last executing test programs: 12m17.837634083s ago: executing program 32 (id=21): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 11m54.196280606s ago: executing program 4 (id=182): r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x82000804) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r2, 0x0, 0x0, 0x4000000}]) 11m53.828266534s ago: executing program 4 (id=185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001900)={r1, 0x1, 0x6, @random="000001001800"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r5, 0x1, 0x6}, 0x10) 11m53.610076829s ago: executing program 4 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11m53.449883392s ago: executing program 4 (id=190): syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 11m52.936734663s ago: executing program 4 (id=192): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 11m52.281698507s ago: executing program 4 (id=199): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 11m51.728007289s ago: executing program 33 (id=199): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 11m8.138055546s ago: executing program 5 (id=442): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="d9b604") 11m7.622066737s ago: executing program 5 (id=444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c) 11m7.367504333s ago: executing program 5 (id=446): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x109301) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 11m6.621597138s ago: executing program 0 (id=448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 11m6.611367299s ago: executing program 5 (id=449): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0xfffffffffffffffc]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 11m6.310912925s ago: executing program 0 (id=451): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 11m5.916133373s ago: executing program 0 (id=452): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m5.797409676s ago: executing program 5 (id=453): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2220, 0x134d, 0x16, 0x0, 0x0) 11m5.396873805s ago: executing program 0 (id=455): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4337, 0x3d) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36a, 0xc000, 0xc, 0xa0002f5}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x6, "818cdb265bd5"}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m5.019140603s ago: executing program 0 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 11m3.962579965s ago: executing program 0 (id=461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0xd5ab}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 11m3.696906161s ago: executing program 5 (id=463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000bc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0x8, 0x3}) 11m2.960663767s ago: executing program 34 (id=463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000bc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0x8, 0x3}) 10m56.875534325s ago: executing program 2 (id=479): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m54.29470494s ago: executing program 2 (id=481): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x3}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e", 0xa, 0x800, 0x0, 0x0) 10m53.884894159s ago: executing program 2 (id=483): socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x1, 0x0, 0x3}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000057c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x200090c1) 10m52.839023051s ago: executing program 2 (id=484): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0xfffffffffffffffc]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 10m52.004261768s ago: executing program 2 (id=486): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) write$nci(0xffffffffffffffff, 0x0, 0x14) socket$packet(0x11, 0x2, 0x300) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffe07}}, 0x40440d0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 10m50.616377718s ago: executing program 2 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1044) 10m49.951073042s ago: executing program 35 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1044) 10m48.449841584s ago: executing program 36 (id=461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0xd5ab}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m15.156669989s ago: executing program 7 (id=2435): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000000009}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) write(r3, &(0x7f0000000240)="80", 0x1) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m14.701178259s ago: executing program 7 (id=2437): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a001400000002", 0x29}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) bind$alg(r1, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m14.548922202s ago: executing program 7 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) 2m13.608512302s ago: executing program 7 (id=2442): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="80"], 0x0) 2m9.488933199s ago: executing program 7 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x40080) 2m6.992917572s ago: executing program 7 (id=2462): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a00000000000073112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000002a40)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x205, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffff8}]}, 0x28}}, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb2ec73c79280986dd606410a60008000000000000000000000000ffff00000000fe8000000000000000000000000000aa330001000000ff05fc35ff57755f0f2290cca9c8d95af8ca47a4c56a6ac55db1d67346d2583398769a9c04ba78852242c896fa3407923111519c8f4f16bea8da0008fa36b762088cb2eb191dfd452a63990d75dde6310478e5463ae42f25a26b7645aa7357a59f19f163f37f09e1c18829f5005d970a08964142f68176a6e0db"], 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2300021, &(0x7f00000002c0)='\x17\xec\xa5Y\xf0\xcc\xda\x84y\xb5\xb2Fm\xa4\xef\x90\x8a\x11\xa9\x81\xab\xb1\bZ\xc91\xd8(O[\xbd\xc5\n^\xa5\xc6\x7f+E\xef\xf3\xaa\xd8]0rQ#\x8f\x1c\x01\xcd\x1f\xf3\x11{\x01\xd8\xcc\x8e\xcec\xc4p\xe76;\x1f\xe6\xb0:\xaaP\x9fr\xeff\xe8\x98l\xbf\xed\xd0IG>\x8e\xe1\x10\xa6?\xcf\x85-\x03H\"\x92&\x1eF\xfe)\x16\xf0!I\x88|.z') syz_usb_connect$uac1(0x2, 0xb4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 2m6.366317115s ago: executing program 37 (id=2462): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a00000000000073112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000002a40)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x205, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffff8}]}, 0x28}}, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb2ec73c79280986dd606410a60008000000000000000000000000ffff00000000fe8000000000000000000000000000aa330001000000ff05fc35ff57755f0f2290cca9c8d95af8ca47a4c56a6ac55db1d67346d2583398769a9c04ba78852242c896fa3407923111519c8f4f16bea8da0008fa36b762088cb2eb191dfd452a63990d75dde6310478e5463ae42f25a26b7645aa7357a59f19f163f37f09e1c18829f5005d970a08964142f68176a6e0db"], 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2300021, &(0x7f00000002c0)='\x17\xec\xa5Y\xf0\xcc\xda\x84y\xb5\xb2Fm\xa4\xef\x90\x8a\x11\xa9\x81\xab\xb1\bZ\xc91\xd8(O[\xbd\xc5\n^\xa5\xc6\x7f+E\xef\xf3\xaa\xd8]0rQ#\x8f\x1c\x01\xcd\x1f\xf3\x11{\x01\xd8\xcc\x8e\xcec\xc4p\xe76;\x1f\xe6\xb0:\xaaP\x9fr\xeff\xe8\x98l\xbf\xed\xd0IG>\x8e\xe1\x10\xa6?\xcf\x85-\x03H\"\x92&\x1eF\xfe)\x16\xf0!I\x88|.z') syz_usb_connect$uac1(0x2, 0xb4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 29.30061419s ago: executing program 6 (id=2760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 27.42478646s ago: executing program 6 (id=2765): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x5, 0x0, 0x200005, 0x4, 0x8001, 0x7fffffff, 0x9e9, 0x4, 0x3f, 0x6000, 0x5, 0xffffffffffffffff, r1, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) shutdown(0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, 0x0, 0x0) 27.293324442s ago: executing program 6 (id=2766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f00000020c0)=""/4099, 0x80000000, 0xfffffffffffffefe}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 26.069650228s ago: executing program 6 (id=2770): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setpgid(r1, r1) r3 = getpgid(r1) setpgid(0x0, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 24.916629732s ago: executing program 6 (id=2773): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 24.915730113s ago: executing program 3 (id=2774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xee4, 0x30, 0xb, 0x0, 0x0, {}, [{0xed0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe84, 0x2, 0x0, 0x0, {{0xa}, {0xe58, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x3, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92c4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, 0x0, 0x1, [{0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xee4}}, 0x0) 23.472883003s ago: executing program 6 (id=2776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.425804665s ago: executing program 38 (id=2776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 18.828938691s ago: executing program 3 (id=2784): socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x597183, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOCK(r3, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.408801454s ago: executing program 9 (id=2794): socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.408037264s ago: executing program 3 (id=2795): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) 14.368748466s ago: executing program 3 (id=2787): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 12.890057497s ago: executing program 9 (id=2789): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r2, &(0x7f0000000140)=""/87, 0x57) close_range(r0, 0xffffffffffffffff, 0x0) 7.004728961s ago: executing program 9 (id=2804): syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.525022563s ago: executing program 1 (id=2809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x5, 0x0, 0x100, 0x4, 0x540200, r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) write(r3, &(0x7f0000000180)="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", 0x304) r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r4, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000000000000"], 0x3f9, 0x0) msgsnd(r4, &(0x7f0000000240)=ANY=[], 0x3f9, 0x0) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r4, &(0x7f0000000140)={0x0, ""/197}, 0xcd, 0x0, 0x1800) 5.138094481s ago: executing program 9 (id=2811): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x1}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='\x00\x00\x00\x00', 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x24048001) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841", 0x3a}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x3}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 4.872938527s ago: executing program 8 (id=2813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3, 0x2000000}, 0x20) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) 4.578280313s ago: executing program 1 (id=2814): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x2, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, 0x0, 0x0) 3.867153848s ago: executing program 8 (id=2815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = dup2(r4, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @random}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.848933389s ago: executing program 1 (id=2816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) socket$key(0xf, 0x3, 0x2) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 2.732610232s ago: executing program 8 (id=2817): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 1.801641672s ago: executing program 1 (id=2818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="ab", 0x1, 0x8855, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.694374924s ago: executing program 8 (id=2819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x505, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.552855167s ago: executing program 1 (id=2820): syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.41818296s ago: executing program 3 (id=2821): syz_open_dev$vim2m(0x0, 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8) 997.423879ms ago: executing program 9 (id=2822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 576.977158ms ago: executing program 8 (id=2823): close(0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) 439.367991ms ago: executing program 3 (id=2824): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x84) close(r0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000280), &(0x7f0000000500)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 360.186513ms ago: executing program 8 (id=2825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 357.939122ms ago: executing program 9 (id=2826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000440)=@file={0x1}, 0x6e) 0s ago: executing program 1 (id=2827): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e840", 0x4c}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3e", 0x75}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ased all slaves [ 417.780673][ T11] bond2 (unregistering): Released all slaves [ 417.941317][ T11] bond1 (unregistering): (slave geneve2): Removing an active aggregator [ 417.973950][ T11] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 418.379320][ T11] bond1 (unregistering): Released all slaves [ 419.331445][ T11] team0 (unregistering): Port device team_slave_1 removed [ 419.408859][ T11] team0 (unregistering): Port device team_slave_0 removed [ 419.476117][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.570130][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.559343][ T11] bond0 (unregistering): Released all slaves [ 421.687419][T11476] loop7: detected capacity change from 0 to 128 [ 421.867345][T11476] syz.7.1526: attempt to access beyond end of device [ 421.867345][T11476] loop7: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 422.273950][T11493] netlink: 'syz.8.1527': attribute type 2 has an invalid length. [ 422.669535][ T28] audit: type=1326 audit(1782885170.267:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.7.1531" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x0 [ 425.821719][ T28] audit: type=1326 audit(1782885173.417:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 426.077895][ T28] audit: type=1326 audit(1782885173.447:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 426.263418][ T28] audit: type=1326 audit(1782885173.467:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 426.423728][ T28] audit: type=1326 audit(1782885173.477:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 426.549802][ T28] audit: type=1326 