last executing test programs: 26m47.636990398s ago: executing program 32 (id=163): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x115) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x16000f57) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[], 0x15) splice(r0, 0x0, r2, 0x0, 0x50f5d137, 0xd) 24m39.265263584s ago: executing program 33 (id=820): socket(0x2, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) 24m32.581288025s ago: executing program 34 (id=822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 24m18.299428609s ago: executing program 35 (id=897): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x5c863}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @local}, 0x14) 23m50.468267636s ago: executing program 36 (id=1017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x808000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 23m49.95202408s ago: executing program 37 (id=1018): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'vlan0\x00', {0x1}, 0xcf48}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) 21m39.743743707s ago: executing program 8 (id=1598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x7}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 21m38.908000874s ago: executing program 8 (id=1601): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x62040200) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) 21m37.756560936s ago: executing program 8 (id=1607): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 21m36.955485315s ago: executing program 8 (id=1613): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 21m36.42677292s ago: executing program 8 (id=1616): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x80042, 0x1, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) 21m35.967366076s ago: executing program 8 (id=1620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) 21m34.104237182s ago: executing program 38 (id=1620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) 20m53.767138897s ago: executing program 3 (id=1831): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x200, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 20m52.950208861s ago: executing program 3 (id=1835): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x86e0, 0x5ad, 0x6, 0xbb3, 0xb11, 0xaa, 0xffffffffffffffff}, 0x0, &(0x7f0000000380)={0x9, 0x6, 0x0, 0x6, 0xfffffffffffffffd, 0x800, 0x100000001, 0x2}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000140), 0x1) 20m51.620051695s ago: executing program 3 (id=1844): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 20m50.962537641s ago: executing program 3 (id=1848): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 20m49.634628238s ago: executing program 3 (id=1852): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) mkdirat(0xffffffffffffff9c, 0x0, 0x64) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 20m48.803773635s ago: executing program 3 (id=1856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001f40)='s', 0x1}], 0x1}}], 0x1, 0x4000000) 20m47.149455166s ago: executing program 39 (id=1856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001f40)='s', 0x1}], 0x1}}], 0x1, 0x4000000) 20m17.727639945s ago: executing program 6 (id=2001): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 20m16.959431618s ago: executing program 6 (id=2002): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20m14.087262768s ago: executing program 6 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) 20m12.740205321s ago: executing program 6 (id=2011): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x131) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 20m11.26195872s ago: executing program 6 (id=2015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x429d}, &(0x7f0000000080)=0x8) 20m10.239555487s ago: executing program 6 (id=2021): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x110, 0x0, 0x0, ""/251}], 0x110, 0x40000060}, 0x38, 0x2101) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20m8.039181134s ago: executing program 40 (id=2021): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x110, 0x0, 0x0, ""/251}], 0x110, 0x40000060}, 0x38, 0x2101) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 14m39.987752265s ago: executing program 2 (id=3741): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 14m38.475733876s ago: executing program 2 (id=3748): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="cfd9a7353152", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xf, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 14m37.857967644s ago: executing program 2 (id=3750): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x611, &(0x7f0000001740)="$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") socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) 14m36.837718085s ago: executing program 2 (id=3757): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/19, 0x13}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) 14m31.919070962s ago: executing program 2 (id=3778): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 14m31.309894506s ago: executing program 2 (id=3782): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 14m16.164256961s ago: executing program 41 (id=3782): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 13m9.66747822s ago: executing program 1 (id=4221): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x6, 0x4, 0x7ffc0002}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbb7, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13m9.063145682s ago: executing program 1 (id=4224): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6", 0x9) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 13m6.060251648s ago: executing program 1 (id=4237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 13m5.490874416s ago: executing program 1 (id=4240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000003a000d0326bd7000fedbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r0, 0x900) r3 = dup3(r2, r0, 0x80000) read$watch_queue(r3, &(0x7f0000002d40)=""/4104, 0x1008) 13m4.181694649s ago: executing program 1 (id=4249): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800080, 0x11) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 13m3.463401629s ago: executing program 1 (id=4255): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 12m47.926305123s ago: executing program 42 (id=4255): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.742761974s ago: executing program 0 (id=8138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 4.617302562s ago: executing program 7 (id=8140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f000000aac0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f000000abc0)={0x0, 0x0, &(0x7f000000ab80)={&(0x7f000000ab00)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4040) 4.487519582s ago: executing program 9 (id=8141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.146904457s ago: executing program 7 (id=8143): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="8000647d03000000", 0x8, 0x0, &(0x7f0000000200)={0xa, 0x6e1d, 0x9, @local, 0x5}, 0x1c) 4.0004404s ago: executing program 4 (id=8144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.963527903s ago: executing program 0 (id=8145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf8}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x4, 0xcc1f, {{0x36, 0x4, 0x1, 0x10, 0xd8, 0x68, 0x0, 0x37, 0x4, 0x0, @loopback, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x99, 0x0, 0x8, [0xc2d, 0x5]}, @ssrr={0x89, 0x2b, 0xf2, [@rand_addr=0x64010101, @rand_addr=0x64010101, @empty, @local, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x13}, @remote, @broadcast, @multicast2]}, @cipso={0x86, 0x5f, 0x3, [{0x2, 0x8, "08a62cbd4948"}, {0x2, 0x7, "1ba57b1395"}, {0x1, 0x12, "f5ba6aa67409f2e061322c23574af1e8"}, {0x0, 0x10, "4daa857b6a432c4b6684422ebad9"}, {0x1, 0x4, "c9b2"}, {0x1, 0xd, "55214a3ff11577f6fbfe93"}, {0x6, 0xd, "bbac940d080cc020ad15a2"}, {0x6, 0xa, "57d0a81ae34b2e19"}]}, @timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0xe, [{@multicast2, 0x5}, {@empty, 0xac}, {@private=0xa010100, 0x8}]}, @ssrr={0x89, 0xf, 0xe6, [@loopback, @remote, @loopback]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'vcan0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b80)={0x0, @empty, @multicast2}, &(0x7f0000000bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x80, 0x9, 0x0, @loopback, @remote, 0x7800, 0x8, 0x4, 0xe9}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(r4, 0x42) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 3.79732212s ago: executing program 7 (id=8146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf8}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x4, 0xcc1f, {{0x36, 0x4, 0x1, 0x10, 0xd8, 0x68, 0x0, 0x37, 0x4, 0x0, @loopback, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x99, 0x0, 0x8, [0xc2d, 0x5]}, @ssrr={0x89, 0x2b, 0xf2, [@rand_addr=0x64010101, @rand_addr=0x64010101, @empty, @local, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x13}, @remote, @broadcast, @multicast2]}, @cipso={0x86, 0x5f, 0x3, [{0x2, 0x8, "08a62cbd4948"}, {0x2, 0x7, "1ba57b1395"}, {0x1, 0x12, "f5ba6aa67409f2e061322c23574af1e8"}, {0x0, 0x10, "4daa857b6a432c4b6684422ebad9"}, {0x1, 0x4, "c9b2"}, {0x1, 0xd, "55214a3ff11577f6fbfe93"}, {0x6, 0xd, "bbac940d080cc020ad15a2"}, {0x6, 0xa, "57d0a81ae34b2e19"}]}, @timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0xe, [{@multicast2, 0x5}, {@empty, 0xac}, {@private=0xa010100, 0x8}]}, @ssrr={0x89, 0xf, 0xe6, [@loopback, @remote, @loopback]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'vcan0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b80)={0x0, @empty, @multicast2}, &(0x7f0000000bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x80, 0x9, 0x0, @loopback, @remote, 0x7800, 0x8, 0x4, 0xe9}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(r3, 0x42) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 3.762042823s ago: executing program 9 (id=8147): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000080)={0x10000, "6898ec0c000000196644ccf2fdfc973ab6e8670009848076783b6bf6fa00", 0x1, 0x80, 0x0, 0x7, 0x2, 0x0, 0xdf, 0x6}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) 3.638663788s ago: executing program 5 (id=8148): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000400)={0x5, 0xffffffff, 0x1, 0x60df, 0x2, "0012197ce1d400001e20000080c90a008000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 3.061059914s ago: executing program 5 (id=8149): getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0xb5dd}, &(0x7f0000000080)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2.88991854s ago: executing program 7 (id=8150): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040000000000480012800b0001006970366772650000380002800400120014000600fc01000000000000000000000000000014000700fc000000000000000000000000000000050008"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.823913642s ago: executing program 5 (id=8151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 2.784090295s ago: executing program 9 (id=8152): r0 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}], 0x4}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) keyctl$read(0xb, r0, &(0x7f0000002440)=""/116, 0x74) 2.577310928s ago: executing program 0 (id=8153): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x7, 0x10000, '\x00', 0xb57f}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) 2.522504644s ago: executing program 4 (id=8154): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000080)={0x10000, "6898ec0c000000196644ccf2fdfc973ab6e8670009848076783b6bf6fa00", 0x1, 0x80, 0x0, 0x7, 0x2, 0x0, 0xdf, 0x6}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) 2.426903017s ago: executing program 5 (id=8155): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r0, &(0x7f0000001300)=""/281, 0x119) 2.277646453s ago: executing program 7 (id=8156): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, 0x0, 0x125) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) 2.076570987s ago: executing program 0 (id=8157): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.026787225s ago: executing program 4 (id=8158): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) 1.833985413s ago: executing program 9 (id=8159): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1.764871393s ago: executing program 5 (id=8160): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(0x0, 0x100000, 0x0) flock(r5, 0x1) flock(r5, 0x1) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.694946743s ago: executing program 7 (id=8161): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)) write$UHID_INPUT(r6, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) keyctl$read(0xb, r0, &(0x7f0000002440)=""/116, 0x74) 1.586040862s ago: executing program 4 (id=8162): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000080)={0x10000, "6898ec0c000000196644ccf2fdfc973ab6e8670009848076783b6bf6fa00", 0x1, 0x80, 0x0, 0x7, 0x2, 0x0, 0xdf, 0x6}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) 943.871438ms ago: executing program 0 (id=8163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x981, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 753.178774ms ago: executing program 4 (id=8164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf8}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x4, 0xcc1f, {{0x36, 0x4, 0x1, 0x10, 0xd8, 0x68, 0x0, 0x37, 0x4, 0x0, @loopback, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x99, 0x0, 0x8, [0xc2d, 0x5]}, @ssrr={0x89, 0x2b, 0xf2, [@rand_addr=0x64010101, @rand_addr=0x64010101, @empty, @local, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x13}, @remote, @broadcast, @multicast2]}, @cipso={0x86, 0x5f, 0x3, [{0x2, 0x8, "08a62cbd4948"}, {0x2, 0x7, "1ba57b1395"}, {0x1, 0x12, "f5ba6aa67409f2e061322c23574af1e8"}, {0x0, 0x10, "4daa857b6a432c4b6684422ebad9"}, {0x1, 0x4, "c9b2"}, {0x1, 0xd, "55214a3ff11577f6fbfe93"}, {0x6, 0xd, "bbac940d080cc020ad15a2"}, {0x6, 0xa, "57d0a81ae34b2e19"}]}, @timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0xe, [{@multicast2, 0x5}, {@empty, 0xac}, {@private=0xa010100, 0x8}]}, @ssrr={0x89, 0xf, 0xe6, [@loopback, @remote, @loopback]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'vcan0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b80)={0x0, @empty, @multicast2}, &(0x7f0000000bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x80, 0x9, 0x0, @loopback, @remote, 0x7800, 0x8, 0x4, 0xe9}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(r4, 0x42) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 