last executing test programs: 18m51.697440889s ago: executing program 3 (id=101): r0 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001700)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x2d8, 0x210, 0x2d8, 0xfeffffff, 0xffffffff, 0x3fc, 0x3fc, 0x3fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5}, {0x3, 0x2}, {0x0, 0x5, 0x1}, 0x5, 0x4}}}, {{@ipv6={@local, @local, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xff], 'veth1_vlan\x00', 'vxcan1\x00', {0xff}, {}, 0x2e, 0x4, 0x3, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @private1, [0x0, 0xffffffff, 0xff000000], [0x0, 0xffffff00, 0x0, 0xff000000], 'bridge0\x00', 'wg2\x00', {}, {0xff}, 0x6c, 0x0, 0x4, 0x22}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x4, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xffffffff, 0xffffffff, 0xffffff00], 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0xab, 0x4, 0x2, 0xfffffffa, 0x10001}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000001680)={0x2, 0x6a, 0x5, 0x3, 0x5, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x800007, 0x2, 0x83, 0x5, 0x0, 0x5, 0x0, 0x1, 0x3, 0x1000000, 0x80000001, 0x0, 0x40005, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$tipc(0x1e, 0x5, 0x0) 18m46.414449147s ago: executing program 3 (id=110): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfffffffffffffe4e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0x241, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 18m41.956184512s ago: executing program 3 (id=117): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 18m37.303049972s ago: executing program 3 (id=121): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfe}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b07, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[{0x20, 0x84, 0x8, "fe8000000000000002"}], 0x20}, 0x41) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x3554000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x164841, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) 18m30.757243408s ago: executing program 3 (id=131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) write$bt_hci(r1, 0x0, 0xa) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x0) 18m28.024174546s ago: executing program 3 (id=135): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) gettid() r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x13, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x8, 0x7fffffff, 0x20002000, 0x24, 0x4, 0x1, 0x0, [0x6e, 0x7]}}) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 18m11.942604551s ago: executing program 32 (id=135): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) gettid() r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x13, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x8, 0x7fffffff, 0x20002000, 0x24, 0x4, 0x1, 0x0, [0x6e, 0x7]}}) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 16m19.244045976s ago: executing program 2 (id=318): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r5, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 16m17.892626848s ago: executing program 2 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}}, 0x0}, 0x94) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) pipe2$watch_queue(0x0, 0x80) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r6, 0x0, 0x40080) r7 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r7, 0x0, 0x4ffe6, 0x0) 16m13.096011893s ago: executing program 2 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, 0x0, 0x0, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m8.759328738s ago: executing program 2 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) syz_open_dev$ptys(0xc, 0x3, 0x1) 16m5.224404065s ago: executing program 2 (id=340): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x9, 0x7, 0x4, 0x80000001, 0x7, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12061, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) 16m1.096903537s ago: executing program 2 (id=344): add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000640)="9b7a07b7a2a1bbafc02ade62f92c7a99dddfc0d1028e2609868886a19f50f33acf004d6cba63d58d8f52359aa08a923e85a2a4ebfc94efd69710135754325503b28efc5af0be55fcbbd293ca1d70e7e37bb90e29b805979fd0f698db3932a3dc87a44079d7ecf3326d10b932070eda6ce12ad78ae8006a7a60d333d8", 0x7c, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000001280)=0x10001) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x0) 15m44.777312051s ago: executing program 33 (id=344): add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000640)="9b7a07b7a2a1bbafc02ade62f92c7a99dddfc0d1028e2609868886a19f50f33acf004d6cba63d58d8f52359aa08a923e85a2a4ebfc94efd69710135754325503b28efc5af0be55fcbbd293ca1d70e7e37bb90e29b805979fd0f698db3932a3dc87a44079d7ecf3326d10b932070eda6ce12ad78ae8006a7a60d333d8", 0x7c, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000001280)=0x10001) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x0) 13m22.483184509s ago: executing program 5 (id=597): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x9, 0x2, 0x0, [0xb37, 0x3b2e, 0x7, 0x1, 0x9, 0x7bc3, 0x8f2e, 0x2e]}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x113602) 13m21.425358772s ago: executing program 5 (id=600): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r4 = socket(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f00000001c0)=0x1, 0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0xfffffffd, 0x1, 0x40000001, 0x0, 0x6, 0x2}) 13m17.10080196s ago: executing program 5 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000060000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000020080000f8ffffffbfa40000", @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) shmget$private(0x0, 0x14000, 0x100, &(0x7f000075e000/0x14000)=nil) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bb71bbbbbbbbaaaaaaaaaaaa08060001081c0e040002aaaaaaaaaaaaac1414bb0180c2000000ac1414bb918ff4483ed284e6684f370313d3e2d5d3e4a9c039782e"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x2d8, 0x1b8, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xff], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r6, 0x891d, &(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) 13m13.934489992s ago: executing program 5 (id=609): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xb, 0x1, 0x56555941, 0x5, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) connect$llc(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0x82f5, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) 13m7.332279468s ago: executing program 5 (id=618): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', &(0x7f0000000380)=@ethtool_stats={0x1d, 0x1, [0x7]}}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) close(r3) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000002580)=""/4106, 0x100a}], 0x2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYBLOB="4800000000000000240012800b000100"], 0x44}}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) socket$pptp(0x18, 0x1, 0x2) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3fffff) bind$netlink(r6, 0x0, 0x0) 13m1.805006144s ago: executing program 5 (id=628): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x53d040) dup3(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xff, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000380)='G') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 12m46.136886172s ago: executing program 34 (id=628): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x53d040) dup3(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xff, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000380)='G') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 11.609459958s ago: executing program 4 (id=2531): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000104355470000000000000109022400010000a00009040000010300000009210500080122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 9.252692156s ago: executing program 4 (id=2542): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8003, &(0x7f0000000280)=ANY=[], 0x47, 0xc43, &(0x7f0000004300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) pivot_root(&(0x7f0000001300)='./cgroup\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) lstat(&(0x7f0000000740)='./file2\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1, 0x20, 0x2}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) write$FUSE_STATX(r2, &(0x7f0000000440)={0x130, 0x0, 0x0, {0x10001, 0x4b, 0x0, '\x00', {0x7ff, 0x4, 0x3, 0x5, 0x0, 0x0, 0xc000, '\x00', 0x3835, 0xfff, 0xd, 0x9, {0x3, 0x4}, {0x800080, 0x4}, {0x1e361e02, 0xfffffffc}, {0x8, 0x80000000}, 0xfffffffa, 0xaca, 0x7, 0x8}}}, 0x130) 9.140886027s ago: executing program 1 (id=2543): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041cf700c900"], 0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r0, 0x2, &(0x7f00000000c0)=[0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 8.785977007s ago: executing program 4 (id=2545): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 7.481168324s ago: executing program 4 (id=2547): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) syz_io_uring_setup(0x47a8, &(0x7f0000000480)={0x0, 0x46b4, 0x2, 0xffffffff, 0x333}, 0x0, 0x0) 7.246071104s ago: executing program 4 (id=2549): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0022220000009328337167b31ce93ee977000000007bb1120b3fb3b9585dde850d8518b3"], 0x0}, 0x0) 7.064172703s ago: executing program 1 (id=2550): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x6, 0x1000, 0x0, 0x0}, {0xffff, 0x1, 0x1a, &(0x7f0000000140)="3c5fe788a89bd0ca9f384d2088326935851693b8af7d624d8c36"}], 0x2}) 6.672066006s ago: executing program 4 (id=2556): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(0x0, 0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(0x0, 0x2, &(0x7f00000000c0)=[0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 6.152896158s ago: executing program 6 (id=2561): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 5.965959816s ago: executing program 6 (id=2563): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.761646842s ago: executing program 6 (id=2565): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041cf700c900"], 0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r0, 0x2, &(0x7f00000000c0)=[0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 5.63673078s ago: executing program 1 (id=2566): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000001700)={0x14, &(0x7f0000001600)=ANY=[@ANYBLOB="530606"], 0x0}, 0x0) 5.236194072s ago: executing program 0 (id=2567): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x204818, &(0x7f0000000080)={[{@map_normal}, {@check_strict}, {@cruft}, {@cruft}, {@unhide}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@unhide}]}, 0xff, 0x54b, &(0x7f00000003c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) 4.81572139s ago: executing program 0 (id=2568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c009afa05000100000000000800074000000000"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108b000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 4.359611743s ago: executing program 0 (id=2570): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8003, &(0x7f0000000280)=ANY=[], 0x47, 0xc43, &(0x7f0000004300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) pivot_root(&(0x7f0000001300)='./cgroup\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX=r4, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8=r4], 0x81, 0x14f5, &(0x7f0000001580)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) lstat(&(0x7f0000000740)='./file2\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x242, 0x161) write$tcp_mem(r5, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1, 0x20, 0x2}, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) write$FUSE_STATX(r6, &(0x7f0000000440)={0x130, 0x0, 0x0, {0x10001, 0x4b, 0x0, '\x00', {0x7ff, 0x4, 0x3, 0x5, 0x0, 0x0, 0xc000, '\x00', 0x3835, 0xfff, 0xd, 0x9, {0x3, 0x4}, {0x800080, 0x4}, {0x1e361e02, 0xfffffffc}, {0x8, 0x80000000}, 0xfffffffa, 0xaca, 0x7, 0x8}}}, 0x130) 4.072229304s ago: executing program 0 (id=2572): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000008000a"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 3.974771557s ago: executing program 6 (id=2573): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x24, 0x2, {0x2, 0x1}}, 0x0}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 3.650719462s ago: executing program 0 (id=2576): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="09000000010002", 0x7) 3.509602148s ago: executing program 0 (id=2578): chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabd407db97ae70800fad0330e78ebed6410b1460e002c0064000007069078ac141436ac1e0101014402004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50146071907800e7"], 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 3.233700591s ago: executing program 6 (id=2580): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404"], 0x0) 3.231446161s ago: executing program 1 (id=2581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108b000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 2.166388909s ago: executing program 7 (id=2582): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80200000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x85) 2.061200431s ago: executing program 1 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xfb827ab984038ea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0) recvmmsg(r6, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r8, 0x5453, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c7401, 0x98) ioctl$PPPIOCGIDLE64(r9, 0x8010743f, &(0x7f0000000140)) 2.031461826s ago: executing program 7 (id=2584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108b000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.846616165s ago: executing program 7 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000002c0)={0x3, 0x8000, 0xfffffffb, 0x6}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 704.65732ms ago: executing program 7 (id=2586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}]}, 0x38}, 0x2, 0x34005}, 0x0) 405.313159ms ago: executing program 1 (id=2587): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c009afa05000100000000000800074000000000"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108b000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 404.950069ms ago: executing program 7 (id=2588): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='?