audit(1782885173.477:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 426.656967][ T28] audit: type=1326 audit(1782885173.567:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 426.727028][ T28] audit: type=1326 audit(1782885173.567:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 426.808542][T11570] netlink: 'syz.8.1546': attribute type 1 has an invalid length. [ 426.899890][ T28] audit: type=1326 audit(1782885173.567:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 427.624332][T11570] bond6: entered promiscuous mode [ 427.669033][ T28] audit: type=1326 audit(1782885173.577:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 427.715167][T11570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 427.757652][ T28] audit: type=1326 audit(1782885173.587:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 427.819513][ T28] audit: type=1326 audit(1782885173.647:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 427.826733][T11573] bridge3: entered promiscuous mode [ 427.849225][ T49] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 427.887886][T11573] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 427.926841][ T28] audit: type=1326 audit(1782885173.647:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 427.990384][ T28] audit: type=1326 audit(1782885173.657:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 428.007096][ T49] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 428.068130][T11574] veth9: entered promiscuous mode [ 428.084952][ T28] audit: type=1326 audit(1782885173.657:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 428.120048][T11574] veth9: entered allmulticast mode [ 428.152943][T11574] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 428.171776][ T28] audit: type=1326 audit(1782885173.717:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 428.272682][ T28] audit: type=1326 audit(1782885173.717:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 428.352389][ T28] audit: type=1326 audit(1782885173.737:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 428.433701][ T28] audit: type=1326 audit(1782885173.757:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 428.478431][ T28] audit: type=1326 audit(1782885173.757:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.7.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb93bb5e68e code=0x7ffc0000 [ 431.109118][ T9735] IPVS: ip_vs_send_async error -101 [ 431.791963][T11653] overlayfs: failed to clone lowerpath [ 432.826947][T10084] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 433.025620][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 433.025630][ T28] audit: type=1326 audit(1782885180.617:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 433.057260][T10084] usb 8-1: Using ep0 maxpacket: 16 [ 433.078865][T10084] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.095793][ T28] audit: type=1326 audit(1782885180.657:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 433.111727][T10084] usb 8-1: config 0 has no interface number 0 [ 433.147199][ T28] audit: type=1326 audit(1782885180.657:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 433.195606][T10084] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.223885][T10084] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 433.230315][ T9735] IPVS: ip_vs_send_async error -101 [ 433.258208][ T28] audit: type=1326 audit(1782885180.657:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 433.291077][T10084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.320139][ T28] audit: type=1326 audit(1782885180.727:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 433.372095][T10084] usb 8-1: config 0 descriptor?? [ 433.404036][T10084] usbhid 8-1:0.1: couldn't find an input interrupt endpoint [ 433.419367][ T28] audit: type=1326 audit(1782885180.727:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 433.523869][ T28] audit: type=1326 audit(1782885180.727:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 433.776723][ T28] audit: type=1326 audit(1782885180.737:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 434.546859][ T28] audit: type=1326 audit(1782885180.737:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 435.112334][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.137287][ T28] audit: type=1326 audit(1782885180.737:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 435.240532][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1569'. [ 435.269279][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.324165][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.337633][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.345091][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.379941][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.402229][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.421637][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.438860][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.491351][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.540607][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.574162][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.599412][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.624102][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.650614][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.678183][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.686161][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.844357][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.860965][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 435.876927][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.584618][T10084] usb 8-1: USB disconnect, device number 6 [ 436.596950][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.652653][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.697964][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.705420][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.761486][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.792709][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.809371][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.821401][T11707] netlink: 'syz.7.1572': attribute type 1 has an invalid length. [ 436.834741][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.854171][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.905126][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 436.908887][T11707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.926292][T11712] vlan2: entered allmulticast mode [ 436.931730][T11712] bond4: entered allmulticast mode [ 436.931780][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.012317][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.028533][T11712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.048932][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.056470][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.075313][T11712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.084225][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.113852][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.128141][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.135694][T11712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.144784][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.163722][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.175914][T11712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.185893][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.198661][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.206107][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.231948][T11712] bond4: (slave geneve2): making interface the new active one [ 437.242051][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.253314][T11712] geneve2: entered allmulticast mode [ 437.261240][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.274162][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.285654][T11712] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 437.306438][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.321024][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.345012][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.354895][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.368316][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.375848][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.390059][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.398073][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.405600][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.450706][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.466535][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.474962][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.488543][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.496177][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.597095][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.649914][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 437.666990][T11728] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1577'. [ 437.736721][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.039513][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.055819][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.074418][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.111094][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.376320][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.510991][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.625300][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.633469][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.641560][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.649309][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.657598][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.665018][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.673258][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.689835][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.739456][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.792607][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.825153][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.837117][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.844565][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.892921][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.913660][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.927096][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.947006][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.954443][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.976952][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 438.984399][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.047661][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.136884][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.144344][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.179065][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 439.225252][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.326690][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.427206][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.526595][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.673661][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.791144][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.798869][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.806295][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.814037][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.821743][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.829965][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.901870][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.926420][T11758] loop7: detected capacity change from 0 to 512 [ 439.955909][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 439.976496][T11758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.017508][T11758] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.1583: iget: bad i_size value: 38620345925642 [ 440.019544][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.052412][T11758] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1583: couldn't read orphan inode 15 (err -117) [ 440.080928][T11758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.119703][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.127727][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.136182][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.143138][T11765] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 440.152212][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.167159][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.217453][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.228057][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.242359][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.248384][T11765] bond4: entered promiscuous mode [ 440.250362][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.265595][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.282591][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.287247][T11765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.297401][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.308941][T10089] hid-generic 0057:000C:00FF.0005: unknown main item tag 0x0 [ 440.310221][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 440.310234][ T28] audit: type=1800 audit(1782885187.907:620): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1583" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 440.367335][T10089] hid-generic 0057:000C:00FF.0005: hidraw0: HID v0.05 Device [syz0] on syz1 [ 440.426482][ T7848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.446536][T11770] bridge5: entered promiscuous mode [ 440.479081][T11770] bond4: (slave bridge5): Enslaving as a backup interface with an up link [ 440.487851][ T7394] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 440.573950][T11774] fido_id[11774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 440.616266][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1588'. [ 440.648963][ T7394] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 440.680399][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1588'. [ 440.843893][T11765] veth9: entered promiscuous mode [ 440.849316][T11765] veth9: entered allmulticast mode [ 440.859280][T11765] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 441.108924][T11780] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 441.123379][T11780] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 443.138105][T11809] netlink: 8752 bytes leftover after parsing attributes in process `syz.8.1594'. [ 443.327360][T11817] netlink: 532 bytes leftover after parsing attributes in process `syz.6.1597'. [ 443.727283][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1599'. [ 444.516073][T11842] loop7: detected capacity change from 0 to 16 [ 444.569645][T11842] erofs: (device loop7): mounted with root inode @ nid 36. [ 444.955795][T11854] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 445.013638][T11854] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 445.025368][T11854] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 447.498571][T11881] loop6: detected capacity change from 0 to 16 [ 447.534186][T11883] netlink: 'syz.7.1609': attribute type 1 has an invalid length. [ 447.560771][T11881] erofs: (device loop6): mounted with root inode @ nid 36. [ 448.085524][T11883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.176862][T11693] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 448.239617][T11887] vlan3: entered allmulticast mode [ 448.257480][T11887] bridge0: entered allmulticast mode [ 448.288595][T11887] bond5: (slave vlan3): Opening slave failed [ 448.401234][T11693] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.434569][T11693] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.527763][T11693] usb 7-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 448.546963][T11693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.564540][T11693] usb 7-1: config 0 descriptor?? [ 448.886071][T10089] usb 7-1: USB disconnect, device number 9 [ 449.362620][T11917] can: request_module (can-proto-0) failed. [ 449.386080][T11919] dummy0: left promiscuous mode [ 449.396539][T11919] batman_adv: batadv0: Adding interface: dummy0 [ 449.406980][T11919] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.479495][T11919] batman_adv: batadv0: Interface activated: dummy0 [ 449.520301][T11917] batadv0: mtu less than device minimum [ 449.541016][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.554207][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.566517][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.579037][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.591532][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.604049][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.616447][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.629003][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.641478][T11917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.687164][T11923] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1620'. [ 453.849795][ T28] audit: type=1804 audit(1782885201.447:621): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1635" name="bus" dev="ramfs" ino=29709 res=1 errno=0 [ 453.904694][ T28] audit: type=1804 audit(1782885201.467:622): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1635" name="bus" dev="ramfs" ino=29709 res=1 errno=0 [ 455.427727][T12030] vlan3: entered allmulticast mode [ 455.432913][T12030] veth0_to_bond: entered allmulticast mode [ 455.629465][T12037] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 456.025368][T12026] loop6: detected capacity change from 0 to 32768 [ 456.113085][T12026] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 456.339443][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1644'. [ 456.377561][T12063] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 456.578098][T12067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1644'. [ 456.616471][T12067] bond6: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 457.569975][T12026] syz.6.1637 (12026) used greatest stack depth: 18488 bytes left [ 457.602133][ T28] audit: type=1326 audit(1782885205.197:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 457.656996][ T28] audit: type=1326 audit(1782885205.197:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 457.727930][ T28] audit: type=1326 audit(1782885205.197:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 457.769299][ T28] audit: type=1326 audit(1782885205.197:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 457.797450][ T7667] ocfs2: Unmounting device (7,6) on (node local) [ 457.797542][ T28] audit: type=1326 audit(1782885205.197:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 457.818857][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1655'. [ 457.828604][ T28] audit: type=1326 audit(1782885205.197:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 458.570881][ T28] audit: type=1326 audit(1782885205.197:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 458.611577][ T28] audit: type=1326 audit(1782885205.197:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.7.1651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 459.527490][T12112] tipc: Started in network mode [ 459.532413][T12112] tipc: Node identity ac1414aa, cluster identity 4711 [ 459.549174][T12112] tipc: Enabled bearer , priority 10 [ 459.570269][T12112] tipc: Enabled bearer , priority 0 [ 459.678256][T12115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1660'. [ 459.687649][T12115] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 459.740628][T12115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1660'. [ 459.749958][T12115] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 460.668256][ T5832] tipc: Node number set to 2886997162 [ 461.477799][T12152] loop7: detected capacity change from 0 to 32768 [ 461.630044][T12152] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 461.921498][T12184] netlink: 'syz.6.1673': attribute type 1 has an invalid length. [ 462.034244][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.162230][T12188] vlan5: entered allmulticast mode [ 462.227693][T12188] bond0: (slave vlan5): Opening slave failed [ 463.929047][ T7848] ocfs2: Unmounting device (7,7) on (node local) [ 464.367870][T12215] netlink: 'syz.3.1680': attribute type 4 has an invalid length. [ 464.608727][T12216] netlink: 'syz.3.1680': attribute type 4 has an invalid length. [ 464.994374][ T5757] lo speed is unknown, defaulting to 1000 [ 465.038441][T12215] netlink: 'syz.3.1680': attribute type 4 has an invalid length. [ 465.128479][T10084] lo speed is unknown, defaulting to 1000 [ 465.283809][T12222] Bluetooth: MGMT ver 1.22 [ 465.307226][T12222] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 466.475766][T12248] loop7: detected capacity change from 0 to 1024 [ 467.527793][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1695'. [ 467.538652][T12248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.552102][T12248] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.575404][ T5084] Bluetooth: hci3: Malformed Event: 0x02 [ 467.637068][ T7848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 467.679001][T12250] bond7: entered promiscuous mode [ 467.684129][T12250] bond7: entered allmulticast mode [ 469.002137][T12291] netlink: 'syz.7.1692': attribute type 4 has an invalid length. [ 469.048392][T12291] netlink: 'syz.7.1692': attribute type 4 has an invalid length. [ 469.107021][T12291] netlink: 'syz.7.1692': attribute type 4 has an invalid length. [ 469.564383][T12314] bond7: entered allmulticast mode [ 469.634442][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1700'. [ 469.699628][T12314] bridge3: entered allmulticast mode [ 469.724119][T12314] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 469.742191][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1700'. [ 469.818827][T12317] bridge4: entered allmulticast mode [ 469.833811][T12317] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 470.652261][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1709'. [ 471.107734][T12375] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 471.137613][T12375] batman_adv: batadv0: Adding interface: gretap2 [ 471.167645][T12375] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.365144][T12375] batman_adv: batadv0: Interface activated: gretap2 [ 473.517313][T12414] CIFS mount error: No usable UNC path provided in device string! [ 473.517313][T12414] [ 473.527485][T12414] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 474.073966][T12420] loop6: detected capacity change from 0 to 256 [ 474.146119][T12426] syz_tun: left allmulticast mode [ 474.169619][T12420] FAT-fs (loop6): Directory bread(block 64) failed [ 474.176219][T12420] FAT-fs (loop6): Directory bread(block 65) failed [ 474.206408][T12420] FAT-fs (loop6): Directory bread(block 66) failed [ 474.231170][T12420] FAT-fs (loop6): Directory bread(block 67) failed [ 474.258192][T12420] FAT-fs (loop6): Directory bread(block 68) failed [ 474.274345][T12420] FAT-fs (loop6): Directory bread(block 69) failed [ 474.282592][T12420] FAT-fs (loop6): Directory bread(block 70) failed [ 474.291376][T12420] FAT-fs (loop6): Directory bread(block 71) failed [ 474.302492][T12420] FAT-fs (loop6): Directory bread(block 72) failed [ 474.310582][T12420] FAT-fs (loop6): Directory bread(block 73) failed [ 475.787749][T12439] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 476.461476][T12445] bond6: (slave bridge6): making interface the new active one [ 476.519117][T12445] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 476.577486][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 476.661820][T12439] bond6: entered promiscuous mode [ 476.684381][T12439] bridge6: entered promiscuous mode [ 476.702643][T12439] bond6: entered allmulticast mode [ 476.727952][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 476.727967][ T28] audit: type=1326 audit(1782885224.327:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 476.734489][T12439] bridge6: entered allmulticast mode [ 476.760558][T12451] syz.8.1734 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 476.846156][T12439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.871088][ T28] audit: type=1326 audit(1782885224.357:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 476.961187][ T7376] bond6: (slave bridge6): link status definitely down, disabling slave [ 476.996933][ T28] audit: type=1326 audit(1782885224.357:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 477.032334][ T7376] bridge6: left promiscuous mode [ 477.037947][ T7376] bridge6: left allmulticast mode [ 477.045348][ T7376] bond6: now running without any active interface! [ 477.152183][ T28] audit: type=1326 audit(1782885224.357:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 477.314333][ T28] audit: type=1326 audit(1782885224.357:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 477.481720][ T28] audit: type=1326 audit(1782885224.357:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 477.551560][ T28] audit: type=1326 audit(1782885224.357:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 477.667528][ T28] audit: type=1326 audit(1782885224.357:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 477.710118][ T28] audit: type=1326 audit(1782885224.357:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 477.734785][ T28] audit: type=1326 audit(1782885224.357:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.8.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 479.822316][T12476] bridge0: port 3(veth0_to_bridge) entered blocking state [ 479.965901][T12476] bridge0: port 3(veth0_to_bridge) entered disabled state [ 480.290786][T12476] veth0_to_bridge: entered allmulticast mode [ 480.470333][T12476] veth0_to_bridge: entered promiscuous mode [ 480.861639][T12495] siw: device registration error -23 [ 485.767267][ T5832] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 485.977223][ T5832] usb 8-1: Using ep0 maxpacket: 32 [ 486.016342][ T5832] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 486.046445][ T5832] usb 8-1: config 0 has no interface number 0 [ 486.068641][T12521] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 486.086902][ T5832] usb 8-1: config 0 interface 184 has no altsetting 0 [ 486.103537][ T5832] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 486.118202][T12521] batman_adv: batadv0: Adding interface: gretap1 [ 486.129303][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.144311][T12521] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.170350][ T5832] usb 8-1: Product: syz [ 486.174543][ T5832] usb 8-1: Manufacturer: syz [ 486.174809][T12521] batman_adv: batadv0: Interface activated: gretap1 [ 486.180342][ T5832] usb 8-1: SerialNumber: syz [ 486.187787][T12521] net_ratelimit: 10 callbacks suppressed [ 486.187885][T12521] batadv0: mtu less than device minimum [ 486.193150][ T5832] usb 8-1: config 0 descriptor?? [ 486.203906][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.214476][ T5832] smsc75xx v1.0.0 [ 486.219275][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.232996][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.244995][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.256980][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.268966][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.280976][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.292875][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.305138][T12521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.829228][ T5832] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 486.840330][ T5832] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 488.262297][ T5832] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 488.273544][ T5832] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 488.283865][ T5832] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 488.293489][ T5832] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 488.303110][ T5832] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 488.325408][ T5832] usb 8-1: USB disconnect, device number 7 [ 489.212666][T12554] xt_CONNSECMARK: invalid mode: 0 [ 490.023148][T12560] siw: device registration error -23 [ 491.697749][T12577] overlayfs: missing 'lowerdir' [ 492.143629][T12586] xt_CONNSECMARK: invalid mode: 0 [ 492.999668][ T5832] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 493.076503][T12593] netlink: 'syz.8.1782': attribute type 1 has an invalid length. [ 493.189008][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 493.223520][ T5832] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 493.224331][T12593] bond8: (slave bridge4): making interface the new active one [ 493.244678][T12593] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 493.267286][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.275340][ T5832] usb 7-1: Product: syz [ 493.286394][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1782'. [ 493.309235][T12593] bond8: entered promiscuous mode [ 493.326989][ T5832] usb 7-1: Manufacturer: syz [ 493.327026][T12593] bridge4: entered promiscuous mode [ 493.331613][ T5832] usb 7-1: SerialNumber: syz [ 493.347541][T12593] bond8: entered allmulticast mode [ 493.356898][T12593] bridge4: entered allmulticast mode [ 493.372839][T12593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 493.373647][ T5832] usb 7-1: config 0 descriptor?? [ 493.409381][ T7376] bond8: (slave bridge4): link status definitely down, disabling slave [ 493.447141][ T7376] bridge4: left promiscuous mode [ 493.472582][ T7376] bridge4: left allmulticast mode [ 493.485230][ T7376] bond8: now running without any active interface! [ 493.576569][T12600] vxcan0: entered allmulticast mode [ 493.627888][ T5832] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 493.819522][T12605] binder: 12603:12605 ioctl 4040942c 200000000000 returned -22 [ 493.877765][ T9735] IPVS: ip_vs_send_async error -101 [ 494.273116][T12616] xt_nat: multiple ranges no longer supported [ 495.326068][ T5832] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 495.767173][T12631] xt_CONNSECMARK: invalid mode: 0 [ 495.810811][ T5832] usb 7-1: USB disconnect, device number 10 [ 496.377030][T10089] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 496.661878][T10089] usb 8-1: Using ep0 maxpacket: 8 [ 496.790128][T10089] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.942338][T10089] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.004773][T10089] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 497.030585][T10089] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.081953][T10089] usb 8-1: config 0 descriptor?? [ 498.265057][T12669] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1792'. [ 499.247321][T10089] usb 8-1: USB disconnect, device number 8 [ 500.722370][T12702] bond5: entered allmulticast mode [ 500.758409][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1801'. [ 500.773954][T12702] bridge4: entered allmulticast mode [ 500.780423][T12702] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 500.803900][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1801'. [ 500.822350][T12702] bridge5: entered allmulticast mode [ 500.832826][T12702] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 501.546495][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1810'. [ 501.711800][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.718587][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.217506][T12745] netlink: 'syz.8.1822': attribute type 1 has an invalid length. [ 505.135276][T12745] 8021q: adding VLAN 0 to HW filter on device bond9 [ 505.145753][T12756] loop7: detected capacity change from 0 to 256 [ 505.187828][T12756] exfat: Deprecated parameter 'utf8' [ 505.189566][T12751] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 505.193232][T12756] exfat: Bad value for 'time_offset' [ 505.253735][T12753] macvlan0: entered promiscuous mode [ 505.279483][T12753] macvlan0: entered allmulticast mode [ 505.285771][T12753] bond9: entered promiscuous mode [ 505.339222][T12753] veth0_to_bond: entered promiscuous mode [ 505.356590][T12753] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 505.416998][T12753] bond9: left promiscuous mode [ 505.442406][T12753] veth0_to_bond: left promiscuous mode [ 508.695202][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1829'. [ 512.724280][T12853] tipc: Enabled bearer , priority 2 [ 512.751753][T12853] netdevsim netdevsim6 €Â: renamed from netdevsim0 (while UP) [ 512.778710][T12853] tipc: Disabling bearer [ 512.821836][T12858] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 512.920577][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1843'. [ 512.983008][T12860] 8021q: adding VLAN 0 to HW filter on device bond8 [ 513.018772][T12860] bond7: (slave bond8): making interface the new active one [ 513.030899][T12860] bond7: (slave bond8): Enslaving as an active interface with an up link [ 513.172461][T12866] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 513.201842][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1846'. [ 513.228735][T12858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 513.494908][T12878] netlink: 'syz.6.1852': attribute type 1 has an invalid length. [ 514.499512][T12878] bond7: entered promiscuous mode [ 514.504913][T12878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 514.563403][T12881] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 514.592985][T12881] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 514.613799][T12881] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 515.569539][T12900] loop6: detected capacity change from 0 to 1024 [ 515.621742][T12900] EXT4-fs: Ignoring removed orlov option [ 515.763979][T12900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.966696][T12900] netlink: 'syz.6.1857': attribute type 4 has an invalid length. [ 515.988413][T12900] netlink: 'syz.6.1857': attribute type 4 has an invalid length. [ 516.106610][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1859'. [ 516.309425][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1861'. [ 516.695955][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.122569][T12928] loop6: detected capacity change from 0 to 256 [ 517.523649][T12937] xt_TPROXY: Can be used only with -p tcp or -p udp [ 519.114633][T12952] Option '2 O€ÉÇ—Wz [ 519.114633][T12952] ­ f:ó–ã5úÉùÔAŠÀ- [ 519.114633][T12952] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 519.869944][T12956] netlink: 'syz.8.1882': attribute type 1 has an invalid length. [ 519.910841][T12957] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1873'. [ 520.939020][T12968] 8021q: adding VLAN 0 to HW filter on device bond11 [ 520.948439][T12968] bond10: (slave bond11): making interface the new active one [ 520.956408][T12968] bond10: (slave bond11): Enslaving as an active interface with an up link [ 520.975619][T12956] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 521.042739][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1882'. [ 521.065037][T12964] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.812751][T12988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.997510][T12988] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 522.070802][T12988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.136092][T12988] bond2: (slave lo): making interface the new active one [ 522.156582][T12988] bond2: (slave lo): Enslaving as an active interface with an up link [ 522.204088][T12988] net_ratelimit: 10 callbacks suppressed [ 522.204100][T12988] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 522.323902][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1887'. [ 522.418389][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1888'. [ 522.657710][T10089] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 522.807055][T10090] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 522.850586][T10089] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 522.869613][T10089] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 522.882858][T10089] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 522.909263][T10089] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 522.928891][T10089] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.940812][T10089] usb 8-1: Product: syz [ 522.945072][T10089] usb 8-1: Manufacturer: syz [ 522.950094][T10089] usb 8-1: SerialNumber: syz [ 522.967850][T10089] usb 8-1: config 0 descriptor?? [ 522.997020][T10090] usb 7-1: Using ep0 maxpacket: 16 [ 523.052753][T10090] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 523.076848][T10090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.087021][T10090] usb 7-1: Product: syz [ 523.091263][T10090] usb 7-1: Manufacturer: syz [ 523.096146][T10090] usb 7-1: SerialNumber: syz [ 523.232473][T10089] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 523.569066][T10090] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 523.584634][T10089] usb 8-1: USB disconnect, device number 9 [ 523.663082][T10090] snd-usb-audio: probe of 7-1:222.0 failed with error -71 [ 523.675522][T10090] usb 7-1: USB disconnect, device number 11 [ 523.712651][T10999] udevd[10999]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.884100][T13062] netlink: 'syz.6.1902': attribute type 6 has an invalid length. [ 527.587670][T10084] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 528.047636][T10084] usb 8-1: Using ep0 maxpacket: 16 [ 528.118932][T10084] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 528.128285][T10084] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.136299][T10084] usb 8-1: Product: syz [ 528.197198][T10084] usb 8-1: Manufacturer: syz [ 528.252314][T10084] usb 8-1: SerialNumber: syz [ 528.504964][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1918'. [ 528.600288][T13084] 8021q: adding VLAN 0 to HW filter on device bond12 [ 528.773408][T13084] macvlan0: entered promiscuous mode [ 528.799175][T13084] macvlan0: entered allmulticast mode [ 528.808107][T13084] bond12: entered promiscuous mode [ 528.814849][T13084] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 528.835639][T13084] bond12: left promiscuous mode [ 528.882388][T10084] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 528.906284][T10084] snd-usb-audio: probe of 8-1:222.0 failed with error -71 [ 528.921085][T10084] usb 8-1: USB disconnect, device number 10 [ 528.943356][T10999] udevd[10999]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.664844][T13102] netlink: 'syz.8.1915': attribute type 10 has an invalid length. [ 530.694023][T13102] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 530.716031][T13106] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.1917'. [ 536.178320][T13155] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1931'. [ 536.204316][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 536.217078][T13155] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1931'. [ 537.812515][ T7376] bond2: (slave lo): link status definitely down, disabling slave [ 537.878338][ T7376] bond2: now running without any active interface! [ 538.857088][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1941'. [ 538.866173][T13197] netlink: 'syz.7.1941': attribute type 3 has an invalid length. [ 538.873967][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1941'. [ 538.883094][T13197] netlink: 'syz.7.1941': attribute type 3 has an invalid length. [ 540.802214][T13222] netlink: 'syz.6.1947': attribute type 1 has an invalid length. [ 540.820255][T13222] netlink: 'syz.6.1947': attribute type 4 has an invalid length. [ 540.959120][T13222] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1947'. [ 541.419262][T13225] netlink: 'syz.6.1947': attribute type 1 has an invalid length. [ 541.439372][T13225] netlink: 'syz.6.1947': attribute type 4 has an invalid length. [ 541.656194][T13225] netlink: 9491 bytes leftover after parsing attributes in process `syz.6.1947'. [ 542.880053][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1952'. [ 543.082439][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1955'. [ 543.107684][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1955'. [ 545.498753][T13276] loop7: detected capacity change from 0 to 1024 [ 545.553851][T13276] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 545.574965][T13276] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 545.595692][T13276] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 545.783640][T13276] EXT4-fs error (device loop7): ext4_get_journal_inode:5820: inode #5: comm syz.7.1964: unexpected bad inode w/o EXT4_IGET_BAD [ 546.043410][T13276] EXT4-fs (loop7): no journal found [ 546.184716][T13276] EXT4-fs (loop7): can't get journal size [ 546.283812][T13276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 547.475803][ T7848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.927093][ T5832] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 547.947960][T13309] loop7: detected capacity change from 0 to 2048 [ 548.124522][ T5832] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.300374][ T5832] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 548.430750][T13309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 548.502007][ T5832] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.548855][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 548.594484][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 548.635101][ T5832] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.677930][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.721558][ T5832] usb 7-1: Product: syz [ 548.725782][ T5832] usb 7-1: Manufacturer: syz [ 548.755526][ T5832] cdc_wdm 7-1:1.0: skipping garbage [ 548.770827][ T5832] cdc_wdm 7-1:1.0: skipping garbage [ 548.788804][ T5832] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 548.794832][ T5832] cdc_wdm 7-1:1.0: Unknown control protocol [ 549.492640][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1978'. [ 549.640408][ T5832] usb 7-1: USB disconnect, device number 12 [ 549.677527][T13300] cdc_wdm 7-1:1.0: Error submitting int urb - -2 [ 550.766321][T10090] lo speed is unknown, defaulting to 1000 [ 550.905180][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 550.905195][ T28] audit: type=1326 audit(1782885298.497:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.8.1986" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7fc00000 [ 550.952875][ T28] audit: type=1326 audit(1782885298.507:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.8.1986" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f175c79de59 code=0x7fc00000 [ 552.220614][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1989'. [ 554.069194][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 554.311583][T13366] 8021q: adding VLAN 0 to HW filter on device bond9 [ 554.468744][T13366] macvlan4: entered promiscuous mode [ 554.491015][T13366] macvlan4: entered allmulticast mode [ 554.518734][T13366] bond9: entered promiscuous mode [ 554.547452][T13366] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 554.562401][T13366] bond9: left promiscuous mode [ 554.932784][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 555.008395][T13384] 8021q: adding VLAN 0 to HW filter on device bond10 [ 555.022856][T13389] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 555.467116][ T9735] IPVS: ip_vs_send_async error -101 [ 555.713183][T13384] bond10 (unregistering): (slave syz_tun): Releasing backup interface [ 556.158574][T13384] bond10 (unregistering): Released all slaves [ 556.225381][T13386] lo speed is unknown, defaulting to 1000 [ 558.463323][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2004'. [ 558.656212][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 558.813759][T13415] 8021q: adding VLAN 0 to HW filter on device bond8 [ 558.823473][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2004'. [ 559.749310][T13415] macvlan2: entered promiscuous mode [ 559.788888][T13415] macvlan2: entered allmulticast mode [ 559.806212][T13415] bond8: entered promiscuous mode [ 559.842809][T13415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 559.950296][T13415] bond8: left promiscuous mode [ 560.138189][ T23] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 560.946442][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.981071][ T23] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 560.991690][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.013698][ T23] usb 8-1: config 0 descriptor?? [ 561.032908][T13432] netlink: 'syz.3.2011': attribute type 11 has an invalid length. [ 561.409483][T13441] loop6: detected capacity change from 0 to 256 [ 561.478179][ T23] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 561.494218][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0006/input/input6 [ 562.508676][ T23] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 562.615410][ T23] usb 8-1: USB disconnect, device number 11 [ 563.151293][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.166807][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.355800][T13457] fido_id[13457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 563.958236][T13471] xt_HMARK: spi-set and port-set can't be combined [ 565.676234][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2033'. [ 566.257276][T13492] Invalid option length (1045252) for dns_resolver key [ 566.939716][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2028'. [ 568.271905][T13518] Cannot find add_set index 0 as target [ 570.228553][T13546] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 570.236637][T13546] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 570.248937][T13554] netlink: 'syz.3.2044': attribute type 11 has an invalid length. [ 570.261874][ T28] audit: type=1326 audit(1782885317.857:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.306585][T13546] tipc: Enabled bearer , priority 0 [ 570.324468][ T28] audit: type=1326 audit(1782885317.857:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.385278][ T28] audit: type=1326 audit(1782885317.857:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.473679][ T28] audit: type=1326 audit(1782885317.857:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.557302][ T28] audit: type=1326 audit(1782885317.887:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.624022][ T28] audit: type=1326 audit(1782885317.887:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.708129][ T28] audit: type=1326 audit(1782885317.887:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.790997][ T28] audit: type=1326 audit(1782885317.897:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.835186][ T28] audit: type=1326 audit(1782885317.897:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.861981][ T28] audit: type=1326 audit(1782885317.897:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.7.2045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb93bb9de59 code=0x7ffc0000 [ 570.958178][T13571] netlink: 'syz.8.2051': attribute type 4 has an invalid length. [ 572.784294][T13598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 576.061445][T13651] netlink: 'syz.3.2071': attribute type 4 has an invalid length. [ 576.084887][T13651] netlink: 'syz.3.2071': attribute type 4 has an invalid length. [ 576.103450][ T5832] lo speed is unknown, defaulting to 1000 [ 576.196174][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2073'. [ 576.244330][T13658] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.333695][T13663] bond8: entered promiscuous mode [ 576.339637][T13663] bond8: entered allmulticast mode [ 576.364677][T13663] vxcan3: entered promiscuous mode [ 576.714458][T13674] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 576.808833][T13674] 8021q: adding VLAN 0 to HW filter on device bond10 [ 576.832244][T13677] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 577.705842][ T5832] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 578.019067][ T5832] usb 8-1: Using ep0 maxpacket: 8 [ 578.031022][T13674] bond10 (unregistering): (slave syz_tun): Removing an active aggregator [ 578.045353][ T5832] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 578.055460][T13674] bond10 (unregistering): (slave syz_tun): Releasing backup interface [ 578.064800][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.073444][ T5832] usb 8-1: Product: syz [ 578.690940][ T5832] usb 8-1: Manufacturer: syz [ 578.695602][ T5832] usb 8-1: SerialNumber: syz [ 578.727160][T13674] bond10 (unregistering): Released all slaves [ 578.740060][ T5832] usb 8-1: config 0 descriptor?? [ 578.981816][ T5832] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 579.544419][T13708] 9pnet_fd: p9_fd_create_unix (13708): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 580.405906][ T5832] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -110 [ 580.747827][ T5832] usb 8-1: USB disconnect, device number 12 [ 581.669807][T13728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2098'. [ 584.386564][T13751] netlink: 'syz.8.2105': attribute type 9 has an invalid length. [ 584.415149][T13741] loop7: detected capacity change from 0 to 128 [ 584.466570][T13741] FAT-fs (loop7): bogus number of reserved sectors [ 584.492601][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 584.507563][T13741] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 584.543801][T13741] FAT-fs (loop7): Can't find a valid FAT filesystem [ 585.928872][T13780] overlayfs: failed to clone upperpath [ 586.431726][T13784] netlink: 'syz.7.2113': attribute type 1 has an invalid length. [ 586.472291][T13784] 8021q: adding VLAN 0 to HW filter on device bond9 [ 587.421311][T13784] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 588.303876][T13784] bond9 (unregistering): (slave syz_tun): Releasing backup interface [ 588.513284][T13784] bond9 (unregistering): Released all slaves [ 591.245072][T13843] loop7: detected capacity change from 0 to 2048 [ 591.313036][T13843] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 591.355184][T13843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.699398][T13856] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2135'. [ 592.927728][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2140'. [ 592.962843][T13878] 8021q: adding VLAN 0 to HW filter on device bond9 [ 593.032598][T13878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2140'. [ 593.063516][T13878] bond9: entered promiscuous mode [ 593.089831][T13878] bond9: entered allmulticast mode [ 593.151822][T13886] dummy0: entered promiscuous mode [ 593.181318][T13886] dummy0: entered allmulticast mode [ 593.187273][T13886] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 597.950006][T13939] gretap3: entered promiscuous mode [ 602.229355][T13984] bridge0: port 4(macvlan2) entered blocking state [ 602.237417][T13984] bridge0: port 4(macvlan2) entered disabled state [ 602.244180][T13984] macvlan2: entered allmulticast mode [ 602.271430][T13984] gretap0: entered allmulticast mode [ 602.367206][T13984] macvlan2: entered promiscuous mode [ 602.385209][T13984] bridge0: port 4(macvlan2) entered blocking state [ 602.391981][T13984] bridge0: port 4(macvlan2) entered forwarding state [ 603.287850][T13995] loop7: detected capacity change from 0 to 1024 [ 603.566281][T13995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.252982][T13995] IPv6: sit4: Disabled Multicast RS [ 604.415400][ T7848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.545039][T14007] syzkaller0: entered promiscuous mode [ 604.551231][T14007] syzkaller0: entered allmulticast mode [ 604.574175][T14007] 0: reclassify loop, rule prio 0, protocol 800 [ 606.400342][T14029] netlink: 'syz.8.2180': attribute type 1 has an invalid length. [ 606.638746][T14029] 8021q: adding VLAN 0 to HW filter on device bond13 [ 606.707692][T14040] bond13: (slave ip6gretap1): making interface the new active one [ 606.722359][T14040] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 610.189906][T14059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2187'. [ 610.314713][T14059] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2187'. [ 610.441495][T14059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2187'. [ 612.144849][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2198'. [ 612.261590][T14095] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.273167][T14095] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.286355][T14095] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.303102][T14095] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.331232][T14095] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 612.350039][T14099] bond10 (unregistering): (slave geneve3): Releasing backup interface [ 612.364831][T14099] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.374301][T14099] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.384299][T14099] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.393906][T14099] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.408030][T14099] bond10 (unregistering): Released all slaves [ 613.492101][T14070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.521130][T14131] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 616.040485][T14136] syzkaller0: entered promiscuous mode [ 616.046034][T14136] syzkaller0: entered allmulticast mode [ 616.799306][T14124] tipc: Enabling of bearer rejected, already enabled [ 617.312685][ T9735] IPVS: ip_vs_send_async error -101 [ 618.321158][T14162] netlink: 'syz.6.2216': attribute type 1 has an invalid length. [ 618.450682][T14162] 8021q: adding VLAN 0 to HW filter on device bond10 [ 618.517547][T14164] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 618.756101][T14164] bond10: entered allmulticast mode [ 620.115919][T14165] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link [ 623.193426][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2229'. [ 623.284977][T14212] bond11: (slave erspan0): Enslaving as an active interface with an up link [ 623.382116][T14215] syzkaller0: entered promiscuous mode [ 623.389502][T14215] syzkaller0: entered allmulticast mode [ 624.593241][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.600020][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.187500][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2261'. [ 634.592966][T14336] fuse: Bad value for 'fd' [ 638.304403][T14367] tipc: Resetting bearer [ 639.327310][T14367] netdevsim netdevsim6 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.335633][T14367] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.344858][T14367] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.353852][T14367] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.453723][T14367] netdevsim netdevsim6 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.462246][T14367] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.472440][T14367] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.482177][T14367] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.502617][T14367] tipc: Resetting bearer [ 639.525235][T14367] batman_adv: batadv0: Interface deactivated: gretap2 [ 639.607160][T14393] veth0_to_bridge: left allmulticast mode [ 639.613023][T14393] veth0_to_bridge: left promiscuous mode [ 639.620027][T14393] bridge0: port 3(veth0_to_bridge) entered disabled state [ 639.634517][T14393] bridge_slave_0: left allmulticast mode [ 639.656949][T14393] bridge_slave_0: left promiscuous mode [ 639.685740][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.701995][T14393] bridge_slave_1: left allmulticast mode [ 639.711235][T14393] bridge_slave_1: left promiscuous mode [ 639.719447][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.733488][T14393] bond1: (slave veth0_to_bond): Releasing active interface [ 639.752680][T14393] bond0: (slave bond_slave_0): Releasing backup interface [ 639.771140][T14393] bond0: (slave bond_slave_1): Releasing backup interface [ 639.780333][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 639.780350][ T28] audit: type=1326 audit(1782885387.377:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 639.820027][T14393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.833097][T14393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.858587][ T28] audit: type=1326 audit(1782885387.377:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 639.897811][T14393] bond2: (slave veth5): Releasing active interface [ 639.920523][ T28] audit: type=1326 audit(1782885387.377:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 639.966044][ T28] audit: type=1326 audit(1782885387.377:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 639.967574][T14393] bond4: (slave geneve2): Releasing active interface [ 639.993745][ T28] audit: type=1326 audit(1782885387.377:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 640.029963][ T28] audit: type=1326 audit(1782885387.427:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1012d9de59 code=0x7ffc0000 [ 640.054510][T14393] geneve2: left allmulticast mode [ 640.054920][ T28] audit: type=1326 audit(1782885387.427:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 640.084632][ T28] audit: type=1326 audit(1782885387.427:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 640.111747][T14393] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.113049][ T28] audit: type=1326 audit(1782885387.427:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 640.122115][T14393] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.154623][ T28] audit: type=1326 audit(1782885387.427:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1012d5e68e code=0x7ffc0000 [ 640.162026][T14393] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.277211][T14393] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.302513][T14393] bond7: (slave bridge3): Releasing backup interface [ 640.316552][T14393] bond7: (slave bridge3): the permanent HWaddr of slave - fe:f4:66:77:22:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 640.345693][T14393] bridge3: left allmulticast mode [ 640.361989][T14393] bond7: (slave bridge4): Releasing backup interface [ 640.380632][T14393] bridge4: left allmulticast mode [ 640.392336][T14393] macvlan2: left allmulticast mode [ 640.407369][T14393] gretap0: left allmulticast mode [ 640.412618][T14393] macvlan2: left promiscuous mode [ 640.426441][T14393] bridge0: port 4(macvlan2) entered disabled state [ 641.910882][T14428] netlink: 'syz.7.2289': attribute type 1 has an invalid length. [ 641.975303][T14428] bond9: entered promiscuous mode [ 641.987135][T14428] 8021q: adding VLAN 0 to HW filter on device bond9 [ 642.346073][T14428] bond9: (slave bridge6): making interface the new active one [ 642.439855][T14428] bridge6: entered promiscuous mode [ 642.560043][T14428] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 643.359711][T14442] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14443] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14442] [ 644.790626][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.974124][T14447] vlan2: entered promiscuous mode [ 645.128673][T14447] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 645.667743][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2300'. [ 645.888871][T14468] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 647.210139][T14464] macvlan2: entered promiscuous mode [ 647.222573][T14464] macvlan2: entered allmulticast mode [ 647.241193][T14464] bond12: entered promiscuous mode [ 647.246376][T14464] bridge7: entered promiscuous mode [ 647.278925][T13625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.302236][T14464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 