last executing test programs: 5m48.458945118s ago: executing program 3 (id=871): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f0000000200)="dce4", 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) fchdir(r0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/psched\x00') 5m47.60794711s ago: executing program 3 (id=875): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 5m47.54855238s ago: executing program 3 (id=876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000180)=""/248, &(0x7f0000000100)=0xf8) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) 5m46.598854577s ago: executing program 3 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}}}}}, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 5m46.548349585s ago: executing program 3 (id=880): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x14}}], 0x2, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="8e040008acccdd3d11c0f08b1dec25", @ANYRES16=r3, @ANYBLOB="010030bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ffffff7f38000000a1fe18000303030303030000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x174, 0x150, 0x150, 0x174, 0xf8010000, 0x260, 0x238, 0x238, 0x260, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0x10c, 0x174, 0x0, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'snmp\x00'}}, @inet=@rpfilter={{0x24}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000, 0x43cdeb732741cf8f], 'pim6reg1\x00', 'gre0\x00', {}, {}, 0x3a, 0x0, 0x1}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip_vti0\x00', {0xb}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 5m46.268395999s ago: executing program 3 (id=882): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000140)='./file1\x00', 0x92) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0xc00e, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) (async) stat64(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 64) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000300)='./bus\x00') (async, rerun: 32) r2 = open(&(0x7f00000000c0)='.\x00', 0x5a1640, 0x0) (rerun: 32) getdents(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'pim6reg1\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xffff7851, 0x60cf, 0x200, 0x6, 0x21b, 0x800, 0x9, 0x2}}) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004940), 0x8201, 0x0) (async) r4 = openat$ipvs(0xffffff9c, &(0x7f0000002480)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000025c0)=0xfffffffffffffffd, 0x12) (async) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="c67f0000000000000000"], 0xf) 5m46.219115096s ago: executing program 32 (id=882): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000140)='./file1\x00', 0x92) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0xc00e, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) (async) stat64(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 64) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000300)='./bus\x00') (async, rerun: 32) r2 = open(&(0x7f00000000c0)='.\x00', 0x5a1640, 0x0) (rerun: 32) getdents(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'pim6reg1\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xffff7851, 0x60cf, 0x200, 0x6, 0x21b, 0x800, 0x9, 0x2}}) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004940), 0x8201, 0x0) (async) r4 = openat$ipvs(0xffffff9c, &(0x7f0000002480)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000025c0)=0xfffffffffffffffd, 0x12) (async) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="c67f0000000000000000"], 0xf) 5m7.747475965s ago: executing program 2 (id=1178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@deltaction={0x70, 0x31, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x70}}, 0x0) 5m7.39230773s ago: executing program 2 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRES64], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x404) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r7, 0x0}]) getpid() r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x3e4, 0xffffffff, 0xe4, 0x0, 0x254, 0xfeffffff, 0xffffffff, 0x31c, 0x31c, 0x31c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'rose0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @local, [0xff000000, 0xff000000, 0x0, 0x100], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440) 5m7.253224786s ago: executing program 2 (id=1182): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x80000}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1010020}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x250, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4f}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x729562a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4000894}, 0x200000c0) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9, 0x10, 0x6, 0x8, 0x5, 0xfffffff2, 0x0, 0x0, 0x1, 0x40}}, 0x50) syz_open_dev$media(&(0x7f0000000580), 0x1, 0x14002) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x7, &(0x7f00000005c0)=[{0xf, 0x1, 0x7, 0x7ff}, {0x101, 0x0, 0xf9, 0x80000000}, {0x6, 0x4, 0x7, 0x3}, {0x0, 0x9, 0x2, 0x1}, {0x0, 0x5, 0xc, 0x3}, {0x6d, 0x6, 0xe, 0x7f}, {0x9, 0x7, 0x0, 0x800}]}) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680)=0x4) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000700)) syz_emit_ethernet(0xd7, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @broadcast, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x8000, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6}, {0x6}, {0x4}, {0x9}, {0x3, 0x0, 0x1}, {0x1}], @generic="219a684372fe56f794e1c291f57820b7a774de4ab1d1e9052230896de046ec24f2b39723636ce9346f5307653f57593f400086b6c4e771bc8c5d0a88a68df4ceeedb8f1a9c80da0b6ca9c6de9d3fc7aa83a02d2bf678041b59e82529ebacbe911596df7633d8eb3506492f59b48920503ff7a0d81bd131c13dcc64f06ffd804a6938c6ea3e87f9f261d08b763606b6424c5eef6896fb7533cf1e0046c1"}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@getroute={0x14, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x8, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000a80)={0x1018, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_PAYLOAD={0x1004, 0xa, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x800}, 0x2) sysfs$2(0x2, 0x8, &(0x7f0000001b40)=""/198) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c80), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001f80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x25c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9698}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7da78059}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x46de, @loopback, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @loopback, 0x1}}}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x722}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x97}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff06}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x70}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf11}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xab25}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x24, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_open_dev$sndpcmc(&(0x7f0000002100), 0xc, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, r4, 0xadc96000) socket$nl_netfilter(0x10, 0x3, 0xc) sysfs$2(0x2, 0x0, &(0x7f0000002140)=""/153) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002200)={'ip_vti0\x00', 0x20}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000002240)={0x0, 0x9, 0x7, 0xfffd, 0x7, 0xfffe, 0x6, 0x9, {0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x5, 0x4, 0x8, 0x8, 0x200}}, &(0x7f0000002300)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000002340)={r7, @in6={{0xa, 0x4e22, 0x5, @local, 0x5}}}, 0x84) io_uring_enter(r0, 0x5d02, 0x9403, 0x16, &(0x7f0000002400)={[0x9, 0x4800]}, 0x8) ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f00000024c0)={0xa, &(0x7f0000002440)=[{0x0, 0xe9, 0x1, 0x8}, {0x0, 0x0, 0x8, 0x5}, {0xffff, 0x2, 0x8, 0x5acf042f}, {0xda5, 0xf7, 0x3, 0x3}, {0x539, 0x3, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x9}, {0x83e, 0x7, 0x8, 0x5}, {0x8, 0x7, 0x6, 0xffff}, {0x0, 0x8, 0x6, 0x4}, {0x0, 0x0, 0x0, 0xc300}]}) 5m7.180645321s ago: executing program 2 (id=1183): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000140)={0xe, 0x3, [{0xc, 0x0, 0x5}, {0xa6f1e86, 0x0, 0x8}, {0xf, 0x0, 0xe862}, {0x2, 0x0, 0x7}, {0x7, 0x0, 0x7}, {0x4, 0x0, 0x200}, {0x6, 0x0, 0x6b7f}, {0x7f, 0x0, 0x80000001}, {0x2, 0x0, 0x96}, {0xa}, {0xd0000000, 0x0, 0x6}, {0x1, 0x0, 0x2}, {0x1, 0x0, 0x7}, {0xe5, 0x0, 0x1}, {0x8, 0x0, 0x6}, {0x3b84, 0x0, 0xfffffffffffffffd}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xa1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)=0x69a32cb2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x70) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000140)={0xe, 0x3, [{0xc, 0x0, 0x5}, {0xa6f1e86, 0x0, 0x8}, {0xf, 0x0, 0xe862}, {0x2, 0x0, 0x7}, {0x7, 0x0, 0x7}, {0x4, 0x0, 0x200}, {0x6, 0x0, 0x6b7f}, {0x7f, 0x0, 0x80000001}, {0x2, 0x0, 0x96}, {0xa}, {0xd0000000, 0x0, 0x6}, {0x1, 0x0, 0x2}, {0x1, 0x0, 0x7}, {0xe5, 0x0, 0x1}, {0x8, 0x0, 0x6}, {0x3b84, 0x0, 0xfffffffffffffffd}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xa1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) (async) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)=0x69a32cb2) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x70) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0xc) (async) 5m6.745605878s ago: executing program 2 (id=1185): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049d0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x221100, 0x240, 0x806, 0x40, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) write$FUSE_ATTR(r3, &(0x7f0000000480)={0x78, 0xffffffffffffffda, r2, {0x2, 0xd, 0x0, {0x0, 0x4000000007, 0xa, 0x4, 0x83d, 0x4eb2, 0x8b0f, 0xfffb, 0x5, 0xa000, 0x9, 0xee01, 0x0, 0x893f, 0x6}}}, 0x78) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000009c0)="bc5413ab38597e0e37b3fe26288c7c8a", 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000340)={0x1de1, r3, 'id0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x56, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x1008, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x7, 0x7, 0x7, 0x7, 0x5, 0x5, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa956, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x5d, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0x0, 0xfffffffd, 0x7, 0x5, 0x101, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0x40, 0x7ffffffe, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x1, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x484, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0x1c7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x7f000000, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x7, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x0, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x400, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0xffffffff, 0xa, 0x1, 0x15b9, 0x7, 0x101, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x1, 0x7, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x4, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)='\'', 0x5dc}], 0x1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b40)=@delqdisc={0x128, 0x25, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0x0, 0xa}, {0xf, 0xffff}, {0x4, 0x7}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffd}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3c}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x19}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9fa}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x51b8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x36}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa9e}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40c1}, 0x84) 5m6.507233144s ago: executing program 2 (id=1191): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x38, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2a, 0x64, 0x0, 0xa, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6071, 0x0, 0xe7}, {"33f1"}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x3f000000, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f00000012c0)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r3, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8) 5m6.42887733s ago: executing program 33 (id=1191): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x38, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2a, 0x64, 0x0, 0xa, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6071, 0x0, 0xe7}, {"33f1"}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x3f000000, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f00000012c0)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r3, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8) 29.162698697s ago: executing program 0 (id=2920): syz_open_dev$amidi(&(0x7f0000000080), 0x2, 0x0) r0 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r0, 0x12) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), 0x1050012, &(0x7f0000000400)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd, 0x5, 0x0, 0x0, 0x3}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000440)='ns/time_for_children\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, &(0x7f0000000180)) timer_delete(r5) 27.561477849s ago: executing program 0 (id=2923): sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x601, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8d}}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x40006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 26.18371122s ago: executing program 0 (id=2931): socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000200)='highspeed\x00', 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400", 0x2}], 0x1}, 0x200a4800) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) (async, rerun: 64) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (rerun: 64) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) (async) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 26.102764146s ago: executing program 0 (id=2932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x18, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {0x85, 0x0, 0x0, 0x86}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26.101890315s ago: executing program 0 (id=2933): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20402) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000400000015", @ANYRESHEX=r0]) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/udplite\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xe, 0x12, 0x1e, 0x4, "c9eeef931beaa1554f8bf398c30a43d676a68829193f09d5f9dfd90fedbf5897227c10e55ed987ffa904a5e182d2fd02a997ca31fcb56f35f49cd1173ea6f6b0", "c28fed130815a3b81c2cdb18f52b60f08deb5ea4b76ea61176d871b0131a2031", [0x4576855f, 0xdfffff01]}) 26.011156287s ago: executing program 0 (id=2934): r0 = openat$vcs(0xffffff9c, &(0x7f00000000c0), 0x450200, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={[{@pids_localevents}, {@pids_localevents}, {@subsystem='blkio'}, {@favordynmods}, {@memory_localevents}, {}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@favordynmods}, {@favordynmods}], [{@hash}, {@hash}, {@hash}, {@audit}, {@audit}]}) r1 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x4000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='hash', &(0x7f0000000280)='./cgroup\x00', r0) openat$vcs(0xffffff9c, &(0x7f00000000c0), 0x450200, 0x0) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={[{@pids_localevents}, {@pids_localevents}, {@subsystem='blkio'}, {@favordynmods}, {@memory_localevents}, {}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@favordynmods}, {@favordynmods}], [{@hash}, {@hash}, {@hash}, {@audit}, {@audit}]}) (async) fsopen(&(0x7f0000000340)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x4000, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='hash', &(0x7f0000000280)='./cgroup\x00', r0) (async) 10.939214683s ago: executing program 34 (id=2934): r0 = openat$vcs(0xffffff9c, &(0x7f00000000c0), 0x450200, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={[{@pids_localevents}, {@pids_localevents}, {@subsystem='blkio'}, {@favordynmods}, {@memory_localevents}, {}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@favordynmods}, {@favordynmods}], [{@hash}, {@hash}, {@hash}, {@audit}, {@audit}]}) r1 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x4000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='hash', &(0x7f0000000280)='./cgroup\x00', r0) openat$vcs(0xffffff9c, &(0x7f00000000c0), 0x450200, 0x0) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={[{@pids_localevents}, {@pids_localevents}, {@subsystem='blkio'}, {@favordynmods}, {@memory_localevents}, {}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@favordynmods}, {@favordynmods}], [{@hash}, {@hash}, {@hash}, {@audit}, {@audit}]}) (async) fsopen(&(0x7f0000000340)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x4000, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='hash', &(0x7f0000000280)='./cgroup\x00', r0) (async) 3.310036442s ago: executing program 4 (id=3088): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000380)=[{0x0}], 0x1, 0x6, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 2.445680228s ago: executing program 4 (id=3100): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0x4, 0x4000}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000400), 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) getsockname$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x1c) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) socket$inet6(0xa, 0x1, 0xe6d7) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b80)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000009c0)=[{}], 0x0, 0x0, &(0x7f0000000a40), 0x6, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}]}) 2.27195235s ago: executing program 5 (id=3103): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, 0x0, 0x0, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x0, 0x0) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000180)="d50f0dd37baf99342a30af50e667b049167ba2f3ef4c3011f2eba368c76aadbe1a2f9f2c26f60d6f94a3db467999b5f3673cd3a4ae2accc17e2555cef70ae5d3b37f4ba5feed1add3da4720390afc0b8cd8c26d66b1c15be4e0bdbd8b76d92f350a4ac8ffb10bc145087d47dd5e81c9ce040828706dc93da3526f4d78cb4085545a00757c8f1c6a1909d97dac122e5c1dae9460a4a7a6d45bc318040beca7777eb4ea11476fa57016d4daf9bc71cc00cd5b8c20e72b0c2cbbf8af055486d4019e0685f553a7729ce", 0xc8, 