1049.101638][T13376] usb 9-1: SerialNumber: syz [ 1049.145581][T17010] sctp: [Deprecated]: syz.7.3615 (pid 17010) Use of int in maxseg socket option. [ 1049.145581][T17010] Use struct sctp_assoc_value instead [ 1049.197137][T13376] usb 9-1: config 0 descriptor?? [ 1049.914925][T13375] usb 9-1: USB disconnect, device number 15 [ 1050.107150][T17021] udevd[17021]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.171528][T17036] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1051.178268][T17036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.186363][T17036] vhci_hcd vhci_hcd.0: Device attached [ 1051.264022][T17041] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(10) [ 1051.270846][T17041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.281950][T17041] vhci_hcd vhci_hcd.0: Device attached [ 1051.350731][T17036] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(9) [ 1051.357461][T17036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1051.365870][T17036] vhci_hcd vhci_hcd.0: Device attached [ 1051.444544][T17041] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(14) [ 1051.449771][T13376] usb 49-1: new low-speed USB device number 11 using vhci_hcd [ 1051.451340][T17041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.471661][T17041] vhci_hcd vhci_hcd.0: Device attached [ 1051.493917][T17048] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(17) [ 1051.500707][T17048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.508813][T17048] vhci_hcd vhci_hcd.0: Device attached [ 1051.615484][T17036] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13) [ 1051.622302][T17036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.630769][T17036] vhci_hcd vhci_hcd.0: Device attached [ 1051.727244][T17049] vhci_hcd: connection closed [ 1051.727715][T17044] vhci_hcd: connection closed [ 1051.729775][T17051] vhci_hcd: connection closed [ 1051.735798][T17038] vhci_hcd: connection reset by peer [ 1051.750096][T17042] vhci_hcd: connection closed [ 1051.750564][T17046] vhci_hcd: connection closed [ 1051.756853][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1051.770643][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1051.776236][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1051.846606][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1051.854891][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1051.861032][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1051.884421][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1051.890030][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1051.895711][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1051.953366][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1051.958873][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1051.965649][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1052.015817][T17058] sctp: [Deprecated]: syz.6.3629 (pid 17058) Use of int in maxseg socket option. [ 1052.015817][T17058] Use struct sctp_assoc_value instead [ 1052.044075][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1052.049678][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1052.055392][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1052.101854][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1052.107366][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1052.113312][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1052.777678][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3634'. [ 1053.466045][T17080] netlink: 316 bytes leftover after parsing attributes in process `syz.6.3640'. [ 1054.495653][T17096] sctp: [Deprecated]: syz.0.3644 (pid 17096) Use of int in maxseg socket option. [ 1054.495653][T17096] Use struct sctp_assoc_value instead [ 1054.552433][T17097] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1054.559163][T17097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1054.567374][T17097] vhci_hcd vhci_hcd.0: Device attached [ 1054.724653][T17100] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(10) [ 1054.731478][T17100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1054.743192][T17100] vhci_hcd vhci_hcd.0: Device attached [ 1054.797891][T17097] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(9) [ 1054.804627][T17097] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1054.813667][T17097] vhci_hcd vhci_hcd.0: Device attached [ 1054.871782][T17105] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(15) [ 1054.878594][T17105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1054.886736][T17105] vhci_hcd vhci_hcd.0: Device attached [ 1054.948953][T17097] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(12) [ 1054.955764][T17097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1054.966736][T17097] vhci_hcd vhci_hcd.0: Device attached [ 1055.015812][T17100] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(17) [ 1055.022621][T17100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1055.033854][T17100] vhci_hcd vhci_hcd.0: Device attached [ 1055.113780][T17114] vhci_hcd: connection closed [ 1055.114366][T17103] vhci_hcd: connection closed [ 1055.114534][T17101] vhci_hcd: connection closed [ 1055.132884][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1055.143301][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1055.148905][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1055.158069][T17111] vhci_hcd: connection closed [ 1055.158840][T17106] vhci_hcd: connection closed [ 1055.166083][T17098] vhci_hcd: connection closed [ 1055.184157][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1055.194599][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1055.203119][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1055.325402][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1055.335762][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1055.346116][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1055.376071][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1055.386780][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1055.397192][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1055.426626][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1055.436907][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1055.448635][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1055.525851][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1055.531639][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1055.537342][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1056.610502][T13376] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1056.988854][T17139] sctp: [Deprecated]: syz.8.3659 (pid 17139) Use of int in maxseg socket option. [ 1056.988854][T17139] Use struct sctp_assoc_value instead [ 1057.694923][T17149] netlink: 'syz.8.3662': attribute type 12 has an invalid length. [ 1057.707983][T17149] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3662'. [ 1059.465934][T17175] sctp: [Deprecated]: syz.0.3674 (pid 17175) Use of int in maxseg socket option. [ 1059.465934][T17175] Use struct sctp_assoc_value instead [ 1059.994528][T13363] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1060.207841][T13363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.222941][T13363] usb 9-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 1060.237139][T13363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.368674][T13363] usb 9-1: config 0 descriptor?? [ 1060.880746][T13363] asus 0003:0B05:18C6.0009: unbalanced collection at end of report description [ 1060.927915][T13363] asus 0003:0B05:18C6.0009: Asus hid parse failed: -22 [ 1060.938047][T13363] asus 0003:0B05:18C6.0009: probe with driver asus failed with error -22 [ 1061.073180][T13376] usb 9-1: USB disconnect, device number 16 [ 1062.180044][T17211] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1062.186766][T17211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1062.194927][T17211] vhci_hcd vhci_hcd.0: Device attached [ 1062.216607][T17205] sctp: [Deprecated]: syz.0.3689 (pid 17205) Use of int in maxseg socket option. [ 1062.216607][T17205] Use struct sctp_assoc_value instead [ 1062.305974][T17214] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(9) [ 1062.312684][T17214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1062.323381][T17214] vhci_hcd vhci_hcd.0: Device attached [ 1062.419562][T17211] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(11) [ 1062.426363][T17211] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1062.434494][T17211] vhci_hcd vhci_hcd.0: Device attached [ 1062.502439][T13376] usb 49-1: new low-speed USB device number 12 using vhci_hcd [ 1062.539460][T17214] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(13) [ 1062.546276][T17214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1062.554393][T17214] vhci_hcd vhci_hcd.0: Device attached [ 1062.616198][T17223] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(16) [ 1062.623015][T17223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1062.636055][T17223] vhci_hcd vhci_hcd.0: Device attached [ 1062.656864][T17211] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(19) [ 1062.663673][T17211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1062.672042][T17211] vhci_hcd vhci_hcd.0: Device attached [ 1062.743984][T17221] vhci_hcd: connection closed [ 1062.744121][T17212] vhci_hcd: connection reset by peer [ 1062.754907][T17215] vhci_hcd: connection closed [ 1062.756764][T17226] vhci_hcd: connection closed [ 1062.761836][T17217] vhci_hcd: connection closed [ 1062.773328][T17224] vhci_hcd: connection closed [ 1062.782165][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1062.792489][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1062.798088][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1062.828518][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1062.836913][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1062.842940][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1062.899476][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1062.904910][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1062.910897][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1062.957128][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1062.962868][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1062.968567][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1062.998918][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1063.004511][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1063.013337][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1063.059482][ T6589] vhci_hcd vhci_hcd.8: stop threads [ 1063.064887][ T6589] vhci_hcd vhci_hcd.8: release socket [ 1063.073429][ T6589] vhci_hcd vhci_hcd.8: disconnect device [ 1065.398170][T17262] ip6tnl0: Caught tx_queue_len zero misconfig [ 1065.707187][T17264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1066.987552][T17282] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3715'. [ 1067.215881][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3719'. [ 1067.629840][T13376] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1068.675600][T17308] 9p: Bad value for 'rfdno' [ 1071.038640][T17335] mkiss: ax0: crc mode is auto. [ 1072.925136][T17360] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1073.007238][T17361] netem: change failed [ 1073.029759][T13376] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1073.211973][T13376] usb 9-1: Using ep0 maxpacket: 32 [ 1073.262920][T13376] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1073.271515][T13376] usb 9-1: config 0 has no interface number 0 [ 1073.308799][T13376] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1073.338404][T13376] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1073.347901][T13376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.358795][T13376] usb 9-1: Product: syz [ 1073.363458][T13376] usb 9-1: Manufacturer: syz [ 1073.368217][T13376] usb 9-1: SerialNumber: syz [ 1073.443496][T13376] usb 9-1: config 0 descriptor?? [ 1073.462758][T17357] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1073.716006][T17371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3753'. [ 1073.735841][T17357] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1073.737256][T17370] sctp: [Deprecated]: syz.0.3754 (pid 17370) Use of int in maxseg socket option. [ 1073.737256][T17370] Use struct sctp_assoc_value instead [ 1074.168608][T13376] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1074.213517][T13376] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1074.278655][T13376] usb 