390.666714ms ago: executing program 9 (id=8165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffbf}}]}, 0x3c}}, 0x0) 344.521395ms ago: executing program 5 (id=8166): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@private0, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x80000000000002, 0x8, 0x200000000006, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x5}, {0x40000000058, 0x7, 0xfffffffffffffff9, 0xc7e}, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d6, 0x32}, 0xa, @in6=@empty, 0x3504, 0x5, 0x67a01bcf906970c1, 0x1, 0x7}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) 73.256754ms ago: executing program 9 (id=8167): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f00000000c0)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 32.11808ms ago: executing program 4 (id=8168): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x69c, &(0x7f0000000340)="$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") truncate(&(0x7f0000000300)='./file1\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) 0s ago: executing program 0 (id=8169): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}], 0x4}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) keyctl$read(0xb, r0, &(0x7f0000002440)=""/116, 0x74) kernel console output (not intermixed with test programs): 295 subj=unconfined pid=19009 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1181.478041][ T30] audit: type=1326 audit(2000001158.011:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1181.500772][ T30] audit: type=1326 audit(2000001158.011:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1181.525122][ T30] audit: type=1326 audit(2000001158.041:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1181.548141][ T30] audit: type=1326 audit(2000001158.041:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1181.572078][ T30] audit: type=1326 audit(2000001158.041:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1181.595432][ T30] audit: type=1326 audit(2000001158.041:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1182.266690][T18353] libceph: connect (1)[c::]:6789 error -101 [ 1182.273303][T18353] libceph: mon0 (1)[c::]:6789 connect error [ 1182.347740][T10257] libceph: connect (1)[c::]:6789 error -101 [ 1182.355804][T10257] libceph: mon0 (1)[c::]:6789 connect error [ 1182.382078][T19026] kvm: pic: non byte read [ 1182.399387][T19026] kvm: pic: level sensitive irq not supported [ 1182.399710][T19026] kvm: pic: non byte read [ 1182.416437][T19026] kvm: pic: level sensitive irq not supported [ 1182.416748][T19026] kvm: pic: non byte read [ 1182.436075][T18353] libceph: connect (1)[c::]:6789 error -101 [ 1182.442673][T18353] libceph: mon0 (1)[c::]:6789 connect error [ 1182.450443][T19026] kvm: pic: level sensitive irq not supported [ 1182.454500][T19026] kvm: pic: non byte read [ 1182.466863][T19026] kvm: pic: level sensitive irq not supported [ 1182.469579][T19026] kvm: pic: non byte read [ 1182.485234][T19026] kvm: pic: level sensitive irq not supported [ 1182.485999][T19026] kvm: pic: non byte read [ 1182.512626][T19026] kvm: pic: level sensitive irq not supported [ 1182.512939][T19026] kvm: pic: non byte read [ 1182.551650][T18353] libceph: connect (1)[c::]:6789 error -101 [ 1182.559553][T18353] libceph: mon0 (1)[c::]:6789 connect error [ 1182.569091][T19026] kvm: pic: level sensitive irq not supported [ 1182.569419][T19026] kvm: pic: non byte read [ 1182.591746][T19026] kvm: pic: level sensitive irq not supported [ 1182.592063][T19026] kvm: pic: non byte read [ 1182.607020][T19026] kvm: pic: level sensitive irq not supported [ 1182.607461][T19026] kvm: pic: non byte read [ 1182.620280][T19026] kvm: pic: level sensitive irq not supported [ 1182.661649][T10257] libceph: connect (1)[c::]:6789 error -101 [ 1182.675023][T10257] libceph: mon0 (1)[c::]:6789 connect error [ 1182.703445][T18353] libceph: connect (1)[c::]:6789 error -101 [ 1182.709889][T18353] libceph: mon0 (1)[c::]:6789 connect error [ 1183.044784][T19025] ceph: No mds server is up or the cluster is laggy [ 1183.047254][T19033] ceph: No mds server is up or the cluster is laggy [ 1183.077397][T19029] ceph: No mds server is up or the cluster is laggy [ 1183.093318][T18353] libceph: connect (1)[c::]:6789 error -101 [ 1183.099829][T18353] libceph: mon0 (1)[c::]:6789 connect error [ 1183.582462][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4880'. [ 1184.607558][T19073] bond0: (slave netdevsim3): Releasing backup interface [ 1184.653904][T19073] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.813479][T19073] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.038182][T19073] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.152178][T10085] page_pool_release_retry() stalled pool shutdown: id 78, 50 inflight 363 sec [ 1185.315044][T19073] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.662177][T11459] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.703828][T11459] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.741242][T11459] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.774335][T11459] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.135040][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4898'. [ 1187.066343][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1187.094491][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1187.212411][T18353] page_pool_release_retry() stalled pool shutdown: id 100, 640 inflight 60 sec [ 1188.826161][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1190.118364][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1190.118451][ T30] audit: type=1326 audit(2000001166.801:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.149038][ T30] audit: type=1326 audit(2000001166.801:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.172073][ T30] audit: type=1326 audit(2000001166.831:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.194794][ T30] audit: type=1326 audit(2000001166.831:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.217569][ T30] audit: type=1326 audit(2000001166.831:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.241135][ T30] audit: type=1326 audit(2000001166.841:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.266038][ T30] audit: type=1326 audit(2000001166.841:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.289760][ T30] audit: type=1326 audit(2000001166.851:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.312497][ T30] audit: type=1326 audit(2000001166.871:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1190.335332][ T30] audit: type=1326 audit(2000001166.871:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.7.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1191.261950][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1192.070004][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4935'. [ 1192.370401][T19193] loop7: detected capacity change from 0 to 128 [ 1192.435367][T19193] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1192.468740][T19193] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1192.599788][T17649] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1193.794584][T19211] lo: Caught tx_queue_len zero misconfig [ 1193.800752][T19211] netem: change failed [ 1195.663127][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4953'. [ 1196.016401][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 1196.016482][ T30] audit: type=1804 audit(2000001172.701:1238): pid=19240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4954" name="/newroot/111/file0" dev="tmpfs" ino=627 res=1 errno=0 [ 1198.156452][T19263] VFS: Warning: syz.4.4964 using old stat() call. Recompile your binary. [ 1198.241288][T19265] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1198.717320][T19275] overlayfs: failed to clone upperpath [ 1198.882898][T19278] netlink: 'syz.7.4971': attribute type 9 has an invalid length. [ 1198.891495][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4971'. [ 1199.191384][T10085] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1199.402437][T10085] usb 8-1: Using ep0 maxpacket: 16 [ 1199.430175][T10085] usb 8-1: config index 0 descriptor too short (expected 4495, got 71) [ 1199.439024][T10085] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1199.447650][T10085] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.459248][T10085] usb 8-1: config 0 has no interface number 0 [ 1199.544959][T10085] usb 8-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1199.555514][T10085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.564253][T10085] usb 8-1: Product: syz [ 1199.570720][T10085] usb 8-1: Manufacturer: syz [ 1199.575539][T10085] usb 8-1: SerialNumber: syz [ 1199.598497][T10085] usb 8-1: config 0 descriptor?? [ 1199.820466][T10085] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1199.828877][T10085] uvcvideo 8-1:0.105: No valid video chain found. [ 1200.057240][T10085] usb 8-1: USB disconnect, device number 6 [ 1201.964217][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4987'. [ 1202.073541][T19319] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4988'. [ 1202.083112][T19319] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4988'. [ 1204.776371][ T30] audit: type=1326 audit(2000001181.431:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.801333][ T30] audit: type=1326 audit(2000001181.431:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.826355][ T30] audit: type=1326 audit(2000001181.431:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.849211][ T30] audit: type=1326 audit(2000001181.431:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.872580][ T30] audit: type=1326 audit(2000001181.441:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.897778][ T30] audit: type=1326 audit(2000001181.451:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.921252][ T30] audit: type=1326 audit(2000001181.451:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.943784][ T30] audit: type=1326 audit(2000001181.451:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.967619][ T30] audit: type=1326 audit(2000001181.451:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1204.991278][ T30] audit: type=1326 audit(2000001181.541:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.9.5004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1206.148274][T19391] overlayfs: regular lower layers cannot follow data lower layers [ 1206.483099][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5015'. [ 1206.508451][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5016'. [ 1206.584118][T19397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1207.559223][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.566302][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1208.002444][T10257] IPVS: starting estimator thread 0... [ 1208.107344][T19422] IPVS: using max 240 ests per chain, 12000 per kthread [ 1208.236141][T19426] tipc: Can't bind to reserved service type 1 [ 1208.568671][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5026'. [ 1209.614417][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 1209.868097][T19455] loop0: detected capacity change from 0 to 256 [ 1210.041076][T19455] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1210.504959][T19461] netlink: 'syz.7.5038': attribute type 4 has an invalid length. [ 1210.557037][T19462] netlink: 'syz.7.5038': attribute type 4 has an invalid length. [ 1211.317277][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1212.016748][T19485] binder: 19484:19485 ioctl c0306201 800003c0 returned -14 [ 1212.849887][T19499] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1213.050335][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5050'. [ 1213.092068][T19505] overlayfs: failed to clone upperpath [ 1214.201355][T19527] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1214.373296][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1215.497778][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5065'. [ 1215.507377][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5065'. [ 1215.591507][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 1215.841374][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b309a00: rx timeout, send abort [ 1216.107561][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1216.107642][ T30] audit: type=1804 audit(2000001192.781:1255): pid=19554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5069" name="/newroot/219/file0" dev="tmpfs" ino=1253 res=1 errno=0 [ 1216.350341][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b309a00: abort rx timeout. Force session deactivation [ 1216.909993][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 1216.990270][T19563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5076'. [ 1218.572177][T18353] page_pool_release_retry() stalled pool shutdown: id 70, 640 inflight 543 sec [ 1219.994885][ T30] audit: type=1326 audit(2000001196.671:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.018564][ T30] audit: type=1326 audit(2000001196.681:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.115398][ T30] audit: type=1326 audit(2000001196.781:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.139242][ T30] audit: type=1326 audit(2000001196.781:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.163898][ T30] audit: type=1326 audit(2000001196.781:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.187276][ T30] audit: type=1326 audit(2000001196.781:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.209929][ T30] audit: type=1326 audit(2000001196.781:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.233176][ T30] audit: type=1326 audit(2000001196.781:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1220.258070][ T30] audit: type=1326 audit(2000001196.791:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.9.5092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1221.612381][T19634] sock: sock_timestamping_bind_phc: sock not bind to device [ 1221.826185][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5101'. [ 1222.242929][T19642] macsec1: entered promiscuous mode [ 1222.248361][T19642] bridge0: entered promiscuous mode [ 1222.257315][T19642] bridge0: port 1(macsec1) entered blocking state [ 1222.264424][T19642] bridge0: port 1(macsec1) entered disabled state [ 1222.271917][T19642] macsec1: entered allmulticast mode [ 1222.277541][T19642] bridge0: entered allmulticast mode [ 1222.394885][T19642] macsec1: left allmulticast mode [ 1222.400139][T19642] bridge0: left allmulticast mode [ 1222.436633][T19642] bridge0: left promiscuous