\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) 200.006554ms ago: executing program 7 (id=2589): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x22, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 0s ago: executing program 6 (id=2590): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) fchown(r0, 0x0, 0xee01) kernel console output (not intermixed with test programs): : command 0x040f tx timeout [ 608.462226][ T8869] device hsr_slave_0 entered promiscuous mode [ 608.481692][ T8869] device hsr_slave_1 entered promiscuous mode [ 608.492642][ T8869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.504122][ T8869] Cannot create hsr debugfs directory [ 609.227418][ T8869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 609.237188][ T8869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 609.248436][ T8869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 609.258786][ T8869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 609.337237][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.355480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.364437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.381344][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.403088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.414202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.423080][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.430267][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.448745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.457433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.466589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.475464][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.482675][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.492628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 609.501743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 609.510891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 609.520578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 609.539923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 609.547752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 609.557005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 609.566657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 609.575595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.584433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 609.592974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.606206][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 609.927341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.941275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.961564][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.997346][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.007296][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.069795][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.085841][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.095638][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.110554][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.123831][ T8869] device veth0_vlan entered promiscuous mode [ 610.137766][ T8869] device veth1_vlan entered promiscuous mode [ 610.164865][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 610.178964][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 610.187415][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.206808][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.222582][ T8869] device veth0_macvtap entered promiscuous mode [ 610.239295][ T8869] device veth1_macvtap entered promiscuous mode [ 610.264775][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.283894][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.295906][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.310262][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.321689][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.332822][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.343702][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.354446][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.366277][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.376944][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.385877][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.400774][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.410187][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.421400][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.432263][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.442152][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.453358][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.463374][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.473951][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.484439][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.495406][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.506985][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.518189][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 610.518862][ T8869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.533380][ T8869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.546774][ T8869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.556295][ T8869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.572433][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.581588][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.663388][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.687688][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.716112][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.731697][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.742998][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.755925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 612.268143][ T8995] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 613.888036][ T26] audit: type=1326 audit(1773080108.969:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 616.178664][ T26] audit: type=1326 audit(1773080108.969:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 616.421423][ T26] audit: type=1326 audit(1773080108.969:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 616.761023][ T26] audit: type=1326 audit(1773080108.969:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 617.868390][ T26] audit: type=1326 audit(1773080108.969:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 617.974566][ T26] audit: type=1326 audit(1773080108.969:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 618.040648][ T26] audit: type=1326 audit(1773080108.969:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 618.094210][ T26] audit: type=1326 audit(1773080108.969:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 618.309889][ T26] audit: type=1326 audit(1773080108.969:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 618.524176][ T26] audit: type=1326 audit(1773080108.969:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b1b9c799 code=0x7ffc0000 [ 621.938124][ T9060] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 623.759526][ T9073] zonefs (nullb0) ERROR: Not a zoned block device [ 623.940996][ T9073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.363191][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.380011][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.406011][ T9077] netlink: 'syz.0.810': attribute type 10 has an invalid length. [ 624.414134][ T9077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.810'. [ 624.512566][ T9077] batman_adv: batadv0: Adding interface: vlan1 [ 624.518970][ T9077] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.544773][ T9077] batman_adv: batadv0: Interface activated: vlan1 [ 625.358494][ T9084] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 625.366857][ T9084] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 625.375400][ T9084] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 628.988543][ T4283] Bluetooth: hci5: command 0x1003 tx timeout [ 629.023413][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 635.178550][ T9139] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 637.045284][ T4338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.366547][ T4338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.560013][ T4338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.904691][ T4338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.475923][ T9201] binder_alloc: 9196: binder_alloc_buf, no vma [ 644.679824][ T9203] vivid-000: kernel_thread() failed [ 646.098333][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 646.108728][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 646.118761][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 646.126458][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 646.136126][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 646.777358][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 648.235232][ T9230] IPVS: length: 528 != 8 [ 648.828135][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 650.202842][ T9214] chnl_net:caif_netlink_parms(): no params data found [ 650.908799][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 651.881883][ T9] Bluetooth: hci5: Frame reassembly failed (-90) [ 652.231573][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.255440][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.289095][ T9214] device bridge_slave_0 entered promiscuous mode [ 652.319051][ T9267] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 652.319326][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.327313][ T9267] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 652.342933][ T9267] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 652.368073][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.416558][ T9214] device bridge_slave_1 entered promiscuous mode [ 652.988062][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 653.847027][ T9214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.941356][ T4338] device hsr_slave_0 left promiscuous mode [ 653.957715][ T4338] device hsr_slave_1 left promiscuous mode [ 653.964177][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 654.001722][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 654.725606][ T4338] batman_adv: batadv0: Removing interface: dummy0 [ 654.767639][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.820335][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.844285][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.019776][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.272922][ T9296] Error parsing options; rc = [-22] [ 655.333194][ T9299] loop7: detected capacity change from 0 to 64 [ 655.583411][ T9288] Bluetooth: hci3: command 0x0419 tx timeout [ 655.992682][ T4338] device veth1_macvtap left promiscuous mode [ 656.002251][ T4338] device veth0_macvtap left promiscuous mode [ 656.108165][ T4338] device veth1_vlan left promiscuous mode [ 656.118945][ T4338] device veth0_vlan left promiscuous mode [ 657.914692][ T4338] bond1 (unregistering): Released all slaves [ 660.503490][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 660.578628][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 660.654247][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.733861][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.313055][ T4338] bond0 (unregistering): Released all slaves [ 661.370537][ T9214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.412683][ T9214] team0: Port device team_slave_0 added [ 661.421367][ T9214] team0: Port device team_slave_1 added [ 661.510970][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.543153][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.610816][ T9214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.630230][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.637358][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.672619][ T9214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.921016][ T9338] loop7: detected capacity change from 0 to 2048 [ 662.830139][ T9338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.282739][ T9214] device hsr_slave_0 entered promiscuous mode [ 663.374170][ T9214] device hsr_slave_1 entered promiscuous mode [ 664.344030][ T9214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.446226][ T9214] Cannot create hsr debugfs directory [ 664.551653][ T9360] serio: Serial port ptm0 [ 665.733489][ T9370] xt_TPROXY: Can be used only with -p tcp or -p udp [ 667.797646][ T9214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 667.890023][ T9214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 667.904618][ T9214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 668.170805][ T9214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 668.878362][ T9401] zonefs (nullb0) ERROR: Not a zoned block device [ 668.908933][ T9401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.158453][ T9419] vivid-002: kernel_thread() failed [ 671.544839][ T9214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.020099][ T9214] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.059368][ T9214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.070275][ T9214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 672.135510][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 672.154837][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.178994][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 672.908025][ T9288] Bluetooth: hci4: command 0x0406 tx timeout [ 673.435520][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.444056][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.451179][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.465753][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 673.475510][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.484316][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.491511][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.499919][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 673.509242][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 673.537007][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.557152][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.586921][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.609945][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.638614][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.659666][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.673672][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.812969][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.047508][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.056361][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 674.070607][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 674.219308][ T9454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 675.212375][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 675.212456][ T26] audit: type=1326 audit(1773080170.399:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 675.290777][ T26] audit: type=1326 audit(1773080170.399:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 675.313735][ T26] audit: type=1326 audit(1773080170.399:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 675.339183][ T26] audit: type=1326 audit(1773080170.399:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 675.463637][ T26] audit: type=1326 audit(1773080170.399:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 675.694319][ T26] audit: type=1326 audit(1773080170.399:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 675.775626][ T26] audit: type=1326 audit(1773080170.399:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 675.821140][ T26] audit: type=1326 audit(1773080170.399:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 676.152243][ T26] audit: type=1326 audit(1773080170.409:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 676.207961][ T26] audit: type=1326 audit(1773080170.419:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 677.140544][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.883'. [ 678.019666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 678.032957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 678.146639][ T9214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.400909][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 681.505281][ T9508] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 681.534031][ T9508] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 685.849362][ T9551] xt_TPROXY: Can be used only with -p tcp or -p udp [ 686.340581][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.364122][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.107634][ T9563] syz.1.895 (9563): drop_caches: 2 [ 688.723512][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 688.756333][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.325693][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 689.445053][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.469630][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.477711][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 689.493383][ T9214] device veth0_vlan entered promiscuous mode [ 689.566702][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.899'. [ 690.184995][ T9214] device veth1_vlan entered promiscuous mode [ 690.459042][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.482964][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.605504][ T9595] loop7: detected capacity change from 0 to 256 [ 690.958758][ T9214] device veth0_macvtap entered promiscuous mode [ 691.755082][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 691.996207][ T9605] exFAT-fs (loop7): hint_cluster is invalid (17) [ 692.194140][ T9214] device veth1_macvtap entered promiscuous mode [ 692.264784][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.373152][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.440377][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.482351][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.495500][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.525090][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.565895][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.582899][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.642144][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.689950][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.725402][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.180503][ T9617] xt_TPROXY: Can be used only with -p tcp or -p udp [ 693.501437][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.512036][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.522298][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.533021][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.543560][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.554765][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.578696][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.598478][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.617274][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.714454][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 693.743537][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 694.248316][ T9214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.744469][ T9214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.220770][ T9214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.229743][ T9214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.253324][ T9636] tc_dump_action: action bad kind [ 696.704205][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.737877][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.975962][ T9657] zonefs (nullb0) ERROR: Not a zoned block device [ 697.620898][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 702.644208][ T9699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 704.218214][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.368298][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.384606][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.410286][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.436559][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 704.444735][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.208924][ T9726] xt_cgroup: path and classid specified [ 706.559401][ T9288] Bluetooth: hci5: command 0x0409 tx timeout [ 706.820814][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.465086][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.588071][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 708.895914][ T9759] binder: 9752:9759 ioctl c0306201 200000000780 returned -11 [ 708.918824][ T9759] virtio-fs: tag not found [ 710.461773][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.254342][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 712.398544][ T9788] binder_alloc: 9782: binder_alloc_buf, no vma [ 712.728641][ T9785] vivid-003: kernel_thread() failed [ 713.018216][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.308144][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 713.325458][ T9706] chnl_net:caif_netlink_parms(): no params data found [ 713.443030][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.451065][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.463795][ T9706] device bridge_slave_0 entered promiscuous mode [ 713.472671][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.480024][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.488605][ T9706] device bridge_slave_1 entered promiscuous mode [ 713.589611][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.681684][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.829119][ T9706] team0: Port device team_slave_0 added [ 713.870181][ T9706] team0: Port device team_slave_1 added [ 714.067419][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.105267][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.246454][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.033850][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.042484][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.077986][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.281723][ T9706] device hsr_slave_0 entered promiscuous mode [ 715.424426][ T9706] device hsr_slave_1 entered promiscuous mode [ 716.280439][ T9706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.379078][ T9807] delete_channel: no stack [ 716.789428][ T9706] Cannot create hsr debugfs directory [ 723.039105][ T9877] binder_alloc: 9865: binder_alloc_buf, no vma [ 723.148731][ T9869] vivid-003: kernel_thread() failed [ 723.368702][ T9878] netlink: 76 bytes leftover after parsing attributes in process `syz.6.948'. [ 727.384581][ T46] device hsr_slave_0 left promiscuous mode [ 727.448156][ T46] device hsr_slave_1 left promiscuous mode [ 727.508507][ T9914] block device autoloading is deprecated and will be removed. [ 727.558863][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.581209][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.465885][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.497202][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.528699][ T46] device bridge_slave_1 left promiscuous mode [ 728.535010][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.681434][ T46] device bridge_slave_0 left promiscuous mode [ 728.689099][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.831590][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 729.610587][ T46] device veth1_macvtap left promiscuous mode [ 729.618026][ T46] device veth0_macvtap left promiscuous mode [ 729.624336][ T46] device veth1_vlan left promiscuous mode [ 729.631336][ T46] device veth0_vlan left promiscuous mode [ 730.867706][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.6.958'. [ 730.922022][ T9935] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 732.975835][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.960'. [ 733.569904][ T9951] ubi31: attaching mtd0 [ 733.730171][ T9951] ubi31: scanning is finished [ 733.735055][ T9951] ubi31: empty MTD device detected [ 734.149120][ T9951] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 734.156718][ T9951] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 734.164145][ T9951] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 734.171288][ T9951] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 734.184645][ T9951] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 734.191564][ T9951] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 734.199652][ T9951] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1264235140 [ 734.209734][ T9951] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 734.288189][ T9953] ubi31: background thread "ubi_bgt31d" started, PID 9953 [ 734.507163][ T9957] netlink: 76 bytes leftover after parsing attributes in process `syz.7.963'. [ 735.666501][ T46] team0 (unregistering): Port device team_slave_1 removed [ 735.745120][ T46] team0 (unregistering): Port device team_slave_0 removed [ 735.808009][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.867501][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.322144][ T46] bond0 (unregistering): Released all slaves [ 738.663046][ T9989] device wireguard1 entered promiscuous mode [ 738.730927][ T9706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.919011][ T9706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 739.761203][ T9706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 739.772379][ T9706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 739.984812][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.297261][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 741.455794][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 741.495151][ T9706] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.304280][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 742.315637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.325471][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.332624][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.347468][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.367045][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.385630][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.392940][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.451270][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 742.460734][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.498702][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.518886][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 743.376826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 743.387259][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 743.402462][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 743.412289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 743.436284][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 743.486575][T10030] syz.7.974 (10030): drop_caches: 2 [ 743.500929][T10035] comedi comedi0: Minor 2147483647 is invalid! [ 743.559491][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 743.905954][ T9706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.278151][ T9288] Bluetooth: hci1: command 0x0406 tx timeout [ 745.150672][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 746.297486][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 746.307914][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 746.409238][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 747.238285][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.245982][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.248015][T10078] lo speed is unknown, defaulting to 1000 [ 749.253895][T10078] lo speed is unknown, defaulting to 1000 [ 749.260006][T10078] lo speed is unknown, defaulting to 1000 [ 749.269533][T10078] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 749.282794][T10078] lo speed is unknown, defaulting to 1000 [ 749.289161][T10078] lo speed is unknown, defaulting to 1000 [ 749.295398][T10078] lo speed is unknown, defaulting to 1000 [ 749.302220][T10078] lo speed is unknown, defaulting to 1000 [ 749.308973][T10078] lo speed is unknown, defaulting to 1000 [ 749.980187][T10078] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 750.252642][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.276122][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.424584][T10087] vim2m vim2m.0: vidioc_s_fmt queue busy [ 751.545105][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.969289][T10096] autofs4:pid:10096:autofs_fill_super: called with bogus options [ 757.218843][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.994'. [ 757.229860][T10123] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 757.583172][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 757.689455][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 758.069148][T10131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 759.156496][T10147] xt_cgroup: path and classid specified [ 759.219672][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 762.577371][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.593159][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.603488][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.613734][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.626097][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 762.633733][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.736406][T10166] lo speed is unknown, defaulting to 1000 [ 763.426552][T10166] chnl_net:caif_netlink_parms(): no params data found [ 763.662698][T10178] netlink: 4508 bytes leftover after parsing attributes in process `syz.7.999'. [ 763.846955][T10166] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.864107][T10166] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.879936][T10166] device bridge_slave_0 entered promiscuous mode [ 763.929175][T10166] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.936588][T10166] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.954965][T10166] device bridge_slave_1 entered promiscuous mode [ 764.003949][T10166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.017666][T10166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.090081][T10166] team0: Port device team_slave_0 added [ 764.103442][T10166] team0: Port device team_slave_1 added [ 764.161331][T10166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.175102][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.209845][T10166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.266074][T10166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.282112][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.310282][T10166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.399047][T10166] device hsr_slave_0 entered