9-1: USB disconnect, device number 17 [ 1075.455117][T17395] netem: change failed [ 1075.842482][T17403] sctp: [Deprecated]: syz.2.3766 (pid 17403) Use of int in maxseg socket option. [ 1075.842482][T17403] Use struct sctp_assoc_value instead [ 1076.758796][T17416] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1076.765532][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.777046][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1076.815041][T17420] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(12) [ 1076.821855][T17420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.834576][T17420] vhci_hcd vhci_hcd.0: Device attached [ 1076.874353][T17416] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(11) [ 1076.881169][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1076.892214][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1076.916070][T17420] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(16) [ 1076.922883][T17420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.935747][T17420] vhci_hcd vhci_hcd.0: Device attached [ 1077.035932][T17416] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(15) [ 1077.042755][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1077.053797][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1077.094119][T13363] usb 49-1: new low-speed USB device number 13 using vhci_hcd [ 1077.136901][T17416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1077.156996][T17420] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(20) [ 1077.163811][T17420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1077.179380][T17420] vhci_hcd vhci_hcd.0: Device attached [ 1077.198517][T17435] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1077.236633][T17416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1077.437201][T17433] vhci_hcd: connection closed [ 1077.438741][T17431] vhci_hcd: connection closed [ 1077.453584][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1077.459773][T17426] vhci_hcd: connection closed [ 1077.465115][T17421] vhci_hcd: connection closed [ 1077.466893][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1077.483895][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1077.483937][T17423] vhci_hcd: connection closed [ 1077.490485][T17418] vhci_hcd: connection reset by peer [ 1077.577147][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1077.582850][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1077.588552][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1077.620917][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1077.626327][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1077.634864][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1077.704867][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1077.712681][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1077.718265][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1077.769023][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1077.775472][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1077.784011][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1077.819894][ T6586] vhci_hcd vhci_hcd.8: stop threads [ 1077.825444][ T6586] vhci_hcd vhci_hcd.8: release socket [ 1077.831219][ T6586] vhci_hcd vhci_hcd.8: disconnect device [ 1078.177688][T17451] sctp: [Deprecated]: syz.7.3780 (pid 17451) Use of int in maxseg socket option. [ 1078.177688][T17451] Use struct sctp_assoc_value instead [ 1079.799558][T17472] delete_channel: no stack [ 1080.637009][T17474] lo speed is unknown, defaulting to 1000 [ 1080.688712][T17474] lo speed is unknown, defaulting to 1000 [ 1080.703531][T17474] lo speed is unknown, defaulting to 1000 [ 1081.953893][T17495] sctp: [Deprecated]: syz.0.3795 (pid 17495) Use of int in maxseg socket option. [ 1081.953893][T17495] Use struct sctp_assoc_value instead [ 1082.195445][T13363] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1084.366525][T17524] netem: change failed [ 1084.632607][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.639785][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.930228][T17529] sctp: [Deprecated]: syz.0.3809 (pid 17529) Use of int in maxseg socket option. [ 1084.930228][T17529] Use struct sctp_assoc_value instead [ 1085.164656][T17534] netlink: 'syz.8.3810': attribute type 1 has an invalid length. [ 1085.381316][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3810'. [ 1085.558872][T17538] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1085.615241][T17538] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1085.986395][T17541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1086.178952][T17534] bond4: (slave gretap1): making interface the new active one [ 1086.232904][T17534] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1086.415968][T17550] tipc: Enabled bearer , priority 10 [ 1087.556908][T17564] netlink: 'syz.7.3822': attribute type 1 has an invalid length. [ 1088.287594][T17577] sctp: [Deprecated]: syz.6.3824 (pid 17577) Use of int in maxseg socket option. [ 1088.287594][T17577] Use struct sctp_assoc_value instead [ 1090.707640][T17605] sctp: [Deprecated]: syz.0.3837 (pid 17605) Use of int in maxseg socket option. [ 1090.707640][T17605] Use struct sctp_assoc_value instead [ 1092.712366][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3848'. [ 1093.638796][T17647] sctp: [Deprecated]: syz.8.3852 (pid 17647) Use of int in maxseg socket option. [ 1093.638796][T17647] Use struct sctp_assoc_value instead [ 1094.411190][T17655] lo speed is unknown, defaulting to 1000 [ 1094.435621][T17655] lo speed is unknown, defaulting to 1000 [ 1094.477304][T17655] lo speed is unknown, defaulting to 1000 [ 1096.435302][T17683] "syz.0.3866" (17683) uses obsolete ecb(arc4) skcipher [ 1103.558431][T17774] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1105.928436][T17794] tipc: Enabling of bearer rejected, already enabled [ 1107.004795][T17809] tipc: Enabling of bearer rejected, failed to enable media [ 1107.612784][T17818] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3921'. [ 1108.538225][T17834] netlink: 'syz.0.3927': attribute type 1 has an invalid length. [ 1108.787601][T17834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1109.600350][T17849] netlink: 'syz.6.3933': attribute type 1 has an invalid length. [ 1110.537601][T17865] tipc: Enabling of bearer rejected, already enabled [ 1110.910627][T17865] netem: change failed [ 1113.365147][T17894] tipc: Enabling of bearer rejected, already enabled [ 1113.656230][T17897] tipc: Enabling of bearer rejected, already enabled [ 1113.698464][T17897] netem: change failed [ 1115.428669][T17915] loop8: detected capacity change from 0 to 764 [ 1116.563083][T17930] delete_channel: no stack [ 1116.794192][T17932] tipc: Enabling of bearer rejected, already enabled [ 1117.148186][T17925] syz.2.3961 (17925) used greatest stack depth: 2264 bytes left [ 1117.376358][T17938] netlink: 'syz.6.3966': attribute type 1 has an invalid length. [ 1118.827615][T17958] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3969'. [ 1118.837162][T17958] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3969'. [ 1120.046393][T13376] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1120.216248][T13376] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.228426][T17971] netlink: 'syz.7.3976': attribute type 1 has an invalid length. [ 1120.237159][T13376] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.312993][T13376] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1120.325094][T13376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1120.333887][T13376] usb 9-1: SerialNumber: syz [ 1120.379048][T17973] tipc: Enabling of bearer rejected, already enabled [ 1120.412496][T17971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1120.752700][T13376] usb 9-1: 0:2 : does not exist [ 1120.886000][T13376] usb 9-1: USB disconnect, device number 18 [ 1121.052448][T17919] udevd[17919]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.197626][T17983] netlink: 'syz.0.3980': attribute type 1 has an invalid length. [ 1121.827686][T17992] loop8: detected capacity change from 0 to 128 [ 1123.515505][T18010] tipc: Enabling of bearer rejected, already enabled [ 1123.747568][T18013] netlink: 'syz.2.3992': attribute type 1 has an invalid length. [ 1123.967010][T18021] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1124.046604][T18013] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1124.336122][T18023] loop8: detected capacity change from 0 to 512 [ 1124.427214][T18023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.538394][T18027] netlink: 'syz.0.3997': attribute type 1 has an invalid length. [ 1125.231385][T10463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.352939][T18052] netlink: 'syz.8.4006': attribute type 1 has an invalid length. [ 1126.426387][T18055] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4006'. [ 1126.548005][T18050] tipc: Enabling of bearer rejected, failed to enable media [ 1126.634726][T18060] lo: Caught tx_queue_len zero misconfig [ 1126.745566][T18052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1127.708212][T18072] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 1128.875018][T18092] tipc: Enabling of bearer rejected, failed to enable media [ 1129.574528][T18104] netlink: 'syz.8.4022': attribute type 1 has an invalid length. [ 1129.793420][T18108] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4022'. [ 1130.008563][T18112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1130.326497][T18115] netlink: 'syz.0.4028': attribute type 1 has an invalid length. [ 1130.518257][T18120] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1131.752909][T18139] tipc: Enabling of bearer rejected, already enabled [ 1131.790550][T18139] netem: change failed [ 1132.598245][T18147] netlink: 'syz.2.4041': attribute type 1 has an invalid length. [ 1132.666795][T18151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4041'. [ 1132.883997][T18158] netlink: 'syz.6.4043': attribute type 1 has an invalid length. [ 1133.375364][T18159] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1133.586413][T18154] lo speed is unknown, defaulting to 1000 [ 1133.677101][T18154] lo speed is unknown, defaulting to 1000 [ 1133.718306][T18154] lo speed is unknown, defaulting to 1000 [ 1134.763855][T18174] lo speed is unknown, defaulting to 1000 [ 1134.796663][T18174] lo speed is unknown, defaulting to 1000 [ 1134.805363][T18174] lo speed is unknown, defaulting to 1000 [ 1135.040353][ T5788] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1135.742437][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4054'. [ 1136.325372][T18198] netlink: 'syz.2.4056': attribute type 1 has an invalid length. [ 1136.384246][T18199] netlink: 'syz.8.4057': attribute type 1 has an invalid length. [ 1136.431920][T18203] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4056'. [ 1136.628189][T18208] sctp: [Deprecated]: syz.7.4059 (pid 18208) Use of int in maxseg socket option. [ 1136.628189][T18208] Use struct sctp_assoc_value instead [ 1136.659784][T18204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1136.672531][T18206] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1137.781484][T18215] lo speed is unknown, defaulting to 1000 [ 1137.837575][T18215] lo speed is unknown, defaulting to 1000 [ 1137.900767][T18215] lo speed is unknown, defaulting to 1000 [ 1138.278204][T18227] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1138.351012][T18226] tipc: Enabling of bearer rejected, already enabled [ 1138.362984][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1139.137922][T18240] netlink: 'syz.0.4072': attribute type 1 has an invalid length. [ 1139.262883][T18241] sctp: [Deprecated]: syz.6.4071 (pid 18241) Use of int in maxseg socket option. [ 1139.262883][T18241] Use struct sctp_assoc_value instead [ 1139.367901][T18240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1140.057372][T18255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1141.067464][T18265] Invalid ELF header magic: != ELF [ 1141.526744][T18271] netlink: 'syz.6.4085': attribute type 1 has an invalid length. [ 1141.860339][T18271] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1141.909557][T18279] sctp: [Deprecated]: syz.2.4087 (pid 18279) Use of int in maxseg socket option. [ 1141.909557][T18279] Use struct sctp_assoc_value instead [ 1142.122978][T18276] lo speed is unknown, defaulting to 1000 [ 1142.158805][T18276] lo