0x0, 0x0, 0x2}, &(0x7f0000000040)) 2.162586162s ago: executing program 6 (id=3104): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write$binfmt_misc(r1, &(0x7f0000002340)="db8d1d20a9c2f24620ce6616cfe9b39c388edacdf2591f0c18258eb846ef0b96c4b16153879e9c6b1d142867e5f072b0a07490e8b34d104ad28d75aef76f1c0bc87ec2c30269e9743dc1c4eee31d4468c051d0807fb9c2887e7c90f7cfde8fa2dcf7410066b8d4912a81ff515ce5aa603e52ec5ae05ea8c0a96623318d9ae7f3f75a9793394a25a5e17cd2129fdc66b0282df174fdba795f08417a4a9bf50df62914c7d561c3ff6676664648484e82b76df8d067b1cd0eb461d5ad2a6764c30bd518e809b03678c7cb22acb88ec30bb33244c3d0dabcb08ae03db0793fd3ea113123bd85", 0xe4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x45, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 2.102323836s ago: executing program 6 (id=3105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000020a0500000000000000000002000005140000001100010040000000000000000100000a421956c24489589ec258e7064ad2a54ad89e9b7eba7c42d9a1703228c324e43e2150363ee0eb966a0d6578c221312f2d1b9d2c889d029b2b640086f527fde756fdcc5f4f778d810d034423be3d0b372d268ec7a154d5d480783d"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = userfaultfd(0x801) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x3}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r8 = accept4(r2, 0x0, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000004c0)={&(0x7f0000000c00)=[{0x67, 0x2010, 0x0, 0x0}, {0x0, 0x4a01, 0x0, 0x0}], 0x2}) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) sendto$inet6(r8, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffff, [{0x0, 0x1, 0x2}]}]}}, 0x0, 0x3e}, 0x20) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) kexec_load(0x8, 0x0, 0x0, 0x160000) write$nbd(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000070000000000000000200082b0cfb4337965941538be02000000000000000000007400a391793ba7f400003b60fc31f700"/64], 0x40) 2.10096739s ago: executing program 1 (id=3106): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000080)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000180)={0x63}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ae00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4001d}, 0x20000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ae00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4001d}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x8, 0x7, 0xffffffbf, 0x81, 0xffffffff, 0x8}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x8, 0x7, 0xffffffbf, 0x81, 0xffffffff, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES8=r1], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in6={{0xa, 0x4e24, 0x6, @mcast2, 0x7}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$nl_generic(r1, 0x0, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) kexec_load(0x5, 0x6, &(0x7f0000000600)=[{&(0x7f0000002640)="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", 0x1000, 0xa000000, 0x8}, {&(0x7f0000000180)="391e01f3b03bda627121a5084176b56a6f9acd11c98f543f10ceaae29e9f160b357e8a87d4c8a1d630b482dac58517d49e53d670adb9548de0de", 0x3a, 0x2}, {&(0x7f0000000400)="234dc03a74ccdeb87c91fcab162f9893d40f9554a2f54a7ac3225d446bba741e5180a217609181ed90f40432baeb4279835d7fc0a298da6472f197aed2ca92466c229a2d08c143c7e1c6f5acddd9841a8d3ad1109fffcb9c0c80fac8ea38af7e93093c8e1ca3ab95d26667ee0acf2985bfbc54420e424e104227e27498", 0x7d, 0x0, 0x8}, {&(0x7f0000000480)="209f61f9ae62e7e8590eb546019814aba6b117398d7467658ec3e820ec39b7d3e2901f1413fafd8a21d2414865c3a8d9a6a50c0e4a6b0ed13fbb9d4a24e1481e97e30493cf71918b656d044ea55b746ab697e391a788ca9690cdb0fae0fab96f4fd79f2920b0389bec4b13247130a47f3297d729240ca2e518fb566b1b3dbbdabb837258274451a19ddad30b504906ceed89017ff8f0e1dd9017d3d06b8b950c1088fed00c29d8c29d9bc9dada15570326f3946ebd3e4a2c68fe2f87c902d4e90d84d626856cfd36f50b67c6545f68d4d102e8488d8d5f9b59", 0xd9, 0x5, 0x9}, {&(0x7f0000000580)="f92343ed752bef9d38e0f49a62b8bdda92854e35f400631a3b3e689d93c3df12331d2f0c4930fcde0dd6d7a28fdffceedc4dee0c61ffcce0497184f69a75840b27b47ce400ff759c6f9c8953bd7498debf4ae391", 0x54, 0x1, 0x10}, {&(0x7f00000006c0)="3fef479f7aebf09711477d5645ec5b7fad3f5b383b038744f5f540349e3b1f8d04eb285eb3b40d9049", 0x29, 0x0, 0xfffff6e8}], 0x30000) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, 0x0, 0x1) socket$rds(0x15, 0x5, 0x0) 2.100774427s ago: executing program 5 (id=3107): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) (async) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$unix(0x1, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = epoll_create1(0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x738, 0x2, 0x3, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_MSG_RING={0x28, 0x39, 0x0, r6, 0x1, &(0x7f00000003c0)="18eebeb2f742973e178ed3e1b30b585b28bf0aa49d4a8f0c99995297c4284ea0d9b0d74ed1a5b9f6c85406f8cf63cd508942a53b520339c77dbd0b1b1145741e557033063bc7c9ec2061330f4347eda829bf05e222a1f92bb6d541627883e19c28b98e178b8d113efedc24d6e78889efeff203a1dc56832f60670ecd5d6d16282f9d8ce004831e027d097f71c38083c1f374b597dc79e64b9120df7a4060bd684ff50641c6f82c4100000000", 0xac, 0x3, 0x1}) io_uring_enter(r6, 0x2def, 0x4000, 0x7, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) 2.02270513s ago: executing program 1 (id=3108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x220, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_REG_RULES={0x154, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1af5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2c0}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf66}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff8f1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xff6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffbff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc5b6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4874}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4ec3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000890}, 0x4000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400002a96035d056114eb000000000006f3ab3bc2bc5916000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 64) 2.022267944s ago: executing program 5 (id=3109): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.972636494s ago: executing program 1 (id=3110): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1.922497259s ago: executing program 5 (id=3111): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80800) ppoll(&(0x7f0000000040)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(r2, &(0x7f00000002c0)={[0xf2]}, 0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000140)=@e={0xff, 0x5, 0x88, 0x11, @SEQ_NOTEON=@special, 0x1, 0x5, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x202080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x100000000000033e}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x3, 0x1000000000000000, 0x5}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffff9, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc5d5, 0x0, 0x56a0, 0xffffffffffffffff, 0x2000000000000000, 0xe9, 0x8d], 0xeeee8000, 0x2010d3}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x24008880) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000380012800b00010067656e65766500002800028014000700000000000000000000000000000000010500040001000000050009000100000008000a00", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.78879593s ago: executing program 1 (id=3112): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180008001b5e844c928892acb9c7fa77c9669b3500a09a00000000000000000061e7c631daa80a75650000000000000037731454c2d5951edc37"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406"], 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) clock_gettime(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, 0xee01, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1.788504634s ago: executing program 6 (id=3113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0x92f, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x4, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffdfe, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0xd, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) sendto$inet6(r1, &(0x7f0000000600)="40cf", 0x2, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) fsopen(&(0x7f0000000000)='aio\x00', 0xb7815d7040f5fc91) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000003000000000394b8eddb34f75606e15318b586da4de900000002000000000000000000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x10000}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, 0x0, 0x4840) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) 1.421893489s ago: executing program 4 (id=3114): r0 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x4, 0x0, 0x2) 1.331523982s ago: executing program 4 (id=3115): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket(0x2b, 0x80801, 0x1) listen(r3, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x3, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000180)='./file1\x00', 0xa500014c) inotify_add_watch(r4, &(0x7f0000000140)='./file0/file3\x00', 0xd0000080) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x8}, {0x2, 0x4}, {0x5, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0xbd, 0x4}}]}, 0x34}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0x4}, {0x0, 0xfff3}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x4}}]}}]}, 0x3c}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x28, @remote, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) ioctl$FIONCLEX(r0, 0x5450) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000040)={@empty, @rand_addr=0x64010100}) 1.262406769s ago: executing program 4 (id=3116): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001580)=@newtaction={0x14, 0x31, 0x829}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300e02448eed13426ab44b7080211000000ffffffffffff330007010100080026006c09"], 0x44}, 0x1, 0x0, 0x0, 0x4841}, 0x20000000) 1.042011783s ago: executing program 5 (id=3117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x4000}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 1.041608446s ago: executing program 4 (id=3118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$dir(0xffffff9c, &(0x7f0000000440)='./file0\x00', 0x340, 0x55) openat(r1, &(0x7f0000000480)='./file0\x00', 0x404000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$pagemap(r0, &(0x7f0000000280)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb173, 0x200, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000240)) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4) 1.039765925s ago: executing program 5 (id=3119): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0xffffff81, @loopback, 0x7}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0x4, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 781.823565ms ago: executing program 1 (id=3120): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 361.951081ms ago: executing program 1 (id=3121): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) pipe2$9p(&(0x7f0000000240), 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74f7ffa0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002400000000214000000110001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 82.794505ms ago: executing program 6 (id=3122): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0xffff, 0x7f, 0x1, 'queue0\x00', 0xfffffff8}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x1}}, 0x30) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) landlock_restrict_self(r1, 0x0) open(&(0x7f00000000c0)='.\x00', 0x517002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x3}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x4}, {0x0, 0xffffffffffffffff}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="8eb4d1689b18de658905ffc3d847fbe6b66c03ee73eb611e1ac198cfedf81c6b6f75c15afce1181ae55bdbd0207de46e4e3127adaac2c9cc0fcc3a63541f0ebb12a9863ed2895af3e2870d4b419df1579c1e310489f7292bb0"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setresuid(0x0, 0xee00, 0x0) r8 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0xffffffff}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 516.818µs ago: executing program 6 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="86fb4e44162ce0274207fa0cf942", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 0s ago: executing program 6 (id=3124): unshare(0x6a040000) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}, {&(0x7f0000000540)="946f29ea6f4d27783f23433a43d78b3da115d501b1545073e1d47f1cfd5b8b4101afa0e41f2f60926e8a61fa30a09f67c4df0d51f731", 0x36}, {&(0x7f0000000580)="045ac8e36d7a33b849eda55df520b8be07578ae2f932d970e95be3c45fc641d3d725db03898f838a0cde47c386f9778b5238c6c27bea3bb19f00e6655732fd5f22bd6b5da82f9fc111042c342d9bd2dc492c9663e397885d790b259ea6d764454601bd77992baf166185c6947f791fbdd79d56042faba112ccdb775f2c8ebea34b9d878860c159b60aa89b79a69e9f09ee376ba8522535fbf02ca6a49afe4fdbfbe096fc56fe92fe3ff5ecc272d6b084d0af82198180fd50d20e9ee4", 0xbc}, {&(0x7f0000000940)="64914b", 0x39}, {&(0x7f0000001a80)="c45fe5dc79b50883ead02911424f6f3827ba653953488cde4d941b297e3255cb0224c7039c8157fa4be512fb8287862cb8e4d6a78a3918ba0e48cab892dea1d89a2c0f662c139549574ddf181483e176026c30a8e90c728afe542d37fd63a94571a7beba0c69327dec0ed6c4ce6cbdaf3ab9760a88a9c411aeacddf6f128ff1e0fce69bad50e8ebf1d44c1d131c84287d6382b760f343d6a4be3f778fb41ec3909049ca61cbdc9d3f2fe8d95803ff215fcf7e5fc8586b75946f6a53eaa7387af93bc9a7877aea84736582dbf0b7c724ec87ef0efd0c50558575163a17e06d201730c0f5a2b2c26661d6ae21c998260c9969bd9323dfaa567748a6f416246229ebe7192795bfc3b1e8a8255eb94446ba025f2bd5558fe6a50a4d33c3cd897480f0745143d87190ca4ada8e2064e7d5207d29d2ad31574e8fa69a90d314c8418cb4d54046a181bb37db1f9a64847a415562f5f7c4b5b9089591e6236ce207d788bac96db5992595a99023d787172413b348213bc94bbbebe83f1cde256e0ccc748f13c6916eea8d824a41d363ef122c99f86d3ae770bcc40c94ed9481c991436bdbb8e82181c6c295e220aeb4e02dd3a1f1379edf78ae01c8f15c5d6b37083c882998703c444480db0d1d148de046cee71eb445c9b5fdd05da45967beb2b6825a2ed8a90f51b05f2a12b349b9038e1ea6989d1861a7fc9d2fecb62b1e4d9111b8b78adfd5ef9d2791f8632620d976776cd3fd13e6df0bb29c9dc2ecdf2721da52cfadcfd66f1d1a409efaec173a880e96d45023541e32bb30bf388a3c39d4ad3519ad0dc1fbfd8e7bfaaed79bdb3660699c99d271308fd729b81168af139ba9fd9b6143bf5006414732a4873791e8fb5a04612d02fa21f37a72e1d67f6a4c70d3e594a16591612b9096903c964de67f87f2dc7e3f3500762e66d6ed5c91c92fa63cc9539da8aa01698172ef15d9f7a8a392aeb366c248ef728b35042e9b2ac22acc6d233fa61bc5d089dec89a5202e32033c0f918c6d085abb5daec83906048bfd4054fe31aaee9c231f0668acb46ef0fbdb19009f29596f3e8422ad96d1241bf36d2677a2d7499dc4fc59f73124cc2718825daa82e5b02cbf152c700c801f17098ada4ab61c9802602209edd96fe56b6dabebcbce2cf629fc5b534f407a7a825d7a545c616d0a92d175d6a43d45fd146aec73031a1a643f5c4a1a2fdc03d505c50a5b16820f431bfc1dd7021e36a45bc4cb746a94f46bb5b94766844b10669ebde65b4f5748aec3e44f1024b574f6cedfdb841d2ccefe0c22b3763515e9f73346d43232fc0f048514e013b71c6d32e929c248e0956b13fa35fa4efc12db180637d00545c9c57e27f9652bc2b42aeee1a5bf8266efb81f404ed680436a71e777233fa5268034462dfed894ecba5bcfa411d1eecb0afeeab8ebfc682301c0ea2bac8a5e311c0c53b791496f71b0740c432f6d5b1e0283f4d8b38ad30c68b4ed4fc09f8521eecbf361fd915e0a74796e91024de676aa94217348f69df51942958759f73ce0e7d31f975431f6e4872264e30b2e016fdc2b40085d3427bb7d4f61898d17e9d2fded9484c68eac27c7447aa3459749c9073d390df72aebca743cdbd156a0c9da5b659974a56709da2ccbf9d3e4bf1c9c3382fcbab76cf3d3c200484768afb8a4dc04b5beb7102d33e87bef90fce3fb453af9819f062a6b05f0d70d0ba03efe3de1f98087247d6dc71ba191b84d4aa035e7e8fd265517cd22667b372c3af0d6dc7d027129a9529fe421d26a67a4eb23997787972c9a6cae5d094c563270a60bc956aa1582cf19eec6c27c4b235698c1ca56aa037b6be18b58245c97b90a01a0557fbee1fd769f14782c97e7f08bd031128ff625aebfac5a981079046cd2574c1720983045934f5f49a98733906272f7db0a40425d1c77de8db5ac3d585032a6a34725c90505b62c58e04a767a0bebc16cb7ad1a549af2feb9a7e65b832d1fe1ffe5a040992f0118c43a5aa7497c416c9706528e95d0f8b74955a74e564e391c7d093e15ce2f8e113019c014b234dcb3d3bf41431108d13f0937be81b49b58fa7e557e147ebdde2c8a3b9433d2d714a992314caf39ce8b01b8d781404e9ea899f77d96ace175663c83965d491607bf0d02aa7c0f94dc1f87b5ce1905b03bd61d1fa97b0cab0dae23cacb3b3680f5b887a03569a54a7c1e1601a1da8383f35bdd8a90d5d2fde196a34083123d3d788d688f0d9fff30d3f6e27fea140f0b3031f7b146d5242387539814f4df1d153dc02356160b501c42fb72600a93b3df1ac1a414e85ef7d3a78be98e02c2f06dc5ab50a8273bfe7c8fd8c3950dcd993719910caf37ab0f18e6f8fc733316785ed113968b9307138990ccf63206cfe10140b821536a25eae3c6c6dd3f6bba8a59854fa8f9a94a467202574a8e7f7a49a2c91eaeb0c053c5099fb5f9064eb161c64be42201bc8e8b0ba9a8a8a1c617668973a0ee04f7cac154a1d8662e84d155250eba45cd7a7a50644e683aff83dfa5b2c6bf63e9075f3ac6a409537031bda90294361c58182b1b13d679b414a1d847d6bef3f6689ab5f1c9c7eae531a23293d0cd9391c5738dfb2715afb90abbba3f782d4f69e5927fc8a88273db0451557bb3f653cb6e39de02bf9035b0a1614a128dbb498a79012b8e203530c134dd56b70977db8bfabeecd963b533e40dea997bfa6e6601cf670839751ca351f02cf4be24084ba39ca65d59cec440910cec37834ab61e2bb624c44ca7d8ef16a0b9395f447338942c93ac83065aa45493eca913db8c2bf3ef1f724f4c292faf2ad9f6f4548d8b8b665edba860fb9d6ea0edaa358fe62de407a1fc27ba0dc26ce3fb6e60e3cadf37f5578660914d5921bcd5d228a35e2b384f0b8f4880f25f9953bf9891da8e7a92222b4b714298e3138b2eb272455b8eb572d62ca9d8f10303f0a8d5aa1fea688628b54aefc055c9a2bdb2e3813279678b0e5c206f718e5232506805d146373a511461a113a5c80a28a91d5705b78a147374ea45890f6db4007bdc97ca074643eac0e3a6760b3e4b31630f61daaa6555661cd091eabbf95973682028d7f488d6f60e6f66380c6bff223c053b00ef56fffcea71ca81e1215c5585ec094cc00bd97441c175e08ea24a5021346c197a05184d7d8a8b7f2b9243335655dc16d887dcd41a2b1defde24edc4bcf7722e0ee6993bc3116df38e59f811a1b7650807a27cb9770fb585b78704f473b2dd6fa19cec33a21b416927582a988c76602cadf30624e29952024bd73dee19cd093a5bf83d2a5376f15510f792ea613d9078be297d8f7100613853809aa4ca070f5e1ebfd96d7df3769e9198bbf8278e070890edbe350589ac84bddac851b62f0db798069b2459739b68b8ae1b7a5967c75a9aeda76c8b9f0559608822c8a254246e89fb3dab8576d5703df5247cd496a332a83ef61bd9aaccb8ff6ab3632e225fa00443f1bc888e370eba804703749180eff743216e35c873891117d2feb6cfff97080a9552766d509616bf647f2d78eb76905691120b6a63ee345e76511df0d1d7853e88ac3b2264930b8276def1b1b59736598936e1206b3cb8cfea05fdd93aafbf25cd33de3c5c5c5ea79da4adac1222e3d93118c64e9f47c3cbadbd8435893bb9d9e6f64355e89e2c7a8767c710c25ec7e784a3892f1e5151ae6633d70b731f5eec0d85316d281c4515ed7da03867f229fdf7cfc4035408eceaba77cdfab6ab66bb260d4094d22d771d731b114ec1e8461299be4fa4e4de019cc2a7a90bd90cb528a21942b849dd4b638c127177ff4359f1816661cf6595c50798e12fb717d5ac10c90577f91a3d47529d03cc33f4a6d73f95051d29a2ddd7c5a8f021cb97387a0bb696587b5283f7c6174edb4e9a06dd4bf455351ce35bd462f1c78e8f5296dbe6bcaee39c541fe88ed1de7145c7c65f5b34971ba25b71fe0ba5b2e42cb2a4ed355674a7aca14d5e14246ff10626fbba989a0ff5531ceaffa8f7bed81ac68d28fb26aea252cdcbd907ff0313614c62c395ad01216144c7c31a3f445f393ed044612247b5f622adaa49bf08ea3d147ac2dba58594e6f3e0a34a0a60307ea7088e153199eb066d7b61168346ee2e26649f6de008a792971d05b40b8de91a891de1833ded3440f9f5d6938624e43a84983532b8141aa4f09d5ee507561a80d61d03325efe59d86ef62e81ffbf7037c0a8c26a45cf8e247ed8170fa35332d9eb8cad7364ee79b9915a8cf33f0257e8253125217841365dd4b20b1a8eb9a3ffbd24011bf779cb0b8c2150f9dfc65d32c1fbd5d1019659af55548a9bf10001d1e6cc0a5118bc2653b116f1450e1943651ca9e70fa48b3c1a36b3643013db3ff09e2e0550eb107c45e933aa64272537c49057e3b90e32180641022950581df3e538d1a04b42e92486f4504939f830f614d0742ace9703672033db7c954ebde125edd3a0900e83c1f043518741efb80d42a08be2bf2df8e88a4d31470ed4077c7869df3d8564245d8f31c3988c1cd29dab7851046527c61c53924aa43cc65e30585ae38443b7e98143c036b34b63a88e8172ff1bfa022302aee05ae1e8f9cdba27e32663e97885636052f5f58b2bb4a2f4c1329f4631b3925e9893f64e9ae90e31f4da5ac83abbf9803b1f15972cff31a24216168381594931a05229e8db0f7e75076d0b9ed6798f73ec9da6279fbd34f678bd0b9f5736e6c83088db9a3630e5da9d96b59ea5fc078e9d2d797b7fee2adaf77b7afaa6212d60a0be969b2cb6b4895b6c3d9f68f1cf6d252a91fb2fca62baab982dd5e35e8b7ff7f35befebdc5da8b9bdaa80423fb0096d91efa10440c30720a76c3aa003d7dedb42fa7f00c8d2d3cfc886096ecf4ab55527384612e769c8da2c75ea878685a256f4ddd7d07b0bdb7bbcb326acdcbd3f003d936344b09b44d21dbe2ac84bd075236480bdac9426368a00144c94ed2970294270642fe8fce18b829444f11f18fa7e57aa001814ce2b11a2b6dc3465f48c536e267d727f2492ca2a0d12dd545fea1d99051dee467f07bf45497482db31b728cfd428a84b463e1ecad8506d659d0d4b04ac497ad297208226306f8ed0f07822bc7b1b9d8d190b0cc3b72ddfdc5adb41a948073522ede7fef9977274712cba81f0b775628ae87684303e3f35c1a125c1b0c582fb319c4987b6ea459209b23c95e9396a082f427952a1cd4e0c7f59e6bcd2c1027d4431613626f8574b1d48c11185a621a4378c632ab382943c86d58cb87f78916305cda29a7b78b8d3ab0c7af2a02dd608c790db50a58a4a2a13fdf01a7dd2e22126d6881872adcdae8a3c13c7aba56f75bad6c6c16cc041447c7877a17050456cac6065c0c808f8684faf49bd16e3c6d2b6bf467d1508dea250b887d6f8aaecdca2d77e764e6ec4fc5f972020d0e569c57cc8f206db404b978589121109b8cef66273296581b351d6d1c5f003408fd7fe1dc65952226c6223212f880b190b1605abbf0de6668cf1e8d95c95fb5641750766c42ffe147c18ccbda3cd0daad99384e0ffefe490cf14b8c5358ec268d765402f2715079255417b78d1e2c570846f9aee09df0f073f724b130df714364d41f1a71f29ddb1219e78787de97fa821d2d759c1e7d06853ea860bf4fbb6497aa85cc6c0793ac7505c165f2a036e4d8f19b2656f4a99fa25cd8ada1d6b810a1fd722e42ef73084ad4dd085681755c22aa537488da68f48752e118f32ce9edab6632dd5753a9236b38f7eeef1063e9beeb441de913b03303bb4", 