647.342054][T14464] bond12: left promiscuous mode [ 647.349728][T14464] bridge7: left promiscuous mode [ 649.830009][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.781590][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.493427][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.030625][T14552] No such timeout policy "syz0" [ 657.092785][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.268987][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.037080][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.093854][T14576] netlink: zone id is out of range [ 660.099704][T14576] netlink: zone id is out of range [ 660.107601][T14576] netlink: zone id is out of range [ 660.112936][T14576] netlink: zone id is out of range [ 660.118961][T14576] netlink: zone id is out of range [ 660.124363][T14576] netlink: zone id is out of range [ 660.129779][T14576] netlink: zone id is out of range [ 662.460570][T14604] netlink: 'syz.3.2338': attribute type 4 has an invalid length. [ 662.513300][ T5757] lo speed is unknown, defaulting to 1000 [ 662.607430][T14607] pim6reg99999991: entered allmulticast mode [ 663.338528][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2341'. [ 663.359513][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 663.359528][ T28] audit: type=1800 audit(2000000011.690:861): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2333" name="bus" dev="ramfs" ino=37524 res=0 errno=0 [ 663.724729][T14627] loop7: detected capacity change from 0 to 512 [ 663.891633][T14627] EXT4-fs error (device loop7): ext4_iget_extra_inode:4739: inode #15: comm syz.7.2346: corrupted in-inode xattr: invalid ea_ino [ 663.929944][T14627] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2346: couldn't read orphan inode 15 (err -117) [ 664.302255][T14627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.951458][ T7848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.858321][T14654] netlink: 'syz.8.2355': attribute type 5 has an invalid length. [ 674.780247][T14712] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2372'. [ 674.790117][T14712] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2372'. [ 674.805028][T14712] netlink: 'syz.6.2372': attribute type 5 has an invalid length. [ 674.813741][T14712] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2372'. [ 674.835324][T14717] trusted_key: encrypted_key: insufficient parameters specified [ 675.990588][T14732] loop7: detected capacity change from 0 to 1024 [ 675.998763][T14732] EXT4-fs: Ignoring removed bh option [ 676.101108][T14732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.366533][ T7848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.936952][ T5757] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 677.121470][ T5757] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 677.134583][ T5757] usb 8-1: config 0 interface 0 has no altsetting 0 [ 677.141900][ T5757] usb 8-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 677.151541][ T5757] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.162261][ T5757] usb 8-1: config 0 descriptor?? [ 677.385028][ T5757] usbhid 8-1:0.0: can't add hid device: -71 [ 677.392158][ T5757] usbhid: probe of 8-1:0.0 failed with error -71 [ 677.408117][ T5757] usb 8-1: USB disconnect, device number 13 [ 677.866921][ T9735] IPVS: ip_vs_send_async error -101 [ 679.185724][T14785] syzkaller0: entered promiscuous mode [ 679.193225][T14785] syzkaller0: entered allmulticast mode [ 681.256404][T14819] fuse: Bad value for 'fd' [ 682.533795][T14826] IPVS: Unknown mcast interface: vcan0 [ 684.882202][T14852] netlink: 'syz.7.2419': attribute type 1 has an invalid length. [ 685.001771][T14852] 8021q: adding VLAN 0 to HW filter on device bond10 [ 685.041599][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 685.669229][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2419'. [ 685.681165][T14855] bond10: entered promiscuous mode [ 685.686486][T14855] bond10: entered allmulticast mode [ 685.745489][T14852] dummy0: left promiscuous mode [ 685.764157][T14852] bond10: (slave dummy0): making interface the new active one [ 685.772024][T14852] dummy0: entered promiscuous mode [ 685.778128][T14852] dummy0: entered allmulticast mode [ 685.784712][T14852] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 685.794315][T14862] netlink: 63 bytes leftover after parsing attributes in process `syz.3.2418'. [ 685.861202][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2420'. [ 686.043124][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.052729][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.852600][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2425'. [ 686.998309][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2425'. [ 687.010988][T14881] veth11: entered promiscuous mode [ 687.016176][T14881] veth11: entered allmulticast mode [ 687.152763][T14887] netlink: 'syz.8.2428': attribute type 1 has an invalid length. [ 687.187221][T14887] 8021q: adding VLAN 0 to HW filter on device bond14 [ 687.255094][T14887] bond14: entered allmulticast mode [ 687.282047][T14887] bond14: (slave ip6gretap2): making interface the new active one [ 687.290418][T14887] ip6gretap2: entered allmulticast mode [ 687.297460][T14887] bond14: (slave ip6gretap2): Enslaving as an active interface with an up link [ 687.310092][T14892] tipc: Started in network mode [ 687.315123][T14892] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711 [ 687.493455][T14900] syzkaller0: entered promiscuous mode [ 687.499150][T14900] syzkaller0: entered allmulticast mode [ 690.373639][T14944] loop7: detected capacity change from 0 to 4096 [ 690.406123][T14944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 691.948978][T14956] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 691.962788][T14956] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 691.973468][T14956] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.2442: Failed to acquire dquot type 1 [ 692.064076][T14956] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 692.119241][T14957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.135976][T14957] net_ratelimit: 37 callbacks suppressed [ 692.135985][T14957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.170358][T14944] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 692.198550][T14944] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 692.247126][T14944] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 692.276070][T14944] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.2442: Failed to acquire dquot type 1 [ 692.312981][T14944] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 692.375466][ T5084] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 692.382539][ T5757] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 692.763970][ T5757] usb 8-1: Using ep0 maxpacket: 16 [ 692.778065][ T5757] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 692.786203][ T5757] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.809399][ T5757] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 692.834703][ T5757] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 692.850264][ T5757] usb 8-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 692.859231][ T5757] usb 8-1: Manufacturer: syz [ 692.873635][ T5757] usb 8-1: SerialNumber: syz [ 692.914553][ T5757] usb 8-1: config 0 descriptor?? [ 692.970748][ T28] audit: type=1326 audit(2000000041.300:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.2453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083019de59 code=0x7ffc0000 [ 693.060465][ T28] audit: type=1326 audit(2000000041.300:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.2453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083019de59 code=0x7ffc0000 [ 693.185390][ T28] audit: type=1326 audit(2000000041.330:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.2453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083019de59 code=0x7ffc0000 [ 693.254191][ T5757] usb 8-1: 0:2 : does not exist [ 693.288044][ T5757] usb 8-1: 5:0: cannot get min/max values for control 8 (id 5) [ 693.303851][ T28] audit: type=1326 audit(2000000041.330:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.2453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083019de59 code=0x7ffc0000 [ 693.384907][ T5757] usb 8-1: USB disconnect, device number 14 [ 693.421983][ T28] audit: type=1326 audit(2000000041.330:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.2453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f083019de59 code=0x7ffc0000 [ 693.431098][T14762] udevd[14762]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.522948][ T28] audit: type=1326 audit(2000000041.330:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.2453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083019de59 code=0x7ffc0000 [ 695.855203][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.115545][T15007] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 696.252661][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.501741][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.824341][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.938445][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'. [ 698.039988][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 698.088904][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 698.117999][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 698.138551][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 698.159597][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 698.176085][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 698.199082][T15027] smc: net device bond0 applied user defined pnetid SYZ2 [ 698.279469][T15032] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2471'. [ 698.801354][T15032] bond1: (slave macvlan2): Releasing active interface [ 698.810923][T15032] bond1: (slave macvlan2): the permanent HWaddr of slave - e6:c2:7f:d6:e2:0a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 698.858810][T15032] vlan2 (unregistering): left allmulticast mode [ 698.865096][T15032] bond0 (unregistering): left allmulticast mode [ 698.884615][T15032] macvlan3: left allmulticast mode [ 698.890429][T15032] team0: left allmulticast mode [ 698.895330][T15032] vlan2 (unregistering): left promiscuous mode [ 698.908562][T15032] bridge0: port 1(vlan2) entered disabled state [ 698.925594][T15032] smc: removing net device bond0 with user defined pnetid SYZ2 [ 698.935616][T15032] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 698.951299][T15032] macvlan3: left promiscuous mode [ 698.956417][T15032] team0: left promiscuous mode [ 698.981829][T15032] bond0 (unregistering): Released all slaves [ 699.270094][T15029] lo speed is unknown, defaulting to 1000 [ 700.427443][ T51] Bluetooth: hci3: command tx timeout [ 701.673034][T15029] chnl_net:caif_netlink_parms(): no params data found [ 702.507117][ T51] Bluetooth: hci3: command tx timeout [ 702.737688][ T13] IPVS: stopping master sync thread 9735 ... [ 703.921111][T15029] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.987629][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.994919][T15029] bridge_slave_0: entered allmulticast mode [ 704.019618][T15029] bridge_slave_0: entered promiscuous mode [ 704.033287][T15029] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.053302][T15029] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.076965][T15029] bridge_slave_1: entered allmulticast mode [ 704.097122][T15029] bridge_slave_1: entered promiscuous mode [ 704.329625][T15029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.599026][ T51] Bluetooth: hci3: command tx timeout [ 705.275574][T15029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.816247][T15029] team0: Port device team_slave_0 added [ 705.851606][T15029] team0: Port device team_slave_1 added [ 705.902006][ T13] hsr_slave_0: left promiscuous mode [ 705.909289][ T13] hsr_slave_1: left promiscuous mode [ 707.164975][ T51] Bluetooth: hci3: command tx timeout [ 707.626886][ T13] bond10 (unregistering): (slave dummy0): Releasing active interface [ 707.635372][ T13] dummy0 (unregistering): left promiscuous mode [ 707.658330][ T13] dummy0 (unregistering): left allmulticast mode [ 707.666154][ T13] bond10 (unregistering): Released all slaves [ 707.754207][ T13] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 707.772996][ T13] bridge6 (unregistering): left promiscuous mode [ 708.373814][ T13] bond9 (unregistering): Released all slaves [ 708.740859][ T13] bond8 (unregistering): Released all slaves [ 709.379593][ T13] bond7 (unregistering): Released all slaves [ 709.585308][ T13] bond6 (unregistering): Released all slaves [ 709.836877][ T13] bond5 (unregistering): Released all slaves [ 710.051478][ T13] bond4 (unregistering): Released all slaves [ 710.310339][ T13] bond2 (unregistering): Released all slaves [ 710.543795][ T13] bond3 (unregistering): Released all slaves [ 711.067750][ T13] bond1 (unregistering): Released all slaves [ 712.444502][ T13] bond0 (unregistering): Released all slaves [ 712.544928][T15159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2498'. [ 712.575775][T15174] netlink: 'syz.6.2503': attribute type 1 has an invalid length. [ 712.624699][T15174] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 712.824173][T15191] bridge0: entered promiscuous mode [ 712.859672][T15191] bridge0: entered allmulticast mode [ 712.885341][T15029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.912865][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.029332][T15029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.060284][T15029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.076958][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.132222][T15029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.317316][T15029] hsr_slave_0: entered promiscuous mode [ 713.346336][T15029] hsr_slave_1: entered promiscuous mode [ 713.376146][T15029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.390329][T15029] Cannot create hsr debugfs directory [ 713.689972][ T13] IPVS: stop unused estimator thread 0... [ 714.114105][T15029] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 714.160123][T15029] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 714.181981][T15029] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 714.212866][T15029] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 714.418611][T15029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.500267][T15029] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.514863][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'. [ 714.682968][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.690258][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.768731][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.775906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.054210][T15266] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2522'. [ 