speed is unknown, defaulting to 1000 [ 1142.207272][T18276] lo speed is unknown, defaulting to 1000 [ 1143.270697][T18286] lo speed is unknown, defaulting to 1000 [ 1143.328492][T18286] lo speed is unknown, defaulting to 1000 [ 1143.347830][T18286] lo speed is unknown, defaulting to 1000 [ 1145.371785][T18321] netlink: 'syz.2.4099': attribute type 1 has an invalid length. [ 1145.714033][T18323] sctp: [Deprecated]: syz.7.4100 (pid 18323) Use of int in maxseg socket option. [ 1145.714033][T18323] Use struct sctp_assoc_value instead [ 1146.016434][T18326] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1146.074619][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.086534][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1147.069988][T18343] lo speed is unknown, defaulting to 1000 [ 1147.095202][T18343] lo speed is unknown, defaulting to 1000 [ 1147.124244][T18343] lo speed is unknown, defaulting to 1000 [ 1147.793509][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4109'. [ 1149.186207][T18374] netlink: 'syz.7.4115': attribute type 1 has an invalid length. [ 1149.235429][T18372] sctp: [Deprecated]: syz.0.4113 (pid 18372) Use of int in maxseg socket option. [ 1149.235429][T18372] Use struct sctp_assoc_value instead [ 1149.772353][T18378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1150.272965][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4119'. [ 1151.315114][T18399] tipc: Enabling of bearer rejected, failed to enable media [ 1151.974811][T18405] sctp: [Deprecated]: syz.2.4128 (pid 18405) Use of int in maxseg socket option. [ 1151.974811][T18405] Use struct sctp_assoc_value instead [ 1152.735093][T18416] netlink: 'syz.2.4131': attribute type 1 has an invalid length. [ 1153.376265][T18428] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1155.916405][T18450] sctp: [Deprecated]: syz.2.4141 (pid 18450) Use of int in maxseg socket option. [ 1155.916405][T18450] Use struct sctp_assoc_value instead [ 1156.131333][T18454] tipc: Enabling of bearer rejected, failed to enable media [ 1156.812418][T18459] netlink: 'syz.2.4145': attribute type 1 has an invalid length. [ 1157.140812][T18467] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1157.948115][T18480] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4148'. [ 1160.795501][T18505] tipc: Enabling of bearer rejected, already enabled [ 1166.720288][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4183'. [ 1166.774537][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4183'. [ 1168.816425][T18583] lo speed is unknown, defaulting to 1000 [ 1168.847109][T18583] lo speed is unknown, defaulting to 1000 [ 1168.867880][T18583] lo speed is unknown, defaulting to 1000 [ 1173.268649][T18634] tipc: Enabling of bearer rejected, already enabled [ 1173.317425][T18634] netem: change failed [ 1175.056350][T18653] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4212'. [ 1176.628436][T18658] lo speed is unknown, defaulting to 1000 [ 1176.646885][T18658] lo speed is unknown, defaulting to 1000 [ 1176.756597][T18658] lo speed is unknown, defaulting to 1000 [ 1177.225894][T18676] tipc: Enabling of bearer rejected, already enabled [ 1177.287341][T18678] netem: change failed [ 1177.785222][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4221'. [ 1180.875895][T18714] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4237'. [ 1181.214436][T18716] lo speed is unknown, defaulting to 1000 [ 1181.255293][T18716] lo speed is unknown, defaulting to 1000 [ 1181.308395][T18716] lo speed is unknown, defaulting to 1000 [ 1181.687313][T18723] netlink: 'syz.6.4239': attribute type 15 has an invalid length. [ 1182.373289][T18730] sctp: [Deprecated]: syz.2.4242 (pid 18730) Use of int in maxseg socket option. [ 1182.373289][T18730] Use struct sctp_assoc_value instead [ 1183.916346][ T30] audit: type=1326 audit(2000000642.105:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18745 comm="syz.2.4248" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 1184.287026][T18748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4250'. [ 1185.192288][T18761] sctp: [Deprecated]: syz.7.4256 (pid 18761) Use of int in maxseg socket option. [ 1185.192288][T18761] Use struct sctp_assoc_value instead [ 1186.916993][T18782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1190.222156][T18817] tipc: Enabling of bearer rejected, already enabled [ 1190.296798][T18817] netem: change failed [ 1193.928658][T18858] tipc: Enabling of bearer rejected, failed to enable media [ 1195.446181][T18878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4307'. [ 1196.157418][T18891] tipc: Enabling of bearer rejected, already enabled [ 1197.201678][T18903] lo speed is unknown, defaulting to 1000 [ 1197.248722][T18903] lo speed is unknown, defaulting to 1000 [ 1197.258725][T18903] lo speed is unknown, defaulting to 1000 [ 1198.114089][T18919] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4322'. [ 1199.212078][T18935] tipc: Enabling of bearer rejected, already enabled [ 1200.128158][T18949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1200.435233][T18946] lo speed is unknown, defaulting to 1000 [ 1200.508150][T18946] lo speed is unknown, defaulting to 1000 [ 1200.553095][T18946] lo speed is unknown, defaulting to 1000 [ 1200.781401][T18955] netlink: 'syz.8.4338': attribute type 2 has an invalid length. [ 1201.470774][T18967] tipc: Enabling of bearer rejected, already enabled [ 1202.347300][T18976] tipc: Enabling of bearer rejected, already enabled [ 1202.544514][T18978] netlink: 'syz.2.4347': attribute type 102 has an invalid length. [ 1202.557866][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4347'. [ 1202.643198][T18980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4348'. [ 1202.862239][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1202.897387][T18982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1204.082341][T18991] lo speed is unknown, defaulting to 1000 [ 1204.206785][T18991] lo speed is unknown, defaulting to 1000 [ 1204.271322][T18991] lo speed is unknown, defaulting to 1000 [ 1204.588276][T19006] netlink: 'syz.2.4361': attribute type 1 has an invalid length. [ 1204.795341][T19008] tipc: Enabling of bearer rejected, failed to enable media [ 1205.018119][T19015] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1205.786426][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4365'. [ 1205.834398][T19024] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4365'. [ 1206.671516][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4370'. [ 1206.696152][T19037] ip6gre1: entered promiscuous mode [ 1206.701673][T19037] ip6gre1: entered allmulticast mode [ 1206.740522][ T6591] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1206.748782][ T6591] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1206.760655][T13390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1207.037174][T19042] ip6gre0: Caught tx_queue_len zero misconfig [ 1207.054592][T19043] tipc: Enabling of bearer rejected, already enabled [ 1207.139965][T13390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1207.252763][T19047] 9p: Bad value for 'rfdno' [ 1207.327959][T19048] netlink: 'syz.8.4377': attribute type 1 has an invalid length. [ 1207.522508][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.529101][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.640064][T13390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1207.858212][T19051] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1207.896846][T19055] tipc: Enabling of bearer rejected, failed to enable media [ 1207.907248][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4380'. [ 1207.957092][T19058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4380'. [ 1209.314417][ T30] audit: type=1800 audit(2000000667.495:1044): pid=19074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4385" name="file1" dev="tmpfs" ino=2937 res=0 errno=0 [ 1210.344297][T19088] netlink: 'syz.8.4393': attribute type 1 has an invalid length. [ 1210.465537][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4393'. [ 1210.485577][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4394'. [ 1210.550725][T19098] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4394'. [ 1210.760821][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1210.782187][T19095] tipc: Enabling of bearer rejected, already enabled [ 1210.798965][T19096] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1211.443480][T19107] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 1212.015339][T19112] lo speed is unknown, defaulting to 1000 [ 1212.048793][T19112] lo speed is unknown, defaulting to 1000 [ 1212.069937][T19112] lo speed is unknown, defaulting to 1000 [ 1212.267114][ T30] audit: type=1800 audit(2000000670.455:1045): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4403" name="file1" dev="tmpfs" ino=2959 res=0 errno=0 [ 1213.134025][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4407'. [ 1213.204938][T19136] tipc: Enabling of bearer rejected, already enabled [ 1213.226232][T19139] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4407'. [ 1213.833935][T19144] netlink: 'syz.6.4409': attribute type 1 has an invalid length. [ 1213.936499][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4409'. [ 1214.054185][ T30] audit: type=1326 audit(2000000672.245:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19150 comm="syz.0.4413" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 1214.270433][T19148] tipc: Enabling of bearer rejected, already enabled [ 1214.290530][T19152] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1215.705224][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4421'. [ 1215.755173][T19173] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4421'. [ 1216.998085][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 1217.246595][T19192] netlink: 'syz.2.4429': attribute type 1 has an invalid length. [ 1217.347796][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1217.510903][T19192] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1218.035373][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4434'. [ 1218.071103][T19203] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4434'. [ 1218.999845][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1219.975090][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4441'. [ 1219.997970][T19230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1220.798635][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4446'. [ 1220.847903][T19236] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4446'. [ 1220.986392][T19237] netlink: 'syz.8.4445': attribute type 1 has an invalid length. [ 1221.502275][T19242] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1221.701542][T19243] lo speed is unknown, defaulting to 1000 [ 1221.724733][T19243] lo speed is unknown, defaulting to 1000 [ 1221.738991][T19243] lo speed is unknown, defaulting to 1000 [ 1222.657296][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4455'. [ 1223.343431][T19265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1223.804464][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4459'. [ 1224.108583][T19276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4460'. [ 1224.172048][T19276] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4460'. [ 1224.951453][T19288] 9p: Bad value for 'wfdno' [ 1224.993592][T19289] netlink: 'syz.6.4465': attribute type 1 has an invalid length. [ 1225.294839][T19291] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1225.374122][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1226.411976][T19305] lo speed is unknown, defaulting to 1000 [ 1226.446592][T19305] lo speed is unknown, defaulting to 1000 [ 1226.468851][T19305] lo speed is unknown, defaulting to 1000 [ 1226.540993][T19315] netlink: 'syz.8.4476': attribute type 1 has an invalid length. [ 1226.714824][T19320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4477'. [ 1226.988231][T19319] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1228.106577][ T30] audit: type=1326 audit(2000000686.285:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19332 comm="syz.0.4492" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 1228.301270][T19329] lo speed is unknown, defaulting to 1000 [ 1228.347720][T19329] lo speed is unknown, defaulting to 1000 [ 1228.374086][T19329] lo speed is unknown, defaulting to 1000 [ 1228.694776][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1229.316474][T19347] netlink: 