last executing test programs: 4m42.690118117s ago: executing program 4 (id=2353): r0 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 4m41.236822022s ago: executing program 4 (id=2357): r0 = memfd_create(&(0x7f00000004c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, 0x0, 0xa58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m40.071766249s ago: executing program 4 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xeb5, 0x10000000, 0x7, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24044010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8", 0x21}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4m35.344999783s ago: executing program 4 (id=2378): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup(r0) syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 4m34.032572093s ago: executing program 4 (id=2383): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) 4m32.803918219s ago: executing program 4 (id=2387): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x72bd24, 0x25dfdbfd, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c8851}, 0x20040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x27db, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 4m17.362395857s ago: executing program 32 (id=2387): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x72bd24, 0x25dfdbfd, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c8851}, 0x20040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x27db, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 56.37772186s ago: executing program 2 (id=2982): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000380)) 55.893246581s ago: executing program 2 (id=2984): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = eventfd2(0x8, 0x0) read(r0, &(0x7f0000000480)=""/82, 0x52) 55.576859585s ago: executing program 2 (id=2985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x14, r1, 0x4f79951a91b7df8f, 0x70bd2c, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)=""/124, 0x6d}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000002800)=""/4112, 0x101c}], 0x3}, 0x7d}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x10162, 0x0) 55.12668089s ago: executing program 2 (id=2986): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 54.797448171s ago: executing program 2 (id=2987): pipe(&(0x7f0000000040)) io_setup(0x3ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x7, 0x1}], 0x10, 0x26}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) socket$inet6(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) 54.232192884s ago: executing program 2 (id=2989): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2cd, &(0x7f0000000080)="$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") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) getdents64(r0, &(0x7f0000001b00)=""/4132, 0x1024) 52.050625304s ago: executing program 33 (id=2989): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2cd, &(0x7f0000000080)="$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") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) getdents64(r0, &(0x7f0000001b00)=""/4132, 0x1024) 20.031583836s ago: executing program 3 (id=3060): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1000000) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) syz_extract_tcp_res(0x0, 0x6, 0x51) 19.350164978s ago: executing program 5 (id=3062): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) 17.971326888s ago: executing program 1 (id=3065): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r4, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000240), 0x8) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 17.187191844s ago: executing program 0 (id=3068): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x10003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x32, 0x5, 0x7, 0x16, 0xb, 0x1, 0x1, 0x1, {0xffff1c72, 0x0, 0x7, 0x0, 0xffffffba, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0x59, 0x22040001, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0xda, 0x6, @link_local}, 0x14) 16.587224064s ago: executing program 3 (id=3070): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(r0, 0x1970) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc0, 0x0, 0x0, 0x0, {[@generic={0x8, 0x8, "c5f924187f72"}]}}}}}}}}, 0x0) 15.953703419s ago: executing program 5 (id=3071): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) 14.54088003s ago: executing program 1 (id=3075): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(r1, &(0x7f0000001940), 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r2, r0, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) 13.682900913s ago: executing program 0 (id=3077): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xca83, 0xfffffffd, 0xdeac, 0x38000, 0x2, "1039db8d79bea18fa3015ae9ae6901313cf366"}) syz_open_dev$ptys(0xc, 0x3, 0x0) 13.110966299s ago: executing program 3 (id=3079): pipe(&(0x7f0000000040)) io_setup(0x3ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x7, 0x1}], 0x10, 0x26}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) socket$inet6(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) 12.543118558s ago: executing program 5 (id=3080): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1000000) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) syz_extract_tcp_res(0x0, 0x6, 0x51) 11.100522679s ago: executing program 1 (id=3083): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r2, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xfffe, 0x2) 10.449588862s ago: executing program 0 (id=3085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r4, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000240), 0x8) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 9.740022773s ago: executing program 3 (id=3087): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x10003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x32, 0x5, 0x7, 0x16, 0xb, 0x1, 0x1, 0x1, {0xffff1c72, 0x0, 0x7, 0x0, 0xffffffba, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0x59, 0x22040001, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xda, 0x6, @link_local}, 0x14) 9.113807026s ago: executing program 5 (id=3089): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7.632793235s ago: executing program 1 (id=3095): socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x50, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x2, 0x1}, @srh={0x84, 0x8, 0x4, 0x4, 0x5, 0x10, 0x2, [@private2, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x31}]}]}}}}}, 0x0) 7.213444015s ago: executing program 0 (id=3097): pipe(&(0x7f0000000040)) io_setup(0x3ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x7, 0x1}], 0x10, 0x26}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) socket$inet6(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) 6.454409565s ago: executing program 3 (id=3099): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) io_submit(r1, 0x2000022a, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='`', 0x8200, 0x600}]) 5.851646231s ago: executing program 5 (id=3100): r0 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="137c0300231a05002c0012800e00010069703667726558e7f6357a4a8d4302801400070000000000000000000000000002006209000001"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 4.236258311s ago: executing program 1 (id=3105): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r2, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xfffe, 0x2) 3.802688518s ago: executing program 0 (id=3107): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r4, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000240), 0x8) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 3.010008706s ago: executing program 3 (id=3110): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x806, @local, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)="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", 0x7c1}], 0x1}}], 0x2, 0x2000c081) 2.501631137s ago: executing program 5 (id=3112): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00', 0x0, 0x2000, 0x0) 1.753724001s ago: executing program 6 (id=3115): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc0385dcb188a800"/24, 0x18, 0x4000044, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.45317144s ago: executing program 6 (id=3116): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1801, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0xaf2) 1.268188956s ago: executing program 6 (id=3117): pipe(&(0x7f0000000040)) io_setup(0x3ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x7, 0x1}], 0x10, 0x26}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) socket$inet6(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) 908.888633ms ago: executing program 1 (id=3118): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f0000000240)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000740)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 823.964693ms ago: executing program 6 (id=3119): openat(0xffffffffffffff9c, 0x0, 0x1c1243, 0x148) acct(&(0x7f0000000280)='./file0\x00') 473.69367ms ago: executing program 0 (id=3120): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) 383.912281ms ago: executing program 6 (id=3121): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x10003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x32, 0x5, 0x7, 0x16, 0xb, 0x1, 0x1, 0x1, {0xffff1c72, 0x0, 0x7, 0x0, 0xffffffba, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0x59, 0x22040001, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xda, 0x6, @link_local}, 0x14) 0s ago: executing program 6 (id=3122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2dc2e, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0xaa00, @udp={{0x5, 0x4, 0x0, 0x0, 0xbd3, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xbbf, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        [ 515.155338][ T8903] fuse: Bad value for 'rootmode' [ 516.159200][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1165'. [ 516.397410][ T8909] syzkaller0: entered promiscuous mode [ 516.422257][ T8909] syzkaller0: entered allmulticast mode [ 516.489909][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.500672][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.545435][ T8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.949499][ T8921] hpfs: Bad magic ... probably not HPFS [ 518.712597][ T8937] fuse: Bad value for 'rootmode' [ 518.810656][ T8938] binder: 8936:8938 ioctl c0306201 800003c0 returned -14 [ 519.408826][ T8940] fuse: Bad value for 'rootmode' [ 520.382781][ T8947] syzkaller0: entered promiscuous mode [ 520.390486][ T8947] syzkaller0: entered allmulticast mode [ 520.572862][ T8954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1180'. [ 521.250863][ T8951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.574246][ T8970] fuse: Bad value for 'fd' [ 523.042887][ T8976] binder: 8973:8976 ioctl c0306201 800003c0 returned -14 [ 523.300996][ T8978] fuse: Unknown parameter 'use00000000000000000000' [ 523.647591][ T8983] hpfs: Bad magic ... probably not HPFS [ 525.099769][ T8995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.996968][ T9005] fuse: Bad value for 'fd' [ 526.178445][ T9007] fuse: Bad value for 'fd' [ 526.374422][ T9009] fuse: Unknown parameter 'user_i00000000000000000000' [ 526.948727][ T9013] binder: 9012:9013 ioctl c0306201 800003c0 returned -14 [ 529.134843][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.152607][ T9030] syzkaller0: entered promiscuous mode [ 529.256808][ T9030] syzkaller0: entered allmulticast mode [ 529.457548][ T9040] fuse: Bad value for 'fd' [ 529.538143][ T9041] fuse: Unknown parameter 'use00000000000000000000' [ 531.307366][ T5771] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 532.542156][ T9071] fuse: Unknown parameter 'user_i00000000000000000000' [ 533.108765][ T9072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.150201][ T9075] fuse: Unknown parameter '0x0000000000000004' [ 534.649305][ T5771] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 535.736063][ T9104] fuse: Unknown parameter '0x0000000000000004' [ 535.774895][ T9105] fuse: Unknown parameter 'user_i00000000000000000000' [ 536.717565][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1245'. [ 536.774946][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.824491][ T5771] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 538.538121][ T9138] fuse: Unknown parameter 'user_i00000000000000000000' [ 538.921036][ T9141] fuse: Unknown parameter '0x0000000000000004' [ 540.275866][ T9163] fuse: Unknown parameter 'user_id00000000000000000000' [ 540.801431][ T5771] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 