promiscuous mode [ 764.406048][T10166] device hsr_slave_1 entered promiscuous mode [ 764.414786][T10166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.422548][T10166] Cannot create hsr debugfs directory [ 764.553995][ T6504] device hsr_slave_0 left promiscuous mode [ 764.561326][ T6504] device hsr_slave_1 left promiscuous mode [ 764.568145][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.576225][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.585243][ T6504] device bridge_slave_1 left promiscuous mode [ 764.593466][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.606830][ T6504] device bridge_slave_0 left promiscuous mode [ 764.614545][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.667985][ T9288] Bluetooth: hci3: command 0x0409 tx timeout [ 765.077736][ T6504] team0 (unregistering): Port device team_slave_1 removed [ 765.170234][ T6504] team0 (unregistering): Port device team_slave_0 removed [ 765.268577][ T6504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.336020][ T6504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.743161][ T6504] bond0 (unregistering): Released all slaves [ 766.595107][T10166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 766.611421][T10166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 766.625755][T10166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 766.638928][T10166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 766.736968][T10166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.748229][ T9288] Bluetooth: hci3: command 0x041b tx timeout [ 766.764337][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 766.773197][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 766.787264][T10166] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.801730][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 766.814229][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 766.823633][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.830813][ T4970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.846984][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 766.857835][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 766.866860][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 766.876179][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.883372][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.891881][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 766.910276][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 766.919518][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 766.929385][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 766.938505][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 766.953446][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 766.963335][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 766.980052][T10166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.992387][T10166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.008040][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 767.016387][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 767.029064][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 767.037543][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 767.046205][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 767.263170][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 767.274658][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 767.289161][T10166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.720954][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 767.742418][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 767.766937][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 767.777539][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 767.799946][T10166] device veth0_vlan entered promiscuous mode [ 767.814763][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 767.823380][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 767.841528][T10166] device veth1_vlan entered promiscuous mode [ 767.881018][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 767.895643][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 767.906619][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 767.920973][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 767.934372][T10166] device veth0_macvtap entered promiscuous mode [ 767.946833][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 767.961673][T10166] device veth1_macvtap entered promiscuous mode [ 767.986626][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.002857][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.013144][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.024101][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.034616][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.045919][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.061226][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.072182][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.083947][T10166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.095234][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 768.111075][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 768.124133][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.135323][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.145453][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.161888][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.173433][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.187938][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.198682][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.209694][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.221338][T10166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.235603][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 768.247038][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 768.265005][T10166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.274810][T10166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.284250][T10166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.293311][T10166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.374379][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.392739][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.413732][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 768.434538][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.446715][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.463087][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 768.828238][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 769.070635][T10260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.827'. [ 769.364191][T10261] orangefs_mount: mount request failed with -4 [ 769.899264][T10288] virtio-fs: tag not found [ 774.471126][T10292] ptrace attach of "./syz-executor exec"[4269] was attempted by " [ 776.758555][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 776.865310][T10295] lo speed is unknown, defaulting to 1000 [ 777.588788][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.594885][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.601420][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.614424][T10314] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 777.818463][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.825874][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.832931][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.839984][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.847068][T10314] wlan0 speed is unknown, defaulting to 1000 [ 777.854160][T10314] wlan0 speed is unknown, defaulting to 1000 [ 778.054938][T10305] /dev/nullb0: Can't open blockdev [ 778.182328][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 778.182627][ T26] audit: type=1326 audit(1773080273.499:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.7.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 778.234674][ T26] audit: type=1326 audit(1773080273.509:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.7.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 778.260190][T10321] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1009'. [ 778.656666][ T26] audit: type=1326 audit(1773080273.509:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.7.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 779.709392][ T26] audit: type=1326 audit(1773080273.509:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.7.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 779.792306][ T26] audit: type=1326 audit(1773080273.509:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.7.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08ab9c799 code=0x7ffc0000 [ 779.896888][T10321] device gretap0 entered promiscuous mode [ 780.726721][T10331] bridge0: port 3(syz_tun) entered blocking state [ 780.735026][T10331] bridge0: port 3(syz_tun) entered disabled state [ 780.742689][T10331] device syz_tun entered promiscuous mode [ 780.748970][T10331] bridge0: port 3(syz_tun) entered blocking state [ 780.755457][T10331] bridge0: port 3(syz_tun) entered forwarding state [ 784.819481][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1020'. [ 785.791969][T10368] lo speed is unknown, defaulting to 1000 [ 785.798747][T10368] wlan0 speed is unknown, defaulting to 1000 [ 789.227078][T10411] fuse: Bad value for 'fd' [ 789.956707][T10420] xt_TPROXY: Can be used only with -p tcp or -p udp [ 790.924892][T10438] binder: 10428:10438 ioctl c0306201 200000000780 returned -11 [ 790.955182][T10438] virtio-fs: tag not found [ 791.842601][T10433] lo speed is unknown, defaulting to 1000 [ 791.848866][T10433] wlan0 speed is unknown, defaulting to 1000 [ 793.544410][T10454] netlink: 'syz.4.1041': attribute type 4 has an invalid length. [ 794.218177][T10463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.391890][T10463] bond0: (slave rose0): Enslaving as an active interface with an up link [ 795.539663][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 796.306398][T10500] fuse: Bad value for 'fd' [ 796.579008][ T4683] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 796.977897][ T4683] usb 2-1: Using ep0 maxpacket: 16 [ 796.993887][ T4683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.057001][ T4683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.078076][ T4683] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 797.085949][T10509] fuse: Bad value for 'fd' [ 797.087152][ T4683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.115386][ T4683] usb 2-1: config 0 descriptor?? [ 797.825190][ T4683] hid (null): bogus close delimiter [ 799.083859][ T4683] wacom 0003:056A:0084.0001: bogus close delimiter [ 799.091384][ T4683] wacom 0003:056A:0084.0001: item 0 4 2 10 parsing failed [ 799.100708][ T4683] wacom 0003:056A:0084.0001: parse failed [ 799.106812][ T4683] wacom: probe of 0003:056A:0084.0001 failed with error -22 [ 799.352027][ T4318] usb 2-1: USB disconnect, device number 5 [ 800.335769][T10531] lo speed is unknown, defaulting to 1000 [ 800.342107][T10531] wlan0 speed is unknown, defaulting to 1000 [ 800.393286][T10533] comedi comedi3: Buffer allocation failed [ 800.697287][T10539] device syzkaller1 entered promiscuous mode [ 802.842799][T10558] vivid-007: ================= START STATUS ================= [ 802.850898][T10558] vivid-007: Enable Output Cropping: true [ 802.857548][T10558] vivid-007: Enable Output Composing: true [ 802.863647][T10558] vivid-007: Enable Output Scaler: true [ 802.869542][T10558] vivid-007: Tx RGB Quantization Range: Automatic [ 802.876307][T10558] vivid-007: Transmit Mode: HDMI [ 802.881756][T10558] vivid-007: Display Present: true inactive [ 802.887966][T10558] vivid-007: Hotplug Present: 0x00000001 [ 802.893889][T10558] vivid-007: RxSense Present: 0x00000001 [ 802.899941][T10558] vivid-007: EDID Present: 0x00000001 [ 802.905761][T10558] vivid-007: ================== END STATUS ================== [ 806.454894][T10596] fuse: Bad value for 'fd' [ 807.686456][T10613] loop4: detected capacity change from 0 to 512 [ 807.826631][T10616] lo speed is unknown, defaulting to 1000 [ 807.833292][T10616] wlan0 speed is unknown, defaulting to 1000 [ 808.069160][T10613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 808.129664][T10613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 808.219277][T10613] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1071: invalid indirect mapped block 4294967295 (level 1) [ 808.255113][T10613] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1071: invalid indirect mapped block 4294967295 (level 1) [ 808.276801][T10613] EXT4-fs (loop4): 2 truncates cleaned up [ 808.285181][T10613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 808.675917][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.683489][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.969322][T10631] EXT4-fs error (device loop4): ext4_get_parent:1906: inode #11: comm syz.4.1071: bad parent inode number: 3 [ 811.092545][T10166] EXT4-fs (loop4): unmounting filesystem. [ 811.314838][T10639] fuse: Bad value for 'fd' [ 813.399303][T10646] netlink: 'syz.6.1076': attribute type 4 has an invalid length. [ 813.719118][T10660] netlink: 'syz.6.1076': attribute type 4 has an invalid length. [ 813.744060][T10646] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1076'. [ 816.410893][T10693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 823.323900][T10753] loop4: detected capacity change from 0 to 32768 [ 823.349578][T10753] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 823.358235][T10753] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 824.288068][T10766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 826.953144][T10796] xt_socket: unknown flags 0x4 [ 828.531983][T10816] fuse: Bad value for 'fd' [ 830.272825][T10828] Bluetooth: MGMT ver 1.22 [ 831.127841][T10829] tmpfs: Unknown parameter 'grpquota/#/msr' [ 836.983497][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1128'. [ 837.006193][T10897] No such timeout policy "syz1" [ 843.158740][T10934] loop4: detected capacity change from 0 to 2048 [ 843.352433][T10934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 843.361266][T10934] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.801010][T10166] EXT4-fs (loop4): unmounting filesystem. [ 849.637846][ T4684] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 849.881279][ T4684] usb 7-1: no configurations [ 849.886244][ T4684] usb 7-1: can't read configurations, error -22 [ 850.850742][ T4684] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 851.091109][ T4684] usb 7-1: no configurations [ 851.096092][ T4684] usb 7-1: can't read configurations, error -22 [ 851.386533][ T4684] usb usb7-port1: attempt power cycle [ 854.147655][T11024] ubi: mtd0 is already attached to ubi31 [ 861.614290][T11085] overlayfs: missing 'lowerdir' [ 867.853816][T11129] 9p: Unknown Cache mode readahead [ 870.480156][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.871637][T11145] lo speed is unknown, defaulting to 1000 [ 870.878047][T11145] wlan0 speed is unknown, defaulting to 1000 [ 