'syz.2.4485': attribute type 1 has an invalid length. [ 1229.747792][T19349] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1229.954983][T19356] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4488'. [ 1230.289027][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4490'. [ 1230.427916][T19364] netlink: 'syz.0.4491': attribute type 1 has an invalid length. [ 1231.635925][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4497'. [ 1232.247598][T19388] netlink: 'syz.2.4501': attribute type 1 has an invalid length. [ 1232.357927][T19392] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1232.998471][T19396] netlink: 'syz.7.4504': attribute type 14 has an invalid length. [ 1233.272631][T19400] netlink: 'syz.2.4506': attribute type 1 has an invalid length. [ 1233.608368][T19398] lo speed is unknown, defaulting to 1000 [ 1233.675083][T19398] lo speed is unknown, defaulting to 1000 [ 1233.744233][T19398] lo speed is unknown, defaulting to 1000 [ 1235.054193][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4512'. [ 1235.639800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1236.965906][T19452] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4523'. [ 1237.830362][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4527'. [ 1238.276475][T19464] lo speed is unknown, defaulting to 1000 [ 1238.332262][T19464] lo speed is unknown, defaulting to 1000 [ 1238.373035][T19464] lo speed is unknown, defaulting to 1000 [ 1239.734728][T19484] lo speed is unknown, defaulting to 1000 [ 1239.825210][T19484] lo speed is unknown, defaulting to 1000 [ 1239.888430][T19484] lo speed is unknown, defaulting to 1000 [ 1242.394323][T19523] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4552'. [ 1243.234555][T19530] netlink: 'syz.7.4554': attribute type 1 has an invalid length. [ 1243.352697][T19529] sctp: [Deprecated]: syz.2.4553 (pid 19529) Use of int in maxseg socket option. [ 1243.352697][T19529] Use struct sctp_assoc_value instead [ 1244.526620][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1245.988358][T19568] tipc: Enabling of bearer rejected, already enabled [ 1246.015458][T19570] netlink: 'syz.6.4570': attribute type 1 has an invalid length. [ 1247.507299][T19595] tipc: Enabling of bearer rejected, failed to enable media [ 1248.748106][T19608] tipc: Enabling of bearer rejected, already enabled [ 1248.797491][T19608] netem: change failed [ 1250.196787][T19626] sctp: [Deprecated]: syz.7.4589 (pid 19626) Use of int in maxseg socket option. [ 1250.196787][T19626] Use struct sctp_assoc_value instead [ 1251.015533][T19631] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1251.058628][T13375] lo speed is unknown, defaulting to 1000 [ 1251.126436][T19637] tipc: Enabling of bearer rejected, failed to enable media [ 1253.557437][T19672] lo speed is unknown, defaulting to 1000 [ 1253.662775][T19672] lo speed is unknown, defaulting to 1000 [ 1253.697056][T19672] lo speed is unknown, defaulting to 1000 [ 1256.976899][T19723] lo speed is unknown, defaulting to 1000 [ 1257.017273][T19723] lo speed is unknown, defaulting to 1000 [ 1257.065973][T19723] lo speed is unknown, defaulting to 1000 [ 1259.180459][T19746] tipc: Enabling of bearer rejected, already enabled [ 1259.218942][T19747] netem: change failed [ 1259.840409][T19755] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4642'. [ 1261.181773][T19763] udevd[19763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1261.270051][T19725] udevd[19725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1262.356269][T19789] netlink: 'syz.0.4654': attribute type 4 has an invalid length. [ 1264.984443][ T30] audit: type=1326 audit(2000000723.165:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.007196][ T30] audit: type=1326 audit(2000000723.175:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.170798][ T30] audit: type=1326 audit(2000000723.175:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.196520][ T30] audit: type=1326 audit(2000000723.175:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.219793][ T30] audit: type=1326 audit(2000000723.175:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.245013][ T30] audit: type=1326 audit(2000000723.175:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.267685][ T30] audit: type=1326 audit(2000000723.175:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.293258][ T30] audit: type=1326 audit(2000000723.175:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1265.908242][T19839] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1266.386176][T19836] lo speed is unknown, defaulting to 1000 [ 1266.534491][T19836] lo speed is unknown, defaulting to 1000 [ 1266.562061][T19836] lo speed is unknown, defaulting to 1000 [ 1266.999942][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1267.966905][ T30] audit: type=1800 audit(2000000726.155:1056): pid=19865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4680" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1269.012929][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.019684][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.236096][T19907] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4694'. [ 1271.446824][T19901] lo speed is unknown, defaulting to 1000 [ 1271.532795][T19901] lo speed is unknown, defaulting to 1000 [ 1271.628541][T19901] lo speed is unknown, defaulting to 1000 [ 1272.827929][T19924] sctp: [Deprecated]: syz.0.4700 (pid 19924) Use of int in maxseg socket option. [ 1272.827929][T19924] Use struct sctp_assoc_value instead [ 1274.847825][T19943] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1274.931491][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1275.653251][T19954] sctp: [Deprecated]: syz.7.4712 (pid 19954) Use of int in maxseg socket option. [ 1275.653251][T19954] Use struct sctp_assoc_value instead [ 1276.537452][T19966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4714'. [ 1278.648703][T19988] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1281.055060][T20013] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1284.003612][ T30] audit: type=1800 audit(2000000742.185:1057): pid=20055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4749" name="nullb0" dev="tmpfs" ino=2880 res=0 errno=0 [ 1284.337108][T20060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4752'. [ 1285.745340][T20076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1286.792964][T20090] overlayfs: failed to clone upperpath [ 1287.831407][T20095] debugfs: Invalid uid '0x00000000ffffffff' [ 1292.332132][T20172] netlink: 'syz.2.4796': attribute type 1 has an invalid length. [ 1292.398456][T20175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4796'. [ 1292.586063][T20178] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1294.169850][T20195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4804'. [ 1295.538737][T20215] netlink: 'syz.2.4812': attribute type 1 has an invalid length. [ 1296.296959][T20229] overlayfs: failed to clone upperpath [ 1296.337203][T20229] 9pnet_fd: p9_fd_create_unix (20229): problem connecting socket: ./file0/file1: -2 [ 1296.727104][T20235] overlayfs: failed to clone upperpath [ 1297.501764][T20248] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1298.014141][T20257] netlink: 'syz.7.4829': attribute type 1 has an invalid length. [ 1298.126466][T20261] netlink: 3900 bytes leftover after parsing attributes in process `syz.8.4830'. [ 1299.230819][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1300.633926][T20294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4842'. [ 1300.782313][ T30] audit: type=1326 audit(2000000758.975:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20291 comm="syz.7.4843" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36539 code=0x0 [ 1301.186915][T20301] netlink: 'syz.0.4845': attribute type 9 has an invalid length. [ 1301.267257][T20306] netlink: 'syz.0.4845': attribute type 9 has an invalid length. [ 1301.348311][T20305] netlink: 'syz.6.4844': attribute type 1 has an invalid length. [ 1306.132577][ T30] audit: type=1800 audit(2000000764.305:1059): pid=20358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4865" name="file1" dev="tmpfs" ino=5694 res=0 errno=0 [ 1311.028815][T20425] overlayfs: failed to clone upperpath [ 1311.073090][T20421] lo speed is unknown, defaulting to 1000 [ 1311.143231][T20421] lo speed is unknown, defaulting to 1000 [ 1311.197244][T20421] lo speed is unknown, defaulting to 1000 [ 1314.916981][T20468] vlan1: entered promiscuous mode [ 1314.936418][T20467] vlan1: left promiscuous mode [ 1315.947299][T20476] lo speed is unknown, defaulting to 1000 [ 1315.982051][T20476] lo speed is unknown, defaulting to 1000 [ 1316.016694][T20476] lo speed is unknown, defaulting to 1000 [ 1318.201339][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4923'. [ 1319.005697][T20506] 9p: Bad value for 'rfdno' [ 1319.865985][T20517] netlink: 'syz.6.4932': attribute type 1 has an invalid length. [ 1321.163780][T20524] lo speed is unknown, defaulting to 1000 [ 1321.181947][T20524] lo speed is unknown, defaulting to 1000 [ 1321.194020][T20524] lo speed is unknown, defaulting to 1000 [ 1322.622854][T20550] netlink: 'syz.0.4944': attribute type 1 has an invalid length. [ 1324.037102][ T30] audit: type=1326 audit(2000000782.215:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20556 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 1324.534127][T20569] lo speed is unknown, defaulting to 1000 [ 1324.589562][T20569] lo speed is unknown, defaulting to 1000 [ 1324.615637][T20569] lo speed is unknown, defaulting to 1000 [ 1327.740330][T20619] netlink: 'syz.7.4971': attribute type 1 has an invalid length. [ 1328.260728][T20630] gretap0: entered promiscuous mode [ 1328.581704][T20628] lo speed is unknown, defaulting to 1000 [ 1328.597352][T20628] lo speed is unknown, defaulting to 1000 [ 1328.609875][T20628] lo speed is unknown, defaulting to 1000 [ 1329.684485][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4982'. [ 1330.383920][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1330.390505][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'. [ 1330.400525][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.400759][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.424047][T20660] netlink: 'syz.7.4986': attribute type 1 has an invalid length. [ 1330.923665][T20661] lo speed is unknown, defaulting to 1000 [ 1331.033840][T20661] lo speed is unknown, defaulting to 1000 [ 1331.058243][T20661] lo speed is unknown, defaulting to 1000 [ 1332.596841][T20685] overlayfs: failed to clone upperpath [ 1333.501860][ T30] audit: type=1326 audit(2000000791.665:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20693 comm="syz.0.5000" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 1333.701979][T20697] netlink: 'syz.7.5001': attribute type 1 has an invalid length. [ 1336.066807][T20723] lo speed is unknown, defaulting to 1000 [ 1336.106913][T20723] lo speed is unknown, defaulting to 1000 [ 1336.150715][T20723] lo speed is unknown, defaulting to 1000 [ 1337.538101][T20738] netlink: 'syz.7.5015': attribute type 1 has an invalid length. [ 1341.001751][T20782] netlink: 'syz.2.5029': attribute type 1 has an invalid length. [ 1341.252029][ T5788] Bluetooth: hci4: ISO packet too small [ 1343.715755][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1344.574200][T20831] bridge0: port 1(wlan1) entered blocking state [ 1344.581053][T20831] bridge0: port 1(wlan1) entered disabled state [ 1344.637791][T20831] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 1345.366855][T20836] lo speed is unknown, defaulting to 1000 [ 1345.376912][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5051'. [ 1345.410568][T20836] lo speed is unknown, defaulting to 1000 [ 1345.454993][T20836] lo speed is unknown, defaulting to 1000 [ 1345.802399][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5051'. [ 1347.187957][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5057'. [ 1347.297406][T20864] overlayfs: failed to clone upperpath [ 1347.566155][T20867] overlayfs: failed to clone upperpath [ 1349.444829][T20891] lo speed is unknown, defaulting to 1000 [ 1349.462269][T20891] lo speed is unknown, defaulting to 1000 [ 1349.492671][T20891] lo speed is unknown, defaulting to 1000 [ 1354.206427][T20953] overlayfs: failed to resolve './file0': -2 [ 1354.367441][T20943] lo speed is unknown, defaulting to 1000 [ 1354.505623][T20943] lo speed is unknown, defaulting to 1000 [ 1354.577184][T20943] lo