0x1000}, {&(0x7f00000006c0)="b9c46a5cef9d78e7aa9b35793710ccd4bb84a18d91fdebb352f31a27d439c1f5b254826ee8b6f243feabf9c6a571eecc4347ad40a8eccd48d7fc09fea1c718ad83f631967d95293e8938f379694648c37a2f00732fbc876d84744789fff4fd74cb9ce1d381decb1e1ebabde03c7a56d380926fb25237d84faa3b3802e4126bf1f49f418c21fdb3f916a2c7351f4fa5", 0x8f}, {&(0x7f0000000780)="5c3e8363de8f1d2275249510a432ffd9371d835dbfcf45170ea789ac2731b6ab7ccc75d9f90f472f250de365c99bc0eda7b79848f5dfc1eb6649324ce4c1d93d430d9c1b5346641d29dbf86a19467a9dfce3cfdcc4acb85a12ddb1b5e71beb4d176c1968fa780fb50bef863a8a69e4a66c71f67bd1bae2e08d7b66c8b84faa37964c7d157300001c490227c14cdf9c672a11034bd4b274bfb35b6b51b1389723a5", 0xa1}, {&(0x7f0000000840)="165804c7b4f22ef520388a5a2b74135eab13c6ed04e7a0f1809f847ba11e73206da7b4d8a7b775c8de68e44a156939ab8479745fb59321847d1086d555afcae452f484a06e0eb70e4046d7c12247b06ffe32a2cca89a260541f3fc0daa5791cdbdc1df7c2eb81df9ab3beaa5e2d145e9280d8d329f8df052b3713faab3caa2635dafb4d6e723604ee1b6f41e83e10da4000e16da", 0x94}], 0x8}, 0x40000) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)=ANY=[@ANYBLOB="af5d61873c62ea3f6c5d0a91e1bae27420e27de6b8ceec9539"], 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000844) r1 = socket$netlink(0x10, 0x3, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x401, 0x1d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8000, 0x700, 0x68b, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x401, 0x7, 0x1, 0x20045, r2, 0x800, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x5}, 0x50) clock_settime(0xfffffffb, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = mq_open(&(0x7f0000000400)='\xaa\xaa\xaa\xaa\xaa', 0x800, 0x40, &(0x7f0000000440)={0x5, 0x401, 0x200, 0x2}) mq_timedreceive(r9, &(0x7f0000000480)=""/121, 0x79, 0x5, &(0x7f0000000500)={0x0, 0x989680}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140b, 0x2, 0x70bd2f, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x15}, 0x80) kernel console output (not intermixed with test programs): e_1: entered promiscuous mode [ 397.419637][T14703] debugfs: 'hsr0' already exists in 'hsr' [ 397.421581][T14703] Cannot create hsr debugfs directory [ 397.425163][T14728] 9p: Bad value for 'wfdno' [ 397.455458][T14516] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.526271][T14731] (syz.5.2188,14731,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 397.529310][T14731] (syz.5.2188,14731,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 397.569248][T14516] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.701178][T14516] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.722297][T14737] siw: device registration error -23 [ 397.805280][T14737] 9pnet_virtio: no channels available for device syz [ 398.380493][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 398.387175][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 398.399348][T14742] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 398.949192][ T5941] Bluetooth: hci4: command tx timeout [ 399.509036][ T6022] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 399.681508][ T6022] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.684770][ T6022] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 399.687800][ T6022] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 399.691714][ T6022] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 399.695016][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.700665][T14750] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 399.704784][ T6022] hub 10-1:1.0: bad descriptor, ignoring hub [ 399.707133][ T6022] hub 10-1:1.0: probe with driver hub failed with error -5 [ 399.715652][ T6022] cdc_wdm 10-1:1.0: skipping garbage [ 399.717380][ T6022] cdc_wdm 10-1:1.0: skipping garbage [ 399.729702][ T6022] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 399.731677][ T6022] cdc_wdm 10-1:1.0: Unknown control protocol [ 399.807579][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 399.812243][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 399.816297][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 399.888585][T14767] netlink: 'syz.0.2199': attribute type 21 has an invalid length. [ 399.891527][T14767] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 399.894161][T14767] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2199'. [ 399.909497][T14767] loop7: detected capacity change from 0 to 2640 [ 399.915510][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.918691][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.921527][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.924216][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.926917][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.930077][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.932932][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.935632][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.938322][T14767] ldm_validate_partition_table(): Disk read failed. [ 399.940686][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.943443][T14767] Buffer I/O error on dev loop7, logical block 0, async page read [ 399.946294][T14767] Dev loop7: unable to read RDB block 0 [ 399.950320][T14767] loop7: unable to read partition table [ 399.952782][T14767] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 399.995183][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 399.998147][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.001637][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.004455][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.008220][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.010890][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.014234][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.016926][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.019987][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.022574][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.024716][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.026853][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.029420][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.031932][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.034623][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.037215][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.040121][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.042906][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.045701][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 400.048509][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 400.284172][ T2295] usb 10-1: USB disconnect, device number 13 [ 400.296030][T14787] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2204'. [ 400.558412][ T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 400.721840][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.725077][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 400.732614][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.735638][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.743254][ T29] usb 5-1: config 0 descriptor?? [ 400.753355][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 401.028310][ T5941] Bluetooth: hci4: command tx timeout [ 401.300768][T14516] vlan3: left allmulticast mode [ 401.304829][T14516] bond0: left allmulticast mode [ 401.306581][T14516] vlan3: left promiscuous mode [ 401.308980][T14516] bond0: left promiscuous mode [ 401.310763][T14516] bridge0: port 1(vlan3) entered disabled state [ 401.961069][T14516] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 401.968354][T14516] bond1 (unregistering): Released all slaves [ 402.190449][T14516] bond2 (unregistering): Released all slaves [ 402.201339][T14516] smc: removing net device bond0 with user defined pnetid SYZ2 [ 402.205575][T14516] bond0 (unregistering): Released all slaves [ 402.238938][T14516] bond3 (unregistering): Released all slaves [ 402.246370][T14516] bond4 (unregistering): Released all slaves [ 402.466314][T14516] bond5 (unregistering): Released all slaves [ 402.652268][T14516] tipc: Left network mode [ 403.002063][T14516] hsr_slave_0: left promiscuous mode [ 403.004695][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.007678][T14516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.038993][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.041915][T14516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.061865][T14516] veth1_vlan: left allmulticast mode [ 403.063886][T14516] veth1_macvtap: left promiscuous mode [ 403.065836][T14516] veth1_vlan: left promiscuous mode [ 403.067787][T14516] veth0_vlan: left promiscuous mode [ 403.117109][ T5941] Bluetooth: hci4: command tx timeout [ 403.273618][ T29] usb 5-1: USB disconnect, device number 33 [ 403.365868][T14516] pimreg (unregistering): left allmulticast mode [ 403.804743][T14516] team0 (unregistering): Port device team_slave_1 removed [ 403.842230][T14516] team0 (unregistering): Port device team_slave_0 removed [ 404.168854][ T831] infiniband syz0: ib_query_port failed (-19) [ 404.293263][T14703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.302239][T14703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.319878][T14703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.327763][T14703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 404.407420][T14703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.421020][T14703] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.429788][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.432351][ T6482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.463307][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.465892][ T6482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.604950][T14703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.697909][T14703] veth0_vlan: entered promiscuous mode [ 404.702929][T14703] veth1_vlan: entered promiscuous mode [ 404.722232][T14703] veth0_macvtap: entered promiscuous mode [ 404.726783][T14703] veth1_macvtap: entered promiscuous mode [ 404.735562][T14703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.784723][T14703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.802853][T14516] IPVS: stop unused estimator thread 0... [ 404.817184][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.820310][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.823398][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.847863][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.905140][ T6482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.907809][ T6482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.931103][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.933605][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.186202][ T5941] Bluetooth: hci4: command tx timeout [ 405.401136][T14859] __nla_validate_parse: 2 callbacks suppressed [ 405.401213][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 405.525590][T14861] tmpfs: Unknown parameter '’ize' [ 405.607581][T14863] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2217'. [ 405.611907][T14863] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2217'. [ 405.751215][T14867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2226'. [ 405.915059][T14871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2219'. [ 405.977491][T14871] ªªªªª»: renamed from hsr0 (while UP) [ 406.005792][ T6020] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 406.176683][ T6020] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.180924][ T6020] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 406.187574][ T6020] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.194214][ T6020] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.226134][ T6020] usb 10-1: config 0 descriptor?? [ 406.254252][ T6020] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 406.713660][T14875] overlayfs: missing 'lowerdir' [ 407.683515][T14891] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.687975][T14891] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.787860][T14891] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.791306][T14891] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.867867][T14891] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.871356][T14891] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.983578][T14897] syz.1.2225: attempt to access beyond end of device [ 407.983578][T14897] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 407.988479][T14897] gfs2: error -5 reading superblock [ 408.072170][T14891] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.076147][T14891] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.261085][ T1145] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.264146][ T1145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.275937][ T1143] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.279274][ T1143] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.289136][ T1143] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.292385][ T1143] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.302005][ T1145] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.305127][ T1145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.797130][ T5953] usb 10-1: USB disconnect, device number 14 [ 408.992462][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 408.995909][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 408.998977][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 409.003058][T14913] fuse: Bad value for 'fd' [ 409.337725][T14924] binder: 14921:14924 ioctl c0306201 80000040 returned -11 [ 409.340555][T14924] binder: 14921:14924 ioctl c0306201 80000640 returned -22 [ 409.395592][ T1145] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 409.398373][ T1145] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.401873][ T1145] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 409.408463][ T1145] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.411259][ T1145] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 409.421889][ T1145] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.428592][ T1145] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 409.431226][ T1145] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.454307][ T831] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 409.543302][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 409.613872][ T831] usb 9-1: Using ep0 maxpacket: 8 [ 409.616892][ T831] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 409.619484][ T831] usb 9-1: config 179 has no interface number 0 [ 409.621495][ T831] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 409.625133][ T831] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 409.628749][ T831] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.632901][ T831] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 409.636767][ T831] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 409.640978][ T831] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 409.644043][ T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.648682][T14920] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.298487][T14949] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2244'. [ 410.534761][T14965] ieee802154 phy0 wpan0: encryption failed: -90 [ 411.987676][ C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 411.990319][ C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 411.993554][ T54] usb 9-1: USB disconnect, device number 9 [ 412.542480][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 412.542795][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 413.074539][ T5941] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.075916][T15005] tipc: Started in network mode [ 413.079202][T15005] tipc: Node identity 469676635c1b, cluster identity 4711 [ 413.082637][T15005] tipc: Enabled bearer , priority 0 [ 413.152550][ T6105] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 413.282020][ T6105] usb 