mode [ 1223.328948][T19646] ceph: No mds server is up or the cluster is laggy [ 1223.329535][T19656] ceph: No mds server is up or the cluster is laggy [ 1223.350909][T19650] ceph: No mds server is up or the cluster is laggy [ 1223.475483][T19668] tipc: Failed to remove unknown binding: 66,1,1/0:857508555/857508557 [ 1223.484839][T19668] tipc: Failed to remove unknown binding: 66,1,1/0:857508555/857508557 [ 1224.257558][T19676] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5115'. [ 1225.014960][T19681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.024854][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.983644][T19681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.129944][T19681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.576751][T19706] picdev_read: 25 callbacks suppressed [ 1226.576836][T19706] kvm: pic: non byte read [ 1226.641945][T19706] kvm: pic: single mode not supported [ 1226.642036][T19706] pic_ioport_write: 24 callbacks suppressed [ 1226.642239][T19706] kvm: pic: level sensitive irq not supported [ 1226.702479][T19706] kvm: pic: non byte read [ 1226.782699][T19706] kvm: pic: non byte read [ 1226.788855][T19706] kvm: pic: non byte read [ 1226.802788][T19706] kvm: pic: non byte read [ 1226.822394][T19706] kvm: pic: non byte read [ 1226.855502][T19706] kvm: pic: non byte read [ 1226.872844][T19706] kvm: pic: single mode not supported [ 1226.872929][T19706] kvm: pic: level sensitive irq not supported [ 1226.879163][T19706] kvm: pic: non byte read [ 1226.963684][T19706] kvm: pic: single mode not supported [ 1226.964111][T19706] kvm: pic: non byte read [ 1227.048372][ T3883] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.066147][ T3883] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.094834][ T3883] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.129328][ T3883] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.837852][ C0] hrtimer: interrupt took 241045 ns [ 1231.565255][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5159'. [ 1231.775096][T19798] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1231.785240][T19798] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1231.794588][T19798] netlink: 'syz.4.5161': attribute type 6 has an invalid length. [ 1231.803152][T19798] netlink: 'syz.4.5161': attribute type 5 has an invalid length. [ 1231.812441][T19798] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1232.303159][T19809] fuse: Unknown parameter 'appraise' [ 1233.090796][T19823] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1233.100027][T19823] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1233.384594][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5175'. [ 1233.411996][T19831] vxlan0: entered promiscuous mode [ 1233.419454][ T3883] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1233.438755][T19829] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1233.468470][ T3883] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1233.484090][ T3883] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1233.510986][ T3883] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1233.871352][T19840] xt_HMARK: proto mask must be zero with L3 mode [ 1234.383652][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5181'. [ 1234.452344][T19846] bond0: (slave netdevsim3): Releasing backup interface [ 1234.690313][T19853] netlink: 'syz.0.5185': attribute type 1 has an invalid length. [ 1234.805206][T19853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1234.875057][T19855] bond3: (slave gretap1): making interface the new active one [ 1234.888653][T19855] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1235.028092][T19853] vlan3: entered allmulticast mode [ 1235.033589][T19853] bond3: entered allmulticast mode [ 1235.041473][T19853] gretap1: entered allmulticast mode [ 1235.052740][T19853] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1235.159912][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5187'. [ 1235.623537][T19862] veth0_to_team: entered promiscuous mode [ 1235.788747][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5191'. [ 1238.961454][T19921] overlayfs: failed to clone upperpath [ 1239.519533][T19929] __nla_validate_parse: 2 callbacks suppressed [ 1239.519615][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5215'. [ 1239.840176][T19933] overlayfs: failed to clone upperpath [ 1240.399531][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1240.399613][ T30] audit: type=1326 audit(2000001217.081:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.4.5222" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 1240.736875][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5225'. [ 1240.754068][T19954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.179039][T19959] syz_tun: left allmulticast mode [ 1241.184953][T19959] syz_tun: left promiscuous mode [ 1241.191256][T19959] bridge0: port 1(syz_tun) entered disabled state [ 1242.164742][T19971] tipc: Failed to remove unknown binding: 66,1,1/4:457734595/457734597 [ 1242.202815][T19971] tipc: Failed to remove unknown binding: 66,1,1/4:457734595/457734597 [ 1242.212077][T19971] tipc: Failed to remove unknown binding: 66,1,1/4:457734595/457734597 [ 1243.087471][T19984] netlink: 'syz.9.5237': attribute type 1 has an invalid length. [ 1243.356093][T19984] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1243.378220][T19988] tipc: Started in network mode [ 1243.385893][T19988] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1243.397098][T19988] tipc: Enabling of bearer rejected, failed to enable media [ 1243.463734][T19984] bond4: entered promiscuous mode [ 1243.469103][T19984] bond4: entered allmulticast mode [ 1243.476714][T19984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1244.357866][T20007] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1244.459140][ T30] audit: type=1326 audit(2000001221.131:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.481992][ T30] audit: type=1326 audit(2000001221.131:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.506881][ T30] audit: type=1326 audit(2000001221.141:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.530830][ T30] audit: type=1326 audit(2000001221.141:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.553471][ T30] audit: type=1326 audit(2000001221.151:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.577924][ T30] audit: type=1326 audit(2000001221.151:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.600712][ T30] audit: type=1326 audit(2000001221.151:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.623955][ T30] audit: type=1326 audit(2000001221.161:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1244.647488][ T30] audit: type=1326 audit(2000001221.161:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1245.943134][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5254'. [ 1246.021251][T10085] page_pool_release_retry() stalled pool shutdown: id 78, 50 inflight 424 sec [ 1248.091497][T10085] page_pool_release_retry() stalled pool shutdown: id 100, 640 inflight 121 sec [ 1248.336216][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5277'. [ 1250.242611][T20114] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.390924][T20114] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.493910][T20114] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.591921][T20114] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.764376][T11444] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.891810][T11460] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.904999][T11460] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.926931][T11460] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.900638][T20139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5301'. [ 1252.017493][T20141] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 1253.029773][T20147] infiniband syz2: set down [ 1253.035036][T20147] infiniband syz2: added ipvlan1 [ 1253.176478][T20155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.199886][T20147] RDS/IB: syz2: added [ 1253.205113][T20147] smc: adding ib device syz2 with port count 1 [ 1253.213131][T20147] smc: ib device syz2 port 1 has no pnetid [ 1253.806129][T20155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.894660][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5310'. [ 1254.296737][T20155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.597715][T20155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.960351][T11444] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.981760][T11444] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.002577][T11444] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.041426][T11444] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.015140][T20202] netlink: 'syz.4.5323': attribute type 28 has an invalid length. [ 1259.586827][T20210] bridge0: port 3(syz_tun) entered blocking state [ 1259.594208][T20210] bridge0: port 3(syz_tun) entered disabled state [ 1259.603790][T20210] syz_tun: entered allmulticast mode [ 1259.613134][T20210] syz_tun: entered promiscuous mode [ 1260.416541][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5334'. [ 1260.504224][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5335'. [ 1260.793696][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5337'. [ 1260.938125][T20230] bond0 (unregistering): (slave team0): Releasing backup interface [ 1260.996952][T20230] bond0 (unregistering): Released all slaves [ 1261.593590][T20245] netlink: 'syz.9.5342': attribute type 12 has an invalid length. [ 1264.482212][T20282] overlayfs: failed to clone upperpath [ 1265.466086][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1265.466164][ T30] audit: type=1326 audit(2000001242.151:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.521684][ T30] audit: type=1326 audit(2000001242.191:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.544653][ T30] audit: type=1326 audit(2000001242.191:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.568402][ T30] audit: type=1326 audit(2000001242.191:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.591775][ T30] audit: type=1326 audit(2000001242.191:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.617587][ T30] audit: type=1326 audit(2000001242.201:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.640733][ T30] audit: type=1326 audit(2000001242.201:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.663874][ T30] audit: type=1326 audit(2000001242.201:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.686385][ T30] audit: type=1326 audit(2000001242.201:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1265.709823][ T30] audit: type=1326 audit(2000001242.201:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1266.227576][T20308] veth1_to_bond: entered allmulticast mode [ 1266.249302][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5369'. [ 1266.280239][T20308] veth1_to_bond (unregistering): left allmulticast mode [ 1267.681657][T20333] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1267.692327][T20333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1267.701719][T20333] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1267.711177][T20333] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1267.727785][T20334] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.5378'. [ 1267.739154][T20334] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5378'. [ 1268.998357][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.005498][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.457284][T20367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5392'. [ 1269.559100][T20369] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5393'. [ 1269.642811][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5392'. [ 1271.328721][T20397] tipc: New replicast peer: 0.0.0.0 [ 1271.336849][T20397] tipc: Enabled bearer , priority 10 [ 1271.433747][T20397] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 1271.648629][T20402] overlayfs: failed to clone upperpath [ 1271.882713][T20405] __nla_validate_parse: 1 callbacks suppressed [ 1271.882797][T20405] netlink: 1331 bytes leftover after parsing attributes in process `syz.4.5404'. [ 1272.450998][T10264] tipc: Node number set to 1 [ 1273.306499][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1273.306580][ T30] audit: type=1326 audit(2000001249.991:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.472212][ T30] audit: type=1326 audit(2000001250.031:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.496954][ T30] audit: type=1326 audit(2000001250.051:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.520024][ T30] audit: type=1326 audit(2000001250.061:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.542977][ T30] audit: type=1326 audit(2000001250.131:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.566041][ T30] audit: type=1326 audit(2000001250.241:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.755205][ T30] audit: type=1326 audit(2000001250.321:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.779380][ T30] audit: type=1326 audit(2000001250.321:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.802784][ T30] audit: type=1326 audit(2000001250.371:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1273.825627][ T30] audit: type=1326 audit(2000001250.371:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.7.5413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1275.091866][T20446] netlink: 'syz.4.5421': attribute type 1 has an invalid length. [ 1275.223594][T20446] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1275.468421][T20452] vlan3: entered allmulticast mode [ 1275.474034][T20452] veth1: entered allmulticast mode [ 1275.485108][T20452] bond7: (slave vlan3): Opening slave failed [ 1275.798325][T20453] netlink: 'syz.5.5424': attribute type 12 has an invalid length. [ 1276.702178][T20466] netlink: 45 bytes leftover after parsing attributes in process `syz.5.5427'. [ 1277.184787][T20469] Invalid ELF header magic: != ELF [ 1277.441297][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5429'. [ 1277.575563][T20459] loop0: detected capacity change from 0 to 8192 [ 1278.798863][T18353] page_pool_release_retry() stalled pool shutdown: id 70, 640 inflight 604 sec [ 1280.851281][T18353] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1281.117136][T18353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.131586][T18353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.142755][T18353] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1281.155937][T18353] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1281.165932][T18353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.378130][T18353] usb 