speed is unknown, defaulting to 1000 [ 1357.058441][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1359.932638][T21018] lo speed is unknown, defaulting to 1000 [ 1360.008534][T21018] lo speed is unknown, defaulting to 1000 [ 1360.066343][T21018] lo speed is unknown, defaulting to 1000 [ 1360.232144][T21032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5123'. [ 1360.241576][T21032] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5123'. [ 1360.348753][T21032] macvlan0: entered allmulticast mode [ 1360.364069][T21032] veth1_vlan: entered allmulticast mode [ 1361.042780][T21044] netlink: 'syz.2.5126': attribute type 1 has an invalid length. [ 1362.956042][T21064] overlayfs: failed to clone upperpath [ 1363.957341][T21079] lo speed is unknown, defaulting to 1000 [ 1363.984576][T21084] netlink: 'syz.6.5141': attribute type 1 has an invalid length. [ 1363.986009][T21079] lo speed is unknown, defaulting to 1000 [ 1364.307014][T21089] overlayfs: failed to clone upperpath [ 1364.384663][T21079] lo speed is unknown, defaulting to 1000 [ 1364.784394][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5144'. [ 1366.024589][ T30] audit: type=1800 audit(2000000824.205:1062): pid=21102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5147" name="memory.events" dev="tmpfs" ino=3815 res=0 errno=0 [ 1367.218916][T21116] overlayfs: failed to resolve './file0': -2 [ 1367.806766][T21122] netlink: 'syz.6.5156': attribute type 1 has an invalid length. [ 1369.211632][T21141] lo speed is unknown, defaulting to 1000 [ 1369.265580][T21141] lo speed is unknown, defaulting to 1000 [ 1369.310269][T21141] lo speed is unknown, defaulting to 1000 [ 1369.896373][T21157] 9p: Bad value for 'rfdno' [ 1371.015398][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5172'. [ 1372.771117][T21193] lo speed is unknown, defaulting to 1000 [ 1372.788361][T21193] lo speed is unknown, defaulting to 1000 [ 1372.807021][T21193] lo speed is unknown, defaulting to 1000 [ 1375.355334][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5201'. [ 1378.836112][T21312] lo speed is unknown, defaulting to 1000 [ 1378.868862][T21312] lo speed is unknown, defaulting to 1000 [ 1378.884621][T21312] lo speed is unknown, defaulting to 1000 [ 1379.747188][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5213'. [ 1380.754693][T21342] sctp: [Deprecated]: syz.0.5218 (pid 21342) Use of int in maxseg socket option. [ 1380.754693][T21342] Use struct sctp_assoc_value instead [ 1380.847954][T21340] lo speed is unknown, defaulting to 1000 [ 1381.015940][T21340] lo speed is unknown, defaulting to 1000 [ 1381.037958][T21340] lo speed is unknown, defaulting to 1000 [ 1382.724529][T21371] lo speed is unknown, defaulting to 1000 [ 1382.744033][T21371] lo speed is unknown, defaulting to 1000 [ 1382.756272][T21371] lo speed is unknown, defaulting to 1000 [ 1383.660010][T21384] sctp: [Deprecated]: syz.0.5232 (pid 21384) Use of int in maxseg socket option. [ 1383.660010][T21384] Use struct sctp_assoc_value instead [ 1385.101769][T21407] lo speed is unknown, defaulting to 1000 [ 1385.154537][T21407] lo speed is unknown, defaulting to 1000 [ 1385.194679][T21407] lo speed is unknown, defaulting to 1000 [ 1385.288893][T21413] overlayfs: failed to clone upperpath [ 1386.227858][T21422] lo speed is unknown, defaulting to 1000 [ 1386.275976][T21422] lo speed is unknown, defaulting to 1000 [ 1386.308581][T21422] lo speed is unknown, defaulting to 1000 [ 1386.835826][T21437] sctp: [Deprecated]: syz.0.5249 (pid 21437) Use of int in maxseg socket option. [ 1386.835826][T21437] Use struct sctp_assoc_value instead [ 1388.479990][T21459] lo speed is unknown, defaulting to 1000 [ 1388.506103][T21459] lo speed is unknown, defaulting to 1000 [ 1388.515765][T21459] lo speed is unknown, defaulting to 1000 [ 1389.143087][T21467] lo speed is unknown, defaulting to 1000 [ 1389.210621][T21467] lo speed is unknown, defaulting to 1000 [ 1389.253811][T21467] lo speed is unknown, defaulting to 1000 [ 1389.341697][T21477] sctp: [Deprecated]: syz.7.5265 (pid 21477) Use of int in maxseg socket option. [ 1389.341697][T21477] Use struct sctp_assoc_value instead [ 1389.764434][T21482] netlink: 'syz.8.5266': attribute type 4 has an invalid length. [ 1391.695864][T21504] netlink: 'syz.0.5275': attribute type 3 has an invalid length. [ 1391.755241][T21500] lo speed is unknown, defaulting to 1000 [ 1391.788211][T21500] lo speed is unknown, defaulting to 1000 [ 1391.819777][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.826577][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.874168][T21500] lo speed is unknown, defaulting to 1000 [ 1392.087650][T21510] sctp: [Deprecated]: syz.8.5278 (pid 21510) Use of int in maxseg socket option. [ 1392.087650][T21510] Use struct sctp_assoc_value instead [ 1392.349026][T21508] lo speed is unknown, defaulting to 1000 [ 1392.421627][T21508] lo speed is unknown, defaulting to 1000 [ 1392.452787][T21508] lo speed is unknown, defaulting to 1000 [ 1394.738163][T21545] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5290'. [ 1395.902245][T21550] lo speed is unknown, defaulting to 1000 [ 1395.957695][T21550] lo speed is unknown, defaulting to 1000 [ 1396.046794][T21550] lo speed is unknown, defaulting to 1000 [ 1396.245157][ T5788] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 1396.256850][ T5788] Bluetooth: hci4: Invalid handle: 0xe600 > 0x0eff [ 1396.268065][ T5788] Bluetooth: hci4: hcon ffff88802d86b000 sent 1 < count 511 [ 1397.335156][T21564] lo speed is unknown, defaulting to 1000 [ 1397.418776][T21564] lo speed is unknown, defaulting to 1000 [ 1397.488008][T21564] lo speed is unknown, defaulting to 1000 [ 1398.349818][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5304'. [ 1401.132766][T21612] lo speed is unknown, defaulting to 1000 [ 1401.175267][T21612] lo speed is unknown, defaulting to 1000 [ 1401.182911][T21613] lo speed is unknown, defaulting to 1000 [ 1401.242623][T21613] lo speed is unknown, defaulting to 1000 [ 1401.272253][T21612] lo speed is unknown, defaulting to 1000 [ 1401.288977][T21613] lo speed is unknown, defaulting to 1000 [ 1403.585819][T21638] sctp: [Deprecated]: syz.8.5328 (pid 21638) Use of int in maxseg socket option. [ 1403.585819][T21638] Use struct sctp_assoc_value instead [ 1405.193407][T21664] overlayfs: failed to clone upperpath [ 1405.335999][T21657] lo speed is unknown, defaulting to 1000 [ 1405.363428][T21657] lo speed is unknown, defaulting to 1000 [ 1405.407169][T21657] lo speed is unknown, defaulting to 1000 [ 1406.341989][T21667] lo speed is unknown, defaulting to 1000 [ 1406.431779][T21667] lo speed is unknown, defaulting to 1000 [ 1406.491516][T21667] lo speed is unknown, defaulting to 1000 [ 1406.816586][T21679] sctp: [Deprecated]: syz.7.5342 (pid 21679) Use of int in maxseg socket option. [ 1406.816586][T21679] Use struct sctp_assoc_value instead [ 1406.947080][T21674] lo speed is unknown, defaulting to 1000 [ 1407.311555][T21674] lo speed is unknown, defaulting to 1000 [ 1407.365031][T21674] lo speed is unknown, defaulting to 1000 [ 1408.397947][T21562] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1408.408554][T21562] CPU: 0 UID: 0 PID: 21562 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1408.408714][T21562] Tainted: [L]=SOFTLOCKUP [ 1408.408760][T21562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1408.408857][T21562] Workqueue: hci3 hci_rx_work [ 1408.409196][T21562] Call Trace: [ 1408.409247][T21562] [ 1408.409293][T21562] __dump_stack+0x26/0x30 [ 1408.409623][T21562] dump_stack_lvl+0x14c/0x1c0 [ 1408.409776][T21562] dump_stack+0x1e/0x25 [ 1408.409910][T21562] sysfs_create_dir_ns+0x46c/0x540 [ 1408.410231][T21562] kobject_add_internal+0x1084/0x19b0 [ 1408.410541][T21562] kobject_add+0x2c1/0x410 [ 1408.410736][T21562] ? kmsan_get_metadata+0xf1/0x160 [ 1408.411003][T21562] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1408.411192][T21562] device_add+0xa70/0x1c00 [ 1408.411542][T21562] hci_conn_add_sysfs+0x159/0x2e0 [ 1408.411769][T21562] le_conn_complete_evt+0x1d0a/0x2250 [ 1408.412019][T21562] hci_le_conn_complete_evt+0x157/0x260 [ 1408.412186][T21562] hci_le_meta_evt+0x6eb/0x960 [ 1408.412424][T21562] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1408.412592][T21562] hci_event_packet+0xce2/0x1e40 [ 1408.412721][T21562] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1408.412898][T21562] hci_rx_work+0x8c3/0xfc0 [ 1408.413022][T21562] ? kmsan_get_metadata+0xf1/0x160 [ 1408.413200][T21562] ? __pfx_hci_rx_work+0x10/0x10 [ 1408.413334][T21562] process_scheduled_works+0xae7/0x1d60 [ 1408.413698][T21562] worker_thread+0x1741/0x1de0 [ 1408.413908][T21562] kthread+0xd5a/0xf00 [ 1408.414065][T21562] ? __pfx_worker_thread+0x10/0x10 [ 1408.414251][T21562] ? __pfx_kthread+0x10/0x10 [ 1408.414374][T21562] ret_from_fork+0x207/0x6f0 [ 1408.414624][T21562] ? __switch_to+0x521/0x750 [ 1408.414814][T21562] ? __pfx_kthread+0x10/0x10 [ 1408.414943][T21562] ret_from_fork_asm+0x1a/0x30 [ 1408.415147][T21562] [ 1408.600931][T21562] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1408.622108][T21562] Bluetooth: hci3: failed to register connection device [ 1409.835478][T21702] overlayfs: failed to clone upperpath [ 1410.472294][T21708] sctp: [Deprecated]: syz.8.5354 (pid 21708) Use of int in maxseg socket option. [ 1410.472294][T21708] Use struct sctp_assoc_value instead [ 1411.593915][T21719] overlayfs: failed to clone upperpath [ 1412.333334][T21738] overlayfs: failed to clone lowerpath [ 1414.573949][T21758] lo speed is unknown, defaulting to 1000 [ 1414.639409][T21758] lo speed is unknown, defaulting to 1000 [ 1414.648092][T21758] lo speed is unknown, defaulting to 1000 [ 1420.224097][T21831] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1420.270671][T21831] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1420.298520][T21830] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1420.306945][T21830] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1423.446289][T21867] overlayfs: failed to clone lowerpath [ 1423.539572][T21867] overlayfs: failed to clone lowerpath [ 1424.173615][T21877] overlayfs: failed to clone lowerpath [ 1425.736857][T21897] siw: device registration error -23 [ 1426.256720][T21902] 9p: Bad value for 'rfdno' [ 1426.516216][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5431'. [ 1426.708572][T21908] macvtap1: entered promiscuous mode [ 1426.719326][T21908] erspan0: entered promiscuous mode [ 1426.730073][T21908] macvtap1: entered allmulticast mode [ 1426.735620][T21908] erspan0: entered allmulticast mode [ 1426.885752][T21909] erspan0: left allmulticast mode [ 1426.891340][T21909] erspan0: left promiscuous mode [ 1429.206778][ T30] audit: type=1326 audit(2000000887.395:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21934 comm="syz.0.5445" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66539 code=0x0 [ 1429.469004][T21947] overlayfs: failed to clone lowerpath [ 1429.526807][T21950] overlayfs: failed to clone lowerpath [ 1429.950045][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5451'. [ 1430.049932][T21957] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 1431.224210][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5459'. [ 1431.886324][T21982] netlink: 'syz.0.5462': attribute type 1 has an invalid length. [ 1432.955534][ T30] audit: type=1800 audit(2000000891.135:1064): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5467" name="file1" dev="tmpfs" ino=4158 res=0 errno=0 [ 1433.318288][T21998] lo speed is unknown, defaulting to 1000 [ 1433.381105][T21998] lo speed is unknown, defaulting to 1000 [ 1433.394923][T21998] lo speed is unknown, defaulting to 1000 [ 1434.878274][T22021] netlink: 'syz.0.5476': attribute type 1 has an invalid length. [ 1434.949752][T22023] overlayfs: failed to clone upperpath [ 1435.525838][T22030] vcan0: tx drop: invalid sa for name 0x0100000000000000 [ 1435.613489][T22029] overlayfs: failed to clone lowerpath [ 1436.279391][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5483'. [ 1436.982908][T22054] overlayfs: failed to clone upperpath [ 1437.457125][T22059] overlayfs: failed to resolve './file0': -2 [ 1437.777273][T22065] netlink: 'syz.0.5491': attribute type 1 has an invalid length. [ 1438.821060][T22074] lo speed is unknown, defaulting to 1000 [ 1438.864919][T22074] lo speed is unknown, defaulting to 1000 [ 1438.963904][T22074] lo speed is unknown, defaulting to 1000 [ 1439.966631][T22093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5502'. [ 