541.708927][ T9180] fuse: Unknown parameter 'user_id00000000000000000000' [ 541.857609][ T9182] fuse: Unknown parameter '0x0000000000000004' [ 542.007972][ T9184] binder: 9183:9184 ioctl c0306201 0 returned -14 [ 542.890833][ T5771] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 543.133890][ T9199] fuse: Bad value for 'fd' [ 543.792822][ T5771] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 544.749360][ T9217] fuse: Unknown parameter 'user_id00000000000000000000' [ 545.193890][ T9221] binder: 9219:9221 ioctl c0306201 0 returned -14 [ 545.208481][ T9220] fuse: Unknown parameter '0x0000000000000004' [ 545.612995][ T9223] syzkaller0: entered promiscuous mode [ 545.637235][ T9223] syzkaller0: entered allmulticast mode [ 545.764200][ T5771] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 546.094393][ T9233] fuse: Bad value for 'fd' [ 546.428425][ T9236] fuse: Unknown parameter 'group_id00000000000000000000' [ 546.683328][ T5771] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 547.067254][ T9241] Invalid logical block size (257) [ 547.287064][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 547.492571][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 547.563404][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.616895][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 547.663907][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 547.706871][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.756745][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 547.786894][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.045467][ T24] usb 4-1: GET_CAPABILITIES returned 2f [ 548.071333][ T24] usbtmc 4-1:16.0: can't read capabilities [ 548.224119][ T9255] fuse: Unknown parameter 'user_id00000000000000000000' [ 548.275194][ T794] usb 4-1: USB disconnect, device number 6 [ 548.898410][ T9259] fuse: Unknown parameter 'fd0x0000000000000004' [ 549.613762][ T9265] syzkaller0: entered promiscuous mode [ 549.677100][ T9265] syzkaller0: entered allmulticast mode [ 549.688319][ T9267] fuse: Bad value for 'fd' [ 550.143132][ T9276] fuse: Unknown parameter 'group_id00000000000000000000' [ 550.544782][ T5771] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 551.222174][ T9289] fuse: Bad value for 'fd' [ 551.939197][ T794] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 551.990269][ T9301] fuse: Unknown parameter 'fd0x0000000000000004' [ 552.197061][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 552.241504][ T794] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.322798][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 552.400612][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.474785][ T794] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.563964][ T794] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.636810][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.973853][ T794] usb 1-1: GET_CAPABILITIES returned 2f [ 552.985711][ T794] usbtmc 1-1:16.0: can't read capabilities [ 553.191678][ T24] usb 1-1: USB disconnect, device number 4 [ 553.263520][ T9310] fuse: root generation should be zero [ 553.637817][ T9315] syzkaller0: entered promiscuous mode [ 553.678109][ T9315] syzkaller0: entered allmulticast mode [ 554.110657][ T9321] fuse: Bad value for 'user_id' [ 554.156730][ T9321] fuse: Bad value for 'user_id' [ 555.272713][ T9335] fuse: Bad value for 'fd' [ 556.053489][ T9344] misc userio: Can't change port type on an already running userio instance [ 556.149975][ T9345] fuse: Unknown parameter 'fd0x0000000000000004' [ 557.089428][ T9356] fuse: Bad value for 'user_id' [ 557.095623][ T9356] fuse: Bad value for 'user_id' [ 557.949988][ T9366] fuse: Bad value for 'fd' [ 558.018946][ T9364] syzkaller0: entered promiscuous mode [ 558.047895][ T9364] syzkaller0: entered allmulticast mode [ 558.357405][ T9374] fuse: Invalid rootmode [ 560.359693][ T9396] fuse: Bad value for 'user_id' [ 560.377442][ T9396] fuse: Bad value for 'user_id' [ 560.429341][ T9393] syzkaller0: entered promiscuous mode [ 560.436159][ T9393] syzkaller0: entered allmulticast mode [ 560.757157][ T9399] fuse: Unknown parameter 'user_i00000000000000000000' [ 560.940756][ T9402] fuse: Bad value for 'rootmode' [ 561.710571][ T9410] fuse: Bad value for 'rootmode' [ 561.795723][ T9408] syzkaller0: entered promiscuous mode [ 561.832806][ T9408] syzkaller0: entered allmulticast mode [ 563.524009][ T9432] fuse: Bad value for 'fd' [ 563.783260][ T9435] fuse: Unknown parameter 'user_i00000000000000000000' [ 564.240988][ T9437] syzkaller0: entered promiscuous mode [ 564.306728][ T9437] syzkaller0: entered allmulticast mode [ 564.670032][ T5771] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 564.700547][ T9445] fuse: Bad value for 'rootmode' [ 565.401524][ T9448] syzkaller0: entered promiscuous mode [ 565.420374][ T9448] syzkaller0: entered allmulticast mode [ 565.889943][ T9451] syzkaller0: entered promiscuous mode [ 565.948034][ T9451] syzkaller0: entered allmulticast mode [ 566.644097][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.140757][ T9471] fuse: Bad value for 'fd' [ 567.607770][ T9479] syzkaller0: entered promiscuous mode [ 567.684122][ T9479] syzkaller0: entered allmulticast mode [ 568.073289][ T9482] fuse: Bad value for 'rootmode' [ 569.772106][ T9497] syzkaller0: entered promiscuous mode [ 569.780976][ T9497] syzkaller0: entered allmulticast mode [ 570.387563][ T9504] syzkaller0: entered promiscuous mode [ 570.418469][ T9504] syzkaller0: entered allmulticast mode [ 570.727023][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.061900][ T9529] fuse: Bad value for 'fd' [ 572.359293][ T9540] fuse: Unknown parameter 'use00000000000000000000' [ 572.892404][ T9537] syzkaller0: entered promiscuous mode [ 572.916905][ T9537] syzkaller0: entered allmulticast mode [ 574.333409][ T9558] fuse: Unknown parameter '0x0000000000000003' [ 574.671068][ T9559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.795661][ T9562] syzkaller0: entered promiscuous mode [ 574.803050][ T9562] syzkaller0: entered allmulticast mode [ 575.144853][ T9566] syzkaller0: entered promiscuous mode [ 575.158231][ T9566] syzkaller0: entered allmulticast mode [ 576.145828][ T5771] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 577.271822][ T9595] fuse: Unknown parameter '0x0000000000000003' [ 577.438088][ T9588] syzkaller0: entered promiscuous mode [ 577.491234][ T9588] syzkaller0: entered allmulticast mode [ 577.919905][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.933303][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.872330][ T9612] syzkaller0: entered promiscuous mode [ 578.919065][ T9612] syzkaller0: entered allmulticast mode [ 579.879201][ T5771] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 580.574608][ T9631] misc userio: No port type given on /dev/userio [ 580.648926][ T9632] fuse: Unknown parameter '0x0000000000000003' [ 581.875741][ T9640] syzkaller0: entered promiscuous mode [ 581.897558][ T9640] syzkaller0: entered allmulticast mode [ 583.027850][ T5771] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 583.580292][ T24] IPVS: starting estimator thread 0... [ 583.736776][ T9672] IPVS: using max 192 ests per chain, 9600 per kthread [ 584.316122][ T9681] binder: 9679:9681 unknown command 0 [ 584.357268][ T9681] binder: 9679:9681 ioctl c0306201 80000080 returned -22 [ 585.476608][ T794] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 585.669700][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 585.715587][ T794] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 585.767413][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 585.827726][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 585.865733][ T794] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.926792][ T794] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.000298][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.135110][ T5771] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 586.305919][ T9701] syzkaller0: entered promiscuous mode [ 586.322297][ T794] usb 1-1: GET_CAPABILITIES returned 2f [ 586.336837][ T794] usbtmc 1-1:16.0: can't read capabilities [ 586.344261][ T9701] syzkaller0: entered allmulticast mode [ 586.541918][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.576164][ T24] usb 1-1: USB disconnect, device number 5 [ 587.012645][ T9710] fuse: Unknown parameter 'fd0x0000000000000003' [ 587.834354][ T9720] binder: 9716:9720 unknown command 0 [ 587.870996][ T9720] binder: 9716:9720 ioctl c0306201 80000080 returned -22 [ 588.416825][ T794] IPVS: starting estimator thread 0... [ 588.516780][ T9726] IPVS: using max 192 ests per chain, 9600 per kthread [ 588.848157][ T9727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.328425][ T9738] hpfs: Bad magic ... probably not HPFS [ 589.372572][ T9738] hpfs: Bad magic ... probably not HPFS [ 589.704753][ T9740] fuse: Unknown parameter 'fd0x0000000000000003' [ 589.997009][ T794] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 590.226669][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 590.268540][ T794] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.305071][ T794] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.380446][ T794] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.417169][ T794] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.486876][ T794] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.504254][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.737900][ T9749] binder: 9748:9749 unknown command 0 [ 590.767041][ T9749] binder: 9748:9749 ioctl c0306201 80000080 returned -22 [ 590.860663][ T9749] binder: BINDER_SET_CONTEXT_MGR already set [ 590.947153][ T794] usb 3-1: GET_CAPABILITIES returned f8 [ 590.963130][ T794] usbtmc 3-1:16.0: can't read capabilities [ 590.992184][ T9749] binder: 9748:9749 ioctl 4018620d 80000040 returned -16 [ 591.154270][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.198225][ T794] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 591.251783][ T9] usb 3-1: USB disconnect, device number 10 [ 591.434275][ T794] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 591.482061][ T794] usb 2-1: config 0 has no interface number 0 [ 591.505084][ T794] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 591.520772][ T794] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 591.558068][ T794] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 591.612588][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.641945][ T794] usb 2-1: config 0 descriptor?? [ 591.655353][ T9754] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 591.733751][ T794] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 591.990289][ T24] usb 2-1: USB disconnect, device number 4 [ 593.141437][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.492893][ T9779] fuse: Unknown parameter 'fd0x0000000000000003' [ 594.242637][ T5771] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 594.990133][ T9789] syzkaller0: entered promiscuous mode [ 594.997664][ T9789] syzkaller0: entered allmulticast mode [ 595.271110][ T9798] Bluetooth: hci0: unsupported parameter 255 [ 595.279626][ T9798] Bluetooth: hci0: unsupported parameter 255 [ 596.654963][ T9811] binder: 9810:9811 unknown command 0 [ 596.720740][ T9811] binder: 9810:9811 ioctl c0306201 80000080 returned -22 [ 596.748834][ T9813] binder: BINDER_SET_CONTEXT_MGR already set [ 596.814181][ T9813] binder: 9810:9813 ioctl 4018620d 80000040 returned -16 [ 597.317476][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.665464][ T9822] binder: 9821:9822 ioctl c0306201 800003c0 returned -14 [ 598.579468][ T9830] Bluetooth: hci0: unsupported parameter 255 [ 598.596775][ T9830] Bluetooth: hci0: unsupported parameter 255 [ 600.801023][ T9851] fuse: Bad value for 'rootmode' [ 600.967524][ T9856] binder: 9853:9856 ioctl c0306201 800003c0 returned -14 [ 601.175067][ T9858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.876907][ T794] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 602.096848][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 602.158996][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.193349][ T794] usb 2-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.266592][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 602.337012][ T794] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 602.360842][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.391845][ T794] usb 2-1: config 0 descriptor?? [ 602.532977][ T794] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 604.487810][ T9896] fuse: Bad value for 'rootmode' [ 604.875008][ T794] usb 2-1: USB disconnect, device