871.109630][T11154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.333737][T11156] xt_NFQUEUE: number of total queues is 0 [ 872.510712][T11156] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1187'. [ 872.561475][T11166] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 872.577465][T11164] IPVS: stopping master sync thread 11166 ... [ 873.489378][T11169] loop4: detected capacity change from 0 to 16 [ 874.433429][T11169] erofs: (device loop4): mounted with root inode @ nid 36. [ 874.885348][ T4288] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 875.185141][ T26] audit: type=1800 audit(1773080370.509:421): pid=11169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1188" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 877.597027][T11185] netlink: 'syz.7.1193': attribute type 10 has an invalid length. [ 877.618159][T11185] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1193'. [ 877.632896][T11185] device bond0 entered promiscuous mode [ 877.928295][T11185] device bond_slave_0 entered promiscuous mode [ 877.935079][T11185] device bond_slave_1 entered promiscuous mode [ 878.161180][T11185] bridge0: port 3(bond0) entered blocking state [ 878.168719][T11185] bridge0: port 3(bond0) entered disabled state [ 878.185351][T11185] bridge0: port 3(bond0) entered blocking state [ 878.191837][T11185] bridge0: port 3(bond0) entered forwarding state [ 878.557363][T11203] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1197'. [ 879.108857][T11207] netlink: 'syz.6.1197': attribute type 5 has an invalid length. [ 879.222058][T11207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 879.295558][T11207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 879.667985][T11207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 879.890178][T11210] lo speed is unknown, defaulting to 1000 [ 879.896500][T11210] wlan0 speed is unknown, defaulting to 1000 [ 881.207078][T11229] loop4: detected capacity change from 0 to 512 [ 881.214212][T11229] EXT4-fs: Ignoring removed nobh option [ 881.269027][T11229] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 881.333190][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1204'. [ 886.343548][T11249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 887.634600][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 891.865920][T11309] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1219'. [ 893.687244][T11336] binder: 11331:11336 ioctl c0306201 0 returned -14 [ 899.076082][T11392] netlink: 'syz.6.1240': attribute type 4 has an invalid length. [ 899.719501][T11393] netlink: 'syz.6.1240': attribute type 4 has an invalid length. [ 899.784435][T11409] fuse: Bad value for 'fd' [ 901.605604][ T26] audit: type=1326 audit(1773080395.629:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a699c799 code=0x7ffc0000 [ 902.113462][ T26] audit: type=1326 audit(1773080395.629:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a699c799 code=0x7ffc0000 [ 902.162806][ T26] audit: type=1326 audit(1773080395.629:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a699c799 code=0x7ffc0000 [ 902.357610][ T26] audit: type=1326 audit(1773080395.629:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a699c799 code=0x7ffc0000 [ 902.507856][ T26] audit: type=1326 audit(1773080395.729:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc0a699c799 code=0x7ffc0000 [ 902.643020][ T26] audit: type=1326 audit(1773080395.749:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0a699c502 code=0x7ffc0000 [ 902.777938][ T4684] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 902.957558][T11428] lo speed is unknown, defaulting to 1000 [ 902.963837][T11428] wlan0 speed is unknown, defaulting to 1000 [ 903.116601][ T26] audit: type=1326 audit(1773080395.749:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0a699c502 code=0x7ffc0000 [ 903.327874][ T4684] usb 7-1: Using ep0 maxpacket: 8 [ 903.335429][ T4684] usb 7-1: unable to get BOS descriptor or descriptor too short [ 903.525540][ T4684] usb 7-1: config 245 has an invalid interface number: 221 but max is 0 [ 903.534843][ T4684] usb 7-1: config 245 has no interface number 0 [ 903.543082][ T4684] usb 7-1: config 245 interface 221 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 903.554893][ T4684] usb 7-1: config 245 interface 221 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 903.566361][ T4684] usb 7-1: config 245 interface 221 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 903.579780][ T4684] usb 7-1: config 245 interface 221 has no altsetting 0 [ 903.596177][ T4684] usb 7-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=b2.28 [ 903.605624][ T4684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.115403][ T26] audit: type=1326 audit(1773080395.759:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a699c799 code=0x7ffc0000 [ 904.148750][ T26] audit: type=1326 audit(1773080395.759:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0a699c502 code=0x7ffc0000 [ 904.179338][ T4684] usb 7-1: Product: syz [ 904.189150][ T4684] usb 7-1: Manufacturer: syz [ 904.221734][ T4684] usb 7-1: SerialNumber: syz [ 904.226868][ T26] audit: type=1326 audit(1773080395.759:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc0a699c597 code=0x7ffc0000 [ 904.370630][T11443] netlink: 'syz.7.1253': attribute type 10 has an invalid length. [ 904.378711][T11443] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1253'. [ 904.518349][ T4684] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 904.761132][ T4684] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 4 is not bulk. [ 904.771418][ T4684] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 904.785424][ T4684] usb 7-1: USB disconnect, device number 5 [ 905.897062][T11465] lo speed is unknown, defaulting to 1000 [ 905.903469][T11465] wlan0 speed is unknown, defaulting to 1000 [ 907.437992][ T4681] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 907.637926][ T4681] usb 2-1: Using ep0 maxpacket: 16 [ 907.646952][ T4681] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 907.730596][ T4681] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 907.891445][ T4681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.900755][ T4681] usb 2-1: Product: syz [ 907.915428][ T4681] usb 2-1: Manufacturer: syz [ 908.759761][ T4681] usb 2-1: SerialNumber: syz [ 908.779663][ T4681] usb 2-1: config 0 descriptor?? [ 908.802257][ T4681] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 908.838501][ T4681] usb 2-1: Detected FT232R [ 909.007894][ T4681] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 909.025644][ T4681] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 909.055221][ T4681] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 909.084158][ T4681] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 909.105706][ T4681] usb 2-1: USB disconnect, device number 6 [ 909.168787][ T4685] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 909.194091][ T4681] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 909.258559][ T4681] ftdi_sio 2-1:0.0: device disconnected [ 909.367855][ T4685] usb 5-1: Using ep0 maxpacket: 8 [ 909.374885][ T4685] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.438205][T11504] lo speed is unknown, defaulting to 1000 [ 909.444981][T11504] wlan0 speed is unknown, defaulting to 1000 [ 909.518990][ T4685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 909.544552][ T4685] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.707911][ T4685] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 909.718313][ T4685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.726475][ T4685] usb 5-1: Product: syz [ 909.731396][ T4685] usb 5-1: Manufacturer: syz [ 909.736207][ T4685] usb 5-1: SerialNumber: syz [ 910.541455][ T4685] usb 5-1: config 0 descriptor?? [ 910.678502][ T4685] radioshark 5-1:0.0: Invalid radioSHARK device [ 910.685892][ T4685] radioshark: probe of 5-1:0.0 failed with error -22 [ 910.693923][ T4685] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 910.766745][ T4685] usb 5-1: USB disconnect, device number 3 [ 911.835592][T11531] xt_TPROXY: Can be used only with -p tcp or -p udp [ 914.939450][T11542] netlink: 'syz.1.1284': attribute type 10 has an invalid length. [ 914.947348][T11542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1284'. [ 918.001180][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 918.001194][ T26] audit: type=1326 audit(1773080413.329:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fe79c799 code=0x7ffc0000 [ 918.037834][ T26] audit: type=1326 audit(1773080413.329:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fe79c799 code=0x7ffc0000 [ 918.168483][ T26] audit: type=1326 audit(1773080413.329:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fe79c799 code=0x7ffc0000 [ 918.272483][ T26] audit: type=1326 audit(1773080413.329:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f70fe79c799 code=0x7ffc0000 [ 918.362360][ T26] audit: type=1326 audit(1773080413.429:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70fe79c502 code=0x7ffc0000 [ 918.397939][ T8615] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 918.412547][ T26] audit: type=1326 audit(1773080413.439:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70fe79c502 code=0x7ffc0000 [ 918.437838][ T26] audit: type=1326 audit(1773080413.439:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fe79c799 code=0x7ffc0000 [ 918.461351][ T26] audit: type=1326 audit(1773080413.439:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70fe79c502 code=0x7ffc0000 [ 918.485199][ T26] audit: type=1326 audit(1773080413.439:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70fe79c597 code=0x7ffc0000 [ 918.508471][ T26] audit: type=1326 audit(1773080413.439:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f70fe759491 code=0x7ffc0000 [ 918.656012][ T8615] usb 7-1: unable to get BOS descriptor or descriptor too short [ 918.665621][ T8615] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 919.616435][ T8615] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 919.706244][ T8615] usb 7-1: config 63 has no interface number 0 [ 919.792879][ T8615] usb 7-1: config 63 interface 66 has no altsetting 0 [ 919.944244][ T8615] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 920.043795][ T8615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.074188][ T8615] usb 7-1: Product: syz [ 920.084315][ T8615] usb 7-1: Manufacturer: syz [ 920.101447][ T8615] usb 7-1: SerialNumber: syz [ 920.943977][ T8615] usb 7-1: Found UVC 0.07 device syz (174f:8acf) [ 920.951165][ T8615] usb 7-1: No valid video chain found. [ 920.960505][ T8615] usb 7-1: USB disconnect, device number 6 [ 922.681439][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 926.009574][T11673] binder: 11667:11673 ioctl c0306201 0 returned -14 [ 927.478741][T10630] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 927.547758][ T4282] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 927.708001][T10630] usb 7-1: Using ep0 maxpacket: 16 [ 927.717531][T10630] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.740544][T10630] usb 7-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 927.768429][T10630] usb 7-1: config 0 interface 0 has no altsetting 0 [ 927.782374][ T4282] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 927.839617][T10630] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 927.849319][ T4282] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 927.862912][T10630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.957552][ T4282] usb 1-1: config 2 interface 0 has no altsetting 0 [ 928.061165][T10630] usb 7-1: config 0 descriptor?? [ 928.096629][ T4282] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 928.436350][T10630] usb 7-1: Can not set alternate setting to 1, error: -71 [ 928.445481][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.465517][T10630] synaptics_usb: probe of 7-1:0.0 failed with error -71 [ 928.474162][ T4282] usb 1-1: Product: syz [ 928.484454][ T4282] usb 1-1: Manufacturer: syz [ 928.501729][T10630] usb 7-1: USB disconnect, device number 7 [ 928.507642][ T4282] usb 1-1: SerialNumber: syz [ 929.110329][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1325'. [ 929.136753][ T4282] usb 1-1: USB disconnect, device number 5 [ 930.395277][T11724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 930.555039][T11724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 930.615741][T11724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 930.629254][T11724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 930.645184][T11724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 930.656604][T11724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 931.551573][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.681389][T11759] batman_adv: batadv0: Interface deactivated: vlan1 [ 935.709013][T11759] batman_adv: batadv0: Removing interface: vlan1 [ 935.957828][T11771] fuse: Bad value for 'fd' [ 937.593226][T11792] autofs4:pid:11792:autofs_fill_super: called with bogus options [ 945.012736][T11845] autofs4:pid:11845:autofs_fill_super: called with bogus options [ 945.026765][T11850] fuse: Bad value for 'fd' [ 945.077745][ T3533] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 945.320707][T11852] device syzkaller1 entered promiscuous mode [ 945.337794][ T3533] usb 2-1: Using ep0 maxpacket: 32 [ 946.111292][ T3533] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.122242][ T3533] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 946.131617][ T3533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.143197][ T3533] usb 2-1: config 0 descriptor?? [ 946.151195][ T3533] usb 2-1: bad CDC descriptors [ 947.384051][ T3533] usb 2-1: USB disconnect, device number 7 [ 950.158254][ T4685] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 950.367885][ T4685] usb 7-1: Using ep0 maxpacket: 16 [ 950.395105][ T4685] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.406390][ T4282] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 950.487530][ T4685] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 950.540883][ T4685] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 950.573780][ T4685] usb 7-1: SerialNumber: syz [ 950.613955][ T4282] usb 1-1: Using ep0 maxpacket: 16 [ 950.623794][ T4282] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 950.670129][ T4685] usb 7-1: bad CDC descriptors [ 950.753971][ T4685] usb 7-1: USB disconnect, device number 8 [ 950.762824][ T4282] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 950.808808][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.984596][ T4282] usb 1-1: Product: syz [ 950.989706][ T4282] usb 1-1: Manufacturer: syz [ 950.994735][ T4282] usb 1-1: SerialNumber: syz [ 951.378581][T11908] fuse: Bad value for 'fd' [ 951.455615][ T4282] usb 1-1: config 0 descriptor?? [ 951.481640][ T4282] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 951.514601][ T4282] usb 1-1: Detected FT232R [ 951.703166][ T4282] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 951.711910][ T4282] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 