1440.702000][T22108] netlink: 'syz.8.5507': attribute type 1 has an invalid length. [ 1442.525420][T22136] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5518'. [ 1443.284354][T22143] netlink: 'syz.2.5521': attribute type 1 has an invalid length. [ 1443.520030][T22147] overlayfs: failed to clone upperpath [ 1445.104420][T22166] netlink: 'syz.0.5529': attribute type 1 has an invalid length. [ 1445.369960][T22165] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1446.095868][T22184] overlayfs: failed to clone upperpath [ 1446.154844][T22186] netlink: 'syz.8.5537': attribute type 1 has an invalid length. [ 1447.181150][T22201] netlink: 'syz.6.5544': attribute type 1 has an invalid length. [ 1447.568898][T22209] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1450.858492][T22247] netlink: 'syz.2.5560': attribute type 1 has an invalid length. [ 1451.315489][T22257] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1451.686906][T22251] lo speed is unknown, defaulting to 1000 [ 1451.748166][T22251] lo speed is unknown, defaulting to 1000 [ 1451.840710][T22251] lo speed is unknown, defaulting to 1000 [ 1452.117583][T22270] overlayfs: failed to clone upperpath [ 1453.282260][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.288865][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1454.070502][T22298] netlink: 'syz.6.5579': attribute type 1 has an invalid length. [ 1454.317089][T22298] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1455.125611][T22308] sctp: [Deprecated]: syz.0.5583 (pid 22308) Use of int in maxseg socket option. [ 1455.125611][T22308] Use struct sctp_assoc_value instead [ 1455.525177][T22312] lo speed is unknown, defaulting to 1000 [ 1455.568199][T22312] lo speed is unknown, defaulting to 1000 [ 1455.594335][T22312] lo speed is unknown, defaulting to 1000 [ 1456.905629][T22335] netlink: 'syz.0.5594': attribute type 1 has an invalid length. [ 1457.477041][T22338] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1458.359811][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1458.372764][T22355] sctp: [Deprecated]: syz.0.5599 (pid 22355) Use of int in maxseg socket option. [ 1458.372764][T22355] Use struct sctp_assoc_value instead [ 1458.565276][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5602'. [ 1458.747059][T22362] overlayfs: failed to clone upperpath [ 1459.261762][T22363] lo speed is unknown, defaulting to 1000 [ 1459.274752][T22363] lo speed is unknown, defaulting to 1000 [ 1459.284197][T22363] lo speed is unknown, defaulting to 1000 [ 1460.048284][T22380] netlink: 'syz.2.5609': attribute type 1 has an invalid length. [ 1460.394046][T22384] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1461.170349][T22388] lo speed is unknown, defaulting to 1000 [ 1461.194607][T22388] lo speed is unknown, defaulting to 1000 [ 1461.230299][T22388] lo speed is unknown, defaulting to 1000 [ 1462.006047][T22399] sctp: [Deprecated]: syz.8.5615 (pid 22399) Use of int in maxseg socket option. [ 1462.006047][T22399] Use struct sctp_assoc_value instead [ 1463.515257][T22423] overlayfs: failed to clone upperpath [ 1463.578464][T22427] netlink: 'syz.7.5624': attribute type 1 has an invalid length. [ 1463.764670][T22430] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1464.431034][T22433] lo speed is unknown, defaulting to 1000 [ 1464.496360][T22433] lo speed is unknown, defaulting to 1000 [ 1464.561941][T22433] lo speed is unknown, defaulting to 1000 [ 1464.696146][T22441] sctp: [Deprecated]: syz.0.5631 (pid 22441) Use of int in maxseg socket option. [ 1464.696146][T22441] Use struct sctp_assoc_value instead [ 1466.170265][T22463] netlink: 'syz.0.5640': attribute type 1 has an invalid length. [ 1466.354508][T22453] lo speed is unknown, defaulting to 1000 [ 1466.392667][T22465] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1466.455311][T22453] lo speed is unknown, defaulting to 1000 [ 1466.483014][T22453] lo speed is unknown, defaulting to 1000 [ 1471.004868][T22505] lo speed is unknown, defaulting to 1000 [ 1471.044750][T22505] lo speed is unknown, defaulting to 1000 [ 1471.098968][T22505] lo speed is unknown, defaulting to 1000 [ 1471.874613][T22514] lo speed is unknown, defaulting to 1000 [ 1472.076402][T22514] lo speed is unknown, defaulting to 1000 [ 1472.122222][T22514] lo speed is unknown, defaulting to 1000 [ 1473.597315][T22533] overlayfs: failed to clone upperpath [ 1473.927157][T22538] overlayfs: failed to clone upperpath [ 1474.147458][T22541] overlayfs: failed to clone upperpath [ 1475.808523][T22561] lo speed is unknown, defaulting to 1000 [ 1475.884259][T22561] lo speed is unknown, defaulting to 1000 [ 1475.898604][T22561] lo speed is unknown, defaulting to 1000 [ 1476.184083][T22568] lo speed is unknown, defaulting to 1000 [ 1476.276659][T22568] lo speed is unknown, defaulting to 1000 [ 1476.296560][T22568] lo speed is unknown, defaulting to 1000 [ 1478.385929][T22598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.215283][T22619] overlayfs: failed to clone upperpath [ 1480.609287][T22618] lo speed is unknown, defaulting to 1000 [ 1480.637872][T22618] lo speed is unknown, defaulting to 1000 [ 1480.675959][T22618] lo speed is unknown, defaulting to 1000 [ 1481.432961][T22624] lo speed is unknown, defaulting to 1000 [ 1481.518640][T22624] lo speed is unknown, defaulting to 1000 [ 1481.572887][T22624] lo speed is unknown, defaulting to 1000 [ 1482.063846][T22643] netlink: 'syz.2.5713': attribute type 1 has an invalid length. [ 1482.311800][T22645] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1484.260004][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5724'. [ 1484.878248][T22676] lo speed is unknown, defaulting to 1000 [ 1484.924132][T22676] lo speed is unknown, defaulting to 1000 [ 1484.945810][T22676] lo speed is unknown, defaulting to 1000 [ 1486.726351][T22739] netlink: 'syz.6.5729': attribute type 1 has an invalid length. [ 1487.511113][T22740] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1489.351555][T22765] lo speed is unknown, defaulting to 1000 [ 1489.363878][T22765] lo speed is unknown, defaulting to 1000 [ 1489.384184][T22765] lo speed is unknown, defaulting to 1000 [ 1490.340491][T22782] netlink: 'syz.6.5743': attribute type 1 has an invalid length. [ 1490.948371][T22783] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1492.147059][T22805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5751'. [ 1492.203238][T22805] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5751'. [ 1492.396055][T22722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1492.404837][T22722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1492.422883][T13376] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1493.010003][T13376] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1493.165596][T13376] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1493.721347][T22822] sctp: [Deprecated]: syz.6.5755 (pid 22822) Use of int in maxseg socket option. [ 1493.721347][T22822] Use struct sctp_assoc_value instead [ 1494.518516][T22830] netlink: 'syz.7.5759': attribute type 1 has an invalid length. [ 1495.007139][T22834] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1496.119896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1496.135690][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5763'. [ 1498.308170][ T30] audit: type=1326 audit(2000000956.495:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.331783][ T30] audit: type=1326 audit(2000000956.495:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.541735][ T30] audit: type=1326 audit(2000000956.605:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.564745][ T30] audit: type=1326 audit(2000000956.605:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.588050][ T30] audit: type=1326 audit(2000000956.605:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.610943][ T30] audit: type=1326 audit(2000000956.645:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.934950][ T30] audit: type=1326 audit(2000000956.735:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.962692][ T30] audit: type=1326 audit(2000000956.735:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1498.991857][ T30] audit: type=1326 audit(2000000956.785:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1499.019504][ T30] audit: type=1326 audit(2000000956.785:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.7.5772" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1501.426649][T22907] netlink: 'syz.6.5787': attribute type 1 has an invalid length. [ 1501.815040][T22910] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1503.800022][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1504.208684][T22943] lo speed is unknown, defaulting to 1000 [ 1504.225590][T22943] lo speed is unknown, defaulting to 1000 [ 1504.266366][T22943] lo speed is unknown, defaulting to 1000 [ 1504.618346][T22953] netlink: 'syz.0.5802': attribute type 1 has an invalid length. [ 1505.465730][T22956] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1506.171556][T22969] netlink: 'syz.6.5806': attribute type 10 has an invalid length. [ 1506.425716][T22969] team0: Failed to send options change via netlink (err -105) [ 1506.433701][T22969] team0: Port device dummy0 added [ 1507.317457][T22981] overlayfs: failed to clone upperpath [ 1508.222269][T22993] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1508.257223][T22995] overlayfs: failed to clone upperpath [ 1509.409535][T23011] overlayfs: failed to clone upperpath [ 1514.724116][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.731399][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1517.879910][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1519.774347][T23114] 9p: Bad value for 'rfdno' [ 1519.790105][T23118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5860'. [ 1519.847570][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5860'. [ 1520.609966][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5864'. [ 1522.375428][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1523.628956][T23173] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5880'. [ 1524.596981][T23190] bridge0: left allmulticast mode [ 1528.263881][T23257] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5911'. [ 1528.273962][T23257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5911'. [ 1528.484446][T23256] lo speed is unknown, defaulting to 1000 [ 1528.524607][T23256] lo speed is unknown, defaulting to 1000 [ 1528.538513][T23256] lo speed is unknown, defaulting to 1000 [ 1529.236005][T23271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5916'. [ 1529.327708][T23271] bond0: (slave syz_tun): Releasing backup interface [ 1530.263230][T23283] overlayfs: failed to clone upperpath [ 1530.852626][T23288] overlayfs: failed to clone upperpath [ 1531.703120][T23298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.848298][T23300] erspan0: entered promiscuous mode [ 1531.854916][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5929'. [ 1532.609051][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5934'. [ 1533.872976][T23331] sctp: [Deprecated]: syz.0.5938 (pid 23331) Use of int in maxseg socket option. [ 1533.872976][T23331] Use struct sctp_assoc_value instead [ 1536.065203][T23364] sctp: [Deprecated]: syz.8.5952 (pid 23364) Use of int in maxseg socket option. [ 1536.065203][T23364] Use struct sctp_assoc_value instead [ 1536.093871][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 1536.998839][T23386] syz_tun: entered allmulticast mode [ 1537.558916][T23392] netlink: 'syz.8.5961': attribute type 4 has an invalid length. [ 1538.272498][T23402] sctp: [Deprecated]: syz.8.5965 (pid 23402) Use of int in maxseg socket option. [ 1538.272498][T23402] Use struct sctp_assoc_value instead [ 1538.412384][T23407] overlayfs: failed to clone upperpath [ 1539.380892][T23426] tipc: Enabling of bearer rejected, already enabled [ 1539.865290][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5976'. [ 1539.977596][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5976'. [ 1539.994946][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5976'. [ 1540.335927][T23442] sctp: [Deprecated]: syz.0.5980 (pid 23442) Use of int in maxseg socket option. [ 1540.335927][T23442] Use struct sctp_assoc_value instead [ 1540.888412][T23449] netlink: 'syz.6.5983': attribute type 83 has an invalid length. [ 1541.357060][T23458] netlink: 'syz.0.5987': attribute type 1 has an invalid length. [ 