1-1: config 0 descriptor?? [ 1283.359903][T18353] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1283.450236][T18353] usb 1-1: USB disconnect, device number 13 [ 1285.005160][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1285.005236][ T30] audit: type=1804 audit(2000001261.681:1347): pid=20522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5443" name="file0" dev="tmpfs" ino=4920 res=1 errno=0 [ 1286.385190][T20537] overlayfs: failed to clone upperpath [ 1286.621646][T20539] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5448'. [ 1288.228514][T20559] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1288.388064][T20564] tipc: Enabling of bearer rejected, failed to enable media [ 1289.711987][T20583] batadv_slave_0: entered allmulticast mode [ 1289.745264][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5463'. [ 1290.455733][T20597] netlink: 'syz.4.5468': attribute type 10 has an invalid length. [ 1290.541141][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5468'. [ 1291.554891][T20617] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.696301][T20617] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.806689][T20617] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.939504][T20617] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.284439][T11460] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.354461][T11460] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.441980][T11444] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.553325][T11460] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.547869][T20655] overlayfs: failed to clone upperpath [ 1294.178681][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5491'. [ 1294.332196][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5492'. [ 1294.911657][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5497'. [ 1295.183097][T15348] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 1297.366748][T20704] dvmrp0: entered allmulticast mode [ 1299.126214][T20731] batman_adv: batadv0: Adding interface: dummy0 [ 1299.133927][T20731] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.159794][T20731] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1299.337059][T20736] overlayfs: failed to clone upperpath [ 1300.540913][T10257] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 1302.493541][T10257] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1302.501782][T10257] usb 1-1: no configurations [ 1302.506691][T10257] usb 1-1: can't read configurations, error -22 [ 1302.869337][ T30] audit: type=1326 audit(2000001279.551:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1302.990073][ T30] audit: type=1326 audit(2000001279.591:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.013475][ T30] audit: type=1326 audit(2000001279.591:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.036020][ T30] audit: type=1326 audit(2000001279.591:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.059127][ T30] audit: type=1326 audit(2000001279.591:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.083419][ T30] audit: type=1326 audit(2000001279.591:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.106531][ T30] audit: type=1326 audit(2000001279.591:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.129639][ T30] audit: type=1326 audit(2000001279.591:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.152665][ T30] audit: type=1326 audit(2000001279.601:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1303.175681][ T30] audit: type=1326 audit(2000001279.601:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20755 comm="syz.9.5528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 1304.105419][T20761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5530'. [ 1304.582256][T20768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5533'. [ 1306.751425][T18353] page_pool_release_retry() stalled pool shutdown: id 78, 50 inflight 485 sec [ 1308.084121][T20785] uprobe: syz.4.5539:20785 failed to unregister, leaking uprobe [ 1308.397359][T20791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5541'. [ 1308.815552][T18353] page_pool_release_retry() stalled pool shutdown: id 100, 640 inflight 182 sec [ 1309.329166][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1311.592790][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5558'. [ 1312.178109][T20841] netlink: 'syz.0.5561': attribute type 1 has an invalid length. [ 1312.374619][T20845] bond4: entered promiscuous mode [ 1312.380000][T20845] bond4: entered allmulticast mode [ 1312.389099][T20845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1312.453873][T20841] bridge3: entered promiscuous mode [ 1312.460108][T20841] bridge3: entered allmulticast mode [ 1312.469173][T20841] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 1312.511300][ T3883] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1312.641215][T11459] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1313.104334][T20854] loop0: detected capacity change from 0 to 256 [ 1313.136619][T20854] exfat: Invalid uid '0x00000000ffffffff' [ 1313.181503][T20854] bpf: Bad value for 'uid' [ 1313.257171][T20854] loop0: detected capacity change from 0 to 512 [ 1314.676822][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5573'. [ 1315.164893][T20884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5574'. [ 1315.339885][T20887] netlink: 'syz.0.5576': attribute type 1 has an invalid length. [ 1315.442327][T20887] bond5: entered promiscuous mode [ 1315.450799][T20887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1315.628531][T20889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1315.637879][T20889] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 1315.648261][T20889] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1315.671189][T20889] bond5: (slave gre1): making interface the new active one [ 1315.679776][T20889] gre1: entered promiscuous mode [ 1315.694336][T20889] bond5: (slave gre1): Enslaving as an active interface with an up link [ 1316.431882][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1316.432076][ T30] audit: type=1804 audit(2000001293.111:1360): pid=20902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5582" name="/newroot/310/file0" dev="tmpfs" ino=1733 res=1 errno=0 [ 1316.446068][T20902] ref_ctr increment failed for inode: 0x6c5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88804a9f1e00 [ 1316.544014][T20900] uprobe: syz.0.5582:20900 failed to unregister, leaking uprobe [ 1318.165923][T20896] bond1: left promiscuous mode [ 1318.172525][T20896] bond2: left promiscuous mode [ 1318.249540][T20896] bond3: left promiscuous mode [ 1318.517353][T20896] ip6gretap1: left allmulticast mode [ 1318.576584][ T3480] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.613776][ T3480] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.633532][ T3480] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.645200][ T3825] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.939713][T20938] syz.4.5594(20938): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1319.137764][T20944] netlink: 'syz.5.5595': attribute type 1 has an invalid length. [ 1319.233692][T20944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.341229][T20944] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1319.418649][T20944] bond0: (slave ip6gretap2): making interface the new active one [ 1319.432884][T20944] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1319.904469][T20956] netlink: 'syz.7.5598': attribute type 1 has an invalid length. [ 1320.720606][T20962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1320.736401][T20962] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 1321.063458][T20960] bond1: entered promiscuous mode [ 1321.068840][T20960] bond2: entered promiscuous mode [ 1321.075575][T20960] bond1: entered allmulticast mode [ 1321.081192][T20960] bond2: entered allmulticast mode [ 1321.088210][T20960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1321.562210][T20969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5601'. [ 1321.877731][T20976] bridge_slave_0: left promiscuous mode [ 1321.887613][T20976] veth0_to_team: left promiscuous mode [ 1323.586601][T20998] overlayfs: failed to clone upperpath [ 1323.700957][T18353] page_pool_release_retry() stalled pool shutdown: id 108, 768 inflight 60 sec [ 1324.407989][T21010] veth1_vlan: Caught tx_queue_len zero misconfig [ 1324.524287][T21013] loop0: detected capacity change from 0 to 128 [ 1324.632867][T21013] syz.0.5618: attempt to access beyond end of device [ 1324.632867][T21013] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 1324.672666][T21013] syz.0.5618: attempt to access beyond end of device [ 1324.672666][T21013] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 1324.687918][T21013] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 1324.697479][T21013] syz.0.5618: attempt to access beyond end of device [ 1324.697479][T21013] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 1324.712255][T21013] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 1324.732018][T21013] syz.0.5618: attempt to access beyond end of device [ 1324.732018][T21013] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 1325.033574][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5619'. [ 1325.121762][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5619'. [ 1326.067792][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5625'. [ 1326.225611][T21036] netlink: 'syz.9.5625': attribute type 5 has an invalid length. [ 1326.233886][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5625'. [ 1327.055647][T21046] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1327.289820][T21049] batadv_slave_0: entered promiscuous mode [ 1327.343034][T21049] batadv_slave_0: left promiscuous mode [ 1327.841194][ T30] audit: type=1326 audit(2000001560.527:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1327.865292][ T30] audit: type=1326 audit(2000001560.527:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.033181][ T30] audit: type=1326 audit(2000001560.607:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.056287][ T30] audit: type=1326 audit(2000001560.607:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.079830][ T30] audit: type=1326 audit(2000001560.607:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.102778][ T30] audit: type=1326 audit(2000001560.607:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.125702][ T30] audit: type=1326 audit(2000001560.617:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.148782][ T30] audit: type=1326 audit(2000001560.617:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.172200][ T30] audit: type=1326 audit(2000001560.627:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1328.195191][ T30] audit: type=1326 audit(2000001560.627:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.0.5636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1329.310819][T18353] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1329.551783][T18353] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1329.560255][T18353] usb 1-1: config 0 has no interface number 0 [ 1329.566786][T18353] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1329.637511][T18353] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1329.647764][T18353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.656172][T18353] usb 1-1: Product: syz [ 1329.660782][T18353] usb 1-1: Manufacturer: syz [ 1329.665560][T18353] usb 1-1: SerialNumber: syz [ 1329.751820][T18353] usb 1-1: config 0 descriptor?? [ 1330.446971][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.453939][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.647206][T18353] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1331.264525][ T3883] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.300895][ T3883] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.323143][ T3883] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.348025][ T3883] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.119399][T18353] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1333.131942][T18353] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1333.176695][T18353] usb 1-1: USB disconnect, device number 16 [ 1333.986775][T21146] netlink: 'syz.7.5668': attribute type 8 has an invalid length. [ 1334.521280][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1334.521386][ T30] audit: type=1804 audit(2000001567.207:1385): pid=21151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5671" name="bus" dev="ramfs" ino=72006 res=1 errno=0 [ 1334.659573][T21156] netlink: 'syz.5.5672': attribute type 1 has an invalid length. [ 1334.742167][T21156] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1334.886788][T21156] vlan4: entered promiscuous mode [ 1334.892578][T21156] bond7: entered promiscuous mode [ 1334.898529][T21156] vlan4: entered allmulticast mode [ 1334.904221][T21156] bond7: entered allmulticast mode [ 1335.393677][T21163] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1335.409074][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5673'. [ 1335.562906][T21165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5675'. [ 1336.703679][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5678'. [ 1339.434525][T18353] page_pool_release_retry() stalled pool shutdown: id 70, 640 inflight 664 sec [ 1339.480103][T21219] netlink: 'syz.4.5697': attribute type 4 has an invalid length. [ 1339.836235][T21221] netlink: 'syz.4.5698': attribute type 32 has an invalid length. [ 1339.846049][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5698'. [ 1339.855886][T21221] netlink: 'syz.4.5698': attribute type 32 has an invalid length. [ 1339.973169][T21224] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5699'. [ 1343.981971][T21271] syz_tun (unregistering): left allmulticast mode [ 1343.988650][T21271] syz_tun (unregistering): left promiscuous mode [ 1343.998568][T21271] bridge0: port 3(syz_tun) entered disabled state [ 1344.182795][T21273] bridge: RTM_NEWNEIGH with invalid ether address [ 1345.129164][T21290] tipc: Enabling of bearer rejected, failed to enable media [ 1345.397755][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5723'. [ 1345.407073][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5723'. [ 1345.416883][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5723'. [ 1345.505852][T21300] lo: entered promiscuous mode [ 