number 5 [ 605.230461][ T9901] binder: BINDER_SET_CONTEXT_MGR already set [ 605.298495][ T9901] binder: 9900:9901 ioctl 4018620d 80000040 returned -16 [ 605.301527][ T9903] binder: 9900:9903 ioctl c0306201 800003c0 returned -14 [ 605.894107][ T9910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.435000][ T9919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1538'. [ 606.719209][ T794] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 606.868587][ T9923] binder: 9922:9923 ioctl c0306201 0 returned -14 [ 606.970812][ T794] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 607.006716][ T794] usb 2-1: config 0 has no interface number 0 [ 607.014277][ T794] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 607.072570][ T794] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 607.120606][ T794] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 607.151520][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.223747][ T794] usb 2-1: config 0 descriptor?? [ 607.253817][ T9920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.397099][ T794] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 607.538343][ T794] usb 2-1: USB disconnect, device number 6 [ 607.666952][ T9902] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 607.877365][ T9902] usb 1-1: Using ep0 maxpacket: 8 [ 607.931793][ T9902] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.987067][ T9902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 608.007333][ T9902] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 608.046697][ T9902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.157402][ T9902] usb 1-1: config 0 descriptor?? [ 608.276774][ T9902] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 608.634448][ T9939] fuse: Unknown parameter 'use00000000000000000000' [ 608.934475][ T9948] binder: 9944:9948 ioctl c0306201 800003c0 returned -14 [ 608.963999][ T9949] fuse: Unknown parameter '0x0000000000000003' [ 608.976045][ T9948] binder: 9944:9948 ioctl c0306201 0 returned -14 [ 609.849625][ T9957] binder: BINDER_SET_CONTEXT_MGR already set [ 609.866797][ T9957] binder: 9956:9957 ioctl 4018620d 80000040 returned -16 [ 610.570525][ T9961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1552'. [ 610.613574][ T794] usb 1-1: USB disconnect, device number 6 [ 610.701197][ T9960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.081028][ T9970] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 611.501662][ T9972] fuse: Unknown parameter '0x0000000000000003' [ 611.691201][ T9974] fuse: Unknown parameter 'use00000000000000000000' [ 611.841103][ T9976] fuse: Unknown parameter '0x0000000000000003' [ 612.738611][ T9991] binder: BINDER_SET_CONTEXT_MGR already set [ 612.786539][ T9991] binder: 9988:9991 ioctl 4018620d 80000040 returned -16 [ 613.446946][ T794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 613.656958][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 613.715386][ T794] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.804117][ T794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 613.838217][ T794] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 613.916565][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.961126][ T794] usb 3-1: config 0 descriptor?? [ 614.061935][ T794] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 614.426944][T10007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.752242][T10017] fuse: Unknown parameter 'use00000000000000000000' [ 615.218949][T10020] fuse: Unknown parameter 'fd0x0000000000000003' [ 616.177268][T10030] binder: BINDER_SET_CONTEXT_MGR already set [ 616.211790][T10030] binder: 10028:10030 ioctl 4018620d 80000040 returned -16 [ 616.228093][ T9902] usb 3-1: USB disconnect, device number 11 [ 617.803276][T10051] fuse: Unknown parameter 'user_i00000000000000000000' [ 618.619338][T10059] fuse: Unknown parameter 'fd0x0000000000000003' [ 618.907554][ T794] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 619.106644][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 619.161314][ T794] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.208570][T10070] binder: 10068:10070 unknown command 0 [ 619.263949][T10070] binder: 10068:10070 ioctl c0306201 80000080 returned -22 [ 619.280046][ T794] usb 4-1: config 0 interface 0 has no altsetting 0 [ 619.347646][ T794] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 619.377053][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.414802][ T794] usb 4-1: config 0 descriptor?? [ 619.499625][ T794] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 620.326857][ T9902] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 620.515435][ T9902] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.542699][ T9902] usb 5-1: config 0 has no interface number 0 [ 620.566166][ T9902] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 620.589208][ T9902] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 620.605035][ T9902] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 620.669949][ T9902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.726123][ T9902] usb 5-1: config 0 descriptor?? [ 620.750596][T10073] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 620.824519][ T9902] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 621.072185][ T9902] usb 5-1: USB disconnect, device number 6 [ 621.875120][ T9902] usb 4-1: USB disconnect, device number 7 [ 622.568852][T10088] fuse: Unknown parameter 'user_i00000000000000000000' [ 623.002524][T10091] syzkaller0: entered promiscuous mode [ 623.017242][T10091] syzkaller0: entered allmulticast mode [ 623.535586][T10100] binder: 10098:10100 unknown command 0 [ 623.599679][T10100] binder: 10098:10100 ioctl c0306201 80000080 returned -22 [ 625.156552][ T9902] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 625.227310][ T794] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 625.390881][ T9902] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 625.427075][ T9902] usb 4-1: config 0 has no interface number 0 [ 625.434641][ T9902] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 625.448844][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 625.498941][ T794] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.527089][ T9902] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 625.537769][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 625.560932][ T9902] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 625.608558][ T794] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 625.647715][ T9902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.676616][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.728252][ T9902] usb 4-1: config 0 descriptor?? [ 625.832638][T10115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 625.836572][ T794] usb 2-1: config 0 descriptor?? [ 625.957252][ T794] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 625.970468][ T9902] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 626.177490][ T794] usb 4-1: USB disconnect, device number 8 [ 627.009761][T10136] binder: 10134:10136 unknown command 0 [ 627.041065][T10136] binder: 10134:10136 ioctl c0306201 80000080 returned -22 [ 627.579513][T10135] syzkaller0: entered promiscuous mode [ 627.627426][T10135] syzkaller0: entered allmulticast mode [ 628.205284][ T794] usb 2-1: USB disconnect, device number 7 [ 628.857377][T10151] ucma_write: process 779 (syz.1.1623) changed security contexts after opening file descriptor, this is not allowed. [ 629.919851][T10163] binder: 10159:10163 ioctl c0306201 0 returned -14 [ 630.182445][ T9902] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 630.393028][ T9902] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 630.428346][ T9902] usb 5-1: config 0 has no interface number 0 [ 630.435924][ T9902] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 630.465982][ T9902] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 630.499671][ T9902] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 630.499872][T10168] binder: 10167:10168 unknown command 0 [ 630.512940][ T9902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.547305][T10168] binder: 10167:10168 ioctl c0306201 80000080 returned -22 [ 630.592922][ T9902] usb 5-1: config 0 descriptor?? [ 630.612423][T10162] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 630.673371][ T9902] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 630.869865][ T9902] usb 5-1: USB disconnect, device number 7 [ 632.752548][T10187] process 'syz.1.1637' launched './file1' with NULL argv: empty string added [ 634.256912][T10206] binder: 10204:10206 unknown command 0 [ 634.264028][T10206] binder: 10204:10206 ioctl c0306201 80000080 returned -22 [ 637.259950][T10245] binder: 10243:10245 unknown command 0 [ 637.320114][T10245] binder: 10243:10245 ioctl c0306201 80000080 returned -22 [ 638.070186][T10254] binder: 10252:10254 ioctl c0306201 0 returned -14 [ 639.351641][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.372265][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.397037][T10281] binder: 10280:10281 unknown command 0 [ 640.404055][T10281] binder: 10280:10281 ioctl c0306201 80000080 returned -22 [ 642.654049][T10310] overlayfs: missing 'lowerdir' [ 647.151449][T10352] sctp: [Deprecated]: syz.4.1701 (pid 10352) Use of int in max_burst socket option deprecated. [ 647.151449][T10352] Use struct sctp_assoc_value instead [ 649.575289][T10370] syzkaller0: entered promiscuous mode [ 649.582848][T10370] syzkaller0: entered allmulticast mode [ 651.408289][T10390] syzkaller0: entered promiscuous mode [ 651.437263][T10390] syzkaller0: entered allmulticast mode [ 654.573393][T10422] syzkaller0: entered promiscuous mode [ 654.592171][T10422] syzkaller0: entered allmulticast mode [ 655.580216][T10433] syzkaller0: entered promiscuous mode [ 655.638077][T10433] syzkaller0: entered allmulticast mode [ 665.101225][T10528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1764'. [ 666.522728][T10552] binder: BINDER_SET_CONTEXT_MGR already set [ 666.596531][T10552] binder: 10550:10552 ioctl 4018620d 80000040 returned -16 [ 669.884117][T10585] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1778'. [ 671.119396][T10597] binder: 10595:10597 ioctl c0306201 0 returned -14 [ 672.147194][ T794] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 672.337560][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 672.386186][ T794] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.418129][ T794] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.483891][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.521644][ T794] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 672.576178][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.669500][ T794] usb 2-1: config 0 descriptor?? [ 673.347741][ T794] usbhid 2-1:0.0: can't add hid device: -71 [ 673.366161][ T794] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 673.439238][ T794] usb 2-1: USB disconnect, device number 8 [ 675.197909][T10629] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1793'. [ 677.951043][T10643] binder: 10641:10643 ioctl c0306201 0 returned -14 [ 682.137932][T10686] fuse: Bad value for 'user_id' [ 682.187006][T10686] fuse: Bad value for 'user_id' [ 686.868936][T10723] fuse: Bad value for 'fd' [ 689.035521][T10741] syzkaller0: entered promiscuous mode [ 689.082237][T10741] syzkaller0: entered allmulticast mode [ 691.386715][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 691.480614][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 691.619514][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 691.656932][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 691.687149][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.716679][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.757076][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 691.812663][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.861821][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.956856][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 693.315683][T10789] overlayfs: missing 'workdir' [ 693.757406][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 693.978473][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 694.006639][ T24] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.057070][ T24] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.095238][T10793] syzkaller0: entered promiscuous mode [ 694.115021][T10793] syzkaller0: entered allmulticast mode [ 694.129915][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.156138][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 694.189929][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.240919][ T24] usb 3-1: config 0 descriptor?? [ 694.378693][ T9902] usb 2-1: USB disconnect, device number 9 [ 694.757476][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 694.801990][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 694.837168][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 694.927298][ T24] usb 3-1: USB disconnect, device number 12 [ 695.161776][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 697.637359][T10829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.786598][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 697.986605][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 698.014503][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 698.030605][T10836] fuse: Unknown parameter '0x0000000000000005' [ 698.031164][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 698.107133][ T9] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.156530][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.952253][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.004449][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.089338][ T9] usbtmc 5-1:16.0: bulk endpoints not found [ 699.267243][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 699.466680][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 699.499090][ T24] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.556430][ T24] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.595019][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 699.640556][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 699.669299][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.735997][ T24] usb 4-1: config 0 descriptor?? [ 699.795419][ T29] audit: type=1326 audit(1775272306.345:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 699.906614][ T29] audit: type=1326 audit(1775272306.395:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 700.054237][ T29] audit: type=1326 audit(1775272306.445:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 700.184850][ T29] audit: type=1326 audit(1775272306.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 700.244280][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 700.252978][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 700.298197][ T24] usb 4-1: USB disconnect, device number 9 [ 700.372485][ T29] audit: type=1326 audit(1775272306.455:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 700.455773][ T29] audit: type=1326 audit(1775272306.455:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 700.560160][ T29] audit: type=1326 audit(1775272306.475:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 700.697383][ T29] audit: type=1326 audit(1775272306.505:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 700.818235][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.827710][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.926516][ T29] audit: type=1326 audit(1775272306.505:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 701.087338][ T29] audit: type=1326 audit(1775272306.545:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 701.188102][ T24] usb 5-1: USB disconnect, device number 8 [ 702.223141][T10870] fuse: Unknown parameter 'fd0x0000000000000005' [ 702.492483][T10871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.596661][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 704.789934][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 704.866655][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.893207][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.907809][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 704.916013][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 704.993263][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.044887][ T9] usb 2-1: config 0 descriptor?? [ 705.329145][T10899] fuse: Unknown parameter 'fd0x0000000000000005' [ 705.620055][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 705.660248][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 705.715102][ T9] usb 2-1: USB disconnect, device number 10 [ 706.627376][T10910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.011270][T10931] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 709.904165][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 709.904267][ T29] audit: type=1326 audit(1775272316.465:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 710.107554][ T29] audit: type=1326 audit(1775272316.465:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 710.206575][ T29] audit: type=1326 audit(1775272316.465:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 710.334446][ T29] audit: type=1326 audit(1775272316.465:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 710.367160][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 710.370547][T10944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.544880][ T29] audit: type=1326 audit(1775272316.515:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 710.579492][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 710.631593][ T24] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.667993][ T29] audit: type=1326 audit(1775272316.545:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 710.676595][ T24] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.725480][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 710.736804][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 710.749716][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.810731][ T29] audit: type=1326 audit(1775272316.545:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 710.828022][ T24] usb 1-1: config 0 descriptor?? [ 710.966075][ T29] audit: type=1326 audit(1775272316.545:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 711.197447][ T29] audit: type=1326 audit(1775272316.545:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 711.350014][ T29] audit: type=1326 audit(1775272316.565:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 711.471227][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 711.516657][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 711.553870][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 711.607474][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 711.642905][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 711.712854][ T24] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 711.939237][ T24] usb 1-1: USB disconnect, device number 7 [ 713.174371][T10970] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 714.470175][T10985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.307247][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 715.497063][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 715.517242][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.547626][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.592426][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.618947][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 715.695546][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.758261][ T9] usb 2-1: config 0 descriptor?? [ 716.360571][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 716.436118][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 716.445812][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 716.519498][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 716.586561][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 716.630699][ T9] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 716.938099][ T9] usb 2-1: USB disconnect, device number 11 [ 719.187759][T11031] netlink: 'syz.0.1936': attribute type 5 has an invalid length. [ 719.198847][T11031] netlink: 'syz.0.1936': attribute type 5 has an invalid length. [ 719.601637][T11033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.684074][ T9] IPVS: starting estimator thread 0... [ 720.777312][T11049] IPVS: using max 192 ests per chain, 9600 per kthread [ 720.876947][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 721.066982][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 721.128193][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.176838][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.273729][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 721.288356][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 721.331349][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.379507][ T9] usb 5-1: config 0 descriptor?? [ 721.900566][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 721.957278][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 721.966085][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 721.987325][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 721.996113][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 722.055460][ T9] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 722.277228][ T9] usb 5-1: USB disconnect, device number 9 [ 722.881047][T11062] binder: 11060:11062 unknown command 0 [ 722.901592][T11062] binder: 11060:11062 ioctl c0306201 80000080 returned -22 [ 723.022314][T11062] binder: 11060:11062 ioctl c0306201 0 returned -14 [ 724.737733][T11074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.257331][T11095] binder: 11093:11095 unknown command 0 [ 726.282293][T11095] binder: 11093:11095 ioctl c0306201 80000080 returned -22 [ 726.442707][T11095] binder: 11093:11095 ioctl c0306201 0 returned -14 [ 728.453718][T11115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.497888][T11130] fuse: Bad value for 'fd' [ 729.679683][T11133] fuse: Unknown parameter 'use00000000000000000000' [ 731.779511][T11160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1987'. [ 731.848185][T11156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.499492][T11169] fuse: Bad value for 'fd' [ 732.594528][T11171] fuse: Unknown parameter 'use00000000000000000000' [ 735.389903][T11204] binder: 11202:11204 unknown command 0 [ 735.427173][T11204] binder: 11202:11204 ioctl c0306201 80000080 returned -22 [ 735.463237][T11205] fuse: Bad value for 'fd' [ 736.724262][ T9] IPVS: starting estimator thread 0... [ 736.889509][T11222] IPVS: using max 192 ests per chain, 9600 per kthread [ 738.920356][T11246] binder: 11245:11246 unknown command 0 [ 738.986079][T11246] binder: 11245:11246 ioctl c0306201 80000080 returned -22 [ 739.138380][T11248] fuse: Bad value for 'fd' [ 741.429386][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 741.627439][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 741.682344][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.748437][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.820122][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.856566][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.885732][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.941164][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.259204][ T9] usb 2-1: usb_control_msg returned -32 [ 742.268125][ T9] usbtmc 2-1:16.0: can't read capabilities [ 742.322664][ T9] usb 2-1: USB disconnect, device number 12 [ 742.832563][T11284] binder: 11282:11284 unknown command 0 [ 742.842564][T11284] binder: 11282:11284 ioctl c0306201 80000080 returned -22 [ 743.004971][T11288] fuse: Bad value for 'fd' [ 744.696919][T11305] syzkaller0: entered promiscuous mode [ 744.747639][T11305] syzkaller0: entered allmulticast mode [ 745.921059][T11324] binder: 11318:11324 unknown command 0 [ 745.947129][T11324] binder: 11318:11324 ioctl c0306201 80000080 returned -22 [ 746.066623][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 746.276837][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 746.346733][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.387790][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 746.446591][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 746.496764][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.566632][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 746.600445][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.992831][ T9] usb 1-1: usb_control_msg returned -32 [ 747.034996][ T9] usbtmc 1-1:16.0: can't read capabilities [ 747.231859][ T9] usb 1-1: USB disconnect, device number 8 [ 749.141514][T11349] syzkaller0: entered promiscuous mode [ 749.191402][T11349] syzkaller0: entered allmulticast mode [ 749.607468][T11361] binder: 11358:11361 unknown command 0 [ 749.673641][T11361] binder: 11358:11361 ioctl c0306201 80000080 returned -22 [ 751.496655][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 751.747228][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 751.847048][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.887612][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 751.947121][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 