1541.577429][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1541.591621][T23462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1541.731703][T23458] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1542.577639][T23480] sctp: [Deprecated]: syz.8.5992 (pid 23480) Use of int in maxseg socket option. [ 1542.577639][T23480] Use struct sctp_assoc_value instead [ 1542.956634][T23486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5996'. [ 1544.028325][T23502] tipc: Resetting bearer [ 1544.296462][T22731] tipc: Resetting bearer [ 1544.797361][T23513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6007'. [ 1544.828001][T23515] sctp: [Deprecated]: syz.8.6008 (pid 23515) Use of int in maxseg socket option. [ 1544.828001][T23515] Use struct sctp_assoc_value instead [ 1546.057650][T23534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1546.666843][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6018'. [ 1546.679733][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1547.191537][T23543] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1547.235032][T23538] lo speed is unknown, defaulting to 1000 [ 1547.336476][T23550] macvlan2: entered promiscuous mode [ 1547.347136][T23550] macvlan2: entered allmulticast mode [ 1547.422232][T23550] bond30: entered promiscuous mode [ 1547.431548][T23550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1547.445903][T23550] bond30: left promiscuous mode [ 1547.548861][T23538] lo speed is unknown, defaulting to 1000 [ 1547.599051][T23538] lo speed is unknown, defaulting to 1000 [ 1547.811457][T23561] sctp: [Deprecated]: syz.7.6023 (pid 23561) Use of int in maxseg socket option. [ 1547.811457][T23561] Use struct sctp_assoc_value instead [ 1549.063444][T23581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6029'. [ 1549.475622][T23587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1549.923994][T23595] overlayfs: failed to clone upperpath [ 1549.939093][T23590] team0 (unregistering): Port device team_slave_0 removed [ 1550.058447][T23590] team0 (unregistering): Port device team_slave_1 removed [ 1550.145654][T23590] team0 (unregistering): Port device dummy0 removed [ 1550.934536][T23606] pimreg: entered allmulticast mode [ 1550.954609][T23602] sctp: [Deprecated]: syz.0.6037 (pid 23602) Use of int in maxseg socket option. [ 1550.954609][T23602] Use struct sctp_assoc_value instead [ 1550.997357][T23611] pimreg: left allmulticast mode [ 1552.538995][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6045'. [ 1554.625741][T23651] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6052'. [ 1556.887350][T23683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1557.152049][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6063'. [ 1559.011346][T23709] netlink: 'syz.0.6072': attribute type 1 has an invalid length. [ 1559.026967][T23709] netlink: 'syz.0.6072': attribute type 1 has an invalid length. [ 1559.915703][T23720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6078'. [ 1561.560685][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1561.560765][ T30] audit: type=1326 audit(2000001019.745:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1561.590819][ T30] audit: type=1326 audit(2000001019.745:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf743d567 code=0x7ffc0000 [ 1561.613818][ T30] audit: type=1326 audit(2000001019.745:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1561.904196][ T30] audit: type=1326 audit(2000001019.755:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf743d567 code=0x7ffc0000 [ 1561.927548][ T30] audit: type=1326 audit(2000001019.755:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1561.950493][ T30] audit: type=1326 audit(2000001019.755:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf743d567 code=0x7ffc0000 [ 1561.974068][ T30] audit: type=1326 audit(2000001019.755:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1561.997730][ T30] audit: type=1326 audit(2000001019.755:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1562.020397][ T30] audit: type=1326 audit(2000001019.845:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1562.042859][ T30] audit: type=1326 audit(2000001019.845:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf743d567 code=0x7ffc0000 [ 1562.093196][T23748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6086'. [ 1563.004383][T23762] tipc: Enabling of bearer rejected, failed to enable media [ 1564.101840][T23776] overlayfs: failed to clone upperpath [ 1565.018520][T23786] team0 (unregistering): Port device team_slave_0 removed [ 1565.115906][T23786] team0 (unregistering): Port device team_slave_1 removed [ 1568.814710][T23818] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1569.234000][T23823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.317102][T23823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.437695][T23824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1570.551301][T23832] lo speed is unknown, defaulting to 1000 [ 1570.582469][T23832] lo speed is unknown, defaulting to 1000 [ 1570.618261][T23832] lo speed is unknown, defaulting to 1000 [ 1571.050325][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 1571.050401][ T30] audit: type=1326 audit(2000001029.235:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23847 comm="syz.0.6125" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 1572.916755][T23870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.072048][T23870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.182652][T23873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.270105][ T30] audit: type=1326 audit(2000001031.445:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.293019][ T30] audit: type=1326 audit(2000001031.455:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.482713][T23880] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6136'. [ 1573.500210][ T30] audit: type=1326 audit(2000001031.465:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.523039][ T30] audit: type=1326 audit(2000001031.465:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.545850][ T30] audit: type=1326 audit(2000001031.465:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.568411][ T30] audit: type=1326 audit(2000001031.465:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.591041][ T30] audit: type=1326 audit(2000001031.535:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.613579][ T30] audit: type=1326 audit(2000001031.535:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1573.738329][ T30] audit: type=1326 audit(2000001031.835:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.6134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1575.006898][T23897] netlink: 'syz.6.6143': attribute type 1 has an invalid length. [ 1575.089117][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6143'. [ 1575.457911][T23905] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1576.156745][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.163549][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.507624][T23923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.554427][T23922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6150'. [ 1576.661644][T23923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.718107][T23928] bridge2: port 1(veth0_to_bond) entered blocking state [ 1576.726830][T23928] bridge2: port 1(veth0_to_bond) entered disabled state [ 1576.774245][T23931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6152'. [ 1576.788242][T23931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6152'. [ 1576.789761][T23928] veth0_to_bond: entered allmulticast mode [ 1576.834134][T23925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.867699][T23928] veth0_to_bond: entered promiscuous mode [ 1577.043125][T23931] bridge0: entered promiscuous mode [ 1577.107130][T23931] ip6gretap0: entered promiscuous mode [ 1578.237337][T23949] netlink: 'syz.7.6158': attribute type 1 has an invalid length. [ 1578.428407][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6158'. [ 1578.792291][T23956] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1579.294760][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 1579.294832][ T30] audit: type=1804 audit(2000001037.485:1296): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.6163" name="file0" dev="tmpfs" ino=4349 res=1 errno=0 [ 1579.338750][T23963] ref_ctr increment failed for inode: 0x10fd offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881185b3800 [ 1579.365107][T23962] uprobe: syz.8.6163:23962 failed to unregister, leaking uprobe [ 1580.851970][T23979] overlayfs: failed to clone upperpath [ 1580.898128][T23983] lo speed is unknown, defaulting to 1000 [ 1580.957682][T23983] lo speed is unknown, defaulting to 1000 [ 1580.972406][T23983] lo speed is unknown, defaulting to 1000 [ 1581.119864][T23992] netlink: 'syz.2.6174': attribute type 1 has an invalid length. [ 1581.226177][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6174'. [ 1581.378982][T23992] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1582.236275][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1582.553807][T24006] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1582.820967][T24009] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1582.842225][T24009] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1582.880538][T24009] bond18: (slave vxcan3): Error -95 calling set_mac_address [ 1583.160673][T24010] macvlan4: entered promiscuous mode [ 1583.166237][T24010] macvlan4: entered allmulticast mode [ 1583.197399][T24010] bond18: entered promiscuous mode [ 1583.224088][T24010] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1583.248569][T24010] bond18: left promiscuous mode [ 1583.445234][T24025] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.6184'. [ 1583.838357][T24029] netlink: 'syz.2.6186': attribute type 1 has an invalid length. [ 1584.054184][T24038] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1584.631492][T21036] libceph: connect (1)[c::]:6789 error -101 [ 1584.682687][T21036] libceph: mon0 (1)[c::]:6789 connect error [ 1584.729861][T24047] ceph: No mds server is up or the cluster is laggy [ 1585.218798][T24057] IPv6: sit3: Disabled Multicast RS [ 1585.436205][T24063] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 1585.444517][T24063] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1585.779802][T24067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6197'. [ 1585.825938][T24067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6197'. [ 1585.865895][T24067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6197'. [ 1586.050888][T24075] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.6198'. [ 1587.369831][T24090] netlink: 'syz.8.6203': attribute type 1 has an invalid length. [ 1588.005491][T24095] overlayfs: failed to clone upperpath [ 1588.287210][ T30] audit: type=1326 audit(2000001046.475:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24096 comm="syz.2.6204" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf743d539 code=0x0 [ 1592.128222][T24168] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.6212'. [ 1593.257127][T24182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1593.364152][T24182] overlayfs: failed to set xattr on upper [ 1593.370464][T24182] overlayfs: ...falling back to redirect_dir=nofollow. [ 1593.377380][T24182] overlayfs: ...falling back to index=off. [ 1593.383525][T24182] overlayfs: ...falling back to uuid=null. [ 1593.559995][T24182] overlayfs: failed to clone lowerpath [ 1593.585757][T24184] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1594.361113][T24188] netlink: 'syz.6.6217': attribute type 1 has an invalid length. [ 1594.701681][T24197] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1597.025826][ T30] audit: type=1326 audit(2000001055.215:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.081597][ T30] audit: type=1326 audit(2000001055.215:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.104346][ T30] audit: type=1326 audit(2000001055.215:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.130147][ T30] audit: type=1326 audit(2000001055.245:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.155623][ T30] audit: type=1326 audit(2000001055.245:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.183326][ T30] audit: type=1326 audit(2000001055.245:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.210620][ T30] audit: type=1326 audit(2000001055.255:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.236392][ T30] audit: type=1326 audit(2000001055.255:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.262189][ T30] audit: type=1326 audit(2000001055.255:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1597.288467][ T30] audit: type=1326 audit(2000001055.255:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.8.6224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1598.075319][T24212] ref_ctr_offset mismatch. inode: 0x1152 offset: 0x0 ref_ctr_offset(old): 0x80000100 ref_ctr_offset(new): 0x0 [ 1601.763843][T24255] sctp: [Deprecated]: syz.6.6240 (pid 24255) Use of int in maxseg socket option. [ 1601.763843][T24255] Use struct sctp_assoc_value instead [ 1602.645351][T24267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6242'. [ 1602.667352][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6244'. [ 1602.685030][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6244'. [ 1602.712826][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6244'. [ 1603.711093][T24273] uprobe: syz.6.6247:24273 failed to unregister, leaking uprobe [ 1603.907612][T24277] bond15: (slave veth5): Enslaving as an active interface with a down link [ 1604.456291][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6251'. [ 1605.098278][T24289] sctp: [Deprecated]: syz.2.6253 (pid 24289) Use of int in maxseg socket option. [ 1605.098278][T24289] Use struct sctp_assoc_value instead [ 1606.839802][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1606.997797][T24306] lo speed is unknown, defaulting to 1000 [ 1607.045286][T24306] lo speed is unknown, defaulting to 1000 [ 1607.058719][T24306] lo speed is unknown, defaulting to 1000 [ 1610.526305][T24357] netlink: 'syz.0.6275': attribute type 4 has an invalid length. [ 1611.107647][T24367] netlink: 'syz.7.6278': attribute type 30 has an invalid length. [ 1611.464349][T24369] lo speed is unknown, defaulting to 1000 [ 1611.541208][T24369] lo speed is unknown, defaulting to 1000 [ 1611.574827][T24369] lo speed is unknown, defaulting to 1000 [ 1612.806549][T24379] batadv_slave_0: entered promiscuous mode [ 1613.595549][T24389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6285'. [ 1616.108200][T24409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6293'. [ 1616.157663][T24409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6293'. [ 1616.174034][T24409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6293'. [ 1618.025107][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6302'. [ 1618.144270][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6302'. [ 1619.110855][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6307'. [ 1619.205089][T24449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6307'. [ 1619.244209][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6307'. [ 1619.292756][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6307'. [ 1623.238600][T24505] tipc: Enabling of bearer rejected, failed to enable media [ 1624.868033][T24526] tipc: Enabling of bearer rejected, already enabled [ 1625.968449][T24538] tipc: Enabling of bearer rejected, already enabled [ 1626.222315][T24540] bond0: (slave bond_slave_0): Releasing backup interface [ 1626.308524][T24540] bond0: (slave bond_slave_1): Releasing backup interface [ 1626.388504][T24540] team0: Port device team_slave_0 removed [ 1626.415303][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6340'. [ 1626.487405][T24540] team0: Port device team_slave_1 removed [ 1626.528538][T24540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1626.730495][T24541] team0: Mode changed to "loadbalance" [ 1628.146454][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6346'. [ 1628.858551][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6348'. [ 1629.621310][T24579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1630.395564][T24584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.678523][T24584] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1633.046467][T24612] vlan2: entered promiscuous mode [ 1633.055220][T24612] syz_tun: entered promiscuous mode [ 1634.376122][T24625] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6370'. [ 1634.385770][T24625] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6370'. [ 1634.395091][T24625] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6370'. [ 1634.439663][T24625] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6370'. [ 1635.577362][T24642] tipc: Enabling of bearer rejected, already enabled [ 1635.601992][T24642] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6377'. [ 1636.318375][T24658] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1636.388484][ C1] ===================================================== [ 1636.395931][ C1] BUG: KMSAN: uninit-value in cfg80211_classify8021d+0x99d/0x12b0 [ 1636.404073][ C1] cfg80211_classify8021d+0x99d/0x12b0 [ 1636.409751][ C1] ieee80211_select_queue+0x37a/0x9e0 [ 1636.415345][ C1] __ieee80211_subif_start_xmit+0x635/0x1e10 [ 1636.421599][ C1] ieee80211_subif_start_xmit+0xa8/0x6d0 [ 1636.427408][ C1] dev_hard_start_xmit+0x22f/0xa30 [ 1636.432878][ C1] sch_direct_xmit+0x3b2/0xcf0 [ 1636.437909][ C1] __qdisc_run+0x18f3/0x27c0 [ 1636.442678][ C1] net_tx_action+0x881/0xfd0 [ 1636.447454][ C1] handle_softirqs+0x168/0x6f0 [ 1636.452485][ C1] __do_softirq+0x14/0x1b [ 1636.456952][ C1] do_softirq+0x58/0x90 [ 1636.461302][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1636.466530][ C1] __dev_queue_xmit+0x37fd/0x5890 [ 1636.471775][ C1] packet_xmit+0x8f/0x710 [ 1636.476404][ C1] packet_sendmsg+0x91d9/0xa320 [ 1636.481429][ C1] __sys_sendto+0xa77/0xb90 [ 1636.486208][ C1] __ia32_sys_sendto+0x12f/0x200 [ 1636.491305][ C1] ia32_sys_call+0x1a3d/0x4340 [ 1636.496171][ C1] __do_fast_syscall_32+0x14a/0x310 [ 1636.501647][ C1] do_fast_syscall_32+0x37/0x80 [ 1636.506657][ C1] do_SYSENTER_32+0x1f/0x30 [ 1636.511365][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1636.517780][ C1] [ 1636.520214][ C1] Uninit was created at: [ 1636.524703][ C1] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 1636.530810][ C1] kmalloc_reserve+0x13c/0x4b0 [ 1636.535709][ C1] __alloc_skb+0x805/0x1030 [ 1636.540375][ C1] alloc_skb_with_frags+0xc5/0xa60 [ 1636.545702][ C1] sock_alloc_send_pskb+0xacb/0xc60 [ 1636.551074][ C1] packet_sendmsg+0x7477/0xa320 [ 1636.555997][ C1] __sys_sendto+0xa77/0xb90 [ 1636.560672][ C1] __ia32_sys_sendto+0x12f/0x200 [ 1636.565763][ C1] ia32_sys_call+0x1a3d/0x4340 [ 1636.570679][ C1] __do_fast_syscall_32+0x14a/0x310 [ 1636.575961][ C1] do_fast_syscall_32+0x37/0x80 [ 1636.580972][ C1] do_SYSENTER_32+0x1f/0x30 [ 1636.585623][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1636.592173][ C1] [ 1636.594606][ C1] CPU: 1 UID: 0 PID: 24658 Comm: syz.0.6381 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1636.606128][ C1] Tainted: [L]=SOFTLOCKUP [ 1636.610555][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1636.620760][ C1] ===================================================== [ 1636.627720][ C1] Disabling lock debugging due to kernel taint [ 1636.634004][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1636.640526][ C1] CPU: 1 UID: 0 PID: 24658 Comm: syz.0.6381 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 1636.652058][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1636.657630][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1636.667898][ C1] Call Trace: [ 1636.671211][ C1] [ 1636.674087][ C1] __dump_stack+0x26/0x30 [ 1636.678866][ C1] dump_stack_lvl+0x50/0x1c0 [ 1636.683528][ C1] ? dump_stack+0x12/0x25 [ 1636.687926][ C1] dump_stack+0x1e/0x25 [ 1636.692166][ C1] vpanic+0x435/0xd40 [ 1636.696326][ C1] panic+0x15d/0x160 [ 1636.700425][ C1] kmsan_report+0x31a/0x320 [ 1636.705122][ C1] ? __msan_warning+0x1b/0x30 [ 1636.709890][ C1] ? cfg80211_classify8021d+0x99d/0x12b0 [ 1636.715611][ C1] ? ieee80211_select_queue+0x37a/0x9e0 [ 1636.721233][ C1] ? __ieee80211_subif_start_xmit+0x635/0x1e10 [ 1636.727492][ C1] ? ieee80211_subif_start_xmit+0xa8/0x6d0 [ 1636.733656][ C1] ? dev_hard_start_xmit+0x22f/0xa30 [ 1636.739036][ C1] ? sch_direct_xmit+0x3b2/0xcf0 [ 1636.744068][ C1] ? __qdisc_run+0x18f3/0x27c0 [ 1636.748981][ C1] ? net_tx_action+0x881/0xfd0 [ 1636.753816][ C1] ? handle_softirqs+0x168/0x6f0 [ 1636.758822][ C1] ? __do_softirq+0x14/0x1b [ 1636.763418][ C1] ? do_softirq+0x58/0x90 [ 1636.767820][ C1] ? __local_bh_enable_ip+0xa1/0xb0 [ 1636.773104][ C1] ? __dev_queue_xmit+0x37fd/0x5890 [ 1636.778493][ C1] ? packet_xmit+0x8f/0x710 [ 1636.783082][ C1] ? packet_sendmsg+0x91d9/0xa320 [ 1636.788192][ C1] ? __sys_sendto+0xa77/0xb90 [ 1636.793030][ C1] ? __ia32_sys_sendto+0x12f/0x200 [ 1636.798310][ C1] ? ia32_sys_call+0x1a3d/0x4340 [ 1636.803385][ C1] ? __do_fast_syscall_32+0x14a/0x310 [ 1636.808913][ C1] ? do_fast_syscall_32+0x37/0x80 [ 1636.814048][ C1] ? do_SYSENTER_32+0x1f/0x30 [ 1636.818817][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1636.825420][ C1] ? __siphash_unaligned+0x35a/0x9b0 [ 1636.830895][ C1] ? __flow_hash_from_keys+0x64e/0x780 [ 1636.836448][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1636.841675][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1636.846986][ C1] __msan_warning+0x1b/0x30 [ 1636.851641][ C1] cfg80211_classify8021d+0x99d/0x12b0 [ 1636.857211][ C1] ieee80211_select_queue+0x37a/0x9e0 [ 1636.862664][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1636.867907][ C1] __ieee80211_subif_start_xmit+0x635/0x1e10 [ 1636.874050][ C1] ? packet_rcv+0x1dad/0x2390 [ 1636.878819][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1636.884753][ C1] ieee80211_subif_start_xmit+0xa8/0x6d0 [ 1636.890513][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1636.897020][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1636.902310][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1636.908310][ C1] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1636.914676][ C1] dev_hard_start_xmit+0x22f/0xa30 [ 1636.919912][ C1] sch_direct_xmit+0x3b2/0xcf0 [ 1636.924780][ C1] __qdisc_run+0x18f3/0x27c0 [ 1636.929517][ C1] net_tx_action+0x881/0xfd0 [ 1636.934246][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 1636.939435][ C1] handle_softirqs+0x168/0x6f0 [ 1636.944371][ C1] __do_softirq+0x14/0x1b [ 1636.948843][ C1] do_softirq+0x58/0x90 [ 1636.953068][ C1] [ 1636.956021][ C1] [ 1636.958981][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1636.964113][ C1] __dev_queue_xmit+0x37fd/0x5890 [ 1636.969239][ C1] ? __msan_warning+0x1b/0x30 [ 1636.973998][ C1] ? filter_irq_stacks+0x13f/0x190 [ 1636.979381][ C1] ? stack_depot_save_flags+0x35/0x790 [ 1636.985070][ C1] ? __dev_queue_xmit+0x27d/0x5890 [ 1636.990319][ C1] packet_xmit+0x8f/0x710 [ 1636.994807][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1637.000027][ C1] packet_sendmsg+0x91d9/0xa320 [ 1637.004968][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1637.010251][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1637.016176][ C1] ? aa_label_sk_perm+0x759/0x810 [ 1637.021419][ C1] ? __msan_warning+0x1b/0x30 [ 1637.026204][ C1] ? filter_irq_stacks+0x60/0x190 [ 1637.031314][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1637.036598][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 1637.041891][ C1] __sys_sendto+0xa77/0xb90 [ 1637.046496][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1637.052917][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1637.058123][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1637.063343][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1637.069350][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1637.075799][ C1] __ia32_sys_sendto+0x12f/0x200 [ 1637.080853][ C1] ia32_sys_call+0x1a3d/0x4340 [ 1637.085715][ C1] __do_fast_syscall_32+0x14a/0x310 [ 1637.091011][ C1] do_fast_syscall_32+0x37/0x80 [ 1637.095948][ C1] do_SYSENTER_32+0x1f/0x30 [ 1637.100530][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1637.106951][ C1] RIP: 0023:0xf7f66539 [ 1637.111076][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1637.130825][ C1] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1637.139326][ C1] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000700 [ 1637.147394][ C1] RDX: 000000000000000e RSI: 000000000000c080 RDI: 00000000800001c0 [ 1637.155420][ C1] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1637.163461][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1637.171538][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1637.179603][ C1] [ 1637.182834][ C1] Kernel Offset: disabled [ 1637.187195][ C1] Rebooting in 86400 seconds..