1345.513108][T21300] lo: entered allmulticast mode [ 1345.539662][T21300] tunl0: entered promiscuous mode [ 1345.545055][T21300] tunl0: entered allmulticast mode [ 1345.557077][T21300] gre0: entered promiscuous mode [ 1345.563082][T21300] gre0: entered allmulticast mode [ 1345.579527][T21300] gretap0: left promiscuous mode [ 1345.584921][T21300] gretap0: entered promiscuous mode [ 1345.601774][T21300] erspan0: entered allmulticast mode [ 1345.614410][T21300] ip_vti0: entered promiscuous mode [ 1345.619855][T21300] ip_vti0: entered allmulticast mode [ 1345.632301][T21300] ip6_vti0: entered promiscuous mode [ 1345.637816][T21300] ip6_vti0: entered allmulticast mode [ 1345.650771][T21300] sit0: entered promiscuous mode [ 1345.655924][T21300] sit0: entered allmulticast mode [ 1345.676454][T21300] ip6tnl0: entered promiscuous mode [ 1345.683905][T21300] ip6tnl0: entered allmulticast mode [ 1345.696989][T21300] ip6gre0: entered promiscuous mode [ 1345.702530][T21300] ip6gre0: entered allmulticast mode [ 1345.714066][T21300] ip6gretap0: entered promiscuous mode [ 1345.719664][T21300] ip6gretap0: entered allmulticast mode [ 1345.732260][T21300] bridge0: entered promiscuous mode [ 1345.737626][T21300] bridge0: entered allmulticast mode [ 1345.753131][T21300] dummy0: entered promiscuous mode [ 1345.758434][T21300] dummy0: entered allmulticast mode [ 1345.765805][T21300] batman_adv: batadv0: Interface activated: dummy0 [ 1345.774744][T21300] batadv0: mtu less than device minimum [ 1345.783736][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.795976][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.807971][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.820046][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.832253][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.844244][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.856236][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.868263][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.880493][T21300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1345.911565][T21300] nlmon0: entered promiscuous mode [ 1345.916845][T21300] nlmon0: entered allmulticast mode [ 1346.045348][T21300] caif0: entered promiscuous mode [ 1346.051696][T21300] caif0: entered allmulticast mode [ 1346.381271][T21306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5728'. [ 1347.148650][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5732'. [ 1347.309218][T21319] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5734'. [ 1348.336916][T21342] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5743'. [ 1349.050197][T21352] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5747'. [ 1349.192179][T21354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5749'. [ 1349.767228][T21367] loop0: detected capacity change from 0 to 128 [ 1349.824940][T21367] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1349.843376][T21367] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.994229][T21371] ref_ctr_offset mismatch. inode: 0x1486 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 1350.306004][T16445] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1350.585664][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5756'. [ 1353.197797][T21413] netlink: 'syz.0.5771': attribute type 1 has an invalid length. [ 1353.275789][T21413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1353.322161][T21416] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1353.417707][T21416] bond6: entered allmulticast mode [ 1353.498209][T21413] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1357.251552][T10085] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1357.434737][T10085] usb 1-1: Using ep0 maxpacket: 16 [ 1357.463640][T10085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1357.517135][T10085] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1357.526822][T10085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.535396][T10085] usb 1-1: Product: syz [ 1357.539762][T10085] usb 1-1: Manufacturer: syz [ 1357.545758][T10085] usb 1-1: SerialNumber: syz [ 1357.564979][T10085] usb 1-1: config 0 descriptor?? [ 1357.630041][T10085] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1357.639875][T10085] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1357.904678][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5798'. [ 1358.278348][T10085] em28xx 1-1:0.0: chip ID is em2765 [ 1358.537128][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5801'. [ 1358.696317][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5800'. [ 1358.905623][T10085] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1358.914198][T10085] em28xx 1-1:0.0: board has no eeprom [ 1359.414267][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5806'. [ 1359.962593][T21524] 9pnet_fd: Insufficient options for proto=fd [ 1360.018002][T21480] em28xx 1-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1360.072755][T10085] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1360.081306][T10085] em28xx 1-1:0.0: dvb set to bulk mode. [ 1360.091809][T18350] em28xx 1-1:0.0: Binding DVB extension [ 1360.127614][T10085] usb 1-1: USB disconnect, device number 17 [ 1360.135535][T10085] em28xx 1-1:0.0: Disconnecting em28xx [ 1360.285448][T18350] em28xx 1-1:0.0: Registering input extension [ 1360.302724][T10085] em28xx 1-1:0.0: Closing input extension [ 1360.357178][T10085] em28xx 1-1:0.0: Freeing device [ 1363.511732][T21573] netlink: 'syz.4.5826': attribute type 13 has an invalid length. [ 1364.281668][T21585] binder: 21580:21585 ioctl c0306201 80000680 returned -14 [ 1364.323916][T21573] batman_adv: batadv0: Interface deactivated: dummy0 [ 1364.801207][T21575] lo: entered allmulticast mode [ 1364.814459][T21575] tunl0: entered allmulticast mode [ 1364.824735][T21575] gre0: entered allmulticast mode [ 1364.836543][T21575] gretap0: entered allmulticast mode [ 1364.847351][T21575] erspan0: entered allmulticast mode [ 1364.857564][T21575] ip_vti0: entered allmulticast mode [ 1364.867695][T21575] ip6_vti0: entered allmulticast mode [ 1364.878307][T21575] sit0: entered allmulticast mode [ 1364.904369][T21575] ip6tnl0: entered allmulticast mode [ 1365.000940][T21575] ip6gre0: entered allmulticast mode [ 1365.013806][T21575] ip6gretap0: entered allmulticast mode [ 1365.028456][T21575] bridge0: entered allmulticast mode [ 1365.041658][T21575] vcan0: entered allmulticast mode [ 1365.054016][T21575] bond0: entered allmulticast mode [ 1365.059466][T21575] bond_slave_0: entered allmulticast mode [ 1365.073327][T21575] bond_slave_1: entered allmulticast mode [ 1365.085348][T21575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.097291][T21575] team0: entered allmulticast mode [ 1365.102822][T21575] team_slave_0: entered allmulticast mode [ 1365.108833][T21575] team_slave_1: entered allmulticast mode [ 1365.118534][T21575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.130912][T21575] dummy0: entered allmulticast mode [ 1365.146297][T21575] nlmon0: entered allmulticast mode [ 1365.158358][T21575] batadv0: entered allmulticast mode [ 1365.169758][T21575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.197468][T21575] veth0: entered allmulticast mode [ 1365.208655][T21575] veth1: entered allmulticast mode [ 1365.221758][T21575] veth0_to_bridge: entered allmulticast mode [ 1365.241043][T21575] veth1_to_bridge: entered allmulticast mode [ 1365.258641][T21575] veth0_to_bond: entered allmulticast mode [ 1365.279796][T21575] veth1_to_bond: entered allmulticast mode [ 1365.299574][T21575] veth0_to_team: entered allmulticast mode [ 1365.318117][T21575] veth1_to_team: entered allmulticast mode [ 1365.328024][T21590] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1365.336644][T21575] veth0_to_batadv: entered allmulticast mode [ 1365.350807][T21575] batadv_slave_0: entered allmulticast mode [ 1365.362968][T21575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.372892][T21575] veth1_to_batadv: entered allmulticast mode [ 1365.385600][T21575] batadv_slave_1: entered allmulticast mode [ 1365.394582][T21575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.404383][T21575] xfrm0: entered allmulticast mode [ 1365.417803][T21575] veth0_to_hsr: entered allmulticast mode [ 1365.429616][T21575] hsr_slave_0: entered allmulticast mode [ 1365.439548][T21575] veth1_to_hsr: entered allmulticast mode [ 1365.453344][T21575] hsr_slave_1: entered allmulticast mode [ 1365.463957][T21575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1365.475102][T21575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1365.486110][T21575] hsr0: entered allmulticast mode [ 1365.498513][T21575] veth1_virt_wifi: entered allmulticast mode [ 1365.511187][T21575] veth0_virt_wifi: entered allmulticast mode [ 1365.524389][T21575] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1365.538674][T21575] veth1_vlan: left promiscuous mode [ 1365.545460][T21575] veth1_vlan: entered allmulticast mode [ 1365.557445][T21575] veth0_vlan: left promiscuous mode [ 1365.563778][T21575] veth0_vlan: entered allmulticast mode [ 1365.573651][T21575] veth0_vlan: entered promiscuous mode [ 1365.593380][T21575] vlan0: entered allmulticast mode [ 1365.603470][T21575] vlan1: entered allmulticast mode [ 1365.612126][T21575] veth1_vlan: entered promiscuous mode [ 1365.617930][T21575] macvlan0: entered allmulticast mode [ 1365.629807][T21575] macvlan1: entered allmulticast mode [ 1365.641609][T21575] ipvlan0: entered allmulticast mode [ 1365.655021][T21575] ipvlan1: entered allmulticast mode [ 1365.667647][T21575] veth1_macvtap: left promiscuous mode [ 1365.673550][T21575] veth1_macvtap: entered allmulticast mode [ 1365.687876][T21575] veth0_macvtap: left promiscuous mode [ 1365.693830][T21575] veth0_macvtap: entered allmulticast mode [ 1365.705817][T21575] veth0_macvtap: entered promiscuous mode [ 1365.712524][T21575] macvtap0: entered allmulticast mode [ 1365.723857][T21575] veth1_macvtap: entered promiscuous mode [ 1365.729892][T21575] macsec0: entered allmulticast mode [ 1365.741496][T21575] geneve0: entered allmulticast mode [ 1365.757537][T21575] geneve1: entered allmulticast mode [ 1365.773557][T21575] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1365.786018][T21575] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 1365.798712][T21575] bridge1: entered allmulticast mode [ 1365.863404][T21575] vxlan0: left promiscuous mode [ 1365.869144][T21575] vxlan0: entered allmulticast mode [ 1365.878353][T21575] netdevsim netdevsim7 eth0: entered allmulticast mode [ 1365.893807][T21575] netdevsim netdevsim7 eth1: entered allmulticast mode [ 1365.908287][T21575] netdevsim netdevsim7 eth2: entered allmulticast mode [ 1365.923045][T21575] netdevsim netdevsim7 eth3: entered allmulticast mode [ 1365.960647][T21575] bridge2: entered allmulticast mode [ 1365.973643][T21575] bond1: left promiscuous mode [ 1365.978653][T21575] bond2: left promiscuous mode [ 1365.986659][T21575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1366.001567][T21575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1366.013383][T21575] veth2: entered allmulticast mode [ 1366.023974][T21575] veth3: entered allmulticast mode [ 1366.033580][T21575] veth4: entered allmulticast mode [ 1366.043652][T21575] veth5: entered allmulticast mode [ 1366.053667][T21575] veth6: entered allmulticast mode [ 1366.065160][T21575] veth7: entered allmulticast mode [ 1366.087623][T11460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.095344][T11460] bridge0: port 1(bridge_slave_0) entered listening state [ 1366.110756][T11460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.118270][T11460] bridge0: port 2(bridge_slave_1) entered listening state [ 1366.525271][T20925] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1366.534117][T20925] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.592962][T20925] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1366.601941][T20925] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.675503][T20925] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1366.684167][T20925] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.759308][T20925] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1366.768497][T20925] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.197655][T21608] overlayfs: failed to clone upperpath [ 1367.612604][T18350] page_pool_release_retry() stalled pool shutdown: id 78, 50 inflight 546 sec [ 1367.641094][ T30] audit: type=1326 audit(2000001600.317:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.664279][ T30] audit: type=1326 audit(2000001600.317:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.686899][ T30] audit: type=1326 audit(2000001600.327:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1367.711391][ T30] audit: type=1326 audit(2000001600.327:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.734065][ T30] audit: type=1326 audit(2000001600.347:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.756499][ T30] audit: type=1326 audit(2000001600.347:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.778998][ T30] audit: type=1326 audit(2000001600.347:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.801937][ T30] audit: type=1326 audit(2000001600.347:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.824486][ T30] audit: type=1326 audit(2000001600.347:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1367.846858][ T30] audit: type=1326 audit(2000001600.347:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.0.5840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d558 code=0x7ffc0000 [ 1368.254239][T21621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5843'. [ 1368.675518][T21627] overlayfs: failed to clone upperpath [ 1368.734304][T21627] overlayfs: failed to clone upperpath [ 1368.783397][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5844'. [ 1369.594924][T21643] netlink: 'syz.9.5852': attribute type 4 has an invalid length. [ 1369.694070][T18350] page_pool_release_retry() stalled pool shutdown: id 100, 640 inflight 243 sec [ 1369.864669][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5853'. [ 1370.030093][T21646] vlan3: entered allmulticast mode [ 1370.036961][T21646] bridge13: port 1(vlan3) entered blocking state [ 1370.044020][T21646] bridge13: port 1(vlan3) entered disabled state [ 1370.056857][T21646] vlan3: entered promiscuous mode [ 1371.189778][T21672] xfrm0: entered promiscuous mode [ 1371.197500][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5863'. [ 1371.212357][T21672] xfrm0: entered allmulticast mode [ 