5-1: device descriptor read/64, error -71 [ 413.541907][ T6105] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 413.565147][T15011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 413.567250][T15011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 413.569800][T15011] vhci_hcd vhci_hcd.0: Device attached [ 413.588886][ T29] hid_parser_main: 33 callbacks suppressed [ 413.588900][ T29] hid-generic 0003:A7B9:FFFFFFFC.0009: unknown main item tag 0x0 [ 413.593521][ T29] hid-generic 0003:A7B9:FFFFFFFC.0009: unknown main item tag 0x0 [ 413.596071][ T29] hid-generic 0003:A7B9:FFFFFFFC.0009: unknown main item tag 0x0 [ 413.604714][ T29] hid-generic 0003:A7B9:FFFFFFFC.0009: hidraw1: USB HID v0.00 Device [syz1] on syz0 [ 413.681836][ T6105] usb 5-1: device descriptor read/64, error -71 [ 413.751863][ T831] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 413.764176][T15004] tipc: Resetting bearer [ 413.792095][ T6105] usb usb5-port1: attempt power cycle [ 413.811792][ T831] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 414.128954][T15022] __nla_validate_parse: 1 callbacks suppressed [ 414.128965][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2256'. [ 414.134103][ T6105] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 414.162336][ T6105] usb 5-1: device descriptor read/8, error -71 [ 414.217676][T15012] vhci_hcd: connection reset by peer [ 414.219693][T14516] vhci_hcd vhci_hcd.1: stop threads [ 414.226087][T14516] vhci_hcd vhci_hcd.1: release socket [ 414.228369][T14516] vhci_hcd vhci_hcd.1: disconnect device [ 414.236024][T15029] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 414.401489][ T6105] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 414.421923][ T6105] usb 5-1: device descriptor read/8, error -71 [ 414.545002][ T6105] usb usb5-port1: unable to enumerate USB device [ 415.178483][T15004] tipc: Disabling bearer [ 415.184140][ T34] tipc: Node number set to 445478499 [ 415.455420][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2267'. [ 415.458423][T15066] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2267'. [ 415.466811][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2267'. [ 415.602458][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2268'. [ 415.615738][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2268'. [ 416.327079][T15081] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 416.329207][T15081] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 416.332554][T15081] vhci_hcd vhci_hcd.0: Device attached [ 416.356894][ T1963] hid-generic 0003:A7B9:FFFFFFFC.000A: unknown main item tag 0x0 [ 416.359495][ T1963] hid-generic 0003:A7B9:FFFFFFFC.000A: unknown main item tag 0x0 [ 416.365477][ T1963] hid-generic 0003:A7B9:FFFFFFFC.000A: unknown main item tag 0x0 [ 416.375142][ T1963] hid-generic 0003:A7B9:FFFFFFFC.000A: hidraw1: USB HID v0.00 Device [syz1] on syz0 [ 416.510828][ T6020] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 416.581630][ T6020] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 416.922409][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 416.922420][ T40] audit: type=1800 audit(1771618285.946:3382): pid=15092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2271" name="/newroot/342/bus" dev="tmpfs" ino=1874 res=0 errno=0 [ 416.930557][T15093] Invalid ELF header len 8 [ 417.015382][T15106] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 417.088775][T15082] vhci_hcd: connection reset by peer [ 417.092685][ T1145] vhci_hcd vhci_hcd.0: stop threads [ 417.176849][ T1145] vhci_hcd vhci_hcd.0: release socket [ 417.179954][ T1145] vhci_hcd vhci_hcd.0: disconnect device [ 417.297203][T15112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 417.299320][T15112] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 417.302386][T15112] vhci_hcd vhci_hcd.0: Device attached [ 417.490337][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 417.549861][ T9] usb 45-1: new full-speed USB device number 7 using vhci_hcd [ 417.936486][T15113] vhci_hcd: connection reset by peer [ 417.938999][ T83] vhci_hcd vhci_hcd.4: stop threads [ 417.941171][ T83] vhci_hcd vhci_hcd.4: release socket [ 417.943345][ T83] vhci_hcd vhci_hcd.4: disconnect device [ 418.013089][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 418.345518][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2287'. [ 418.378647][T15146] 9p: Bad value for 'rfdno' [ 418.381567][T15146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'. [ 418.805924][T15155] wlan1 speed is unknown, defaulting to 1000 [ 418.939376][ T831] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 419.531988][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2298'. [ 419.610273][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 419.651076][T15169] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2293'. [ 419.796816][ T40] audit: type=1804 audit(1771618288.818:3383): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2294" name="/newroot/20/bus/bus" dev="overlay" ino=130 res=1 errno=0 [ 419.806117][ T40] audit: type=1804 audit(1771618288.818:3384): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2294" name="/newroot/20/bus/bus" dev="overlay" ino=130 res=1 errno=0 [ 419.816886][T15177] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 419.819036][T15177] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 419.824131][T15177] vhci_hcd vhci_hcd.0: Device attached [ 419.848866][ T61] hid-generic 0003:A7B9:FFFFFFFC.000B: unknown main item tag 0x0 [ 419.851408][ T61] hid-generic 0003:A7B9:FFFFFFFC.000B: unknown main item tag 0x0 [ 419.853888][ T61] hid-generic 0003:A7B9:FFFFFFFC.000B: unknown main item tag 0x0 [ 419.861788][ T61] hid-generic 0003:A7B9:FFFFFFFC.000B: hidraw1: USB HID v0.00 Device [syz1] on syz0 [ 419.905311][ T40] audit: type=1326 audit(1771618288.928:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.4.2296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 419.919666][ T40] audit: type=1326 audit(1771618288.928:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.4.2296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 419.926668][ T40] audit: type=1326 audit(1771618288.928:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.4.2296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 419.952023][ T40] audit: type=1326 audit(1771618288.928:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.4.2296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 419.963289][ T40] audit: type=1326 audit(1771618288.928:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.4.2296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 419.979041][ T40] audit: type=1326 audit(1771618288.928:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.4.2296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 419.987007][ T40] audit: type=1326 audit(1771618288.928:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.4.2296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 420.058720][ T2295] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 420.128976][ T2295] usb 47-1: new full-speed USB device number 4 using vhci_hcd [ 420.863464][T15178] vhci_hcd: connection reset by peer [ 420.868007][ T1145] vhci_hcd vhci_hcd.5: stop threads [ 420.870068][ T1145] vhci_hcd vhci_hcd.5: release socket [ 420.873024][ T1145] vhci_hcd vhci_hcd.5: disconnect device [ 421.193304][T15210] netlink: 'syz.1.2303': attribute type 2 has an invalid length. [ 421.196773][T15213] Cache volume key already in use (9p,syz,) [ 421.447821][T15222] bond1: option mode: unable to set because the bond device is up [ 421.452147][T15222] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 421.459382][T15222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.464478][T15222] bond1: (slave lo): making interface the new active one [ 421.467414][T15222] bond1: (slave lo): Enslaving as an active interface with an up link [ 421.471738][T15222] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 421.544100][ T831] libceph: connect (1)[c::]:6789 error -101 [ 421.546781][ T831] libceph: mon0 (1)[c::]:6789 connect error [ 421.728114][ T6020] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 421.807946][ T831] libceph: connect (1)[c::]:6789 error -101 [ 421.810071][ T831] libceph: mon0 (1)[c::]:6789 connect error [ 421.845375][T15252] can0: slcan on ptm2. [ 421.962319][T15260] ip6tnl1: entered promiscuous mode [ 421.964050][T15260] ip6tnl1: entered allmulticast mode [ 421.990206][T15260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2315'. [ 421.993086][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2315'. [ 422.009942][T15250] can0 (unregistered): slcan off ptm2. [ 422.256142][T15270] pim6reg: entered allmulticast mode [ 422.259551][T15270] pim6reg: left allmulticast mode [ 422.317720][ T831] libceph: connect (1)[c::]:6789 error -101 [ 422.319706][ T831] libceph: mon0 (1)[c::]:6789 connect error [ 422.362640][T15231] ceph: No mds server is up or the cluster is laggy [ 422.511915][T15280] team0: Mode changed to "activebackup" [ 422.701385][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 422.730407][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2320'. [ 423.713983][T15316] team0: Mode changed to "activebackup" [ 423.831269][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2332'. [ 425.654166][ T2295] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 426.320383][T15346] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 426.323592][T15346] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 426.415629][T15353] netlink: 'syz.0.2339': attribute type 21 has an invalid length. [ 426.419392][T15353] netlink: 'syz.0.2339': attribute type 20 has an invalid length. [ 427.095364][T15372] netlink: 'syz.4.2343': attribute type 10 has an invalid length. [ 427.188611][T11876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.196545][T11876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.343042][T15363] ceph: No mds server is up or the cluster is laggy [ 427.475738][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2344'. [ 428.451164][T15398] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2349'. [ 428.544891][T15391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2348'. [ 428.547849][T15391] tipc: Invalid UDP bearer configuration [ 428.547873][T15391] tipc: Enabling of bearer rejected, failed to enable media [ 428.629213][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 428.629224][ T40] audit: type=1326 audit(1771618297.660:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22598 code=0x7ffc0000 [ 428.641637][ T40] audit: type=1326 audit(1771618297.670:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 428.657324][ T40] audit: type=1326 audit(1771618297.670:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22598 code=0x7ffc0000 [ 428.666798][ T40] audit: type=1326 audit(1771618297.670:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 428.678507][ T40] audit: type=1326 audit(1771618297.670:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22598 code=0x7ffc0000 [ 428.691008][ T40] audit: type=1326 audit(1771618297.670:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 428.697467][T15405] vxfs: WRONG superblock magic 00000000 at 1 [ 428.699531][ T40] audit: type=1326 audit(1771618297.670:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22598 code=0x7ffc0000 [ 428.703888][T15405] vxfs: WRONG superblock magic 00000000 at 8 [ 428.710624][ T40] audit: type=1326 audit(1771618297.670:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22598 code=0x7ffc0000 [ 428.710671][ T40] audit: type=1326 audit(1771618297.670:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 428.713622][T15405] vxfs: can't find superblock. [ 428.744417][ T40] audit: type=1326 audit(1771618297.670:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.1.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 428.773836][T15408] wlan1 speed is unknown, defaulting to 1000 [ 429.147164][T15419] wlan1 speed is unknown, defaulting to 1000 [ 429.216892][T15423] MINIX-fs: blocksize too small for device [ 429.611620][T15434] overlay: Unknown parameter 'seclabel' [ 430.680996][T15442] tmpfs: User quota inode hardlimit too large. [ 430.684710][T15445] tmpfs: User quota inode hardlimit too large. [ 431.052800][T15463] overlayfs: overlapping lowerdir path [ 432.938344][T15481] netlink: 'syz.1.2380': attribute type 1 has an invalid length. [ 433.090319][T15486] mkiss: ax0: crc mode is auto. [ 433.169976][T15478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2370'. [ 433.172870][T15478] tipc: Invalid UDP bearer configuration [ 433.172896][T15478] tipc: Enabling of bearer rejected, failed to enable media [ 433.515340][T15510] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2379'. [ 434.450396][T15522] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2386'. [ 434.455855][T15522] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2386'. [ 434.913305][T15532] wlan1 speed is unknown, defaulting to 1000 [ 434.920579][ T5948] Bluetooth: hci4: unexpected event for opcode 0x9f22 [ 435.210641][T15541] binder: 15540:15541 ioctl 84009422 0 returned -22 [ 435.388000][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 435.397131][ T831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 435.398937][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2393'. [ 435.559954][T15576] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 435.563044][T15577] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 435.575832][T15576] bond11: entered promiscuous mode [ 435.578891][T15576] 8021q: adding VLAN 0 to HW filter on device bond11 [ 442.120602][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2402'. [ 443.244160][T15611] hsr_slave_1 (unregistering): left promiscuous mode [ 443.909590][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.096870][ T61] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 444.266841][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 444.276760][ T61] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.281326][ T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.287871][ T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.294529][ T61] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.301416][ T61] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.304367][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.338212][ T5941] Bluetooth: Unexpected continuation frame (len 16) [ 444.381035][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 444.511474][ T61] usb 9-1: GET_CAPABILITIES returned 0 [ 444.515399][ T61] usbtmc 9-1:16.0: can't read capabilities [ 444.683052][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 444.686001][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 444.713029][ T5953] usb 9-1: USB disconnect, device number 10 [ 444.885571][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 444.888711][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 444.938995][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 444.941935][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 445.016400][T15695] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 445.020834][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2421'. [ 445.301151][T15677] Process accounting resumed [ 445.330485][T15699] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 445.557574][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 445.596236][T15711] syzkaller1: entered promiscuous mode [ 445.598173][T15711] syzkaller1: entered allmulticast mode [ 446.288874][T15738] Cannot find del_set index 2 as target [ 446.333228][T15740] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 446.343858][T15740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 447.149619][T15742] Process accounting resumed [ 447.334468][T15765] __nla_validate_parse: 8 callbacks suppressed [ 447.334480][T15765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2439'. [ 447.418440][T15777] tipc: Enabling of bearer rejected, failed to enable media [ 447.437315][T15778] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 447.441055][T15780] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2443'. [ 447.444045][T15781] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2443'. [ 447.448027][T15780] openvswitch: netlink: Flow key attr not present in new flow. [ 447.455906][T15781] openvswitch: netlink: Flow key attr not present in new flow. [ 447.857432][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.863254][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.866305][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.869918][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.872565][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 447.907288][T15795] wlan1 speed is unknown, defaulting to 1000 [ 448.094878][T15795] chnl_net:caif_netlink_parms(): no params data found [ 448.189693][T15795] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.192103][T15795] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.194514][T15795] bridge_slave_0: entered allmulticast mode [ 448.197349][T15795] bridge_slave_0: entered promiscuous mode [ 448.200678][T15795] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.203098][T15795] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.205484][T15795] bridge_slave_1: entered allmulticast mode [ 448.209255][T15795] bridge_slave_1: entered promiscuous mode [ 448.224822][T15795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.232346][T15795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.246909][T15795] team0: Port device team_slave_0 added [ 448.250465][T15795] team0: Port device team_slave_1 added [ 448.267335][T15795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.269681][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.278655][T15795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.283008][T15795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.285553][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.294726][T15795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.318617][T15795] hsr_slave_0: entered promiscuous mode [ 448.320985][T15795] hsr_slave_1: entered promiscuous mode [ 448.390910][T15795] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.394243][T15795] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.454553][T15795] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.459094][T15795] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.514086][T15795] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.517244][T15795] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.570962][T15795] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.574112][T15795] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.169814][ T1143] dvmrp0 (unregistering): left allmulticast mode [ 449.389829][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2450'. [ 449.479116][ T1143] bond7 (unregistering): (slave bridge1): Releasing active interface [ 449.601491][ T1143] bond0 (unregistering): left promiscuous mode [ 449.603764][ T1143] bond0 (unregistering): Released all slaves [ 449.720416][ T1143] bond1 (unregistering): (slave lo): Releasing active interface [ 449.723828][ T1143] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 449.729297][ T1143] bond1 (unregistering): Released all slaves [ 449.875920][ T1143] bond2 (unregistering): Released all slaves [ 449.907731][ T5941] Bluetooth: hci3: command tx timeout [ 449.976228][ T1143] bond3 (unregistering): (slave bond4): Releasing backup interface [ 449.980920][ T1143] bond3 (unregistering): Released all slaves [ 450.066253][ T1143] bond4 (unregistering): Released all slaves [ 450.147470][ T1143] bond5 (unregistering): Released all slaves [ 450.154164][ T1143] bond6 (unregistering): Released all slaves [ 450.160375][ T1143] bond7 (unregistering): Released all slaves [ 450.245046][ T1143] bond8 (unregistering): Released all slaves [ 450.332891][ T1143] bond9 (unregistering): Released all slaves [ 450.417579][ T1143] bond10 (unregistering): Released all slaves [ 450.499235][ T1143] bond11 (unregistering): Released all slaves [ 450.596274][T15816] wlan1 speed is unknown, defaulting to 1000 [ 450.745985][T15795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.768632][T15795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.806234][ T1143] tipc: Left network mode [ 450.806554][T15795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.820878][T15795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 450.888852][T15795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.898250][T15795] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.903390][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.905731][T14517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.913778][T14516] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.916084][T14516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.981722][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2454'. [ 451.026290][T15795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.053444][T15795] veth0_vlan: entered promiscuous mode [ 451.061120][T15795] veth1_vlan: entered promiscuous mode [ 451.075926][T15795] veth0_macvtap: entered promiscuous mode [ 451.082625][T15795] veth1_macvtap: entered promiscuous mode [ 451.093170][T15795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.101971][T15795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.108549][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.111365][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.114103][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.125548][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.160490][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.164435][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.181205][T14517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.184743][T14517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.657439][ T1145] wlan1: Trigger new scan to find an IBSS to join [ 451.986741][ T5941] Bluetooth: hci3: command tx timeout [ 452.434340][T15866] Scaler: ================= START STATUS ================= [ 452.437087][T15866] Scaler: ================== END STATUS ================== [ 452.523685][T15868] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2460'. [ 452.527228][T15868] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 453.182398][T15880] binder: 15879:15880 ioctl c00c620f 800005c0 returned -22 [ 453.566424][T15894] overlayfs: workdir and upperdir must reside under the same mount [ 453.761959][T15897] ntfs3(nullb0): Primary boot signature is not NTFS. [ 453.764429][T15897] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 454.011190][T14523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.014043][T14523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.066816][ T5941] Bluetooth: hci3: command tx timeout [ 454.166833][T15910] overlay: Unknown parameter '/' [ 454.318563][ T1143] batadv0: left promiscuous mode [ 454.328224][ T1143] hsr_slave_0: left promiscuous mode [ 454.343370][ T1143] veth1_macvtap: left promiscuous mode [ 454.346432][ T1143] veth0_macvtap: left promiscuous mode [ 454.349375][ T1143] veth1_vlan: left promiscuous mode [ 454.352017][ T1143] veth0_vlan: left promiscuous mode [ 454.370322][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 454.370332][ T40] audit: type=1326 audit(1771618323.400:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.1.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 454.388549][ T40] audit: type=1326 audit(1771618323.420:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.1.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 455.424453][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2477'. [ 455.478190][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2477'. [ 455.840274][ T40] audit: type=1804 audit(1771618324.870:3596): pid=15946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2478" name="/newroot/6/bus/file0" dev="overlay" ino=61 res=1 errno=0 [ 455.976358][ T1143] IPVS: stop unused estimator thread 0... [ 456.177374][ T5941] Bluetooth: hci3: command tx timeout [ 456.251249][T15959] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 456.255477][T15959] Error validating options; rc = [-22] [ 456.560770][T15940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 456.563558][T15940] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 456.566088][T15940] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 456.572767][T15940] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 456.578067][T15940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 456.580686][T15940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 456.584021][T15940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 456.654867][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'. [ 456.711930][T15974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2488'. [ 456.801857][T15970] binder: 15969:15970 ioctl 0 80000040 returned -22 [ 456.806072][ T9] kernel write not supported for file /input/event1 (pid: 9 comm: kworker/0:0) [ 456.839459][T15987] binder: 15985:15987 ioctl f504 0 returned -22 [ 456.843595][T15987] binder: 15985:15987 ioctl 8933 80000000 returned -22 [ 456.846974][T15987] binder: 15985:15987 ioctl c0286687 80000480 returned -22 [ 456.922008][T15989] wlan1 speed is unknown, defaulting to 1000 [ 457.306207][T15996] autofs4:pid:15996:validate_dev_ioctl: path string terminator missing for cmd(0xc0189379) [ 457.395923][T16001] loop6: detected capacity change from 0 to 2640 [ 457.398952][T16001] buffer_io_error: 336 callbacks suppressed [ 457.398961][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.404008][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.406732][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.409303][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.411861][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.414553][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.417225][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.419810][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.422346][T16001] ldm_validate_partition_table(): Disk read failed. [ 457.424533][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.427387][T16001] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.430050][T16001] Dev loop6: unable to read RDB block 0 [ 457.431969][T16001] loop6: unable to read partition table [ 457.433949][T16001] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 457.674681][T16017] blktrace: Concurrent blktraces are not allowed on sg0 [ 457.896711][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 457.912061][T16026] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2502'. [ 457.952203][T16027] wlan1 speed is unknown, defaulting to 1000 [ 458.043772][T16031] gtp0: entered promiscuous mode [ 458.045424][T16031] gtp0: entered allmulticast mode [ 458.219820][ T5347] ldm_validate_partition_table(): Disk read failed. [ 458.222128][ T5347] Dev loop6: unable to read RDB block 0 [ 458.224100][ T5347] loop6: unable to read partition table [ 458.337263][ T2295] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 458.488424][ T2295] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 458.489454][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 458.492910][ T2295] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 458.497643][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 458.501119][ T2295] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 458.513990][ T2295] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 458.522790][ T2295] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 458.526198][ T2295] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.529682][ T2295] usb 10-1: Product: syz [ 458.531268][ T2295] usb 10-1: Manufacturer: syz [ 458.532777][ T2295] usb 10-1: SerialNumber: syz [ 458.547517][ T2295] usb 10-1: config 0 descriptor?? [ 458.577087][ T9] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 458.616877][ T5948] Bluetooth: hci4: command 0x0405 tx timeout [ 458.618039][T14705] Bluetooth: hci3: command 0x0c1a tx timeout [ 458.731070][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 458.733798][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.744667][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.754582][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 458.759476][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 458.764090][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 458.767323][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.771331][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.774930][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 458.779153][ T2295] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 458.784466][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 458.789896][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 458.793247][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.796610][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.800919][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 458.804433][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 458.811034][ T9] usb 5-1: string descriptor 0 read error: -22 [ 458.813094][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 458.816029][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.831015][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 459.320470][T16049] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 459.322612][T16049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 459.362553][T16054] netlink: 'syz.5.2504': attribute type 1 has an invalid length. [ 459.478708][T16049] vhci_hcd vhci_hcd.0: Device attached [ 459.648430][ T6105] usb 5-1: USB disconnect, device number 38 [ 459.776806][ T24] usb 48-1: SetAddress Request (15) to port 0 [ 459.779414][ T24] usb 48-1: new SuperSpeed USB device number 15 using vhci_hcd [ 460.182222][T16084] BIDI support in bsg has been removed. [ 460.431898][ T40] audit: type=1326 audit(1771618329.460:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16091 comm="syz.0.2519" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cd579 code=0x0 [ 460.505549][T16098] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 460.514715][T16098] CIFS mount error: No usable UNC path provided in device string! [ 460.514715][T16098] [ 460.518448][T16098] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 460.549720][T16100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2521'. [ 460.707057][T14705] Bluetooth: hci3: command 0x0c1a tx timeout [ 460.707091][ T5948] Bluetooth: hci4: command 0x0405 tx timeout [ 461.118756][T16052] vhci_hcd: connection reset by peer [ 461.121323][ T1143] vhci_hcd vhci_hcd.5: stop threads [ 461.121967][ T962] usb 10-1: USB disconnect, device number 15 [ 461.123047][ T1143] vhci_hcd vhci_hcd.5: release socket [ 461.127450][ T1143] vhci_hcd vhci_hcd.5: disconnect device [ 461.299324][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2523'. [ 461.429115][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2526'. [ 461.612420][T16118] binder: 16117:16118 ioctl 0 80000040 returned -22 [ 461.735352][T16130] netlink: 'syz.0.2528': attribute type 10 has an invalid length. [ 461.771513][T16130] team0: Port device netdevsim0 added [ 462.193817][ T40] audit: type=1326 audit(1771618331.220:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.214059][ T40] audit: type=1326 audit(1771618331.220:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.221275][ T40] audit: type=1326 audit(1771618331.230:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.231099][ T40] audit: type=1326 audit(1771618331.230:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.237995][ T40] audit: type=1326 audit(1771618331.230:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.244790][ T40] audit: type=1326 audit(1771618331.230:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.251662][ T40] audit: type=1326 audit(1771618331.230:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.259243][ T40] audit: type=1326 audit(1771618331.230:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.265969][ T40] audit: type=1326 audit(1771618331.230:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 462.394704][T16150] wlan1 speed is unknown, defaulting to 1000 [ 462.452100][T16150] netlink: 'syz.5.2534': attribute type 16 has an invalid length. [ 462.458782][T16150] netlink: 'syz.5.2534': attribute type 17 has an invalid length. [ 462.600838][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 462.746960][T16161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2535'. [ 462.778689][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 462.787085][ T5941] Bluetooth: hci4: command 0x0405 tx timeout [ 463.224722][T16177] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 463.502406][T16189] 9p: Could not find request transport: virt [ 464.291443][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'. [ 464.327263][T16224] loop7: detected capacity change from 0 to 7 [ 464.333980][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.335206][T16228] Bluetooth: MGMT ver 1.23 [ 464.337038][ C0] buffer_io_error: 17458 callbacks suppressed [ 464.337048][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.337576][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.346009][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.352811][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.356046][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.359082][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.362224][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.364960][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.368060][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.370930][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.374026][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.378324][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.381451][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.385253][T15635] ldm_validate_partition_table(): Disk read failed. [ 464.387696][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.390770][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.393594][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.396702][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.435852][T16234] batman_adv: batadv0: Adding interface: vlan3 [ 464.437153][T16230] support for cryptoloop has been removed. Use dm-crypt instead. [ 464.441654][T16234] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.445341][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.450931][T16234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.452599][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 464.453742][T15635] Dev loop7: unable to read RDB block 0 [ 464.456261][T16234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.460124][T15635] loop7: unable to read partition table [ 464.460849][T16234] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 464.463845][T15635] loop7: partition table beyond EOD, truncated [ 464.477899][T16224] ldm_validate_partition_table(): Disk read failed. [ 464.480577][T16224] Dev loop7: unable to read RDB block 0 [ 464.482738][T16224] loop7: unable to read partition table [ 464.484863][T16224] loop7: partition table beyond EOD, truncated [ 464.487377][T16224] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 464.497649][T16222] delete_channel: no stack [ 464.535962][T16240] netlink: 'syz.5.2560': attribute type 3 has an invalid length. [ 464.569270][T16242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.582294][T16242] team0: Unable to change to the same mode the team is in [ 464.586377][T16242] veth0_vlan: left promiscuous mode [ 464.588933][T16242] vlan0: entered promiscuous mode [ 464.590642][T16242] veth0_vlan: entered promiscuous mode [ 464.600501][T16242] team0: Port device vlan0 added [ 464.604808][T16242] tipc: Started in network mode [ 464.606565][T16242] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 464.612129][T16242] tipc: Enabled bearer , priority 0 [ 464.840274][T16249] autofs: Unknown parameter './file1' [ 464.896837][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 464.915260][ T24] usb 48-1: device descriptor read/8, error -110 [ 464.928629][T16243] netlink: 'syz.0.2559': attribute type 12 has an invalid length. [ 465.318525][ T24] usb usb48-port1: attempt power cycle [ 465.586718][T16274] tmpfs: Unknown parameter 'gR­@ ' [ 465.626785][ T54] tipc: Node number set to 11578026 [ 465.752916][T16277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.786333][T16281] overlay: Unknown parameter 'smackfsfloor' [ 465.866981][T16277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.988215][T16277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.104947][T16277] team0: Port device netdevsim0 removed [ 466.112142][T16277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.189515][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2575'. [ 466.278317][ T83] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.335514][ T83] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.348545][ T83] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.355187][ T83] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.376797][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 466.377108][ T5941] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 466.389058][T16299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2574'. [ 466.450991][T16304] ntfs3(sr0): Primary boot signature is not NTFS. [ 466.453263][T16304] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 466.551468][T16306] comedi comedi3: comedi_config --init_data is deprecated [ 466.936755][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 467.107594][ T24] usb usb48-port1: unable to enumerate USB device [ 467.848707][T16368] fuse: Bad value for 'fd' [ 467.922884][T16372] netlink: 'syz.5.2594': attribute type 1 has an invalid length. [ 467.976924][T16374] netlink: 'syz.5.2595': attribute type 1 has an invalid length. [ 468.175547][T16380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2598'. [ 469.183790][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'. [ 469.197794][ T2295] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 469.249855][T16387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 469.252695][T16387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 469.255441][T16387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.359485][ T2295] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.366073][ T2295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.443812][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2604'. [ 469.446165][ T2295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 469.451996][ T2295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.458569][ T2295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.462461][ T2295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.478507][ T2295] usb 5-1: config 0 descriptor?? [ 469.702909][ T2295] plantronics 0003:047F:FFFF.000C: unknown global tag 0xc [ 469.745738][ T2295] plantronics 0003:047F:FFFF.000C: item 0 2 1 12 parsing failed [ 469.771925][ T2295] plantronics 0003:047F:FFFF.000C: parse failed [ 469.774003][ T2295] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 469.797778][ T5953] usb 5-1: USB disconnect, device number 39 [ 469.851419][T16427] Bluetooth: MGMT ver 1.23 [ 469.922346][T16430] binder: 16426:16430 ioctl 0 80000040 returned -22 [ 470.533695][T16437] bridge0: entered allmulticast mode [ 470.564198][T16439] netlink: 184020 bytes leftover after parsing attributes in process `syz.5.2608'. [ 470.626760][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 471.256801][ T5941] Bluetooth: hci4: command 0x0405 tx timeout [ 471.256817][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 471.603997][T16462] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2612'. [ 471.694812][T16463] comedi comedi3: multiq3: I/O port conflict (0x8001,16) [ 472.343695][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2618'. [ 472.347486][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2618'. [ 472.916874][T16490] 9p: Could not find request transport: odevmap [ 473.132671][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 473.132689][ T40] audit: type=1400 audit(1771618342.160:3656): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A04 pid=16492 comm="syz.4.2621" [ 474.056170][T16513] hub 9-0:1.0: USB hub found [ 474.058189][T16513] hub 9-0:1.0: 1 port detected [ 474.263908][T16523] overlay: Unknown parameter 'smackfsfloor' [ 475.015496][T16534] fuse: blksize only supported for fuseblk [ 476.197190][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 476.676807][T16576] nbd0: detected capacity change from 0 to 127 [ 477.352638][ T5948] block nbd0: Receive control failed (result -104) [ 477.530206][T16609] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 477.535511][T16609] cramfs: wrong magic [ 477.544931][T16605] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 477.768893][T16616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 477.815248][T16605] wlan1 speed is unknown, defaulting to 1000 [ 478.109932][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2651'. [ 478.495207][T16621] x_tables: duplicate underflow at hook 1 [ 478.503957][T16621] hub 8-0:1.0: USB hub found [ 478.508271][T16621] hub 8-0:1.0: 1 port detected [ 478.783599][T16631] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 478.786597][T16631] block device autoloading is deprecated and will be removed. [ 479.189344][T16642] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.253536][T16642] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.320306][T16642] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.423873][T16642] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.478894][T16646] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.497079][T16646] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 479.499170][T16646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 479.558090][T16649] openvswitch: netlink: IP tunnel dst address not specified [ 479.608026][T16649] wlan1 speed is unknown, defaulting to 1000 [ 479.711242][T14517] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.854518][T14523] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.857130][ T2295] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 480.008780][ T2295] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 480.011493][ T2295] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 480.023706][T14517] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.028832][ T2295] usb 10-1: config 0 interface 0 has no altsetting 0 [ 480.042827][ T2295] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.045716][ T2295] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 480.067270][T16658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2659'. [ 480.084873][ T2295] usb 10-1: Product: syz [ 480.086460][ T2295] usb 10-1: Manufacturer: syz [ 480.092827][T14517] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.120655][ T2295] usb 10-1: SerialNumber: syz [ 480.163347][ T2295] usb 10-1: config 0 descriptor?? [ 480.168097][ T2295] hub 10-1:0.0: bad descriptor, ignoring hub [ 480.170379][ T2295] hub 10-1:0.0: probe with driver hub failed with error -5 [ 480.174402][ T2295] usb 10-1: selecting invalid altsetting 0 [ 480.379103][ T54] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 480.450913][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 480.538024][ T54] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 480.541701][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 480.545235][ T54] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 480.550268][ T54] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.553221][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.556069][ T54] usb 9-1: Product: syz [ 480.557660][ T54] usb 9-1: Manufacturer: syz [ 480.559387][ T54] usb 9-1: SerialNumber: syz [ 480.562486][ T54] usb 9-1: config 0 descriptor?? [ 480.564810][T16658] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 480.777620][T16671] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 480.853036][T16655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 480.856456][T16672] : renamed from bond_slave_0 (while UP) [ 481.067106][T16652] usb 10-1: reset high-speed USB device number 16 using dummy_hcd [ 481.420395][T16652] usb 10-1: failed to restore interface 0 altsetting 251 (error=-71) [ 481.425908][ T9] usb 10-1: USB disconnect, device number 16 [ 481.497176][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 481.578002][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 481.580023][ T5948] Bluetooth: hci4: command 0x0405 tx timeout [ 481.899156][T16663] netlink: 'syz.5.2660': attribute type 11 has an invalid length. [ 482.616914][ T34] usb 9-1: USB disconnect, device number 11 [ 483.007946][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2670'. [ 483.160391][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2682'. [ 483.225250][T16711] xt_hashlimit: size too large, truncated to 1048576 [ 483.230247][T16711] xt_hashlimit: max too large, truncated to 1048576 [ 483.919320][T16725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2675'. [ 484.059578][T16741] mkiss: ax0: crc mode is auto. [ 484.145154][T16746] netlink: 'syz.5.2684': attribute type 29 has an invalid length. [ 484.148886][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2684'. [ 484.196720][ T34] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 484.348817][ T34] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 484.352567][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 484.355992][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 484.361342][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 484.364096][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.366808][ T34] usb 5-1: Product: syz [ 484.368319][ T34] usb 5-1: Manufacturer: syz [ 484.369891][ T34] usb 5-1: SerialNumber: syz [ 484.379855][ T34] usb 5-1: config 0 descriptor?? [ 484.382178][T16725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 484.637836][T16725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 484.911443][T16755] tmpfs: Bad value for 'mpol' [ 484.911511][T16756] tmpfs: Bad value for 'mpol' [ 485.086312][T16768] binder: 16767:16768 unknown command 0 [ 485.088269][T16768] binder: 16767:16768 ioctl c0306201 80000080 returned -22 [ 485.112030][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2691'. [ 485.343412][T16761] fuse: Bad value for 'user_id' [ 485.351850][T16761] fuse: Bad value for 'user_id' [ 485.359546][ T24] usb 5-1: USB disconnect, device number 40 [ 485.542414][T16798] all: renamed from lo (while UP) [ 485.569383][T16797] 9p: Bad value for 'rfdno' [ 486.237680][T16823] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 486.240370][T16823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.242894][T16823] vhci_hcd vhci_hcd.0: Device attached [ 486.512492][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'. [ 486.537840][ T9] usb 45-1: new low-speed USB device number 8 using vhci_hcd [ 486.667318][T16847] binder: 16844:16847 ioctl 0 80000040 returned -22 [ 486.880133][T16824] vhci_hcd: connection reset by peer [ 486.883294][T11876] vhci_hcd vhci_hcd.4: stop threads [ 486.885051][T11876] vhci_hcd vhci_hcd.4: release socket [ 486.887021][T11876] vhci_hcd vhci_hcd.4: disconnect device [ 487.281251][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2711'. [ 487.363750][T16863] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 487.384427][T16863] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 487.591646][T16878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2717'. [ 487.830635][T16879] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 487.867233][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'. [ 487.910445][T16882] : renamed from bond_slave_0 [ 488.407002][T16888] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2720'. [ 488.410096][T16888] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 488.418062][T16888] 0ªî{X¹¦: entered allmulticast mode [ 488.420822][T16888] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 488.502720][T16896] netlink: 'syz.5.2723': attribute type 1 has an invalid length. [ 488.505185][T16896] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2723'. [ 488.645986][T16899] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2724'. [ 488.650208][T16899] lo: entered promiscuous mode [ 489.089655][ T40] audit: type=1326 audit(1771618358.120:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.197790][ T40] audit: type=1326 audit(1771618358.220:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.204735][ T40] audit: type=1326 audit(1771618358.220:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.214251][ T40] audit: type=1326 audit(1771618358.220:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.224044][ T40] audit: type=1326 audit(1771618358.220:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.233942][T16908] netlink: 'syz.1.2726': attribute type 29 has an invalid length. [ 489.234245][ T40] audit: type=1326 audit(1771618358.220:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.238480][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'. [ 489.247862][ T40] audit: type=1326 audit(1771618358.220:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.260587][ T40] audit: type=1326 audit(1771618358.220:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.276803][ T40] audit: type=1326 audit(1771618358.220:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 489.286021][ T40] audit: type=1326 audit(1771618358.220:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16885 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 490.111570][T16933] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2733'. [ 490.295940][T16940] 9p: Bad value for 'wfdno' [ 490.492586][T16946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2736'. [ 490.501273][T16946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.657118][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 491.795987][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 491.883426][T16976] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 491.887329][T16976] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2744'. [ 492.000205][T16987] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 492.050690][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2748'. [ 492.184431][T16992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2749'. [ 492.188361][T16992] tipc: Invalid UDP bearer configuration [ 492.188406][T16992] tipc: Enabling of bearer rejected, failed to enable media [ 492.203104][T16994] x_tables: duplicate underflow at hook 1 [ 492.206874][T16994] hub 8-0:1.0: USB hub found [ 492.209048][T16994] hub 8-0:1.0: 1 port detected [ 493.537565][T17004] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 493.539649][T17004] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.542286][T17004] vhci_hcd vhci_hcd.0: Device attached [ 493.793176][T17020] __nla_validate_parse: 1 callbacks suppressed [ 493.793194][T17020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2757'. [ 493.812859][ T9] usb 40-1: SetAddress Request (34) to port 0 [ 493.815766][ T9] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 493.968514][T17029] ucma_write: process 1549 (syz.4.2761) changed security contexts after opening file descriptor, this is not allowed. [ 494.178820][T17038] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.217516][T17007] vhci_hcd: connection reset by peer [ 494.226126][T14523] vhci_hcd vhci_hcd.1: stop threads [ 494.228949][T14523] vhci_hcd vhci_hcd.1: release socket [ 494.231133][T14523] vhci_hcd vhci_hcd.1: disconnect device [ 494.351680][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 494.351693][ T40] audit: type=1326 audit(1771618363.380:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.369611][ T40] audit: type=1326 audit(1771618363.380:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.379294][ T40] audit: type=1326 audit(1771618363.380:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.400110][ T40] audit: type=1326 audit(1771618363.380:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.406816][ T40] audit: type=1326 audit(1771618363.380:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.416783][ T40] audit: type=1326 audit(1771618363.380:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.423517][ T40] audit: type=1326 audit(1771618363.380:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.446714][ T40] audit: type=1326 audit(1771618363.380:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.454347][ T40] audit: type=1326 audit(1771618363.380:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.466760][ T40] audit: type=1326 audit(1771618363.450:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17034 comm="syz.4.2762" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 494.603035][T17051] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2765'. [ 494.606297][T17051] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2765'. [ 495.376229][T17085] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 495.378863][T17085] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 495.383307][T17085] vhci_hcd vhci_hcd.0: Device attached [ 495.441892][T17085] wg2 speed is unknown, defaulting to 1000 [ 495.453268][T17085] wg2 speed is unknown, defaulting to 1000 [ 495.459511][T17085] wg2 speed is unknown, defaulting to 1000 [ 495.557266][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 495.617095][ T10] usb 47-1: new full-speed USB device number 5 using vhci_hcd [ 495.668863][ T2295] wg2 speed is unknown, defaulting to 1000 [ 495.672977][T17085] infiniband : set active [ 495.674848][T17085] infiniband : added wg2 [ 495.694223][T17098] mkiss: ax0: crc mode is auto. [ 495.827909][T17103] sctp: [Deprecated]: syz.0.2779 (pid 17103) Use of int in maxseg socket option. [ 495.827909][T17103] Use struct sctp_assoc_value instead [ 495.829727][T17085] RDS/IB: : added [ 495.837088][T17085] smc: adding ib device  with port count 1 [ 495.837850][T17103] xt_limit: Overflow, try lower: 271964/0 [ 495.839052][T17085] smc: ib device  port 1 has no pnetid [ 495.845403][ T2295] wg2 speed is unknown, defaulting to 1000 [ 495.852874][T17085] wg2 speed is unknown, defaulting to 1000 [ 495.865191][T17088] vhci_hcd: connection reset by peer [ 495.871284][T14523] vhci_hcd vhci_hcd.5: stop threads [ 495.873070][T14523] vhci_hcd vhci_hcd.5: release socket [ 495.874976][T14523] vhci_hcd vhci_hcd.5: disconnect device [ 495.879815][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2780'. [ 496.174380][T17085] wg2 speed is unknown, defaulting to 1000 [ 496.338120][T17085] wg2 speed is unknown, defaulting to 1000 [ 496.378671][T17122] syzkaller0: entered promiscuous mode [ 496.380786][T17122] syzkaller0: entered allmulticast mode [ 496.461105][T17085] wg2 speed is unknown, defaulting to 1000 [ 496.796938][T17129] batadv_slave_1: entered promiscuous mode [ 497.236876][T17149] lo speed is unknown, defaulting to 1000 [ 497.238907][T17149] lo speed is unknown, defaulting to 1000 [ 497.241109][T17149] lo speed is unknown, defaulting to 1000 [ 497.248370][T17149] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 497.262707][T17149] lo speed is unknown, defaulting to 1000 [ 497.265421][T17149] lo speed is unknown, defaulting to 1000 [ 497.268523][T17149] lo speed is