951.724376][ T4282] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 951.745114][ T4282] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 951.886272][ T4282] usb 1-1: USB disconnect, device number 6 [ 953.638131][ T4282] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 953.698144][ T4282] ftdi_sio 1-1:0.0: device disconnected [ 955.187760][ T4282] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 956.217692][ T4282] usb 1-1: config 3 has an invalid interface number: 3 but max is 1 [ 956.231972][ T4282] usb 1-1: config 3 has an invalid interface number: 110 but max is 1 [ 956.240656][ T4282] usb 1-1: config 3 has an invalid interface number: 50 but max is 1 [ 956.258192][ T4282] usb 1-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 956.632966][ T4282] usb 1-1: config 3 has no interface number 0 [ 956.640429][ T4282] usb 1-1: config 3 has no interface number 1 [ 956.646653][ T4282] usb 1-1: config 3 has no interface number 2 [ 956.655389][ T4282] usb 1-1: too many endpoints for config 3 interface 110 altsetting 235: 128, using maximum allowed: 30 [ 956.667266][ T4282] usb 1-1: config 3 interface 110 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 956.709294][ T4282] usb 1-1: config 3 interface 3 has no altsetting 0 [ 956.716571][ T4282] usb 1-1: config 3 interface 110 has no altsetting 0 [ 956.723718][ T4282] usb 1-1: config 3 interface 50 has no altsetting 0 [ 956.733631][ T4282] usb 1-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 956.749081][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.757345][ T4282] usb 1-1: Product: syz [ 956.761715][ T4282] usb 1-1: Manufacturer: syz [ 956.767466][ T4282] usb 1-1: SerialNumber: syz [ 956.803338][ T4282] usb 1-1: can't set config #3, error -71 [ 956.823204][ T4282] usb 1-1: USB disconnect, device number 7 [ 961.049898][ T4685] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 961.829278][ T4685] usb 2-1: config 3 has an invalid interface number: 3 but max is 1 [ 961.857803][ T4685] usb 2-1: config 3 has an invalid interface number: 110 but max is 1 [ 961.916953][ T4685] usb 2-1: config 3 has an invalid interface number: 50 but max is 1 [ 962.038438][ T4685] usb 2-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 962.137862][ T4685] usb 2-1: config 3 has no interface number 0 [ 962.177758][ T4685] usb 2-1: config 3 has no interface number 1 [ 962.203637][ T4685] usb 2-1: config 3 has no interface number 2 [ 962.250712][ T4685] usb 2-1: too many endpoints for config 3 interface 110 altsetting 235: 128, using maximum allowed: 30 [ 962.317887][ T4685] usb 2-1: config 3 interface 110 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 963.138465][ T4685] usb 2-1: config 3 interface 3 has no altsetting 0 [ 963.192652][ T4685] usb 2-1: config 3 interface 110 has no altsetting 0 [ 963.199909][ T4685] usb 2-1: config 3 interface 50 has no altsetting 0 [ 963.221921][ T4685] usb 2-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 963.239803][ T4685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.248735][ T4685] usb 2-1: Product: syz [ 963.252941][ T4685] usb 2-1: Manufacturer: syz [ 963.268013][ T4685] usb 2-1: SerialNumber: syz [ 963.368928][T12013] lo speed is unknown, defaulting to 1000 [ 963.404373][T12013] wlan0 speed is unknown, defaulting to 1000 [ 963.598508][ T4685] usb 2-1: USB disconnect, device number 8 [ 966.411236][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1412'. [ 967.293151][T12058] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1415'. [ 967.302884][T12058] device gretap0 entered promiscuous mode [ 968.815595][T12065] fuse: Bad value for 'fd' [ 968.831534][ T3533] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 969.717840][ T3533] usb 1-1: Using ep0 maxpacket: 8 [ 969.725711][ T3533] usb 1-1: unable to get BOS descriptor or descriptor too short [ 969.735801][ T3533] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 969.747458][ T3533] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 969.759448][ T3533] usb 1-1: config 4 has no interface number 0 [ 969.771809][ T3533] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 969.783732][ T3533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.792051][ T3533] usb 1-1: Product: syz [ 969.796236][ T3533] usb 1-1: Manufacturer: syz [ 969.800954][ T3533] usb 1-1: SerialNumber: syz [ 970.213866][T12093] siw: device registration error -23 [ 970.777716][ T8615] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 970.826103][ T3533] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 970.845513][ T3533] usb 1-1: No valid video chain found. [ 970.857182][ T3533] usb 1-1: USB disconnect, device number 8 [ 971.120158][ T8615] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 971.138461][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.201673][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.360547][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.450703][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.898641][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.912606][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.925406][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.936976][ T8615] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 971.947371][ T8615] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 971.956934][ T8615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.996890][ T8615] pwc: Logitech QuickCam detected (reserved ID). [ 972.005097][ T8615] pwc: Warning: more than 1 configuration available. [ 973.515360][ T8615] pwc: Failed to set LED on/off time (-71) [ 974.502014][ T8615] pwc: send_video_command error -71 [ 974.508560][ T8615] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 974.517231][ T8615] Philips webcam: probe of 5-1:250.0 failed with error -71 [ 974.530967][ T8615] usb 5-1: USB disconnect, device number 4 [ 974.924663][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 974.936738][T12119] No such timeout policy "syz1" [ 978.210212][T12145] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1435'. [ 978.229314][T12145] device gretap0 entered promiscuous mode [ 980.292033][T12155] siw: device registration error -23 [ 986.417936][ T4388] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 987.308273][ T4388] usb 7-1: Using ep0 maxpacket: 16 [ 988.106708][ T4388] usb 7-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 988.149048][ T4388] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.345505][ T4388] usb 7-1: Product: syz [ 988.353274][ T4388] usb 7-1: Manufacturer: syz [ 988.389949][ T4388] usb 7-1: SerialNumber: syz [ 988.489513][T12229] xt_TPROXY: Can be used only with -p tcp or -p udp [ 989.148505][ T4388] usb 7-1: config 0 descriptor?? [ 989.172698][ T4388] usb 7-1: can't set config #0, error -71 [ 989.209372][ T4388] usb 7-1: USB disconnect, device number 9 [ 990.311703][ T4318] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 990.364886][T12249] tmpfs: Unknown parameter 'grpquota/#/msr' [ 991.001183][ T4318] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 991.627053][ T4318] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 991.688524][ T4318] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.701672][ T4318] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 991.711211][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.725439][ T4318] usbtmc: probe of 2-1:16.0 failed with error -22 [ 992.771353][ T4318] usb 2-1: USB disconnect, device number 9 [ 992.867308][T12265] fuse: Bad value for 'fd' [ 992.993244][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.925566][T12276] vivid-007: ================= START STATUS ================= [ 994.934050][T12276] vivid-007: Enable Output Cropping: true [ 994.949688][T12276] vivid-007: Enable Output Composing: true [ 994.961006][T12276] vivid-007: Enable Output Scaler: true [ 994.967235][T12276] vivid-007: Tx RGB Quantization Range: Automatic [ 994.974075][T12276] vivid-007: Transmit Mode: HDMI [ 994.979773][T12276] vivid-007: Display Present: true inactive [ 994.986623][T12276] vivid-007: Hotplug Present: 0x00000001 [ 994.993224][T12276] vivid-007: RxSense Present: 0x00000001 [ 994.999599][T12276] vivid-007: EDID Present: 0x00000001 [ 995.006155][T12276] vivid-007: ================== END STATUS ================== [ 996.023313][T12286] xt_TPROXY: Can be used only with -p tcp or -p udp [ 996.797212][T12288] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1471'. [ 996.812368][T12288] device gretap0 entered promiscuous mode [ 997.692263][T12285] tmpfs: Unknown parameter 'grpquota/#/msr' [ 998.572271][T12304] siw: device registration error -23 [ 999.615596][ T4685] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1000.043269][T12319] fuse: Bad value for 'fd' [ 1000.719349][ T4685] usb 2-1: Using ep0 maxpacket: 8 [ 1001.484669][ T4685] usb 2-1: device descriptor read/all, error -71 [ 1004.275520][T12350] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1484'. [ 1006.211551][T12350] device gretap0 entered promiscuous mode [ 1006.926083][T12365] fuse: Bad value for 'fd' [ 1007.138396][T12368] siw: device registration error -23 [ 1008.179143][ T4681] libceph: connect (1)[c::]:6789 error -101 [ 1008.187742][ T4681] libceph: mon0 (1)[c::]:6789 connect error [ 1008.501927][T12369] ceph: No mds server is up or the cluster is laggy [ 1008.529704][ T4681] libceph: connect (1)[c::]:6789 error -101 [ 1008.535897][ T4681] libceph: mon0 (1)[c::]:6789 connect error [ 1010.431002][T12391] ubi: mtd0 is already attached to ubi31 [ 1011.057646][T12396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1012.817966][T12410] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1502'. [ 1014.756653][T12423] fuse: Bad value for 'fd' [ 1015.328401][T12428] overlayfs: missing 'lowerdir' [ 1016.004327][T12440] tmpfs: Bad value for 'mpol' [ 1020.016297][T12456] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1022.163653][T12477] ubi: mtd0 is already attached to ubi31 [ 1026.291532][T12509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1028.438341][T12531] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1531'. [ 1037.263274][T12608] ubi: mtd0 is already attached to ubi31 [ 1042.374132][T12650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1563'. [ 1042.581074][T12652] netlink: 'syz.0.1563': attribute type 5 has an invalid length. [ 1042.910534][T12652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1043.050036][T12652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1043.197976][T12652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1043.647844][ T4681] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1044.219095][ T4681] usb 5-1: Using ep0 maxpacket: 16 [ 1044.244194][ T4681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1044.356106][ T4681] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1032, setting to 1024 [ 1044.377999][ T4681] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 7 [ 1044.418352][ T4681] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1044.427449][ T4681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.285079][ T4681] usb 5-1: Product: syz [ 1045.290857][ T4681] usb 5-1: Manufacturer: syz [ 1045.296164][ T4681] usb 5-1: SerialNumber: syz [ 1045.566822][ T4681] usb 5-1: unit 128 not found! [ 1045.849442][ T4681] usb 5-1: USB disconnect, device number 5 [ 1046.286610][T12631] udevd[12631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.780018][T12737] fuse: Bad value for 'fd' [ 1054.433120][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.130123][T12866] sctp: [Deprecated]: syz.6.1625 (pid 12866) Use of int in max_burst socket option. [ 1062.130123][T12866] Use struct sctp_assoc_value instead [ 1062.167175][T12867] fuse: Bad value for 'fd' [ 1072.321221][T12954] lo speed is unknown, defaulting to 1000 [ 1072.452814][T12954] wlan0 speed is unknown, defaulting to 1000 [ 1076.154050][T13012] openvswitch: netlink: EtherType 0 is less than min 600 [ 1080.784541][T13063] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1082.634841][T13075] lo speed is unknown, defaulting to 1000 [ 1082.692535][T13075] wlan0 speed is unknown, defaulting to 1000 [ 1083.032830][T13084] fuse: Bad value for 'fd' [ 1087.430559][T13130] fuse: Bad value for 'fd' [ 1093.741370][T13201] fuse: Bad value for 'fd' [ 1096.803778][ T4388] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1097.143658][ T4388] usb 7-1: Using ep0 maxpacket: 16 [ 1097.150718][ T4388] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1097.173677][ T4388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.191837][ T4388] usb 7-1: config 0 descriptor?? [ 1097.204727][ T4388] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1098.329122][ T4388] usb 7-1: Detected FT232B [ 1098.529435][ T4388] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1098.550945][ T4388] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1098.576125][ T4388] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1098.609339][ T4388] usb 7-1: USB disconnect, device number 10 [ 1098.665058][ T4388] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1098.724556][ T4388] ftdi_sio 7-1:0.0: device disconnected [ 1099.274498][T13272] lo speed is unknown, defaulting to 1000 [ 1099.291921][T13272] wlan0 speed is unknown, defaulting to 1000 [ 1104.955680][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1773'. [ 1105.016241][T13354] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1773'. [ 1108.335216][T13366] lo speed is unknown, defaulting to 1000 [ 1108.343140][ T5244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.372923][T13366] wlan0 speed is unknown, defaulting to 1000 [ 1108.395941][ T5244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.554493][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1108.685069][ T4685] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1108.885247][ T4685] usb 2-1: Using ep0 maxpacket: 32 [ 1108.893207][ T4685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.919865][ T4685] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1108.954147][ T4685] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1108.965345][ T4685] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1108.973981][ T4685] usb 2-1: Product: syz [ 1108.979422][ T4685] usb 2-1: Manufacturer: syz [ 1108.999847][ T4685] usb 2-1: SerialNumber: syz [ 1109.031285][ T4685] usb 2-1: config 0 descriptor?? [ 1109.065859][ T4685] hub 2-1:0.0: bad descriptor, ignoring hub [ 1109.092297][ T4685] hub: probe of 2-1:0.0 failed with error -5 [ 1109.299387][T13392] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1109.306871][T13392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1109.376093][T13392] vhci_hcd vhci_hcd.0: Device attached [ 1109.397249][T13404] vhci_hcd: connection closed [ 1109.415278][ T4381] vhci_hcd: stop threads [ 1109.465033][ T4381] vhci_hcd: release socket [ 1109.478407][ T4381] vhci_hcd: disconnect device [ 1109.525346][T10630] usb 2-1: USB disconnect, device number 12 [ 