715.408858][T15029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 716.784978][T15029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.407896][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2535'. [ 717.675989][T15319] netlink: 'syz.6.2535': attribute type 5 has an invalid length. [ 717.701918][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2535'. [ 718.360814][T15029] veth0_vlan: entered promiscuous mode [ 718.454619][T15029] veth1_vlan: entered promiscuous mode [ 718.604722][T15029] veth0_macvtap: entered promiscuous mode [ 718.633605][T15029] veth1_macvtap: entered promiscuous mode [ 718.657653][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2539'. [ 718.761760][T15029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.791902][T15029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.815309][T15029] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.832660][T15029] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.843983][T15029] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.863277][T15029] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.874077][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 718.874090][ T28] audit: type=1326 audit(2000000067.205:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 718.990605][ T28] audit: type=1326 audit(2000000067.235:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 719.096382][ T28] audit: type=1326 audit(2000000067.235:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 719.204525][ T28] audit: type=1326 audit(2000000067.235:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 719.279099][ T9545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.312585][ T9545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.322353][ T28] audit: type=1326 audit(2000000067.245:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f175c79de59 code=0x7ffc0000 [ 719.415671][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.437815][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.455460][ T28] audit: type=1326 audit(2000000067.285:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f175c75e68e code=0x7ffc0000 [ 719.567232][ T28] audit: type=1326 audit(2000000067.285:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f175c75e68e code=0x7ffc0000 [ 719.664465][ T28] audit: type=1326 audit(2000000067.295:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f175c75e68e code=0x7ffc0000 [ 719.730558][T15361] fuse: Bad value for 'fd' [ 719.736406][T15361] fuse: Bad value for 'fd' [ 719.761625][ T28] audit: type=1326 audit(2000000067.295:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f175c75e68e code=0x7ffc0000 [ 719.885102][ T28] audit: type=1326 audit(2000000067.305:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15338 comm="syz.8.2540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f175c75e68e code=0x7ffc0000 [ 726.556212][T15403] loop9: detected capacity change from 0 to 32768 [ 726.789810][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2562'. [ 726.855001][T15436] read_mapping_page failed! [ 726.864569][T15436] ERROR: (device loop9): txCommit: [ 726.864569][T15436] [ 726.959425][T15437] bridge10: port 1(veth11) entered blocking state [ 726.993457][T15437] bridge10: port 1(veth11) entered disabled state [ 727.028395][T15437] veth11: entered allmulticast mode [ 727.052687][T15437] veth11: entered promiscuous mode [ 727.203511][T15435] bridge10: port 2(veth13) entered blocking state [ 727.214794][T15435] bridge10: port 2(veth13) entered disabled state [ 727.239699][T15435] veth13: entered allmulticast mode [ 727.259400][T15435] veth13: entered promiscuous mode [ 728.209794][T15463] loop9: detected capacity change from 0 to 128 [ 728.252307][T15463] EXT4-fs (loop9): Test dummy encryption mode enabled [ 728.369263][T15463] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 728.472669][T15463] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 728.826043][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 728.851932][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 728.896365][T15029] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 728.949050][T15470] ceph: No mds server is up or the cluster is laggy [ 729.708507][T15500] tipc: Enabling of bearer rejected, failed to enable media [ 734.742446][T15560] vlan3: entered promiscuous mode [ 734.754009][T15560] vlan3: entered allmulticast mode [ 734.761456][T15560] hsr_slave_1: entered allmulticast mode [ 734.816149][T15561] 9pnet_virtio: no channels available for device 127.0.0.1 [ 735.478059][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2587'. [ 736.124215][T15581] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 736.292916][T15590] syzkaller0: entered promiscuous mode [ 736.301051][T15590] syzkaller0: entered allmulticast mode [ 738.098110][T15615] lo speed is unknown, defaulting to 1000 [ 738.950874][T15623] tipc: Enabling of bearer rejected, failed to enable media [ 740.169552][T15632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2601'. [ 740.386418][T15632] smc: adding net device bond0 with user defined pnetid SYZ2 [ 740.395220][T15632] bond0: entered promiscuous mode [ 740.400645][T15632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.413449][T15646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.441543][T15646] bond0: (slave sit5): The slave device specified does not support setting the MAC address [ 741.462074][T15646] bond0: (slave sit5): Error -95 calling set_mac_address [ 741.689819][T15653] tipc: Enabling of bearer rejected, already enabled [ 743.514489][T15697] erspan0: left promiscuous mode [ 743.529910][T15697] bond1: left allmulticast mode [ 743.535024][T15697] geneve2: left allmulticast mode [ 743.602812][T15697] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.622683][T15697] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.642773][T15697] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.675017][T15697] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.848008][T15697] bond3: left promiscuous mode [ 744.606329][T15697] team1: left promiscuous mode [ 744.645821][T15697] team1: left allmulticast mode [ 744.712707][T15697] team2: left promiscuous mode [ 744.721850][T15697] team2: left allmulticast mode [ 744.861685][T15697] bond4: left promiscuous mode [ 744.866858][T15697] bridge5: left promiscuous mode [ 744.945803][T15697] veth9: left promiscuous mode [ 744.954844][T15697] veth9: left allmulticast mode [ 744.972300][T15697] vlan3: left allmulticast mode [ 744.978878][T15697] veth0_to_bond: left allmulticast mode [ 745.000018][T15697] bond6: left promiscuous mode [ 745.013002][T15697] bond6: left allmulticast mode [ 745.130823][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2625'. [ 747.436470][T15754] GUP no longer grows the stack in syz.6.2632 (15754): 200000004000-200000005000 (200000001000) [ 747.447967][T15754] CPU: 1 PID: 15754 Comm: syz.6.2632 Not tainted syzkaller #0 [ 747.455466][T15754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.465532][T15754] Call Trace: [ 747.468898][T15754] [ 747.471932][T15754] dump_stack_lvl+0x18c/0x250 [ 747.476710][T15754] ? show_regs_print_info+0x20/0x20 [ 747.481962][T15754] ? load_image+0x420/0x420 [ 747.486491][T15754] ? find_vma+0x134/0x1b0 [ 747.490871][T15754] __get_user_pages+0xfe7/0x1580 [ 747.495834][T15754] ? populate_vma_page_range+0x380/0x380 [ 747.501483][T15754] __gup_longterm_locked+0x2345/0x2cb0 [ 747.506970][T15754] ? pin_user_pages_remote+0x220/0x220 [ 747.512459][T15754] ? ptrace_may_access+0x36/0x50 [ 747.517447][T15754] ? __might_sleep+0xe0/0xe0 [ 747.522039][T15754] ? __up_read+0x2b8/0x6b0 [ 747.526485][T15754] pin_user_pages_remote+0x177/0x220 [ 747.531787][T15754] ? pin_user_pages_fast+0xe0/0xe0 [ 747.537031][T15754] ? down_read+0x1ac/0x2e0 [ 747.541545][T15754] process_vm_rw+0x65f/0xc00 [ 747.546154][T15754] ? __ia32_sys_process_vm_writev+0xf0/0xf0 [ 747.552101][T15754] ? lock_chain_count+0x20/0x20 [ 747.556977][T15754] __x64_sys_process_vm_writev+0xe0/0xf0 [ 747.562623][T15754] do_syscall_64+0x55/0xb0 [ 747.567045][T15754] ? clear_bhb_loop+0x40/0x90 [ 747.571795][T15754] ? clear_bhb_loop+0x40/0x90 [ 747.576480][T15754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 747.582441][T15754] RIP: 0033:0x7f1012d9de59 [ 747.586924][T15754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.606586][T15754] RSP: 002b:00007f1013c11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 747.615071][T15754] RAX: ffffffffffffffda RBX: 00007f1013026180 RCX: 00007f1012d9de59 [ 747.623050][T15754] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000663 [ 747.631025][T15754] RBP: 00007f1012e33e6f R08: 0000000000000001 R09: 0000000000000000 [ 747.638997][T15754] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 747.646967][T15754] R13: 00007f1013026218 R14: 00007f1013026180 R15: 00007fffe3dfd488 [ 747.654953][T15754] [ 748.385252][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.394950][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.561196][T15780] loop9: detected capacity change from 0 to 512 [ 750.590275][T15780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 750.678765][T15780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.746795][T15780] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.953471][T15780] EXT4-fs error (device loop9): ext4_lookup:1858: inode #12: comm syz.9.2637: iget: bad i_size value: 2533274857506816 [ 751.893691][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 751.893706][ T28] audit: type=1800 audit(2000000100.215:1027): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2637" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 753.232167][T15816] tipc: Enabled bearer , priority 17 [ 753.835832][T15029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.529553][T15044] tipc: Node number set to 3031167 [ 758.186765][ T5832] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 758.378527][ T5832] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.686971][ T5832] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.696096][ T5832] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 761.106772][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.168594][ T5832] usb 10-1: config 0 descriptor?? [ 761.218304][ T5832] usb 10-1: can't set config #0, error -71 [ 761.225817][ T5832] usb 10-1: USB disconnect, device number 2 [ 761.388953][T15915] netlink: 'syz.6.2663': attribute type 1 has an invalid length. [ 761.699835][T15915] 8021q: adding VLAN 0 to HW filter on device bond13 [ 761.714878][T15917] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2664'. [ 764.725740][T15953] loop9: detected capacity change from 0 to 512 [ 764.793909][T15953] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 764.830964][T15953] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 765.104525][T15960] netlink: zone id is out of range [ 765.136019][T15960] netlink: zone id is out of range [ 765.416309][T15969] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 765.493975][T15960] netlink: zone id is out of range [ 765.572493][T15960] netlink: zone id is out of range [ 765.867425][T15960] netlink: zone id is out of range [ 765.886891][T15960] netlink: zone id is out of range [ 765.892063][T15960] netlink: zone id is out of range [ 765.927401][T15960] netlink: zone id is out of range [ 765.944033][T15960] netlink: zone id is out of range [ 766.027013][T15960] netlink: zone id is out of range [ 770.454351][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2687'. [ 770.515639][T16043] xt_l2tp: invalid flags combination: 0 [ 770.546265][T16046] net_ratelimit: 23 callbacks suppressed [ 770.546277][T16046] netlink: zone id is out of range [ 771.216493][T16046] netlink: zone id is out of range [ 771.997186][T16046] netlink: zone id is out of range [ 772.028693][T16046] netlink: zone id is out of range [ 772.055084][T16046] netlink: zone id is out of range [ 772.077314][T16046] netlink: zone id is out of range [ 772.082573][T16046] netlink: zone id is out of range [ 772.126918][T16046] netlink: zone id is out of range [ 772.132180][T16046] netlink: zone id is out of range [ 772.154219][T16046] netlink: zone id is out of range [ 775.857831][T16105] bridge0: port 1(macvlan2) entered blocking state [ 775.864670][T16105] bridge0: port 1(macvlan2) entered disabled state [ 775.896835][T16105] macvlan2: entered allmulticast mode [ 775.924250][T16105] ip6gretap0: entered allmulticast mode [ 775.947466][T16105] macvlan2: entered promiscuous mode [ 777.365852][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2709'. [ 777.851734][T16149] pim6reg99999991: entered allmulticast mode [ 778.557427][T16157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2721'. [ 782.094420][T16221] pim6reg99999991: entered allmulticast mode [ 782.918423][T16230] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2730'. [ 786.219195][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2737'. [ 786.476367][T16264] bond15: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 786.540523][T16264] bond15: (slave ip6_vti0): Error -95 calling set_mac_address [ 788.927180][ T5803] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 789.569788][T16326] pim6reg99999991: entered allmulticast mode [ 790.499057][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2748'. [ 790.588159][ T5803] usb 10-1: Using ep0 maxpacket: 32 [ 790.643732][ T5803] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 790.656126][ T5803] usb 10-1: config 0 has no interface number 0 [ 790.849997][ T5803] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 790.861300][ T5803] usb 10-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 790.872334][ T5803] usb 10-1: config 0 interface 196 has no altsetting 0 [ 790.883248][ T5803] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 790.897941][ T5803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.577029][ T5803] usb 10-1: Product: syz [ 791.581334][ T5803] usb 10-1: Manufacturer: syz [ 791.588121][ T5803] usb 10-1: SerialNumber: syz [ 791.607554][ T5803] usb 10-1: config 0 descriptor?? [ 791.614677][T16304] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 792.187377][ T5803] usb 10-1: can't set config #0, error -71 [ 792.255561][ T5803] usb 10-1: USB disconnect, device number 3 [ 792.317120][T16361] syzkaller0: entered promiscuous mode [ 792.324498][T16361] syzkaller0: entered allmulticast mode [ 793.790402][T16381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 794.696512][T16380] overlayfs: failed to clone upperpath [ 795.423048][T16398] fuse: Bad value for 'fd' [ 795.529692][T16396] loop9: detected capacity change from 0 to 8192 [ 799.269213][T16438] syzkaller0: entered promiscuous mode [ 799.326950][T16438] syzkaller0: entered allmulticast mode [ 801.762771][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 801.775169][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 801.784809][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 