unknown, defaulting to 1000 [ 497.271220][T17149] lo speed is unknown, defaulting to 1000 [ 497.708730][T17166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2796'. [ 497.756764][T17162] team0: Port device vlan0 removed [ 497.759291][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 497.780344][ T46] tipc: Resetting bearer [ 497.990320][T17189] Invalid source name [ 497.992230][T17189] UBIFS error (pid: 17189): cannot open "./file0", error -22 [ 498.002550][T17191] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2803'. [ 498.184410][T17199] netlink: 'syz.0.2804': attribute type 21 has an invalid length. [ 498.188440][T17199] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.277368][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 498.411058][T17204] mkiss: ax0: crc mode is auto. [ 498.490587][T17207] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 498.857148][ T9] usb 40-1: device descriptor read/8, error -110 [ 498.933013][T17227] ubi31: detaching mtd0 [ 498.969243][T17227] ubi31: mtd0 is detached [ 499.040275][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2812'. [ 499.093730][T17227] bond6 (unregistering): Released all slaves [ 499.246033][T17231] wlan1 speed is unknown, defaulting to 1000 [ 499.252895][T17231] wg2 speed is unknown, defaulting to 1000 [ 499.298270][ T9] usb usb40-port1: attempt power cycle [ 499.342549][T17231] lo speed is unknown, defaulting to 1000 [ 499.803249][T17247] wlan1 speed is unknown, defaulting to 1000 [ 499.813779][T17247] wg2 speed is unknown, defaulting to 1000 [ 499.887444][ T9] usb usb40-port1: unable to enumerate USB device [ 500.136453][T17247] lo speed is unknown, defaulting to 1000 [ 500.230924][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 500.230940][ T40] audit: type=1326 audit(1771618369.260:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17237 comm="syz.0.2815" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 500.767816][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 500.772548][T17264] fuse: Unknown parameter '' [ 500.831640][T17268] overlay: Unknown parameter 'smackfshat' [ 501.542446][T17284] openvswitch: netlink: IP tunnel dst address not specified [ 501.897114][T17278] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 501.899304][T17278] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 501.901793][T17278] vhci_hcd vhci_hcd.0: Device attached [ 502.167374][ T10] usb 48-1: SetAddress Request (19) to port 0 [ 502.169932][ T10] usb 48-1: new SuperSpeed USB device number 19 using vhci_hcd [ 502.189392][T17288] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 502.251303][T11876] vhci_hcd vhci_hcd.5: stop threads [ 502.253221][T11876] vhci_hcd vhci_hcd.5: release socket [ 502.255606][T11876] vhci_hcd vhci_hcd.5: disconnect device [ 502.295425][ T40] audit: type=1326 audit(1771618371.320:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.328860][ T40] audit: type=1326 audit(1771618371.330:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.336886][ T40] audit: type=1326 audit(1771618371.330:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.344130][ T40] audit: type=1326 audit(1771618371.330:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.351150][ T40] audit: type=1326 audit(1771618371.330:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.371690][ T40] audit: type=1326 audit(1771618371.330:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.381141][ T40] audit: type=1326 audit(1771618371.330:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.393399][ T40] audit: type=1326 audit(1771618371.330:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 502.408647][ T40] audit: type=1326 audit(1771618371.330:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 503.136530][T17303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.668482][T17309] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 503.670660][T17309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 503.673604][T17309] vhci_hcd vhci_hcd.0: Device attached [ 503.763551][T17317] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_tx_wq": -EINTR [ 503.938152][ T9] usb 38-1: SetAddress Request (18) to port 0 [ 503.943084][ T9] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 504.043646][T17311] vhci_hcd: connection closed [ 504.044410][T14517] vhci_hcd vhci_hcd.0: stop threads [ 504.048659][T14517] vhci_hcd vhci_hcd.0: release socket [ 504.058037][T14517] vhci_hcd vhci_hcd.0: disconnect device [ 504.213951][T17345] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 504.216103][T17345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 504.221824][T17345] vhci_hcd vhci_hcd.0: Device attached [ 504.263563][T17345] : rxe_newlink: already configured on wg2 [ 504.376840][ T5948] Bluetooth: hci1: command 0x1003 tx timeout [ 504.376912][ T5941] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 504.969900][T17372] qrtr: Invalid version 0 [ 504.972028][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 504.974806][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 505.127466][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'. [ 505.160854][T17346] vhci_hcd: connection closed [ 505.161041][ T1143] vhci_hcd vhci_hcd.5: stop threads [ 505.164770][ T1143] vhci_hcd vhci_hcd.5: release socket [ 505.168240][ T1143] vhci_hcd vhci_hcd.5: disconnect device [ 505.338922][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.583874][T17394] ip6_vti0: entered promiscuous mode [ 506.074781][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2856'. [ 506.807659][T17435] bond2: (slave bond_slave_1): Device is not bonding slave [ 506.810067][T17435] bond2: option active_slave: invalid value (bond_slave_1) [ 506.827801][T17435] bond2 (unregistering): Released all slaves [ 506.900167][T17439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 506.902961][T17439] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 506.920900][T17439] vhci_hcd vhci_hcd.0: Device attached [ 507.039192][T17444] rdma_rxe: rxe_newlink: failed to add wg2 [ 507.283588][T17458] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 507.288040][ T10] usb 48-1: device descriptor read/8, error -110 [ 507.330571][ T68] block nbd0: Possible stuck request ffff888026960000: control (read@0,1024B). Runtime 30 seconds [ 507.341791][ T68] block nbd0: Possible stuck request ffff888026960200: control (read@1024,1024B). Runtime 30 seconds [ 507.346379][ T68] block nbd0: Possible stuck request ffff888026960400: control (read@2048,1024B). Runtime 30 seconds [ 507.351110][ T68] block nbd0: Possible stuck request ffff888026960600: control (read@3072,1024B). Runtime 30 seconds [ 507.374809][T17460] @0Ù: renamed from bond_slave_1 [ 507.381700][T17456] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 507.619207][T17460] sp0: Synchronizing with TNC [ 507.649646][T17460] sp0: Found TNC [ 507.758381][ T10] usb usb48-port1: attempt power cycle [ 508.318309][ T10] usb usb48-port1: unable to enumerate USB device [ 508.429357][T17440] vhci_hcd: connection reset by peer [ 508.429363][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2868'. [ 508.434072][ T1145] vhci_hcd vhci_hcd.0: stop threads [ 508.435692][ T1145] vhci_hcd vhci_hcd.0: release socket [ 508.437863][ T1145] vhci_hcd vhci_hcd.0: disconnect device [ 508.452622][T17470] syz_tun: entered allmulticast mode [ 508.464919][T17470] dvmrp6: entered allmulticast mode [ 508.604852][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 508.604870][ T40] audit: type=1326 audit(1771618377.630:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.626822][ T40] audit: type=1326 audit(1771618377.630:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.635463][ T40] audit: type=1326 audit(1771618377.640:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.657016][ T40] audit: type=1326 audit(1771618377.640:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.665912][ T40] audit: type=1326 audit(1771618377.640:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.682966][ T40] audit: type=1326 audit(1771618377.640:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.690597][ T40] audit: type=1326 audit(1771618377.640:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.697682][ T40] audit: type=1326 audit(1771618377.640:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.716763][ T40] audit: type=1326 audit(1771618377.640:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 508.723672][ T40] audit: type=1326 audit(1771618377.640:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.1.2871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 509.016834][ T5948] Bluetooth: hci1: command 0x1003 tx timeout [ 509.022169][ T5941] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 509.097378][ T9] usb 38-1: device descriptor read/8, error -110 [ 509.489199][ T9] usb usb38-port1: attempt power cycle [ 509.793753][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 509.952572][T17512] siw: device registration error -23 [ 510.058128][ T9] usb usb38-port1: unable to enumerate USB device [ 510.276829][ T6105] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 510.438613][ T6105] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 510.443113][ T6105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.447842][ T6105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.451731][ T6105] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 510.457179][ T6105] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 510.460395][ T6105] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 510.463058][ T6105] usb 5-1: Manufacturer: syz [ 510.468019][ T6105] usb 5-1: config 0 descriptor?? [ 510.884224][ T6105] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 510.894551][ T6105] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 511.038804][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2888'. [ 511.114281][T17544] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 511.152881][ T6105] usb 5-1: USB disconnect, device number 41 [ 511.318551][T17554] ceph: No mds server is up or the cluster is laggy [ 512.452985][T17586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 512.455095][T17586] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 512.458478][T17586] vhci_hcd vhci_hcd.0: Device attached [ 512.555012][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 512.727581][ T6105] usb 46-1: SetAddress Request (10) to port 0 [ 512.729584][ T6105] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 513.190380][T17588] vhci_hcd: connection reset by peer [ 513.196980][T14523] vhci_hcd vhci_hcd.4: stop threads [ 513.198706][T14523] vhci_hcd vhci_hcd.4: release socket [ 513.205406][T14523] vhci_hcd vhci_hcd.4: disconnect device [ 513.224875][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 513.666341][T17602] Process accounting resumed [ 513.842423][T17651] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 513.842513][T17650] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 513.919191][T17651] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 513.971928][T17654] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2915'. [ 514.015425][T17656] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 514.017617][T17656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 514.024795][T17656] vhci_hcd vhci_hcd.0: Device attached [ 514.028910][T17657] vhci_hcd: connection closed [ 514.032519][T14517] vhci_hcd vhci_hcd.4: stop threads [ 514.035717][T14517] vhci_hcd vhci_hcd.4: release socket [ 514.038941][T14517] vhci_hcd vhci_hcd.4: disconnect device [ 517.000793][T17703] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 517.005202][T17703] Error validating options; rc = [-22] [ 517.087198][T17706] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 517.089325][T17706] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 517.092116][T17706] vhci_hcd vhci_hcd.0: Device attached [ 517.095331][T17706] random: crng reseeded on system resumption [ 517.376813][ T24] usb 48-1: SetAddress Request (23) to port 0 [ 517.379627][ T24] usb 48-1: new SuperSpeed USB device number 23 using vhci_hcd [ 517.426894][ T5953] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 517.501898][T17707] vhci_hcd: connection reset by peer [ 517.504509][T11877] vhci_hcd vhci_hcd.5: stop threads [ 517.507088][T11877] vhci_hcd vhci_hcd.5: release socket [ 517.509479][T11877] vhci_hcd vhci_hcd.5: disconnect device [ 517.596742][ T5953] usb 9-1: Using ep0 maxpacket: 16 [ 517.609666][ T5953] usb 9-1: config 1 has an invalid interface number: 1 but max is 0 [ 517.612161][ T5953] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.615255][ T5953] usb 9-1: config 1 has no interface number 0 [ 517.619875][ T5953] usb 9-1: config 1 interface 1 has no altsetting 0 [ 517.623851][ T5953] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 517.626834][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.629311][ T5953] usb 9-1: Product: syz [ 517.630636][ T5953] usb 9-1: Manufacturer: syz [ 517.632152][ T5953] usb 9-1: SerialNumber: syz [ 517.683132][T17710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2928'. [ 517.816787][ T6105] usb 46-1: device descriptor read/8, error -110 [ 517.988160][T17726] program syz.0.2933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.210564][ T6105] usb usb46-port1: attempt power cycle [ 518.787281][ T6105] usb usb46-port1: unable to enumerate USB device [ 519.589146][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2938'. [ 519.619407][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2938'. [ 519.730457][ T54] usb 9-1: USB disconnect, device number 12 [ 519.758944][T17748] team0: Port device team_slave_0 removed [ 519.761598][T17748] team0: Port device team_slave_1 removed [ 519.763567][T17748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 519.771495][T17748] team0: Mode changed to "activebackup" [ 519.774285][T17748] vlan0: entered promiscuous mode [ 519.778061][T17748] tipc: Enabled bearer , priority 0 [ 520.567163][ T2295] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 520.717127][ T2295] usb 9-1: Using ep0 maxpacket: 16 [ 520.720385][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 520.725293][ T2295] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 520.728581][ T2295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.731148][ T2295] usb 9-1: Product: syz [ 520.732715][ T2295] usb 9-1: Manufacturer: syz [ 520.734580][ T2295] usb 9-1: SerialNumber: syz [ 520.737448][ T2295] usb 9-1: config 0 descriptor?? [ 520.743222][ T2295] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 520.746312][ T2295] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 521.002643][T17798] trusted_key: encrypted_key: insufficient parameters specified [ 521.247883][T17809] input: syz0 as /devices/virtual/input/input36 [ 521.322801][T17810] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 521.343275][ T2295] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 522.086795][T17816] nvme_fabrics: missing parameter 'transport=%s' [ 522.093477][T17816] nvme_fabrics: missing parameter 'nqn=%s' [ 522.231572][ T2295] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 522.238543][ T2295] em28xx 9-1:0.0: board has no eeprom [ 522.307154][ T2295] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 522.326053][ T2295] em28xx 9-1:0.0: dvb set to bulk mode. [ 522.328375][ T9] em28xx 9-1:0.0: Binding DVB extension [ 522.351459][ T2295] usb 9-1: USB disconnect, device number 13 [ 522.358360][ T2295] em28xx 9-1:0.0: Disconnecting em28xx [ 522.368704][ T9] em28xx 9-1:0.0: Registering input extension [ 522.370839][ T2295] em28xx 9-1:0.0: Closing input extension [ 522.391503][ T2295] em28xx 9-1:0.0: Freeing device [ 522.466798][ T24] usb 48-1: device descriptor read/8, error -110 [ 522.499604][T17842] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2961'. [ 522.502542][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2961'. [ 522.887433][ T24] usb usb48-port1: attempt power cycle [ 523.236169][T17872] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2971'. [ 523.482218][ T24] usb usb48-port1: unable to enumerate USB device [ 523.819615][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 523.840467][ T5941] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 524.364586][T17912] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 524.366911][T17912] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 524.370019][T17910] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 524.372219][T17910] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 524.393040][T17912] vhci_hcd vhci_hcd.0: Device attached [ 524.400400][T17910] vhci_hcd vhci_hcd.0: Device attached [ 524.485507][T17926] set match dimension is over the limit! [ 524.556991][T17919] vhci_hcd: connection closed [ 524.557110][T17920] vhci_hcd: connection closed [ 524.566242][T14517] vhci_hcd vhci_hcd.1: stop threads [ 524.577211][T14517] vhci_hcd vhci_hcd.1: release socket [ 524.579666][T14517] vhci_hcd vhci_hcd.1: disconnect device [ 524.582443][T14517] vhci_hcd vhci_hcd.1: stop threads [ 524.584664][T14517] vhci_hcd vhci_hcd.1: release socket [ 524.588319][T14517] vhci_hcd vhci_hcd.1: disconnect device [ 524.749304][T17936] wlan1 speed is unknown, defaulting to 1000 [ 524.752000][T17936] wg2 speed is unknown, defaulting to 1000 [ 524.840895][T17936] lo speed is unknown, defaulting to 1000 [ 525.217097][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 525.377757][ T9] usb 9-1: too many configurations: 112, using maximum allowed: 8 [ 525.381559][ T9] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 525.384107][ T9] usb 9-1: can't read configurations, error -61 [ 525.507223][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 525.657635][ T9] usb 9-1: too many configurations: 112, using maximum allowed: 8 [ 525.670951][ T9] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 525.674074][ T9] usb 9-1: can't read configurations, error -61 [ 525.687248][ T9] usb usb9-port1: attempt power cycle [ 526.027274][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 526.049139][ T9] usb 9-1: too many configurations: 112, using maximum allowed: 8 [ 526.053283][ T9] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 526.055752][ T9] usb 9-1: can't read configurations, error -61 [ 526.187323][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 526.208061][ T9] usb 9-1: too many configurations: 112, using maximum allowed: 8 [ 526.211818][ T9] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 526.214387][ T9] usb 