1374.045539][T21716] syzkaller0: entered promiscuous mode [ 1374.052106][T21716] syzkaller0: entered allmulticast mode [ 1374.546409][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5880'. [ 1375.819255][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1375.863189][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1375.883701][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1375.907888][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1376.783672][T21756] siw: device registration error -23 [ 1376.828065][T21756] smc: removing ib device syz2 [ 1377.735250][T21767] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5897'. [ 1378.935991][T21771] overlayfs: failed to clone upperpath [ 1379.043134][T21771] overlayfs: failed to clone upperpath [ 1379.134775][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5900'. [ 1380.141115][T21784] netlink: 'syz.4.5905': attribute type 1 has an invalid length. [ 1380.246169][T21784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1380.504336][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5905'. [ 1382.973210][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5919'. [ 1383.011009][T21832] netlink: 'syz.4.5920': attribute type 1 has an invalid length. [ 1383.162665][T21834] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1383.173968][T21834] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1383.195491][T21834] bond9: (slave xfrm1): making interface the new active one [ 1383.209433][T21834] bond9: (slave xfrm1): Enslaving as an active interface with an up link [ 1383.375646][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5920'. [ 1383.476695][T21832] bond9 (unregistering): (slave xfrm1): Releasing backup interface [ 1383.525862][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5922'. [ 1383.532488][T21832] bond9 (unregistering): Released all slaves [ 1384.017224][T18350] page_pool_release_retry() stalled pool shutdown: id 108, 768 inflight 120 sec [ 1384.616079][T21855] netlink: 460 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1384.628411][T21855] netlink: 460 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1384.714997][T21855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1384.724740][T21855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1385.395183][T21867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5934'. [ 1385.551091][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5934'. [ 1385.845570][T21874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5938'. [ 1388.003851][T21907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5949'. [ 1390.478330][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 1390.478385][ T30] audit: type=1326 audit(2000001623.157:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.507547][ T30] audit: type=1326 audit(2000001623.157:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.734565][ T30] audit: type=1326 audit(2000001623.267:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.758163][ T30] audit: type=1326 audit(2000001623.267:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.781414][ T30] audit: type=1326 audit(2000001623.267:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.804007][ T30] audit: type=1326 audit(2000001623.307:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.826841][ T30] audit: type=1326 audit(2000001623.307:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.850257][ T30] audit: type=1326 audit(2000001623.307:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.874229][ T30] audit: type=1326 audit(2000001623.307:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1390.897774][ T30] audit: type=1326 audit(2000001623.307:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.7.5957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1391.139594][T21938] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -14123, delta: 1 [ 1391.151209][T21938] ref_ctr increment failed for inode: 0x155e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804a9f1e00 [ 1391.235128][T21941] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -14123, delta: -1 [ 1391.244053][T21941] ref_ctr decrement failed for inode: 0x155e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804a9f1e00 [ 1391.258245][T21941] uprobe: syz.9.5959:21941 failed to unregister, leaking uprobe [ 1391.872413][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.879075][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.364068][T10085] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1392.567578][T10085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1392.581862][T10085] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1392.591445][T10085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.620356][T10085] usb 1-1: config 0 descriptor?? [ 1392.638188][T21947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1396.334582][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1396.342964][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1396.881315][T10085] usbhid 1-1:0.0: can't add hid device: -71 [ 1396.887949][T10085] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1396.962342][T10085] usb 1-1: USB disconnect, device number 18 [ 1398.545080][T21983] netlink: 'syz.9.5974': attribute type 1 has an invalid length. [ 1398.641355][T21983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1398.656774][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1398.656854][ T30] audit: type=1326 audit(2000001631.347:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1398.686594][ T30] audit: type=1326 audit(2000001631.347:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1398.742678][ T30] audit: type=1326 audit(2000001631.417:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1398.768766][ T30] audit: type=1326 audit(2000001631.417:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1398.794413][ T30] audit: type=1326 audit(2000001631.417:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1398.796664][T21983] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1398.817134][ T30] audit: type=1326 audit(2000001631.427:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1398.817378][ T30] audit: type=1326 audit(2000001631.457:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1398.837025][T21983] bond5: (slave batadv1): making interface the new active one [ 1398.888697][T21983] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1398.945171][T21986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5974'. [ 1399.046276][ T30] audit: type=1326 audit(2000001631.607:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1399.072961][ T30] audit: type=1326 audit(2000001631.607:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1399.095853][ T30] audit: type=1326 audit(2000001631.607:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.4.5973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1399.174889][T21986] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1399.222664][T13747] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1399.242237][T21986] bond5 (unregistering): Released all slaves [ 1399.452676][T13747] usb 1-1: Using ep0 maxpacket: 8 [ 1399.472084][T13747] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1399.483588][T13747] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1399.500108][T13747] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1399.507229][T13747] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1399.516901][T13747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.546645][T13747] usb 1-1: config 0 descriptor?? [ 1399.666787][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5977'. [ 1400.422062][T18350] page_pool_release_retry() stalled pool shutdown: id 70, 640 inflight 725 sec [ 1400.654228][T13747] usbhid 1-1:0.0: can't add hid device: -71 [ 1400.661229][T13747] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1400.725825][T13747] usb 1-1: USB disconnect, device number 19 [ 1401.577213][T22026] bridge0: port 1(syz_tun) entered blocking state [ 1401.584714][T22026] bridge0: port 1(syz_tun) entered disabled state [ 1401.593405][T22026] syz_tun: entered allmulticast mode [ 1401.602304][T22026] syz_tun: entered promiscuous mode [ 1403.011254][T18350] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1403.182552][T18350] usb 1-1: Using ep0 maxpacket: 32 [ 1403.195966][T18350] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1403.207493][T18350] usb 1-1: config 0 has no interface number 0 [ 1403.214789][T18350] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1403.226919][T18350] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1403.311434][T18350] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1403.324040][T18350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.333963][T18350] usb 1-1: Product: syz [ 1403.338334][T18350] usb 1-1: Manufacturer: syz [ 1403.343614][T18350] usb 1-1: SerialNumber: syz [ 1403.392844][T18350] usb 1-1: config 0 descriptor?? [ 1403.636644][T18350] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1403.666147][T18350] cx231xx 1-1:0.1: Failed to read PCB config [ 1403.673683][T18350] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 1403.696570][T18350] usb 1-1: USB disconnect, device number 20 [ 1404.082983][T22063] overlayfs: failed to clone upperpath [ 1404.200846][T18350] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1404.404294][T18350] usb 1-1: Using ep0 maxpacket: 32 [ 1404.419970][T18350] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1404.428822][T18350] usb 1-1: config 0 has no interface number 0 [ 1404.438272][T18350] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1404.449462][T18350] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1404.529661][T18350] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1404.531823][T22070] netlink: 'syz.9.6002': attribute type 4 has an invalid length. [ 1404.539230][T18350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.559282][T18350] usb 1-1: Product: syz [ 1404.564742][T18350] usb 1-1: Manufacturer: syz [ 1404.569539][T18350] usb 1-1: SerialNumber: syz [ 1404.593306][T18350] usb 1-1: config 0 descriptor?? [ 1404.886113][T18350] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1404.927923][T18350] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1405.051377][T18350] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1405.066847][T18350] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1405.087462][T18350] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1405.117515][T18350] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1405.133968][T18350] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1405.143143][T18350] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -71 [ 1405.187057][T15348] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 1405.198924][T18350] i2c i2c-2: Added multiplexed i2c bus 4 [ 1405.261586][T18350] i2c i2c-2: Added multiplexed i2c bus 5 [ 1405.268563][T18350] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1405.281890][T18350] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1405.595800][T18350] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 1405.616634][T18350] usb 1-1: USB disconnect, device number 21 [ 1406.414488][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1406.414545][ T30] audit: type=1804 audit(2000001639.097:1592): pid=22090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.6010" name="bus" dev="ramfs" ino=75862 res=1 errno=0 [ 1406.497239][ T30] audit: type=1804 audit(2000001639.187:1593): pid=22090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.6010" name="bus" dev="ramfs" ino=75862 res=1 errno=0 [ 1406.804521][ T30] audit: type=1326 audit(2000001639.497:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1406.831460][ T30] audit: type=1326 audit(2000001639.497:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1407.694255][ T30] audit: type=1326 audit(2000001639.577:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1407.717532][ T30] audit: type=1326 audit(2000001639.587:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1407.744187][ T30] audit: type=1326 audit(2000001640.367:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1407.767419][ T30] audit: type=1326 audit(2000001640.367:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1407.793328][ T30] audit: type=1326 audit(2000001640.367:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1407.816243][ T30] audit: type=1326 audit(2000001640.377:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.7.