801.944435][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 801.959958][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 801.969435][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 802.470207][T16456] lo speed is unknown, defaulting to 1000 [ 803.970595][T16456] chnl_net:caif_netlink_parms(): no params data found [ 804.027226][ T5084] Bluetooth: hci0: command tx timeout [ 804.172120][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.179495][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.186853][T16456] bridge_slave_0: entered allmulticast mode [ 804.194190][T16456] bridge_slave_0: entered promiscuous mode [ 804.203939][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.211222][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.218571][T16456] bridge_slave_1: entered allmulticast mode [ 804.225378][T16456] bridge_slave_1: entered promiscuous mode [ 804.271537][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.309908][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.673234][T16456] team0: Port device team_slave_0 added [ 804.781498][T16456] team0: Port device team_slave_1 added [ 804.858930][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.872715][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.900023][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.946132][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.954433][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.990398][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.038553][T16456] hsr_slave_0: entered promiscuous mode [ 805.044811][T16456] hsr_slave_1: entered promiscuous mode [ 805.051852][T16456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 805.059537][T16456] Cannot create hsr debugfs directory [ 806.024301][T16456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 806.040882][T16456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 806.057839][T16456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 806.075689][T16456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 806.108784][ T5084] Bluetooth: hci0: command tx timeout [ 806.181565][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.228666][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.255246][T15084] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.262468][T15084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.300851][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.308058][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.683355][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.762776][T16456] veth0_vlan: entered promiscuous mode [ 806.795553][T16456] veth1_vlan: entered promiscuous mode [ 806.855817][T16456] veth0_macvtap: entered promiscuous mode [ 806.885268][T16456] veth1_macvtap: entered promiscuous mode [ 806.923310][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.936610][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.958471][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.980138][T16456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.016216][T16456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.028495][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.050937][T16456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.067522][T16456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.076264][T16456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.092418][T16456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.213937][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.233150][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.280346][T13630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.292547][T13630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.246291][ T5084] Bluetooth: hci0: command tx timeout [ 808.356027][T16554] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2793'. [ 808.468495][T16548] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2793'. [ 808.912947][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.070564][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.581032][T16562] pim6reg99999991: entered allmulticast mode [ 810.266742][ T5084] Bluetooth: hci0: command tx timeout [ 814.619309][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2800'. [ 818.780428][ T23] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 819.121845][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.131833][ T23] usb 10-1: Using ep0 maxpacket: 16 [ 819.141074][ T23] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.233967][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.853108][ T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 819.879986][ T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 819.907687][ T23] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 819.926675][ T23] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.959093][ T23] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 819.980207][ T23] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 820.006911][ T23] usb 10-1: Manufacturer: syz [ 820.049180][ T23] usb 10-1: config 0 descriptor?? [ 820.836121][T16702] netlink: 'syz.8.2817': attribute type 13 has an invalid length. [ 820.878761][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2817'. [ 820.956807][T16702] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 821.047048][ T23] rc_core: IR keymap rc-hauppauge not found [ 821.099836][ T23] Registered IR keymap rc-empty [ 821.110580][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 821.179077][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 821.226947][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 821.233618][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 821.509533][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input7 [ 821.631182][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 821.687676][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 821.798208][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.137084][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.169327][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.236715][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.261744][T16726] IPVS: Error joining to the multicast group [ 822.276325][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.356753][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.417175][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.460717][ T23] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 822.528935][ T23] mceusb 10-1:0.0: Registered 焪 with mce emulator interface version 1 [ 822.573927][ T23] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 927.786580][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 927.793578][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5138/1:b..l [ 927.802342][ C1] rcu: (detected by 1, t=10502 jiffies, g=89945, q=260 ncpus=2) [ 927.810095][ C1] task:udevd state:R running task stack:23144 pid:5138 ppid:1 flags:0x00004002 [ 927.822924][ C1] Call Trace: [ 927.826230][ C1] [ 927.829185][ C1] __schedule+0x15ae/0x4660 [ 927.833744][ C1] ? asan.module_dtor+0x20/0x20 [ 927.838613][ C1] ? mark_lock+0x94/0x320 [ 927.842998][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 927.849015][ C1] ? arch_stack_walk+0x160/0x190 [ 927.854018][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 927.859329][ C1] preempt_schedule_irq+0xbf/0x150 [ 927.864460][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 927.870207][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 927.876038][ C1] irqentry_exit+0x67/0x70 [ 927.880476][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 927.886487][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 927.891794][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 927.911430][ C1] RSP: 0018:ffffc90003237480 EFLAGS: 00000206 [ 927.917567][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 74edbbb6aea75500 [ 927.925559][ C1] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1c7be0 [ 927.933641][ C1] RBP: ffffc90003237590 R08: dffffc0000000000 R09: 1ffffffff22378a0 [ 927.941634][ C1] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: 1ffff92000646e9c [ 927.949632][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 927.957648][ C1] ? deref_stack_reg+0x1ab/0x230 [ 927.962621][ C1] ? read_lock_is_recursive+0x20/0x20 [ 927.968014][ C1] ? __read_once_word_nocheck+0x9/0x10 [ 927.973497][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 927.979596][ C1] is_bpf_text_address+0x47/0x2a0 [ 927.984678][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 927.989902][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 927.995119][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.001219][ C1] kernel_text_address+0xa0/0xd0 [ 928.006189][ C1] __kernel_text_address+0xd/0x30 [ 928.011235][ C1] unwind_get_return_address+0x5d/0xc0 [ 928.016718][ C1] ? stack_trace_save+0x100/0x100 [ 928.021767][ C1] arch_stack_walk+0x11d/0x190 [ 928.026559][ C1] stack_trace_save+0xaa/0x100 [ 928.031348][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 928.036495][ C1] ? verify_lock_unused+0x140/0x140 [ 928.041711][ C1] ? stack_trace_save+0xaa/0x100 [ 928.046676][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 928.051809][ C1] kasan_set_track+0x4e/0x70 [ 928.056481][ C1] ? kasan_set_track+0x4e/0x70 [ 928.061260][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 928.066037][ C1] ? __kmalloc+0xb7/0x240 [ 928.070384][ C1] ? tomoyo_encode+0x2ad/0x570 [ 928.075198][ C1] ? tomoyo_realpath_from_path+0x57c/0x5c0 [ 928.081016][ C1] ? tomoyo_path_perm+0x282/0x560 [ 928.086048][ C1] ? security_inode_getattr+0xd3/0x120 [ 928.091526][ C1] ? __x64_sys_newfstat+0x12c/0x250 [ 928.096748][ C1] ? do_syscall_64+0x55/0xb0 [ 928.101361][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.107492][ C1] ? __kmem_cache_alloc_node+0x194/0x250 [ 928.113163][ C1] __kasan_kmalloc+0x8f/0xa0 [ 928.117783][ C1] ? tomoyo_encode+0x2ad/0x570 [ 928.122573][ C1] __kmalloc+0xb7/0x240 [ 928.126787][ C1] tomoyo_encode+0x2ad/0x570 [ 928.131420][ C1] tomoyo_realpath_from_path+0x57c/0x5c0 [ 928.137075][ C1] ? tomoyo_domain+0xd6/0x120 [ 928.141779][ C1] tomoyo_path_perm+0x282/0x560 [ 928.146651][ C1] ? tomoyo_path_perm+0x250/0x560 [ 928.151698][ C1] ? tomoyo_path_permission+0x3a0/0x3a0 [ 928.157297][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 928.162535][ C1] security_inode_getattr+0xd3/0x120 [ 928.167859][ C1] __x64_sys_newfstat+0x12c/0x250 [ 928.172911][ C1] ? __ia32_sys_newfstatat+0x1f0/0x1f0 [ 928.178390][ C1] ? do_sys_openat2+0x170/0x1d0 [ 928.183295][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 928.188524][ C1] do_syscall_64+0x55/0xb0 [ 928.193053][ C1] ? clear_bhb_loop+0x40/0x90 [ 928.197749][ C1] ? clear_bhb_loop+0x40/0x90 [ 928.202446][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.208363][ C1] RIP: 0033:0x7f847e511ad7 [ 928.212797][ C1] RSP: 002b:00007fff1020eda8 EFLAGS: 00000202 ORIG_RAX: 0000000000000005 [ 928.221230][ C1] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00007f847e511ad7 [ 928.229226][ C1] RDX: 0000000000090800 RSI: 00007fff1020edb0 RDI: 000000000000000f [ 928.237221][ C1] RBP: 00007fff1020edb0 R08: 0000000000000000 R09: 0000000000000001 [ 928.245213][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563108d327b0 [ 928.253208][ C1] R13: 00000000000000fd R14: 00005630db14bbe0 R15: 00007fff1020f150 [ 928.261215][ C1] [ 928.264250][ C1] rcu: rcu_preempt kthread starved for 10126 jiffies! g89945 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 928.275459][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 928.285443][ C1] rcu: RCU grace-period kthread stack dump: [ 928.291347][ C1] task:rcu_preempt state:R running task stack:26664 pid:17 ppid:2 flags:0x00004000 [ 928.302149][ C1] Call Trace: [ 928.305442][ C1] [ 928.308393][ C1] __schedule+0x15ae/0x4660 [ 928.312940][ C1] ? asan.module_dtor+0x20/0x20 [ 928.317815][ C1] ? rcu_is_watching+0x15/0xb0 [ 928.322629][ C1] schedule+0xbd/0x170 [ 928.326721][ C1] schedule_timeout+0x188/0x2d0 [ 928.331628][ C1] ? console_conditional_schedule+0x40/0x40 [ 928.337540][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 928.343461][ C1] ? update_process_times+0x1b0/0x1b0 [ 928.348853][ C1] ? prepare_to_swait_event+0x344/0x360 [ 928.354427][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 928.359317][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 928.365501][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 928.371514][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 928.376568][ C1] ? rcu_gp_init+0x1530/0x1530 [ 928.381352][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 928.386224][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 928.391448][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 928.396765][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 928.401379][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 928.406506][ C1] ? __kthread_parkme+0x71/0x1c0 [ 928.411465][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 928.416512][ C1] kthread+0x2fa/0x390 [ 928.420594][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 928.425724][ C1] ? kthread_blkcg+0xd0/0xd0 [ 928.430333][ C1] ret_from_fork+0x48/0x80 [ 928.434767][ C1] ? kthread_blkcg+0xd0/0xd0 [ 928.439372][ C1] ret_from_fork_asm+0x11/0x20 [ 928.444209][ C1] [ 928.447245][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 928.453598][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 928.460723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 928.470799][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 928.476461][ C1] Code: dc 23 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 67 44 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 928.496097][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 928.502185][ C1] RAX: 4203fc990323b900 RBX: ffffffff81628b01 RCX: 4203fc990323b900 [ 928.510176][ C1] RDX: 0000000000000001 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 928.518177][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 928.526173][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 928.534165][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 928.542156][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 928.551116][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.557723][ C1] CR2: 00007fb53644218f CR3: 0000000022f5b000 CR4: 00000000003506e0 [ 928.565714][ C1] Call Trace: [ 928.569016][ C1] [ 928.571968][ C1] default_idle+0x13/0x20 [ 928.576314][ C1] default_idle_call+0x6c/0xa0 [ 928.581092][ C1] do_idle+0x221/0x5c0 [ 928.585185][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 928.590404][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 928.596599][ C1] cpu_startup_entry+0x43/0x60 [ 928.601385][ C1] start_secondary+0xee/0xf0 [ 928.605994][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 928.612099][ C1] [ 928.749252][ T51] Bluetooth: hci0: command 0x0406 tx timeout