9-1: can't read configurations, error -61 [ 526.218333][ T9] usb usb9-port1: unable to enumerate USB device [ 527.678077][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 527.963342][T17959] siw: device registration error -23 [ 528.037243][T17961] (syz.4.2995,17961,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 528.040502][T17961] (syz.4.2995,17961,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 528.043794][T17961] (syz.4.2995,17961,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 528.047488][T17961] (syz.4.2995,17961,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 528.219000][T17967] wlan1 speed is unknown, defaulting to 1000 [ 528.222262][T17967] wg2 speed is unknown, defaulting to 1000 [ 528.228144][T17966] wlan1 speed is unknown, defaulting to 1000 [ 528.299352][T17967] lo speed is unknown, defaulting to 1000 [ 528.299770][T17966] wg2 speed is unknown, defaulting to 1000 [ 528.413363][T17966] lo speed is unknown, defaulting to 1000 [ 529.060236][T17980] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 529.271205][T17990] 9p: Bad value for 'rfdno' [ 529.537386][T17996] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 529.539490][T17996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 529.542392][T17996] vhci_hcd vhci_hcd.0: Device attached [ 529.816989][ T24] usb 46-1: SetAddress Request (14) to port 0 [ 529.819540][ T24] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 530.140400][T17997] vhci_hcd: connection reset by peer [ 530.142341][T14520] vhci_hcd vhci_hcd.4: stop threads [ 530.144359][T14520] vhci_hcd vhci_hcd.4: release socket [ 530.147462][T14520] vhci_hcd vhci_hcd.4: disconnect device [ 530.714185][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'. [ 530.726252][T18011] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3008'. [ 530.951971][T18027] /dev/sg0: Can't lookup blockdev [ 531.624986][T18042] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3017'. [ 531.699060][T18042] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3017'. [ 531.702884][T18042] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3017'. [ 531.706448][T18042] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3017'. [ 531.961603][T18056] wlan1 speed is unknown, defaulting to 1000 [ 531.965951][T18056] wg2 speed is unknown, defaulting to 1000 [ 531.981576][T18061] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3021'. [ 531.992489][T18062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3020'. [ 532.068336][T18069] wlan1 speed is unknown, defaulting to 1000 [ 532.073408][T18069] wg2 speed is unknown, defaulting to 1000 [ 532.077479][T18056] lo speed is unknown, defaulting to 1000 [ 532.187940][T18069] lo speed is unknown, defaulting to 1000 [ 533.117422][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 533.117436][ T40] audit: type=1326 audit(1771618402.120:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.396285][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.400755][ T40] audit: type=1326 audit(1771618402.130:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.420030][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.425888][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.427144][ T40] audit: type=1326 audit(1771618402.130:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.430093][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.434742][ T40] audit: type=1326 audit(1771618402.130:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.434773][ T40] audit: type=1326 audit(1771618402.130:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.438477][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.488737][T18097] wlan1 speed is unknown, defaulting to 1000 [ 533.491401][T18097] wg2 speed is unknown, defaulting to 1000 [ 533.556880][ T40] audit: type=1326 audit(1771618402.130:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf717572b code=0x7ffc0000 [ 533.564268][ T40] audit: type=1326 audit(1771618402.130:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.571853][ T40] audit: type=1326 audit(1771618402.130:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.578842][ T40] audit: type=1326 audit(1771618402.130:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.585478][ T40] audit: type=1326 audit(1771618402.130:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 533.613931][T18097] lo speed is unknown, defaulting to 1000 [ 533.672944][T18092] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 533.708542][T18097] chnl_net:caif_netlink_parms(): no params data found [ 534.125651][T18114] ip6gre1: entered promiscuous mode [ 534.127467][T18114] ip6gre1: entered allmulticast mode [ 534.137957][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.141269][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.280438][T18097] bridge_slave_0: entered allmulticast mode [ 534.287845][T18097] bridge_slave_0: entered promiscuous mode [ 534.298048][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.308051][T18097] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.314307][T18097] bridge_slave_1: entered allmulticast mode [ 534.317459][T18097] bridge_slave_1: entered promiscuous mode [ 534.332725][T18097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.337305][T18097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.351816][T18097] team0: Port device team_slave_0 added [ 534.354955][T18097] team0: Port device team_slave_1 added [ 534.368148][T18097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.370443][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.378945][T18097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.383298][T18097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.385471][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.394163][T18097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.409526][T18120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3036'. [ 534.418086][T18097] hsr_slave_0: entered promiscuous mode [ 534.420426][T18097] hsr_slave_1: entered promiscuous mode [ 534.422499][T18097] debugfs: 'hsr0' already exists in 'hsr' [ 534.424333][T18097] Cannot create hsr debugfs directory [ 534.533846][T18097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.538022][T18097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.542490][T18097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.546590][T18097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 534.568024][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.570452][T18097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.572875][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.575350][T18097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.604426][T18097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.612563][T11877] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.615933][T11877] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.629611][T18097] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.659488][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.661832][T11877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.672286][T14520] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.675247][T14520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.703319][T18097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.706948][T18097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.790692][T18158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3040'. [ 534.815292][T18097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.976071][T18097] veth0_vlan: entered promiscuous mode [ 534.984294][T18097] veth1_vlan: entered promiscuous mode [ 535.008865][T18097] veth0_macvtap: entered promiscuous mode [ 535.013071][T18097] veth1_macvtap: entered promiscuous mode [ 535.024215][T18097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.030673][T18097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.042436][T14515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.045997][T14515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.057738][T14515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.062860][T14515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.106854][ T24] usb 46-1: device descriptor read/8, error -110 [ 535.143625][T14520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.146312][T14520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.155388][T14520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.158839][T14520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.597158][ T5941] Bluetooth: hci1: command tx timeout [ 535.610503][ T24] usb usb46-port1: attempt power cycle [ 535.953004][T18171] overlayfs: failed to resolve './file0': -2 [ 536.248589][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3031'. [ 536.709603][ T24] usb usb46-port1: unable to enumerate USB device [ 536.828998][T18209] bond2: option arp_validate: invalid value (2048) [ 536.839525][T18209] bond2 (unregistering): Released all slaves [ 537.015840][T18230] syzkaller0: entered promiscuous mode [ 537.017812][T18230] syzkaller0: entered allmulticast mode [ 537.290667][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3056'. [ 538.007325][ T68] block nbd0: Possible stuck request ffff888026960000: control (read@0,1024B). Runtime 60 seconds [ 538.010702][ T68] block nbd0: Possible stuck request ffff888026960200: control (read@1024,1024B). Runtime 60 seconds [ 538.014108][ T68] block nbd0: Possible stuck request ffff888026960400: control (read@2048,1024B). Runtime 60 seconds [ 538.017682][ T68] block nbd0: Possible stuck request ffff888026960600: control (read@3072,1024B). Runtime 60 seconds [ 538.152385][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 538.155371][T18281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3063'. [ 538.277141][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3065'. [ 538.359077][T18289] macvlan0: entered promiscuous mode [ 538.363190][T18289] netlink: 'syz.6.3067': attribute type 1 has an invalid length. [ 538.365658][T18289] netlink: 'syz.6.3067': attribute type 2 has an invalid length. [ 539.386334][T18319] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 539.706158][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 539.706220][ T40] audit: type=1326 audit(1771618408.730:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.5.3082" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742d579 code=0x0 [ 540.503545][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 540.911081][ T6020] IPVS: starting estimator thread 0... [ 541.018391][ T5941] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 541.021881][ T5941] Bluetooth: hci1: Injecting HCI hardware error event [ 541.026292][ T5941] Bluetooth: hci1: hardware error 0x00 [ 541.029971][T18372] IPVS: using max 45 ests per chain, 108000 per kthread [ 541.256668][T18346] comedi comedi2: reset error (fatal) [ 541.261080][T18348] comedi comedi3: aio_aio12_8: I/O port conflict (0x4f27,32) [ 541.520046][T18402] syzkaller1: entered promiscuous mode [ 541.521781][T18402] syzkaller1: entered allmulticast mode [ 541.959965][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3105'. [ 541.994077][T18436] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3106'. [ 541.994077][T18435] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3106'. [ 542.099572][T18441] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3109'. [ 542.189388][ T40] audit: type=1326 audit(1771618411.220:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.198951][ T40] audit: type=1326 audit(1771618411.220:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.206496][ T40] audit: type=1326 audit(1771618411.220:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.213826][ T40] audit: type=1326 audit(1771618411.220:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.222009][ T40] audit: type=1326 audit(1771618411.220:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.230262][ T40] audit: type=1326 audit(1771618411.220:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.244273][ T40] audit: type=1326 audit(1771618411.220:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.252923][ T40] audit: type=1326 audit(1771618411.220:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.309253][ T40] audit: type=1326 audit(1771618411.220:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.5.3111" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 542.342993][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.345914][T18456] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.401363][T14705] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 542.739904][T18464] [U]  [ 543.097103][ T5941] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 543.550327][T18478] pim6reg: entered allmulticast mode [ 543.559264][T18476] pim6reg: left allmulticast mode [ 544.384305][ T5948] Bluetooth: hci4: command 0x0405 tx timeout [ 544.459126][ T5948] ------------[ cut here ]------------ [ 544.461945][ T5948] refcnt < 0 [ 544.461958][ T5948] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u33:7/5948 [ 544.468382][ T5948] Modules linked in: [ 544.470312][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.474050][ T5948] Tainted: [L]=SOFTLOCKUP [ 544.475436][ T5948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 544.479050][ T5948] Workqueue: hci4 hci_conn_timeout [ 544.480867][ T5948] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 544.482730][ T5948] Code: 44 0f b6 2d 43 02 44 06 31 ff 41 83 e5 40 44 89 ee e8 3a 3b 97 f7 45 84 ed 0f 84 02 ff ff ff e9 fc 2f 02 f7 e8 d7 40 97 f7 90 <0f> 0b 90 e8 ce 40 97 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 544.489291][ T5948] RSP: 0000:ffffc900047c7bb0 EFLAGS: 00010293 [ 544.491260][ T5948] RAX: 0000000000000000 RBX: ffff888076520a40 RCX: ffffffff8a6f0c8f [ 544.493944][ T5948] RDX: ffff8880270324c0 RSI: ffffffff8a6f0d89 RDI: ffff8880270324c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 544.496452][ T5948] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 544.499469][ T5948] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888076520000 [ 544.501957][ T5948] R13: ffff888027032944 R14: 0000000000000000 R15: ffff888052fb3000 [ 544.504481][ T5948] FS: 0000000000000000(0000) GS:ffff8880973e2000(0000) knlGS:0000000000000000 [ 544.507720][ T5948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.509959][ T5948] CR2: 00000000f4b8dff4 CR3: 000000004e4ad000 CR4: 0000000000352ef0 [ 544.512590][ T5948] Call Trace: [ 544.514023][ T5948] [ 544.514981][ T5948] process_one_work+0x9c2/0x1840 [ 544.517212][ T5948] ? __pfx_process_one_work+0x10/0x10 [ 544.519467][ T5948] ? assign_work+0x19c/0x250 [ 544.521146][ T5948] worker_thread+0x5da/0xe40 [ 544.522666][ T5948] ? kthread+0x17d/0x730 [ 544.524018][ T5948] ? __pfx_worker_thread+0x10/0x10 [ 544.525633][ T5948] kthread+0x3b3/0x730 [ 544.527399][ T5948] ? __pfx_kthread+0x10/0x10 [ 544.528886][ T5948] ? ret_from_fork+0x79/0xaf0 [ 544.530375][ T5948] ? ret_from_fork+0x79/0xaf0 [ 544.531874][ T5948] ? rcu_is_watching+0x12/0xc0 [ 544.533416][ T5948] ? __pfx_kthread+0x10/0x10 [ 544.534897][ T5948] ret_from_fork+0x754/0xaf0 [ 544.536391][ T5948] ? __pfx_ret_from_fork+0x10/0x10 [ 544.538416][ T5948] ? __switch_to+0x7b9/0x10c0 [ 544.539943][ T5948] ? __pfx_kthread+0x10/0x10 [ 544.541426][ T5948] ret_from_fork_asm+0x1a/0x30 [ 544.543014][ T5948] [ 544.544012][ T5948] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.546390][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.550321][ T5948] Tainted: [L]=SOFTLOCKUP [ 544.551793][ T5948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 544.554937][ T5948] Workqueue: hci4 hci_conn_timeout [ 544.556586][ T5948] Call Trace: [ 544.557699][ T5948] [ 544.558649][ T5948] dump_stack_lvl+0x100/0x190 [ 544.560144][ T5948] vpanic+0x20d/0x630 [ 544.561411][ T5948] panic+0xd1/0xd1 [ 544.562664][ T5948] ? __pfx_panic+0x10/0x10 [ 544.564134][ T5948] ? check_panic_on_warn+0x1f/0x90 [ 544.565876][ T5948] check_panic_on_warn.cold+0x19/0x34 [ 544.567598][ T5948] ? hci_conn_timeout+0x16a/0x230 [ 544.569196][ T5948] __warn.cold+0x191/0x2f8 [ 544.570781][ T5948] __report_bug+0x296/0x3d0 [ 544.572645][ T5948] ? hci_conn_timeout+0x16a/0x230 [ 544.574570][ T5948] ? __pfx___report_bug+0x10/0x10 [ 544.576433][ T5948] ? look_up_lock_class+0x55/0x120 [ 544.578113][ T5948] ? register_lock_class+0x40/0x560 [ 544.579772][ T5948] ? do_raw_spin_lock+0x128/0x260 [ 544.581430][ T5948] ? hci_conn_timeout+0x16a/0x230 [ 544.583322][ T5948] report_bug+0xb2/0x220 [ 544.584690][ T5948] ? hci_conn_timeout+0x16a/0x230 [ 544.586280][ T5948] handle_bug+0x166/0x2a0 [ 544.587694][ T5948] exc_invalid_op+0x17/0x50 [ 544.589130][ T5948] asm_exc_invalid_op+0x1a/0x20 [ 544.590667][ T5948] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 544.592578][ T5948] Code: 44 0f b6 2d 43 02 44 06 31 ff 41 83 e5 40 44 89 ee e8 3a 3b 97 f7 45 84 ed 0f 84 02 ff ff ff e9 fc 2f 02 f7 e8 d7 40 97 f7 90 <0f> 0b 90 e8 ce 40 97 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 544.599351][ T5948] RSP: 0000:ffffc900047c7bb0 EFLAGS: 00010293 [ 544.601234][ T5948] RAX: 0000000000000000 RBX: ffff888076520a40 RCX: ffffffff8a6f0c8f [ 544.603876][ T5948] RDX: ffff8880270324c0 RSI: ffffffff8a6f0d89 RDI: ffff8880270324c0 [ 544.606978][ T5948] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 544.609471][ T5948] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888076520000 [ 544.611964][ T5948] R13: ffff888027032944 R14: 0000000000000000 R15: ffff888052fb3000 [ 544.614509][ T5948] ? hci_conn_timeout+0x6f/0x230 [ 544.616108][ T5948] ? hci_conn_timeout+0x169/0x230 [ 544.617729][ T5948] process_one_work+0x9c2/0x1840 [ 544.619303][ T5948] ? __pfx_process_one_work+0x10/0x10 [ 544.621010][ T5948] ? assign_work+0x19c/0x250 [ 544.622560][ T5948] worker_thread+0x5da/0xe40 [ 544.624516][ T5948] ? kthread+0x17d/0x730 [ 544.626343][ T5948] ? __pfx_worker_thread+0x10/0x10 [ 544.628526][ T5948] kthread+0x3b3/0x730 [ 544.630278][ T5948] ? __pfx_kthread+0x10/0x10 [ 544.632265][ T5948] ? ret_from_fork+0x79/0xaf0 [ 544.634251][ T5948] ? ret_from_fork+0x79/0xaf0 [ 544.636262][ T5948] ? rcu_is_watching+0x12/0xc0 [ 544.637860][ T5948] ? __pfx_kthread+0x10/0x10 [ 544.639324][ T5948] ret_from_fork+0x754/0xaf0 [ 544.640809][ T5948] ? __pfx_ret_from_fork+0x10/0x10 [ 544.642548][ T5948] ? __switch_to+0x7b9/0x10c0 [ 544.644380][ T5948] ? __pfx_kthread+0x10/0x10 [ 544.646184][ T5948] ret_from_fork_asm+0x1a/0x30 [ 544.648031][ T5948] [ 544.650042][ T5948] Kernel Offset: disabled [ 544.651808][ T5948] Rebooting in 86400 seconds..