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1408.407563][T22096] netlink: 'syz.5.6012': attribute type 12 has an invalid length. [ 1409.220207][T15348] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1409.229111][T15348] Bluetooth: hci1: Injecting HCI hardware error event [ 1409.238038][T15348] Bluetooth: hci1: hardware error 0x00 [ 1410.099241][T22121] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6020'. [ 1410.144079][T22121] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6020'. [ 1410.665129][T22127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6023'. [ 1410.674623][T22127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6023'. [ 1411.291096][T15348] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1411.709373][T22145] netlink: 'syz.5.6030': attribute type 3 has an invalid length. [ 1411.722021][T22145] netlink: 'syz.5.6030': attribute type 3 has an invalid length. [ 1412.529387][T22153] tipc: Enabling of bearer rejected, failed to enable media [ 1412.885580][T22158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6034'. [ 1413.898893][T22163] ref_ctr_offset mismatch. inode: 0x75e offset: 0x0 ref_ctr_offset(old): 0x80000100 ref_ctr_offset(new): 0x0 [ 1414.588478][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1414.588556][ T30] audit: type=1326 audit(2000001647.277:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.620827][ T30] audit: type=1326 audit(2000001647.307:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.643832][ T30] audit: type=1326 audit(2000001647.317:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.666983][ T30] audit: type=1326 audit(2000001647.317:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.689628][ T30] audit: type=1326 audit(2000001647.317:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.713433][ T30] audit: type=1326 audit(2000001647.317:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.738590][ T30] audit: type=1326 audit(2000001647.317:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.761407][ T30] audit: type=1326 audit(2000001647.317:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.785865][ T30] audit: type=1326 audit(2000001647.317:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1414.809344][ T30] audit: type=1326 audit(2000001647.327:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.5.6044" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1415.650176][T22198] binder_alloc: 22197: pid 22197 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1415.704887][T22198] binder_alloc: 22197: pid 22197 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1415.744590][T22202] overlayfs: failed to clone upperpath [ 1416.322472][T22210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6052'. [ 1417.266968][T22218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.455576][T22220] netlink: 'syz.0.6057': attribute type 83 has an invalid length. [ 1419.937559][T22267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6073'. [ 1420.759619][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6077'. [ 1420.796396][T22279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6077'. [ 1421.454341][T22288] overlayfs: failed to clone upperpath [ 1425.491338][T13747] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1425.722025][T13747] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1425.731601][T13747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.739821][T13747] usb 1-1: Product: syz [ 1425.744549][T13747] usb 1-1: Manufacturer: syz [ 1425.749367][T13747] usb 1-1: SerialNumber: syz [ 1426.049225][T22366] netlink: 'syz.9.6109': attribute type 1 has an invalid length. [ 1426.202989][T13747] net_ratelimit: 11 callbacks suppressed [ 1426.203091][T13747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1426.221936][T13747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1426.259580][T22366] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6109'. [ 1426.276211][T22366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1426.410699][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.418289][ C0] bridge0: topology change detected, propagating [ 1426.426058][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.433575][ C0] bridge0: topology change detected, propagating [ 1426.462709][T22366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1426.491726][T22366] bond5: (slave geneve2): making interface the new active one [ 1426.506163][T22366] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1426.576829][T20925] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1426.597235][T20925] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1426.658407][T11460] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1426.691838][T11460] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1427.774484][T18350] page_pool_release_retry() stalled pool shutdown: id 78, 50 inflight 606 sec [ 1428.126286][T13747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 1428.138949][T13747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1428.149864][T13747] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1428.227128][T13747] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1428.302064][T13747] usb 1-1: USB disconnect, device number 22 [ 1428.932254][T22398] netlink: 'syz.7.6119': attribute type 10 has an invalid length. [ 1428.940803][T22398] dummy0: left allmulticast mode [ 1428.972064][T22398] dummy0: entered allmulticast mode [ 1428.982286][T22398] team0: Port device dummy0 added [ 1429.879235][T18350] page_pool_release_retry() stalled pool shutdown: id 100, 640 inflight 303 sec [ 1430.287654][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6130'. [ 1430.305253][T22416] 9pnet_fd: p9_fd_create_tcp (22416): problem connecting socket to 127.0.0.1 [ 1430.601257][T22422] bond3: (slave veth9): Enslaving as an active interface with an up link [ 1430.634348][T22418] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6130'. [ 1430.651004][T22418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1431.285685][T22434] netlink: 'syz.0.6136': attribute type 10 has an invalid length. [ 1431.308870][T22434] team0: Port device dummy0 added [ 1432.067424][T22449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1432.678586][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1432.678663][ T30] audit: type=1326 audit(2000001665.367:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.707980][ T30] audit: type=1326 audit(2000001665.367:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.731954][ T30] audit: type=1326 audit(2000001665.367:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.756768][ T30] audit: type=1326 audit(2000001665.367:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.780921][ T30] audit: type=1326 audit(2000001665.377:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.803566][ T30] audit: type=1326 audit(2000001665.377:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.828395][ T30] audit: type=1326 audit(2000001665.377:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.854473][ T30] audit: type=1326 audit(2000001665.377:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.877044][ T30] audit: type=1326 audit(2000001665.377:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1432.899845][ T30] audit: type=1326 audit(2000001665.387:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.6143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1433.671597][T22465] netlink: 'syz.4.6148': attribute type 10 has an invalid length. [ 1433.680031][T22465] dummy0: left promiscuous mode [ 1433.685486][T22465] dummy0: left allmulticast mode [ 1433.691557][T22465] batman_adv: batadv0: Removing interface: dummy0 [ 1433.778550][T22466] netlink: 'syz.4.6148': attribute type 10 has an invalid length. [ 1434.178520][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6150'. [ 1434.300816][T13747] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1434.461275][T13747] usb 1-1: Using ep0 maxpacket: 32 [ 1434.505780][T13747] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1434.542608][T13747] usb 1-1: config 160 has an invalid interface number: 100 but max is 0 [ 1434.551448][T13747] usb 1-1: config 160 has no interface number 0 [ 1434.557927][T13747] usb 1-1: config 160 interface 100 altsetting 129 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 1434.572706][T13747] usb 1-1: config 160 interface 100 altsetting 129 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1434.585824][T13747] usb 1-1: config 160 interface 100 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 1434.597326][T13747] usb 1-1: config 160 interface 100 altsetting 129 has a duplicate endpoint with address 0x82, skipping [ 1434.608877][T13747] usb 1-1: config 160 interface 100 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1434.630026][T13747] usb 1-1: config 160 interface 100 has no altsetting 0 [ 1434.667731][T13747] usb 1-1: New USB device found, idVendor=0079, idProduct=a8ea, bcdDevice=7d.3e [ 1434.677187][T13747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.686140][T13747] usb 1-1: Product: syz [ 1434.690619][T13747] usb 1-1: Manufacturer: syz [ 1434.695406][T13747] usb 1-1: SerialNumber: syz [ 1434.728675][T22468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1434.934525][T22478] netlink: 'syz.4.6156': attribute type 1 has an invalid length. [ 1435.045826][T22478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1435.199811][T22480] bond9: (slave veth19): Enslaving as an active interface with a down link [ 1435.252596][T13747] usb 1-1: USB disconnect, device number 23 [ 1435.303984][T22478] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1435.368074][T22478] vlan4: entered allmulticast mode [ 1435.376375][T22478] bond9: entered allmulticast mode [ 1435.394020][T22478] bond9: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1439.243647][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6169'. [ 1439.544080][T22530] netlink: 'syz.4.6170': attribute type 1 has an invalid length. [ 1439.667582][T22530] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1439.937292][T22533] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1439.947313][T22533] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1439.962512][T22533] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 1440.351541][T22544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6172'. [ 1442.222200][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1442.222279][ T30] audit: type=1804 audit(2000001674.917:1697): pid=22571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6179" name="/newroot/414/file1" dev="tmpfs" ino=2318 res=1 errno=0 [ 1444.007642][T22592] netlink: 'syz.0.6190': attribute type 1 has an invalid length. [ 1444.082639][T22592] bond7: entered promiscuous mode [ 1444.091027][T22592] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1444.093626][T18350] page_pool_release_retry() stalled pool shutdown: id 108, 768 inflight 180 sec [ 1445.054416][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6196'. [ 1445.068936][T11411] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1445.112965][T11411] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1445.115197][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6196'. [ 1445.122493][T11411] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1445.167280][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6196'. [ 1445.176626][T11411] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1446.713304][T22623] loop0: detected capacity change from 0 to 4096 [ 1447.173928][ T30] audit: type=1326 audit(2000001679.857:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22621 comm="syz.0.6201" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 1447.499378][T22638] vlan3: entered promiscuous mode [ 1447.504892][T22638] bond0: entered promiscuous mode [ 1447.510108][T22638] bond_slave_0: entered promiscuous mode [ 1447.520232][T22638] bond_slave_1: entered promiscuous mode [ 1447.527535][T22638] dummy0: entered promiscuous mode [ 1450.074204][T22671] ip6gretap3: entered allmulticast mode [ 1450.550006][T22679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1450.693643][T22682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1450.931327][ T30] audit: type=1326 audit(2000001683.607:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.033935][ T30] audit: type=1326 audit(2000001683.657:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.058233][ T30] audit: type=1326 audit(2000001683.677:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.081849][ T30] audit: type=1326 audit(2000001683.677:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.104460][ T30] audit: type=1326 audit(2000001683.677:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.127147][ T30] audit: type=1326 audit(2000001683.687:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.150833][ T30] audit: type=1326 audit(2000001683.687:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.173918][ T30] audit: type=1326 audit(2000001683.687:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.197083][ T30] audit: type=1326 audit(2000001683.687:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.221159][ T30] audit: type=1326 audit(2000001683.687:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.6221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1451.393971][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6224'. [ 1452.528954][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6231'. [ 1453.325544][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.335467][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1454.288319][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6244'. [ 1454.326593][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6244'. [ 1454.372591][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6244'. [ 1455.153134][T22756] netlink: 'syz.7.6250': attribute type 1 has an invalid length. [ 1455.281162][T22756] bond4: entered promiscuous mode [ 1455.287954][T22756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1455.395973][T22758] bond4: (slave bridge3): making interface the new active one [ 1455.406696][T22758] bridge3: entered promiscuous mode [ 1455.419742][T22758] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1457.687538][T22790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6263'. [ 1458.784231][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6267'. [ 1459.509908][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6272'. [ 1459.729791][T22822] bridge9: port 1(veth5) entered blocking state [ 1459.737245][T22822] bridge9: port 1(veth5) entered disabled state [ 1459.744771][T22822] veth5: entered allmulticast mode [ 1459.756676][T22822] veth5: entered promiscuous mode [ 1459.917906][T22824] bridge9: port 2(veth7) entered blocking state [ 1459.925662][T22824] bridge9: port 2(veth7) entered disabled state [ 1459.933295][T22824] veth7: entered allmulticast mode [ 1459.943033][T22824] veth7: entered promiscuous mode [ 1460.896456][T18350] page_pool_release_retry() stalled pool shutdown: id 70, 640 inflight 786 sec [ 1461.720790][T22846] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1461.947914][T22846] kvm: pic: non byte read [ 1461.987825][T22846] kvm: pic: level sensitive irq not supported [ 1461.993900][T22846] kvm: pic: non byte read [ 1462.090058][T22846] kvm: pic: level sensitive irq not supported [ 1462.092107][T22846] kvm: pic: non byte read [ 1462.167644][T22846] kvm: pic: level sensitive irq not supported [ 1462.168456][T22846] kvm: pic: non byte read [ 1462.274249][T22846] kvm: pic: level sensitive irq not supported [ 1462.274800][T22846] kvm: pic: non byte read [ 1462.310220][T22846] kvm: pic: level sensitive irq not supported [ 1462.316701][T22846] kvm: pic: non byte read [ 1462.726607][T22859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6282'. [ 1462.805626][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6282'. [ 1463.754130][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'. [ 1463.785941][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1463.786026][ T30] audit: type=1326 audit(2000001696.477:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.815813][ T30] audit: type=1326 audit(2000001696.477:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.838619][ T30] audit: type=1326 audit(2000001696.477:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.862360][ T30] audit: type=1326 audit(2000001696.477:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.885269][ T30] audit: type=1326 audit(2000001696.487:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.908663][ T30] audit: type=1326 audit(2000001696.487:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.931629][ T30] audit: type=1326 audit(2000001696.487:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.955161][ T30] audit: type=1326 audit(2000001696.487:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1463.978387][ T30] audit: type=1326 audit(2000001696.487:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1464.001111][ T30] audit: type=1326 audit(2000001696.487:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.5.