751.996740][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.075118][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 752.140588][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.472323][ T9] usb 4-1: usb_control_msg returned -32 [ 752.485039][ T9] usbtmc 4-1:16.0: can't read capabilities [ 752.619488][ T9] usb 4-1: USB disconnect, device number 10 [ 753.880698][T11397] sctp: [Deprecated]: syz.3.2073 (pid 11397) Use of int in max_burst socket option deprecated. [ 753.880698][T11397] Use struct sctp_assoc_value instead [ 756.406740][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 756.628826][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 756.690041][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.761646][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.812669][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 756.892296][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.966922][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 756.986684][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.551658][ T24] usb 3-1: usb_control_msg returned -32 [ 757.574069][ T24] usbtmc 3-1:16.0: can't read capabilities [ 757.687131][ T24] usb 3-1: USB disconnect, device number 13 [ 760.570159][T11467] sctp: [Deprecated]: syz.2.2098 (pid 11467) Use of int in max_burst socket option deprecated. [ 760.570159][T11467] Use struct sctp_assoc_value instead [ 761.297199][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 761.533611][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 761.546843][T11011] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 761.576791][ T9] usb 1-1: config 0 has no interface number 0 [ 761.618931][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 761.650981][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 761.676041][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 761.707872][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.747279][ T9] usb 1-1: config 0 descriptor?? [ 761.798874][T11011] usb 3-1: Using ep0 maxpacket: 8 [ 761.823014][T11011] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 761.847264][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 761.872994][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 761.913642][T11011] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.956484][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 762.030094][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 762.100572][T11011] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 762.105638][T11471] iowarrior 1-1:0.1: Error -90 while submitting URB [ 762.121238][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 762.143665][ T9] usb 1-1: USB disconnect, device number 9 [ 762.183960][T11011] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.237126][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.254354][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.291138][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 762.329839][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 762.403819][T11011] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 762.424858][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 762.451252][T11011] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.529114][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 762.596886][T11011] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 762.737348][T11011] usb 3-1: string descriptor 0 read error: -22 [ 762.745509][T11011] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 762.801925][T11011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.922747][T11011] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 763.101217][T11011] usb 3-1: USB disconnect, device number 14 [ 764.790260][T11507] sctp: [Deprecated]: syz.0.2111 (pid 11507) Use of int in max_burst socket option deprecated. [ 764.790260][T11507] Use struct sctp_assoc_value instead [ 767.364310][T11533] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2120'. [ 767.435582][T11532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.943325][T11540] binder: 11538:11540 unknown command 0 [ 767.990693][T11540] binder: 11538:11540 ioctl c0306201 80000080 returned -22 [ 769.455206][T11558] syzkaller0: entered promiscuous mode [ 769.517285][T11558] syzkaller0: entered allmulticast mode [ 771.447778][T11581] binder: 11580:11581 unknown command 0 [ 771.457772][T11581] binder: 11580:11581 ioctl c0306201 80000080 returned -22 [ 771.728229][T11582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.284042][T11601] syzkaller0: entered promiscuous mode [ 773.301625][T11601] syzkaller0: entered allmulticast mode [ 774.728252][T11618] binder: 11617:11618 unknown command 0 [ 774.735161][T11618] binder: 11617:11618 ioctl c0306201 80000080 returned -22 [ 775.582067][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.518552][T11643] syzkaller0: entered promiscuous mode [ 777.526106][T11643] syzkaller0: entered allmulticast mode [ 779.438037][T11675] fuse: Unknown parameter 'grou00000000000000000000' [ 782.744463][T11713] fuse: Unknown parameter 'grou00000000000000000000' [ 787.448498][T11754] fuse: Unknown parameter 'group_i00000000000000000000' [ 791.184481][T11792] fuse: Unknown parameter 'group_i00000000000000000000' [ 793.794474][T11818] syzkaller0: entered promiscuous mode [ 793.802301][T11818] syzkaller0: entered allmulticast mode [ 794.615060][T11829] fuse: Unknown parameter 'group_i00000000000000000000' [ 798.130714][T11870] syzkaller0: entered promiscuous mode [ 798.172156][T11870] syzkaller0: entered allmulticast mode [ 799.031532][T11878] fuse: Unknown parameter 'group_id00000000000000000000' [ 801.978794][T11908] syzkaller0: entered promiscuous mode [ 802.011692][T11908] syzkaller0: entered allmulticast mode [ 804.161526][T11933] fuse: Bad value for 'fd' [ 807.419001][T11968] fuse: Bad value for 'fd' [ 823.675165][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.696640][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.303754][T12127] kvm: user requested TSC rate below hardware speed [ 824.547385][T12132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 830.617984][T12171] syzkaller0: entered promiscuous mode [ 830.624989][T12171] syzkaller0: entered allmulticast mode [ 831.808555][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 831.808651][ T29] audit: type=1326 audit(1775272438.355:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 831.966678][ T29] audit: type=1326 audit(1775272438.375:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 832.142650][ T29] audit: type=1326 audit(1775272438.375:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 836.401185][T12210] syzkaller0: entered promiscuous mode [ 836.546983][T12210] syzkaller0: entered allmulticast mode [ 837.097434][T12233] kvm: user requested TSC rate below hardware speed [ 840.550066][T12261] kvm: user requested TSC rate below hardware speed [ 842.481624][T12280] tmpfs: Bad value for 'mpol' [ 845.232802][T12293] kvm: user requested TSC rate below hardware speed [ 845.264510][T12293] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 848.121689][T12318] ======================================================= [ 848.121689][T12318] WARNING: The mand mount option has been deprecated and [ 848.121689][T12318] and is ignored by this kernel. Remove the mand [ 848.121689][T12318] option from the mount to silence this warning. [ 848.121689][T12318] ======================================================= [ 848.261726][T12318] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 850.883652][T12329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 852.962614][T12338] sctp: [Deprecated]: syz.3.2415 (pid 12338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 852.962614][T12338] Use struct sctp_sack_info instead [ 856.665234][T12355] kvm: user requested TSC rate below hardware speed [ 856.768581][T12355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 858.542940][T12370] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 858.555525][T12370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 858.580423][T12370] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 858.621580][T12370] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 858.661558][T12370] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 858.924629][T12374] sctp: [Deprecated]: syz.3.2428 (pid 12374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 858.924629][T12374] Use struct sctp_sack_info instead [ 860.767324][T12370] Bluetooth: hci5: command tx timeout [ 860.906598][T12387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 860.930587][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 861.095708][T12390] bridge_slave_1: left allmulticast mode [ 861.138693][T12390] bridge_slave_1: left promiscuous mode [ 861.214078][T12390] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.364323][T12390] bridge_slave_0: left allmulticast mode [ 861.404333][T12390] bridge_slave_0: left promiscuous mode [ 861.458301][T12390] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.859616][T12370] Bluetooth: hci5: command tx timeout [ 864.931066][T12370] Bluetooth: hci5: command tx timeout [ 865.091043][T12369] chnl_net:caif_netlink_parms(): no params data found [ 867.006881][T12370] Bluetooth: hci5: command tx timeout [ 867.722596][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.741590][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.818115][T12369] bridge_slave_0: entered allmulticast mode [ 867.924026][T12369] bridge_slave_0: entered promiscuous mode [ 868.068822][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.115438][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.146754][T12369] bridge_slave_1: entered allmulticast mode [ 868.267489][T12369] bridge_slave_1: entered promiscuous mode [ 868.695612][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.823348][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.352507][T12369] team0: Port device team_slave_0 added [ 869.480851][T12369] team0: Port device team_slave_1 added [ 869.969687][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.026506][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.146645][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.183897][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.235634][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.396400][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.185798][T12369] hsr_slave_0: entered promiscuous mode [ 871.249083][T12369] hsr_slave_1: entered promiscuous mode [ 871.275506][T12369] debugfs: 'hsr0' already exists in 'hsr' [ 871.326337][T12369] Cannot create hsr debugfs directory [ 873.594847][T12471] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 873.626454][T12471] overlayfs: failed to set xattr on upper [ 873.635902][T12471] overlayfs: ...falling back to redirect_dir=nofollow. [ 873.654517][T12471] overlayfs: ...falling back to index=off. [ 873.693714][T12471] overlayfs: ...falling back to uuid=null. [ 874.056053][ T135] team0: Port device netdevsim3 removed [ 874.125244][ T135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.464849][ T135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.832613][ T135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.071615][ T135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.467727][T12369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 875.675944][T12369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 875.720128][T12369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 875.911960][T12369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 876.575223][ T135] bridge_slave_1: left allmulticast mode [ 876.631241][ T135] bridge_slave_1: left promiscuous mode [ 876.650352][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.752588][ T135] bridge_slave_0: left allmulticast mode [ 876.787101][ T135] bridge_slave_0: left promiscuous mode [ 876.794995][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.239914][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.277967][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.322547][ T135] bond0 (unregistering): Released all slaves [ 879.693599][ T135] hsr_slave_0: left promiscuous mode [ 879.736990][ T135] hsr_slave_1: left promiscuous mode [ 879.768848][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.816862][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.895065][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.933844][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.070061][ T135] veth1_macvtap: left promiscuous mode [ 880.090890][ T135] veth0_macvtap: left promiscuous mode [ 880.141364][ T135] veth1_vlan: left promiscuous mode [ 880.188311][ T135] veth0_vlan: left promiscuous mode [ 880.517287][T12518] loop3: detected capacity change from 0 to 2048 [ 880.791361][T10577] Alternate GPT is invalid, using primary GPT. [ 880.824428][T10577] loop3: p2 p3 p7 [ 881.041277][T12518] loop3: unable to read partition table [ 881.098790][T12518] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 881.812749][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 881.861151][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 881.928246][T10577] udevd[10577]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 883.083076][ T135] team0 (unregistering): Port device team_slave_1 removed [ 883.228705][ T135] team0 (unregistering): Port device team_slave_0 removed [ 883.255124][T12546] process 'memfd:-BÕN4¦EyÛѧ±Sñ:)' started with executable stack [ 885.124249][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.132819][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.260197][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.605986][ T135] IPVS: stop unused estimator thread 0... [ 885.610448][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.789202][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.798449][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.932822][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.942124][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.853722][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.651437][T12618] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 892.024256][T12369] veth0_vlan: entered promiscuous mode [ 892.199668][T12369] veth1_vlan: entered promiscuous mode [ 892.988236][T12369] veth0_macvtap: entered promiscuous mode [ 893.103404][T12369] veth1_macvtap: entered promiscuous mode [ 893.384026][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.581480][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.810941][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.881980][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.976579][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.006654][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.357825][T12669] loop1: detected capacity change from 0 to 128 [ 896.654738][T12669] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 902.160733][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.216719][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.635792][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.711982][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.410816][T12747] loop5: detected capacity change from 0 to 7 [ 906.477706][ T6114] loop5: [ 906.502165][ T6114] loop5: partition table partially beyond EOD, truncated [ 906.591960][T12747] loop5: [ 906.623305][T12747] loop5: partition table partially beyond EOD, truncated [ 914.090509][T12813] loop2: detected capacity change from 0 to 512 [ 924.655333][T12919] kvm: user requested TSC rate below hardware speed [ 926.232042][T12937] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 927.528885][T12955] sctp: [Deprecated]: syz.2.2610 (pid 12955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 927.528885][T12955] Use struct sctp_sack_info instead [ 928.447259][T12964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 929.959296][T12980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 930.379661][T12990] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 930.432540][T12990] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 930.444938][T12990] overlayfs: missing 'lowerdir' [ 931.203363][T12998] netlink: 'syz.3.2625': attribute type 4 has an invalid length. [ 931.294706][T13002] loop5: detected capacity change from 0 to 128 [ 931.348810][T13003] netlink: 'syz.3.2625': attribute type 4 has an invalid length. [ 936.285061][T13051] fuse: Bad value for 'fd' [ 939.045391][T13083] loop5: detected capacity change from 0 to 7 [ 939.083234][T13083] loop5: [ 939.105236][T13083] loop5: partition table partially beyond EOD, truncated [ 939.769731][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 940.068833][T13092] team_slave_0: entered promiscuous mode [ 940.076313][T13092] team_slave_1: entered promiscuous mode [ 940.104124][T13092] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 944.271349][T13140] loop1: detected capacity change from 0 to 128 [ 946.562098][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 946.573430][T13167] sctp: [Deprecated]: syz.3.2682 (pid 13167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 946.573430][T13167] Use struct sctp_sack_info instead [ 946.576840][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 948.293211][T13183] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 949.234830][T13197] sctp: [Deprecated]: syz.3.2693 (pid 13197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 949.234830][T13197] Use struct sctp_sack_info instead [ 951.974252][T13222] sctp: [Deprecated]: syz.2.2704 (pid 13222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 951.974252][T13222] Use struct sctp_sack_info instead [ 952.654915][T13215] loop5: detected capacity change from 0 to 8192 [ 955.273636][T13252] loop5: detected capacity change from 0 to 128 [ 955.803771][T13256] loop2: detected capacity change from 0 to 256 [ 955.858871][T13259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 959.965146][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 961.605200][T13310] syzkaller0: entered promiscuous mode [ 961.613719][T13310] syzkaller0: entered allmulticast mode [ 963.172997][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'. [ 963.826633][T13327] loop2: detected capacity change from 0 to 16 [ 963.882522][T13327] erofs (device loop2): invalid ishare xattr prefix id 0 [ 965.633204][T13340] loop2: detected capacity change from 0 to 128 [ 966.273755][T13343] syzkaller0: entered promiscuous mode [ 966.304278][T13343] syzkaller0: entered allmulticast mode [ 966.623767][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 967.500293][T13357] syzkaller0: entered promiscuous mode [ 967.519452][T13357] syzkaller0: entered allmulticast mode [ 968.567052][T13367] loop5: detected capacity change from 0 to 128 [ 969.907987][T13379] syzkaller0: entered promiscuous mode [ 969.936855][T13379] syzkaller0: entered allmulticast mode [ 973.331958][T13416] syzkaller0: entered promiscuous mode [ 973.364284][T13416] syzkaller0: entered allmulticast mode [ 976.060720][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.081229][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.121281][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.146071][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.180823][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 978.287067][ T5771] Bluetooth: hci2: command tx timeout [ 978.535264][T13461] syzkaller0: entered promiscuous mode [ 978.576565][T13461] syzkaller0: entered allmulticast mode [ 978.640858][T13440] chnl_net:caif_netlink_parms(): no params data found [ 979.334137][ T135] team0: Port device netdevsim3 removed [ 979.384306][ T135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.731658][ T135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.979243][ T135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.215197][ T135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.368243][ T5771] Bluetooth: hci2: command tx timeout [ 981.337168][T13440] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.356853][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.376508][T13440] bridge_slave_0: entered allmulticast mode [ 981.395104][T13440] bridge_slave_0: entered promiscuous mode [ 981.437392][ T135] bridge_slave_1: left allmulticast mode [ 981.444396][ T135] bridge_slave_1: left promiscuous mode [ 981.455060][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.548702][ T135] bridge_slave_0: left allmulticast mode [ 981.555714][ T135] bridge_slave_0: left promiscuous mode [ 981.598796][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.446708][T12370] Bluetooth: hci2: command tx timeout [ 982.731548][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.793349][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.837682][ T135] bond0 (unregistering): Released all slaves [ 982.916900][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.926054][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.937225][T13440] bridge_slave_1: entered allmulticast mode [ 982.963374][T13440] bridge_slave_1: entered promiscuous mode [ 983.338420][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.432081][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.108313][T13440] team0: Port device team_slave_0 added [ 984.300616][T13440] team0: Port device team_slave_1 added [ 984.447726][T12370] Bluetooth: hci5: command 0x0406 tx timeout [ 984.548217][ T5771] Bluetooth: hci2: command tx timeout [ 984.643477][ T135] hsr_slave_0: left promiscuous mode [ 984.656914][ T135] hsr_slave_1: left promiscuous mode [ 984.678600][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.709038][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.772565][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.816911][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.872707][ T135] veth1_macvtap: left promiscuous mode [ 984.881545][ T135] veth0_macvtap: left promiscuous mode [ 984.906842][ T135] veth1_vlan: left promiscuous mode [ 984.913522][ T135] veth0_vlan: left promiscuous mode [ 986.183022][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 986.704225][ T135] team0 (unregistering): Port device team_slave_1 removed [ 986.775865][ T135] team0 (unregistering): Port device team_slave_0 removed [ 987.664745][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.706347][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.886827][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.983525][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.018116][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.140472][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.760194][ T135] IPVS: stop unused estimator thread 0... [ 988.832737][T13440] hsr_slave_0: entered promiscuous mode [ 988.877651][T13440] hsr_slave_1: entered promiscuous mode [ 989.580827][T13518] loop1: detected capacity change from 0 to 256 [ 991.937029][T13440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 992.017882][T13440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 992.081261][T13440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 992.175797][T13440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 993.369702][T13440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.589825][T13440] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.704894][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.714013][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.786308][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.796438][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.883970][T13555] bond1: entered allmulticast mode [ 994.908959][T13555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 995.148548][T13557] bond1: (slave ip6gretap1): making interface the new active one [ 995.176700][T13557] ip6gretap1: entered allmulticast mode [ 995.216435][T13557] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 995.287244][T13558] bond1: left allmulticast mode [ 995.321692][T13558] ip6gretap1: left allmulticast mode [ 997.508277][T13440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.361308][T13440] veth0_vlan: entered promiscuous mode [ 998.526303][T13440] veth1_vlan: entered promiscuous mode [ 999.099105][T13440] veth0_macvtap: entered promiscuous mode [ 999.217842][T13440] veth1_macvtap: entered promiscuous mode [ 999.585882][T13440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.834714][T13440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.138962][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.217571][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.326540][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.400411][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.685466][T13635] loop5: detected capacity change from 0 to 256 [ 1006.933283][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.955660][T13661] syzkaller1: entered promiscuous mode [ 1006.970673][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.974177][T13661] syzkaller1: entered allmulticast mode [ 1007.606953][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.661709][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.019758][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1008.028299][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.613252][T13683] loop2: detected capacity change from 0 to 256 [ 1009.844794][ T29] audit: type=1804 audit(1775272616.405:48): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2865" name="/newroot/590/file0/file1" dev="loop2" ino=1048616 res=1 errno=0 [ 1011.317284][T13692] netlink: 'syz.2.2868': attribute type 4 has an invalid length. [ 1011.422709][T13692] netlink: 'syz.2.2868': attribute type 4 has an invalid length. [ 1015.592604][T13730] netlink: 'syz.1.2881': attribute type 4 has an invalid length. [ 1015.649822][T13734] netlink: 'syz.1.2881': attribute type 4 has an invalid length. [ 1016.712901][T13745] fuse: Bad value for 'fd' [ 1017.329209][T13751] syzkaller1: entered promiscuous mode [ 1017.336014][T13751] syzkaller1: entered allmulticast mode [ 1018.610435][T13771] netlink: 'syz.3.2899': attribute type 4 has an invalid length. [ 1018.673011][T13772] netlink: 'syz.3.2899': attribute type 4 has an invalid length. [ 1020.682352][T12370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1020.695578][T12370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1020.719555][T12370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1020.769995][T12370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1020.797216][T12370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1022.608421][T13803] netlink: 'syz.3.2911': attribute type 4 has an invalid length. [ 1022.851988][ T5771] Bluetooth: hci3: command tx timeout [ 1023.869013][ T34] team0: Port device netdevsim3 removed [ 1023.914115][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.933725][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.010351][T13784] chnl_net:caif_netlink_parms(): no params data found [ 1024.505560][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.566375][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.681669][T13823] loop1: detected capacity change from 0 to 2048 [ 1024.934749][ T5771] Bluetooth: hci3: command tx timeout [ 1025.388041][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.458945][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.627888][T13829] syzkaller0: entered promiscuous mode [ 1025.634705][T13829] syzkaller0: entered allmulticast mode [ 1025.925470][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.997389][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.950376][T13784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.002316][T13784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.012528][ T5771] Bluetooth: hci3: command tx timeout [ 1027.034098][T13784] bridge_slave_0: entered allmulticast mode [ 1027.060554][T13784] bridge_slave_0: entered promiscuous mode [ 1027.303725][T13784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.342147][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.352431][T13784] bridge_slave_1: entered allmulticast mode [ 1027.368000][T13784] bridge_slave_1: entered promiscuous mode [ 1027.423468][ T34] bridge_slave_1: left allmulticast mode [ 1027.433286][ T34] bridge_slave_1: left promiscuous mode [ 1027.435442][T13848] netlink: 'syz.1.2923': attribute type 4 has an invalid length. [ 1027.449783][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.471461][ T34] bridge_slave_0: left allmulticast mode [ 1027.480387][ T34] bridge_slave_0: left promiscuous mode [ 1027.509216][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.059067][ T34] bond1 (unregistering): (slave vxlan0): Releasing backup interface [ 1028.152171][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.175259][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.213409][ T34] bond0 (unregistering): Released all slaves [ 1028.236354][ T34] bond1 (unregistering): Released all slaves [ 1028.482724][T13784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.548901][T13784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.033063][T13784] team0: Port device team_slave_0 added [ 1029.089934][ T5771] Bluetooth: hci3: command tx timeout [ 1029.205011][T13784] team0: Port device team_slave_1 added [ 1029.778884][T13784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.817180][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.884500][T13784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.985508][ T34] hsr_slave_0: left promiscuous mode [ 1029.998590][ T34] hsr_slave_1: left promiscuous mode [ 1029.998642][T13859] loop5: detected capacity change from 0 to 1764 [ 1030.010208][T13859] iso9660: Bad value for 'uid' [ 1030.055400][T13859] iso9660: Bad value for 'uid' [ 1030.067227][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.106567][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.130893][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.165459][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.230095][ T34] veth1_macvtap: left promiscuous mode [ 1030.247286][ T34] veth0_macvtap: left promiscuous mode [ 1030.271429][ T34] veth1_vlan: left promiscuous mode [ 1030.299698][ T34] veth0_vlan: left promiscuous mode [ 1031.535211][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1031.604384][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1032.106538][T13784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.116699][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.151190][T13784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.665251][T13784] hsr_slave_0: entered promiscuous mode [ 1032.701345][T13784] hsr_slave_1: entered promiscuous mode [ 1032.749428][T13784] debugfs: 'hsr0' already exists in 'hsr' [ 1032.757282][T13784] Cannot create hsr debugfs directory [ 1032.782285][T13871] syzkaller0: entered promiscuous mode [ 1032.857014][T13871] syzkaller0: entered allmulticast mode [ 1032.986371][ T34] IPVS: stop unused estimator thread 0... [ 1034.291704][T13883] syzkaller0: entered promiscuous mode [ 1034.314344][T13883] syzkaller0: entered allmulticast mode [ 1035.659627][T13784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1035.715879][T13784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1035.772412][T13784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1035.874969][T13784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1036.857037][T13784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.108845][T13784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.204921][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.214210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.341658][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.351434][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.531820][T13784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.177090][T13927] syzkaller0: entered promiscuous mode [ 1040.189084][T13927] syzkaller0: entered allmulticast mode [ 1040.264918][T13784] veth0_vlan: entered promiscuous mode [ 1040.467965][T13784] veth1_vlan: entered promiscuous mode [ 1040.841045][T13784] veth0_macvtap: entered promiscuous mode [ 1040.887927][T13784] veth1_macvtap: entered promiscuous mode [ 1040.995253][T13784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.102392][T13784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.201341][ T995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.233886][ T995] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.245903][ T995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.330704][ T995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.770088][T13970] bond1: option mode: unable to set because the bond device has slaves [ 1044.933236][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.956438][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.200182][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.230702][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.055133][T12370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.076671][T12370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.092712][T12370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.131865][T12370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1047.156360][T12370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1048.300345][T13981] chnl_net:caif_netlink_parms(): no params data found [ 1048.897221][T13981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.906923][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.915995][T13981] bridge_slave_0: entered allmulticast mode [ 1048.926802][T13981] bridge_slave_0: entered promiscuous mode [ 1048.942272][T13981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.951415][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.960853][T13981] bridge_slave_1: entered allmulticast mode [ 1048.972522][T13981] bridge_slave_1: entered promiscuous mode [ 1049.072378][T13981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.108283][T13981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.218790][T13981] team0: Port device team_slave_0 added [ 1049.246844][T12370] Bluetooth: hci1: command tx timeout [ 1049.262055][T13981] team0: Port device team_slave_1 added [ 1049.459378][T13981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.468913][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.502078][T13981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.530637][T13981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.539479][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.573874][T13981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.718325][T13981] hsr_slave_0: entered promiscuous mode [ 1049.733910][T13981] hsr_slave_1: entered promiscuous mode [ 1049.744953][T13981] debugfs: 'hsr0' already exists in 'hsr' [ 1049.752725][T13981] Cannot create hsr debugfs directory [ 1050.113549][T13981] team0: Port device netdevsim3 removed [ 1050.155054][T13981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.369242][T13981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.475053][T13981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.644563][T13981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.206673][T13981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1051.282346][T13981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1051.326901][T12370] Bluetooth: hci1: command tx timeout [ 1051.363427][T13981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1051.409754][T13981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1051.974952][T14004] loop2: detected capacity change from 0 to 16 [ 1052.016956][T14004] erofs (device loop2): invalid ishare xattr prefix id 0 [ 1052.154886][T13981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.301263][T13981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.355902][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.365050][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.514651][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.523775][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.429387][T12370] Bluetooth: hci1: command tx timeout [ 1054.360117][T13981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.820738][T13981] veth0_vlan: entered promiscuous mode [ 1054.873495][T13981] veth1_vlan: entered promiscuous mode [ 1055.020617][T13981] veth0_macvtap: entered promiscuous mode [ 1055.054914][T13981] veth1_macvtap: entered promiscuous mode [ 1055.157466][T13981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.257655][T13981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.369052][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.382466][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.405916][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.436591][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.494043][ T5771] Bluetooth: hci1: command tx timeout [ 1059.411798][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.445379][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.817505][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.844739][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.871115][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.941624][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.114842][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.250525][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.920876][ T56] bridge_slave_1: left allmulticast mode [ 1060.935151][ T56] bridge_slave_1: left promiscuous mode [ 1060.951211][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.990629][ T56] bridge_slave_0: left allmulticast mode [ 1061.003369][ T56] bridge_slave_0: left promiscuous mode [ 1061.025470][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.872423][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.910964][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.937596][ T56] bond0 (unregistering): Released all slaves [ 1062.754498][ T56] hsr_slave_0: left promiscuous mode [ 1062.786574][ T56] hsr_slave_1: left promiscuous mode [ 1062.811427][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.845702][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.911812][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.945496][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.064747][ T56] veth1_macvtap: left promiscuous mode [ 1063.087323][ T56] veth0_macvtap: left promiscuous mode [ 1063.117609][ T56] veth1_vlan: left promiscuous mode [ 1063.154046][ T56] veth0_vlan: left promiscuous mode [ 1063.293375][T12370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1063.305465][T12370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1063.323573][T12370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1063.375326][T12370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1063.398987][T12370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1064.882738][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1064.931413][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1065.532054][T12370] Bluetooth: hci3: command tx timeout [ 1067.545733][T14070] chnl_net:caif_netlink_parms(): no params data found [ 1067.566564][T12370] Bluetooth: hci3: command tx timeout [ 1068.634532][T14070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.645321][T14070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.665300][T14070] bridge_slave_0: entered allmulticast mode [ 1068.686691][T14070] bridge_slave_0: entered promiscuous mode [ 1068.713143][T14070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.723608][T14070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.734300][T14070] bridge_slave_1: entered allmulticast mode [ 1068.795800][T14070] bridge_slave_1: entered promiscuous mode [ 1069.135399][T14070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.288226][T14070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.441641][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.456934][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1069.646764][T12370] Bluetooth: hci3: command tx timeout [ 1069.707551][T14070] team0: Port device team_slave_0 added [ 1069.811612][T14070] team0: Port device team_slave_1 added [ 1070.123456][T14070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.150327][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.269154][T14070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.313673][T14070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.373758][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.504717][T14070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.875996][T14070] hsr_slave_0: entered promiscuous mode [ 1070.930943][T14070] hsr_slave_1: entered promiscuous mode [ 1070.947848][T14070] debugfs: 'hsr0' already exists in 'hsr' [ 1070.954946][T14070] Cannot create hsr debugfs directory [ 1071.727899][T12370] Bluetooth: hci3: command tx timeout [ 1072.249763][T14070] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1072.298935][T14070] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1072.362704][T14070] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1072.404568][T14070] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1073.851326][T14070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.101739][T14070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.222793][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.232232][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.358171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.367512][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.810140][T14070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.254434][T14070] veth0_vlan: entered promiscuous mode [ 1079.399139][T14070] veth1_vlan: entered promiscuous mode [ 1079.775473][T14070] veth0_macvtap: entered promiscuous mode [ 1079.897903][T14070] veth1_macvtap: entered promiscuous mode [ 1080.163033][T14070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.351645][T14070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.566343][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.613861][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.690092][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.709528][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.419040][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.463750][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.693752][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.704154][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.919873][T14252] loop6: detected capacity change from 0 to 2048 [ 1085.972890][ T6114] loop6: p1 < > p4 [ 1085.987177][ T6114] loop6: p4 size 722688 extends beyond EOD, truncated [ 1086.025442][T14252] loop6: p1 < > p4 [ 1086.044298][T14252] loop6: p4 size 722688 extends beyond EOD, truncated [ 1086.960557][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1086.974785][T10577] udevd[10577]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1087.410137][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1087.438447][T10577] udevd[10577]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1087.890177][T14265] netlink: 'syz.6.3039': attribute type 4 has an invalid length. [ 1090.966430][T14292] netlink: 'syz.6.3051': attribute type 4 has an invalid length. [ 1091.634345][T14297] netlink: 'syz.6.3054': attribute type 3 has an invalid length. [ 1092.564416][T14305] syzkaller0: entered promiscuous mode [ 1092.631871][T14305] syzkaller0: entered allmulticast mode [ 1096.542422][T14344] overlayfs: missing 'lowerdir' [ 1097.817009][T14354] team_slave_0: entered promiscuous mode [ 1097.824171][T14354] team_slave_1: entered promiscuous mode [ 1097.875626][T14354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1098.895847][T14367] tmpfs: Bad value for 'mpol' [ 1099.981326][T14376] loop6: detected capacity change from 0 to 128 [ 1100.140322][T14376] netlink: 'syz.6.3076': attribute type 1 has an invalid length. [ 1100.513380][T14376] bond1 (unregistering): Released all slaves [ 1102.113647][T14395] netlink: 'syz.6.3081': attribute type 4 has an invalid length. [ 1102.207219][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.681431][T14400] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1105.760856][T14422] netlink: 'syz.6.3092': attribute type 4 has an invalid length. [ 1106.415014][T14426] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1106.877469][T14429] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3096'. [ 1109.459284][T14441] netlink: 'syz.6.3103': attribute type 4 has an invalid length. [ 1111.097233][T14453] syzkaller0: entered promiscuous mode [ 1111.104411][T14453] syzkaller0: entered allmulticast mode [ 1112.162780][T14461] netlink: 'syz.6.3114': attribute type 4 has an invalid length. [ 1113.843018][T14473] syzkaller0: entered promiscuous mode [ 1113.850451][T14473] syzkaller0: entered allmulticast mode [ 1114.242347][T14475] ===================================================== [ 1114.251213][T14475] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1114.261479][T14475] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1114.268766][T14475] do_xdp_generic+0xe07/0x17f0 [ 1114.274697][T14475] tun_get_user+0x525a/0x7830 [ 1114.280747][T14475] tun_chr_write_iter+0x3e9/0x5c0 [ 1114.287448][T14475] vfs_write+0xbe1/0x15c0 [ 1114.292877][T14475] ksys_write+0x1d9/0x470 [ 1114.298594][T14475] __ia32_sys_write+0x9a/0xf0 [ 1114.304441][T14475] ia32_sys_call+0x37a7/0x4360 [ 1114.310537][T14475] do_int80_emulation+0x15a/0x330 [ 1114.317023][T14475] asm_int80_emulation+0x1f/0x30 [ 1114.323165][T14475] [ 1114.326228][T14475] Uninit was stored to memory at: [ 1114.332622][T14475] pskb_expand_head+0x4a0/0x1fb0 [ 1114.338933][T14475] do_xdp_generic+0xb30/0x17f0 [ 1114.344865][T14475] tun_get_user+0x525a/0x7830 [ 1114.350860][T14475] tun_chr_write_iter+0x3e9/0x5c0 [ 1114.357380][T14475] vfs_write+0xbe1/0x15c0 [ 1114.362812][T14475] ksys_write+0x1d9/0x470 [ 1114.368434][T14475] __ia32_sys_write+0x9a/0xf0 [ 1114.374297][T14475] ia32_sys_call+0x37a7/0x4360 [ 1114.380487][T14475] do_int80_emulation+0x15a/0x330 [ 1114.386950][T14475] asm_int80_emulation+0x1f/0x30 [ 1114.393186][T14475] [ 1114.396291][T14475] Uninit was created at: [ 1114.401680][T14475] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 1114.410102][T14475] __alloc_skb+0x90d/0x1190 [ 1114.415712][T14475] alloc_skb_with_frags+0xc5/0xa60 [ 1114.422400][T14475] sock_alloc_send_pskb+0xacb/0xc60 [ 1114.428988][T14475] tun_get_user+0xcfc/0x7830 [ 1114.434927][T14475] tun_chr_write_iter+0x3e9/0x5c0 [ 1114.441508][T14475] vfs_write+0xbe1/0x15c0 [ 1114.447155][T14475] ksys_write+0x1d9/0x470 [ 1114.452610][T14475] __ia32_sys_write+0x9a/0xf0 [ 1114.458738][T14475] ia32_sys_call+0x37a7/0x4360 [ 1114.464659][T14475] do_int80_emulation+0x15a/0x330 [ 1114.471899][T14475] asm_int80_emulation+0x1f/0x30 [ 1114.489291][T14475] [ 1114.492416][T14475] CPU: 0 UID: 0 PID: 14475 Comm: syz.6.3122 Not tainted syzkaller #0 PREEMPT(full) [ 1114.504120][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1114.517181][T14475] ===================================================== [ 1114.525652][T14475] Disabling lock debugging due to kernel taint [ 1114.533590][T14475] Kernel panic - not syncing: kmsan.panic set ... [ 1114.541560][T14475] CPU: 0 UID: 0 PID: 14475 Comm: syz.6.3122 Tainted: G B syzkaller #0 PREEMPT(full) [ 1114.554956][T14475] Tainted: [B]=BAD_PAGE [ 1114.560157][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1114.573038][T14475] Call Trace: [ 1114.577208][T14475] [ 1114.580823][T14475] __dump_stack+0x26/0x30 [ 1114.586224][T14475] dump_stack_lvl+0x50/0x1c0 [ 1114.591996][T14475] ? dump_stack+0x12/0x25 [ 1114.597385][T14475] dump_stack+0x1e/0x25 [ 1114.602564][T14475] vpanic+0x7b4/0x1430 [ 1114.607797][T14475] panic+0x15d/0x160 [ 1114.612771][T14475] kmsan_report+0x31a/0x320 [ 1114.618528][T14475] ? __msan_warning+0x1b/0x30 [ 1114.624384][T14475] ? bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1114.631686][T14475] ? do_xdp_generic+0xe07/0x17f0 [ 1114.637972][T14475] ? tun_get_user+0x525a/0x7830 [ 1114.644037][T14475] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1114.650485][T14475] ? vfs_write+0xbe1/0x15c0 [ 1114.656119][T14475] ? ksys_write+0x1d9/0x470 [ 1114.661839][T14475] ? __ia32_sys_write+0x9a/0xf0 [ 1114.667889][T14475] ? ia32_sys_call+0x37a7/0x4360 [ 1114.673979][T14475] ? do_int80_emulation+0x15a/0x330 [ 1114.680567][T14475] ? asm_int80_emulation+0x1f/0x30 [ 1114.686933][T14475] ? ___bpf_prog_run+0xe958/0xea90 [ 1114.693467][T14475] ? __bpf_prog_run32+0xc2/0xf0 [ 1114.699635][T14475] ? kmsan_get_metadata+0xf1/0x160 [ 1114.706076][T14475] __msan_warning+0x1b/0x30 [ 1114.711724][T14475] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1114.718823][T14475] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1114.726189][T14475] do_xdp_generic+0xe07/0x17f0 [ 1114.732190][T14475] ? tun_get_user+0x51dc/0x7830 [ 1114.738265][T14475] tun_get_user+0x525a/0x7830 [ 1114.744133][T14475] ? stack_depot_save_flags+0x35/0x790 [ 1114.750911][T14475] ? kmsan_get_metadata+0xf1/0x160 [ 1114.757221][T14475] ? kmsan_get_metadata+0xf1/0x160 [ 1114.763517][T14475] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1114.771378][T14475] ? __pfx_kmsan_get_metadata+0x10/0x10 [ 1114.778257][T14475] tun_chr_write_iter+0x3e9/0x5c0 [ 1114.784515][T14475] vfs_write+0xbe1/0x15c0 [ 1114.790063][T14475] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1114.797053][T14475] ksys_write+0x1d9/0x470 [ 1114.802483][T14475] __ia32_sys_write+0x9a/0xf0 [ 1114.808373][T14475] ia32_sys_call+0x37a7/0x4360 [ 1114.814262][T14475] do_int80_emulation+0x15a/0x330 [ 1114.820511][T14475] ? clear_bhb_loop+0x50/0xa0 [ 1114.826315][T14475] ? clear_bhb_loop+0x50/0xa0 [ 1114.832218][T14475] asm_int80_emulation+0x1f/0x30 [ 1114.838342][T14475] RIP: 0023:0xf71c5cab [ 1114.843353][T14475] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1114.867278][T14475] RSP: 002b:00000000f547d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1114.877575][T14475] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001c00 [ 1114.887498][T14475] RDX: 000000000002dc2e RSI: 0000000000000000 RDI: 0000000000000000 [ 1114.897203][T14475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1114.906915][T14475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1114.916862][T14475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1114.926618][T14475] [ 1114.930740][T14475] Kernel Offset: disabled [ 1114.935985][T14475] Rebooting in 86400 seconds..