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1465.347066][T22899] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6300'. [ 1465.356778][T22899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6300'. [ 1465.367159][T22899] tipc: MTU too low for tipc bearer [ 1465.798006][T22907] overlayfs: missing 'lowerdir' [ 1466.955485][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6309'. [ 1466.998214][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6309'. [ 1467.047519][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6309'. [ 1467.107118][T22920] netlink: 'syz.7.6307': attribute type 4 has an invalid length. [ 1467.115572][T22920] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6307'. [ 1467.151675][T22920] .`: renamed from bond0 (while UP) [ 1469.508770][T22957] 9pnet_fd: Insufficient options for proto=fd [ 1470.002860][T18350] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1470.110749][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6327'. [ 1470.201260][T18350] usb 1-1: Using ep0 maxpacket: 32 [ 1470.226940][T18350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.241522][T18350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.241840][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6327'. [ 1470.252446][T18350] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1470.252599][T18350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.327959][T18350] usb 1-1: config 0 descriptor?? [ 1470.799092][T18350] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1471.083302][T10252] usb 1-1: USB disconnect, device number 24 [ 1471.785758][T22986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6333'. [ 1471.930108][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6333'. [ 1471.971563][T18350] IPVS: starting estimator thread 0... [ 1472.064053][T22992] IPVS: using max 240 ests per chain, 12000 per kthread [ 1472.610906][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1472.610981][ T30] audit: type=1326 audit(2000001705.297:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.701388][ T30] audit: type=1326 audit(2000001705.347:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.724870][ T30] audit: type=1326 audit(2000001705.347:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.747524][ T30] audit: type=1326 audit(2000001705.347:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.771273][ T30] audit: type=1326 audit(2000001705.347:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.794250][ T30] audit: type=1326 audit(2000001705.347:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.816864][ T30] audit: type=1326 audit(2000001705.357:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.839658][ T30] audit: type=1326 audit(2000001705.357:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.863232][ T30] audit: type=1326 audit(2000001705.357:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1472.886121][ T30] audit: type=1326 audit(2000001705.357:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.5.6339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1473.417008][T23007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6341'. [ 1474.031913][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6343'. [ 1479.661942][T23070] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.6357'. [ 1479.902922][T23075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6358'. [ 1480.220224][T23084] netlink: 'syz.5.6362': attribute type 1 has an invalid length. [ 1480.310095][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6362'. [ 1480.311341][T23084] bond8: entered promiscuous mode [ 1480.326149][T23084] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1480.350166][T23087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6361'. [ 1480.377018][T23086] bond8: entered allmulticast mode [ 1480.479314][T23084] bond8: (slave bridge6): making interface the new active one [ 1480.488515][T23084] bridge6: entered promiscuous mode [ 1480.496238][T23084] bridge6: entered allmulticast mode [ 1480.508443][T23084] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1481.291334][T23098] loop0: detected capacity change from 0 to 128 [ 1483.820310][T23125] netlink: 'syz.9.6374': attribute type 1 has an invalid length. [ 1483.959420][T23132] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6374'. [ 1484.091543][T23125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1484.126021][T23132] bond6: entered promiscuous mode [ 1484.131520][T23132] bond6: entered allmulticast mode [ 1484.439550][T23125] bond0: (slave dummy0): Releasing backup interface [ 1484.473321][T23125] dummy0: left promiscuous mode [ 1484.504111][T23125] bond6: (slave dummy0): making interface the new active one [ 1484.511908][T23125] dummy0: entered promiscuous mode [ 1484.518219][T23125] dummy0: entered allmulticast mode [ 1484.530110][T23125] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1484.760086][T23136] loop0: detected capacity change from 0 to 512 [ 1484.778844][T23132] bond6 (unregistering): (slave dummy0): Releasing active interface [ 1484.787831][T23132] dummy0: left promiscuous mode [ 1484.794249][T23132] dummy0: left allmulticast mode [ 1484.890130][T23136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1484.905036][T23136] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.066655][T23136] raw_sendmsg: syz.0.6376 forgot to set AF_INET. Fix it! [ 1485.089093][T23132] bond6 (unregistering): Released all slaves [ 1485.315603][T16445] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.237981][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6383'. [ 1487.551865][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6390'. [ 1488.491897][T18349] page_pool_release_retry() stalled pool shutdown: id 78, 50 inflight 667 sec [ 1490.571973][T18349] page_pool_release_retry() stalled pool shutdown: id 100, 640 inflight 364 sec [ 1490.698684][T23178] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 1491.449688][T23189] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1491.459235][T23189] overlayfs: missing 'lowerdir' [ 1491.492414][T23191] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6395'. [ 1492.340805][T18349] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1492.537733][T18349] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1492.547064][T18349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.557663][T18349] usb 1-1: config 0 has no interface number 0 [ 1492.564166][T18349] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1492.574651][T18349] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1492.658457][T18349] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1492.668926][T18349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.677387][T18349] usb 1-1: Product: syz [ 1492.681884][T18349] usb 1-1: Manufacturer: syz [ 1492.686673][T18349] usb 1-1: SerialNumber: syz [ 1492.753607][T18349] usb 1-1: config 0 descriptor?? [ 1493.035981][T18349] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1493.076099][T18349] usb 1-1: USB disconnect, device number 25 [ 1493.714231][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 1493.714310][ T30] audit: type=1326 audit(2000001726.407:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23215 comm="syz.4.6404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1493.743862][ T30] audit: type=1326 audit(2000001726.407:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23215 comm="syz.4.6404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1493.767583][ T30] audit: type=1326 audit(2000001726.417:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23215 comm="syz.4.6404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1493.794408][ T30] audit: type=1326 audit(2000001726.417:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23215 comm="syz.4.6404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1493.817067][ T30] audit: type=1326 audit(2000001726.417:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23213 comm="syz.5.6403" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01539 code=0x0 [ 1493.839506][ T30] audit: type=1326 audit(2000001726.417:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23215 comm="syz.4.6404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1493.863083][ T30] audit: type=1326 audit(2000001726.417:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23215 comm="syz.4.6404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1850.222346][T28005] Kernel panic - not syncing: kmsan.panic set ... [ 1850.228930][T28005] CPU: 1 UID: 0 PID: 28005 Comm: syz.5.8166 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1850.240160][T28005] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1850.245286][T28005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1850.255478][T28005] Call Trace: [ 1850.258849][T28005] [ 1850.261872][T28005] __dump_stack+0x26/0x30 [ 1850.266376][T28005] dump_stack_lvl+0x53/0x270 [ 1850.271122][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.277113][T28005] dump_stack+0x1e/0x25 [ 1850.281431][T28005] vpanic+0x435/0xd30 [ 1850.285600][T28005] panic+0x15d/0x160 [ 1850.289703][T28005] kmsan_report+0x31c/0x320 [ 1850.294364][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.300349][T28005] ? __msan_warning+0x1b/0x30 [ 1850.305191][T28005] ? xfrm_state_find+0x2424/0xa940 [ 1850.310589][T28005] ? xfrm_resolve_and_create_bundle+0xabc/0x58a0 [ 1850.317113][T28005] ? xfrm_lookup_with_ifid+0x48c/0x3ac0 [ 1850.322840][T28005] ? xfrm_lookup_route+0x63/0x2b0 [ 1850.328047][T28005] ? ip6_sk_dst_lookup_flow+0xd71/0x1200 [ 1850.333903][T28005] ? udpv6_sendmsg+0x360a/0x3fa0 [ 1850.339271][T28005] ? inet6_sendmsg+0x1ef/0x2a0 [ 1850.344183][T28005] ? __sock_sendmsg+0x145/0x3d0 [ 1850.349187][T28005] ? ____sys_sendmsg+0x893/0xd80 [ 1850.354421][T28005] ? ___sys_sendmsg+0x271/0x3b0 [ 1850.359499][T28005] ? __sys_sendmmsg+0x3bf/0x7c0 [ 1850.364543][T28005] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1850.370550][T28005] ? ia32_sys_call+0x39e0/0x4310 [ 1850.375690][T28005] ? __do_fast_syscall_32+0xb0/0x150 [ 1850.381163][T28005] ? do_fast_syscall_32+0x38/0x80 [ 1850.386376][T28005] ? do_SYSENTER_32+0x1f/0x30 [ 1850.391235][T28005] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1850.397912][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.403178][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.408447][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.414609][T28005] ? xfrm_state_find+0x141/0xa940 [ 1850.419827][T28005] ? filter_irq_stacks+0x49/0x190 [ 1850.425051][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.430329][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.436308][T28005] ? __xfrm_dst_hash+0x2e9/0x5b0 [ 1850.441442][T28005] __msan_warning+0x1b/0x30 [ 1850.446108][T28005] xfrm_state_find+0x2424/0xa940 [ 1850.451234][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.456536][T28005] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1850.463137][T28005] ? dst_release+0x1cb/0x340 [ 1850.467936][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.473220][T28005] xfrm_resolve_and_create_bundle+0xabc/0x58a0 [ 1850.479662][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.484947][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.490931][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.496214][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.502217][T28005] ? xfrm_expand_policies+0x38d/0x760 [ 1850.507782][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.513148][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.519164][T28005] xfrm_lookup_with_ifid+0x48c/0x3ac0 [ 1850.524784][T28005] xfrm_lookup_route+0x63/0x2b0 [ 1850.529928][T28005] ip6_sk_dst_lookup_flow+0xd71/0x1200 [ 1850.535626][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.540915][T28005] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1850.547416][T28005] udpv6_sendmsg+0x360a/0x3fa0 [ 1850.552361][T28005] ? udp_lib_get_port+0x28f7/0x2cc0 [ 1850.557786][T28005] ? __pfx_udplite_getfrag+0x10/0x10 [ 1850.563271][T28005] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1850.568529][T28005] inet6_sendmsg+0x1ef/0x2a0 [ 1850.573279][T28005] __sock_sendmsg+0x145/0x3d0 [ 1850.578115][T28005] ____sys_sendmsg+0x893/0xd80 [ 1850.583132][T28005] ___sys_sendmsg+0x271/0x3b0 [ 1850.588016][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.594011][T28005] ? __rcu_read_unlock+0x6d/0xd0 [ 1850.599120][T28005] ? __fget_files+0x3b4/0x4a0 [ 1850.603949][T28005] ? __fget_files+0x3b9/0x4a0 [ 1850.608782][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.614056][T28005] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1850.620042][T28005] __sys_sendmmsg+0x3bf/0x7c0 [ 1850.624962][T28005] ? kmsan_get_metadata+0xfb/0x160 [ 1850.630246][T28005] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1850.636818][T28005] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1850.643157][T28005] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1850.649021][T28005] ia32_sys_call+0x39e0/0x4310 [ 1850.653985][T28005] __do_fast_syscall_32+0xb0/0x150 [ 1850.659297][T28005] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 1850.665224][T28005] do_fast_syscall_32+0x38/0x80 [ 1850.670287][T28005] do_SYSENTER_32+0x1f/0x30 [ 1850.675005][T28005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1850.681532][T28005] RIP: 0023:0xf7f01539 [ 1850.685720][T28005] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1850.705572][T28005] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1850.714149][T28005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1850.722347][T28005] RDX: 0000000000000001 RSI: 00000000040040d4 RDI: 0000000000000000 [ 1850.730444][T28005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1850.738533][T28005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1850.746613][T28005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1850.754787][T28005] [ 1850.758174][T28005] Kernel Offset: disabled [ 1850.762559][T28005] Rebooting in 86400 seconds..