1113.476117][T12418] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1113.832168][T12418] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1113.944845][T12418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1114.039181][T12418] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1114.053392][T12418] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1114.159549][T12418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.167700][T12418] usb 2-1: Product: syz [ 1114.171933][T12418] usb 2-1: Manufacturer: syz [ 1114.176604][T12418] usb 2-1: SerialNumber: syz [ 1114.190700][T12418] usb 2-1: config 0 descriptor?? [ 1114.196625][T13454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1114.476741][T12418] usb 2-1: USB disconnect, device number 13 [ 1115.909535][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.892030][T13503] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1118.028082][T13528] binder: 13527:13528 ioctl c0306201 0 returned -14 [ 1119.626382][ T5093] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1119.646099][T13543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1119.813394][T13549] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1119.826488][ T5093] usb 1-1: Using ep0 maxpacket: 8 [ 1119.833428][ T5093] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.860122][ T5093] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1119.879785][ T5093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.901318][ T5093] usb 1-1: Product: syz [ 1119.910237][ T5093] usb 1-1: Manufacturer: syz [ 1119.915072][ T5093] usb 1-1: SerialNumber: syz [ 1119.951147][ T5093] usb 1-1: config 0 descriptor?? [ 1119.978829][ T5093] cdc_ether 1-1:0.0: skipping garbage [ 1119.984269][ T5093] cdc_ether 1-1:0.0: skipping garbage [ 1120.000200][ T5093] cdc_ether 1-1:0.0: invalid descriptor buffer length [ 1120.017036][ T5093] usb 1-1: bad CDC descriptors [ 1120.026100][ T5093] usb 1-1: unsupported MDLM descriptors [ 1120.042709][ T5093] cdc_acm 1-1:0.0: skipping garbage [ 1120.048849][ T5093] cdc_acm 1-1:0.0: skipping garbage [ 1120.061780][ T5093] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 1120.183999][T10630] usb 1-1: USB disconnect, device number 9 [ 1126.132394][T13635] lo speed is unknown, defaulting to 1000 [ 1126.347837][T13635] wlan0 speed is unknown, defaulting to 1000 [ 1127.607713][T10630] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1127.841580][T10630] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1127.950118][T10630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.040661][T10630] usb 2-1: Product: syz [ 1128.044921][T10630] usb 2-1: Manufacturer: syz [ 1128.076626][T10630] usb 2-1: SerialNumber: syz [ 1128.093635][T12418] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1128.142362][T10630] usb 2-1: config 0 descriptor?? [ 1128.204127][T10630] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1128.327557][T12418] usb 7-1: Using ep0 maxpacket: 32 [ 1128.339923][T12418] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.571876][T12418] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1128.688655][T12418] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1128.709303][T12418] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1128.723159][T12418] usb 7-1: Product: syz [ 1128.728164][T12418] usb 7-1: Manufacturer: syz [ 1128.748588][T12418] usb 7-1: SerialNumber: syz [ 1128.762234][T10630] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1128.764601][T12418] usb 7-1: config 0 descriptor?? [ 1128.781002][T10630] sq905c 2-1:0.0: Reading version command failed [ 1128.787868][T10630] sq905c: probe of 2-1:0.0 failed with error -71 [ 1128.805069][T10630] usb 2-1: USB disconnect, device number 14 [ 1129.279834][T12418] hub 7-1:0.0: bad descriptor, ignoring hub [ 1129.285798][T12418] hub: probe of 7-1:0.0 failed with error -5 [ 1129.511619][T13660] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1129.518176][T13660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1129.527556][T13660] vhci_hcd vhci_hcd.0: Device attached [ 1129.535706][T13700] vhci_hcd: connection closed [ 1129.542762][ T4299] vhci_hcd: stop threads [ 1129.552017][ T4299] vhci_hcd: release socket [ 1129.556676][ T4299] vhci_hcd: disconnect device [ 1129.681792][ T5093] usb 7-1: USB disconnect, device number 11 [ 1130.927301][T13704] lo speed is unknown, defaulting to 1000 [ 1131.068717][T13704] wlan0 speed is unknown, defaulting to 1000 [ 1135.932097][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1931'. [ 1135.978461][T13803] tc_dump_action: action bad kind [ 1137.546111][T13829] Cannot find set identified by id 0 to match [ 1140.754924][T13860] syz.7.1951 (13860): drop_caches: 2 [ 1140.932660][T13870] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 1140.943014][T13870] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1954'. [ 1141.006725][T13872] device netdevsim0 entered promiscuous mode [ 1141.449620][ T4318] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1141.871296][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 1141.930547][ T4318] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1141.939081][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.355689][ T4318] usb 2-1: config 0 has no interface number 0 [ 1142.386398][ T4318] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1142.507331][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.605122][ T4318] usb 2-1: Product: syz [ 1142.634135][ T4318] usb 2-1: Manufacturer: syz [ 1142.638752][ T4318] usb 2-1: SerialNumber: syz [ 1142.844204][ T4318] usb 2-1: config 0 descriptor?? [ 1143.394455][T13913] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1143.976922][T13916] fuse: Bad value for 'fd' [ 1144.509403][ T4318] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 1144.518524][ T4318] usb 2-1: No valid video chain found. [ 1144.603445][ T4318] usb 2-1: USB disconnect, device number 15 [ 1145.115496][T13929] netlink: 'syz.0.1974': attribute type 3 has an invalid length. [ 1145.178550][T13900] lo speed is unknown, defaulting to 1000 [ 1145.192226][T13900] wlan0 speed is unknown, defaulting to 1000 [ 1147.480958][T13955] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1150.905256][T14016] netlink: 'syz.1.2003': attribute type 4 has an invalid length. [ 1151.003873][T14019] fuse: Bad value for 'fd' [ 1156.194789][T14080] fuse: Bad value for 'fd' [ 1156.976643][T14103] Cannot find add_set index 0 as target [ 1158.073916][T14132] fuse: Bad value for 'fd' [ 1162.809347][T14162] lo speed is unknown, defaulting to 1000 [ 1162.871468][T14162] wlan0 speed is unknown, defaulting to 1000 [ 1163.294873][T14188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1170.126095][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 1172.815143][T14315] fuse: Bad value for 'fd' [ 1173.482836][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 1177.652265][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.669520][T14425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1180.705013][T14425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.771946][T14427] fuse: Bad value for 'fd' [ 1181.490676][T14433] device netdevsim0 left promiscuous mode [ 1182.838531][T14448] netlink: 'syz.6.2157': attribute type 7 has an invalid length. [ 1182.847040][T14448] netlink: 'syz.6.2157': attribute type 8 has an invalid length. [ 1182.854919][T14448] netlink: 'syz.6.2157': attribute type 15 has an invalid length. [ 1183.665124][T14464] netlink: 'syz.0.2164': attribute type 1 has an invalid length. [ 1186.674075][T14534] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2189'. [ 1187.821742][T14574] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2207'. [ 1187.987457][T14580] fuse: Bad value for 'fd' [ 1195.421367][T14679] tipc: Started in network mode [ 1195.445891][T14679] tipc: Node identity , cluster identity 4711 [ 1195.470335][T14679] tipc: Failed to set node id, please configure manually [ 1195.507172][T14679] tipc: Enabling of bearer rejected, failed to enable media [ 1195.714305][T14677] lo speed is unknown, defaulting to 1000 [ 1195.777632][T14677] wlan0 speed is unknown, defaulting to 1000 [ 1197.182907][T14694] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2249'. [ 1198.960351][T14716] IPVS: ip_vs_add_dest(): server weight less than zero [ 1200.015031][T14751] tipc: Started in network mode [ 1200.021412][T14751] tipc: Node identity , cluster identity 4711 [ 1200.061914][T14751] tipc: Failed to set node id, please configure manually [ 1200.083940][T14751] tipc: Enabling of bearer rejected, failed to enable media [ 1200.288283][T14756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2275'. [ 1202.037165][T14762] lo speed is unknown, defaulting to 1000 [ 1202.045667][T14762] wlan0 speed is unknown, defaulting to 1000 [ 1202.444894][T14783] fuse: Bad value for 'fd' [ 1203.952604][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 1204.116541][ T4388] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1204.329797][ T4388] usb 7-1: Using ep0 maxpacket: 16 [ 1204.339793][ T4388] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.423014][ T4388] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1204.861491][ T4388] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1205.212191][ T4388] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1205.233225][ T4388] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1205.256422][ T4388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1205.265143][ T4388] usb 7-1: SerialNumber: syz [ 1205.285494][ T4388] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1205.511966][ T5092] usb 7-1: USB disconnect, device number 12 [ 1207.957019][ T4685] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1208.283980][T14866] tipc: Started in network mode [ 1208.299754][T14866] tipc: Node identity , cluster identity 4711 [ 1208.307176][ T4685] usb 2-1: Using ep0 maxpacket: 8 [ 1208.316035][ T4685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.339939][T14867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2311'. [ 1208.369873][ T4685] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1208.413802][ T4685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.430503][ T4685] usb 2-1: config 0 descriptor?? [ 1208.439804][T14853] lo speed is unknown, defaulting to 1000 [ 1208.466600][T14853] wlan0 speed is unknown, defaulting to 1000 [ 1208.507849][ T4685] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1208.646103][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1208.715322][T12418] usb 2-1: USB disconnect, device number 16 [ 1211.249608][T14914] fuse: Bad value for 'fd' [ 1212.277904][ T4685] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1212.521865][ T4685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.761636][ T4685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.776158][ T4685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1212.789649][ T4685] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1212.799347][ T4685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.335759][ T4685] usb 2-1: config 0 descriptor?? [ 1214.060177][ T4685] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1214.175828][ T4681] usb 2-1: USB disconnect, device number 17 [ 1214.572180][T14958] fuse: Bad value for 'fd' [ 1215.271269][T14947] fido_id[14947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1216.289397][ T5093] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1216.488048][ T5093] usb 2-1: Using ep0 maxpacket: 32 [ 1216.495230][ T5093] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1216.549015][ T5093] usb 2-1: config 0 has no interface number 0 [ 1216.579955][ T5093] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1216.632009][ T5093] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1216.655184][ T5093] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1216.678063][ T5093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.693894][T14989] tipc: Started in network mode [ 1216.708408][T14989] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 1216.717643][ T5093] usb 2-1: Product: syz [ 1216.738436][T14989] tipc: Enabling of bearer rejected, failed to enable media [ 1216.747336][ T5093] usb 2-1: Manufacturer: syz [ 1216.752923][ T5093] usb 2-1: SerialNumber: syz [ 1216.773953][ T5093] usb 2-1: config 0 descriptor?? [ 1217.240800][ T5093] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 1217.268114][ T5093] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1217.442629][ T5093] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1217.468189][ T5093] radio-si470x 2-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 1217.508291][ T5093] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1217.548561][ T5093] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1217.588698][ T5093] usb 2-1: USB disconnect, device number 18 [ 1219.898505][ T4318] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1220.168535][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 1220.180170][ T4318] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1220.845251][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.855728][ T4318] usb 5-1: Product: syz [ 1220.865525][ T4318] usb 5-1: Manufacturer: syz [ 1220.957512][ T4318] usb 5-1: SerialNumber: syz [ 1220.966138][ T4318] usb 5-1: config 0 descriptor?? [ 1220.975008][ T4318] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1220.984110][ T4318] dvb-usb: bulk message failed: -22 (4/0) [ 1220.996727][ T4318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1221.020244][ T4318] dvb-usb: bulk message failed: -22 (5/0) [ 1221.026025][ T4318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1221.091194][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1221.119461][ T4318] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1221.132442][ T4318] usb 5-1: media controller created [ 1221.156631][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1221.178602][T15030] ttusb2: i2c wr len=58 too high [ 1221.248321][ T4318] usb 5-1: selecting invalid altsetting 3 [ 1221.286984][ T4318] ttusb2: set interface to alts=3 failed [ 1221.441694][ T4318] DVB: Unable to find symbol tda10086_attach() [ 1221.456470][ T4318] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1221.476360][ T4318] dvb-usb: bulk message failed: -22 (4/0) [ 1221.494045][ T4318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1221.515925][ T4318] dvb-usb: bulk message failed: -22 (5/0) [ 1221.525580][ T4318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1221.536692][ T4318] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1221.548815][ T4318] usb 5-1: USB disconnect, device number 6 [ 1221.591489][ T4318] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1222.852969][T15081] fuse: Bad value for 'fd' [ 1224.722256][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2387'. [ 1226.270817][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 1229.331297][T15168] fuse: Bad value for 'fd' [ 1229.409665][ T4685] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1229.853358][ T4685] usb 5-1: Using ep0 maxpacket: 32 [ 1229.868135][ T4685] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1230.204577][ T4685] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1230.216336][ T4685] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1230.228318][ T4685] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1230.348686][ T4685] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1230.358610][ T4685] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1230.697995][ T4685] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1230.707171][ T4685] usb 5-1: Product: syz [ 1230.711673][ T4685] usb 5-1: Manufacturer: syz [ 1230.716281][ T4685] usb 5-1: SerialNumber: syz [ 1230.722617][ T4685] usb 5-1: config 0 descriptor?? [ 1230.733251][ T4685] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1230.769233][ T4685] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1231.060083][ T4685] usb 5-1: USB disconnect, device number 7 [ 1231.079821][ T4685] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1233.600159][ T3533] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1233.832448][ T3533] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1233.847980][ T3533] usb 1-1: not running at top speed; connect to a high speed hub [ 1233.902878][ T3533] usb 1-1: config 9 has an invalid interface number: 48 but max is 0 [ 1233.934268][ T3533] usb 1-1: config 9 has no interface number 0 [ 1233.954531][ T3533] usb 1-1: config 9 interface 48 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1233.984884][ T3533] usb 1-1: config 9 interface 48 has no altsetting 0 [ 1234.029433][ T3533] usb 1-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice=46.82 [ 1234.059246][ T3533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.089613][ T3533] usb 1-1: Product: syz [ 1234.093930][ T3533] usb 1-1: Manufacturer: syz [ 1234.098558][ T3533] usb 1-1: SerialNumber: syz [ 1234.355260][ T3533] io_ti 1-1:9.48: required endpoints missing [ 1234.386826][ T3533] usb 1-1: USB disconnect, device number 10 [ 1235.073677][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 1235.825080][T15260] fuse: Bad value for 'fd' [ 1237.250226][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2453'. [ 1239.397823][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.501286][ T4685] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1240.820900][ T4685] usb 7-1: Using ep0 maxpacket: 32 [ 1240.829827][ T4685] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1240.849173][ T4685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.876560][ T4685] usb 7-1: Product: syz [ 1240.888508][ T4685] usb 7-1: Manufacturer: syz [ 1240.954308][ T4685] usb 7-1: SerialNumber: syz [ 1241.031579][ T4685] usb 7-1: config 0 descriptor?? [ 1241.062482][ T4685] dw2102: su3000_identify_state [ 1241.106882][ T4685] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1241.137744][ T4685] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1241.150105][ T4685] dvb-usb: bulk message failed: -22 (2/0) [ 1241.203016][ T4685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1241.280825][ T4685] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1241.292744][T15349] dvb-usb: bulk message failed: -22 (3/0) [ 1241.299577][T15349] dw2102: i2c transfer failed. [ 1241.328475][T15349] dvb-usb: bulk message failed: -22 (4/0) [ 1241.349582][ T4685] usb 7-1: media controller created [ 1241.388645][T15371] fuse: Bad value for 'fd' [ 1241.450009][T15349] dw2102: i2c transfer failed. [ 1241.552680][T15349] dvb-usb: bulk message failed: -22 (3/0) [ 1241.668703][T15349] dw2102: i2c transfer failed. [ 1242.029926][ T4685] dvb-usb: bulk message failed: -22 (6/0) [ 1242.037493][ T4685] dw2102: i2c transfer failed. [ 1242.044112][ T4685] dvb-usb: bulk message failed: -22 (6/0) [ 1242.050525][ T4685] dw2102: i2c transfer failed. [ 1242.055567][ T4685] dvb-usb: bulk message failed: -22 (6/0) [ 1242.062468][ T4685] dw2102: i2c transfer failed. [ 1242.067284][ T4685] dvb-usb: bulk message failed: -22 (6/0) [ 1242.073426][ T4685] dw2102: i2c transfer failed. [ 1242.078240][ T4685] dvb-usb: bulk message failed: -22 (6/0) [ 1242.084123][ T4685] dw2102: i2c transfer failed. [ 1242.088923][ T4685] dvb-usb: bulk message failed: -22 (6/0) [ 1242.110911][ T4685] dw2102: i2c transfer failed. [ 1242.117983][ T4685] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1242.242909][ T4685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1242.270890][ T4685] dvb-usb: bulk message failed: -22 (3/0) [ 1242.277490][ T4685] dw2102: command 0x0e transfer failed. [ 1242.285618][ T4685] dvb-usb: bulk message failed: -22 (3/0) [ 1242.307310][ T4685] dw2102: command 0x0e transfer failed. [ 1242.651151][ T4685] dvb-usb: bulk message failed: -22 (3/0) [ 1242.659205][ T4685] dw2102: command 0x0e transfer failed. [ 1242.719662][ T4685] dvb-usb: bulk message failed: -22 (3/0) [ 1242.726602][ T4685] dw2102: command 0x0e transfer failed. [ 1242.761236][ T4685] dvb-usb: bulk message failed: -22 (1/0) [ 1242.767235][ T4685] dw2102: command 0x51 transfer failed. [ 1243.868354][ T4685] DVB: Unable to find symbol ds3000_attach() [ 1243.892409][ T4685] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1243.994218][T15405] tmpfs: Bad value for 'mpol' [ 1244.723840][ T4685] rc_core: IR keymap rc-su3000 not found [ 1244.729638][ T4685] Registered IR keymap rc-empty [ 1244.906810][ T4685] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1244.943205][ T4685] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input19 [ 1245.007540][ T4685] dvb-usb: schedule remote query interval to 150 msecs. [ 1245.222557][ T4685] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1245.330583][ T4685] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1245.806461][ T4685] usb 7-1: USB disconnect, device number 13 [ 1246.467918][ T4685] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1246.692027][T15443] tmpfs: Bad value for 'mpol' [ 1246.701121][T15443] fuse: Bad value for 'fd' [ 1250.983154][T15491] tmpfs: Bad value for 'mpol' [ 1252.001634][T15508] fuse: Bad value for 'fd' [ 1252.102780][ T4318] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1252.302390][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 1252.316880][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.562969][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.573854][ T4318] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 1252.583244][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.603682][ T4318] usb 5-1: config 0 descriptor?? [ 1253.579994][ T4318] usb 5-1: string descriptor 0 read error: -71 [ 1253.717219][ T4318] uclogic 0003:5543:0047.0003: failed retrieving string descriptor #200: -71 [ 1253.726859][ T4318] uclogic 0003:5543:0047.0003: failed retrieving pen parameters: -71 [ 1253.735843][ T4318] uclogic 0003:5543:0047.0003: failed probing pen v2 parameters: -71 [ 1253.745189][ T4318] uclogic 0003:5543:0047.0003: failed probing parameters: -71 [ 1253.753681][ T4318] uclogic: probe of 0003:5543:0047.0003 failed with error -71 [ 1253.775522][ T4318] usb 5-1: USB disconnect, device number 8 [ 1255.122698][ T4685] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1255.289664][T15542] fuse: Bad value for 'fd' [ 1255.370959][ T4685] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1255.399157][ T4685] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1255.445732][ T4685] usb 7-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 1255.474713][ T4685] usb 7-1: config 220 has no interface number 2 [ 1255.488268][ T4685] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1255.522419][ T4685] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1255.556210][ T4685] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1255.588012][ T4685] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1255.612120][ T4685] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1255.662933][ T4685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.675773][ T4685] usb 7-1: Product: syz [ 1255.679983][ T4685] usb 7-1: Manufacturer: syz [ 1255.699870][ T4685] usb 7-1: SerialNumber: syz [ 1255.723598][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1255.830161][T15547] cgroup: fork rejected by pids controller in /syz4 [ 1255.935756][ T4685] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1255.989869][ T4685] usb 7-1: No valid video chain found. [ 1256.018079][ T4685] usb 7-1: selecting invalid altsetting 0 [ 1256.116227][ T4685] usb 7-1: selecting invalid altsetting 0 [ 1256.167648][ T4685] usbtest: probe of 7-1:220.1 failed with error -22 [ 1256.211924][ T4685] usb 7-1: USB disconnect, device number 14 [ 1256.502943][ T5093] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1256.704322][ T5093] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1256.712378][ T5093] usb 2-1: config 0 has no interface number 0 [ 1256.724707][ T5093] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1256.728102][ T4299] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.734001][ T5093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.754676][ T5093] usb 2-1: config 0 descriptor?? [ 1256.772130][ T5093] usb 2-1: selecting invalid altsetting 1 [ 1256.794356][ T5093] dvb_ttusb_budget: ttusb_init_controller: error [ 1256.800758][ T5093] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1256.866223][ T4299] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.019080][ T5093] DVB: Unable to find symbol cx22700_attach() [ 1257.023107][ T4299] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.155175][T15578] syz.6.2561[15578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1257.155285][T15578] syz.6.2561[15578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1257.216758][ T4299] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.243005][ T5093] DVB: Unable to find symbol tda10046_attach() [ 1257.259411][ T5093] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1257.291747][ T5093] usb 2-1: USB disconnect, device number 19 [ 1258.123118][ T4685] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1258.136508][ T9288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1258.150544][ T9288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1258.161990][ T9288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1258.191100][T15594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1258.199243][T15594] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1258.207527][T15594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1258.229048][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1258.236448][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1258.243895][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1258.265218][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1258.272810][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1258.283235][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1258.313756][ T4685] usb 2-1: Using ep0 maxpacket: 16 [ 1258.326712][ T4685] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1258.384325][ T4685] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1258.463646][ T4685] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1258.637266][ T4685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.730517][ T4685] usb 2-1: Product: syz [ 1258.737398][ T4685] usb 2-1: Manufacturer: syz [ 1258.742085][ T4685] usb 2-1: SerialNumber: syz [ 1258.809863][T15593] lo speed is unknown, defaulting to 1000 [ 1258.976673][ T4685] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1259.001082][ T4685] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1259.113444][T15593] wlan0 speed is unknown, defaulting to 1000 [ 1259.342183][T15622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1259.386339][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.422858][ T4685] usb 2-1: USB disconnect, device number 20 [ 1259.439342][T15622] device bridge_slave_1 left promiscuous mode [ 1259.456410][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.373590][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 1260.882646][T15645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1261.005386][T15593] chnl_net:caif_netlink_parms(): no params data found [ 1261.163332][T10630] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1261.393416][T10630] usb 7-1: Using ep0 maxpacket: 8 [ 1261.400500][T10630] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1261.419077][T10630] usb 7-1: config 0 has no interface number 0 [ 1261.429796][T10630] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1261.438958][T10630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.447119][T10630] usb 7-1: Product: syz [ 1261.451299][T10630] usb 7-1: Manufacturer: syz [ 1261.456137][T10630] usb 7-1: SerialNumber: syz [ 1261.470731][T10630] usb 7-1: config 0 descriptor?? [ 1262.027474][T15673] fuse: Bad value for 'fd' [ 1262.496748][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 1262.594241][T10630] usb 7-1: USB disconnect, device number 15 [ 1263.273177][T15593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.301128][T15593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.359681][T15593] device bridge_slave_0 entered promiscuous mode [ 1263.418787][ T5092] wlan0 speed is unknown, defaulting to 1000 [ 1263.434971][ T5092] ================================================================== [ 1263.443083][ T5092] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 1263.450426][ T5092] Read of size 4 at addr ffff8880646c00e0 by task kworker/1:12/5092 [ 1263.458496][ T5092] [ 1263.460873][ T5092] CPU: 1 PID: 5092 Comm: kworker/1:12 Not tainted syzkaller #0 [ 1263.468413][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1263.478467][ T5092] Workqueue: infiniband ib_cache_event_task [ 1263.484389][ T5092] Call Trace: [ 1263.487663][ T5092] [ 1263.490584][ T5092] dump_stack_lvl+0x188/0x24e [ 1263.495292][ T5092] ? __lock_acquire+0x7d10/0x7d10 [ 1263.500354][ T5092] ? show_regs_print_info+0x12/0x12 [ 1263.505564][ T5092] ? load_image+0x400/0x400 [ 1263.510103][ T5092] ? __virt_addr_valid+0x465/0x540 [ 1263.515373][ T5092] ? siw_query_port+0x358/0x450 [ 1263.520228][ T5092] print_report+0xa8/0x210 [ 1263.524647][ T5092] kasan_report+0x10b/0x140 [ 1263.529247][ T5092] ? siw_query_port+0x358/0x450 [ 1263.534093][ T5092] siw_query_port+0x358/0x450 [ 1263.538805][ T5092] ib_cache_update+0x1bf/0x9c0 [ 1263.543657][ T5092] ? ib_cache_setup_one+0x5d0/0x5d0 [ 1263.548948][ T5092] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1263.555014][ T5092] ? read_lock_is_recursive+0x10/0x10 [ 1263.560377][ T5092] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1263.566326][ T5092] ib_cache_event_task+0xdc/0x1d0 [ 1263.571436][ T5092] ? process_one_work+0x7b0/0x1160 [ 1263.576585][ T5092] process_one_work+0x8a2/0x1160 [ 1263.581537][ T5092] ? worker_detach_from_pool+0x240/0x240 [ 1263.587249][ T5092] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1263.592346][ T5092] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1263.597890][ T5092] ? kthread_data+0x4b/0xc0 [ 1263.602394][ T5092] worker_thread+0xaa2/0x1270 [ 1263.607245][ T5092] kthread+0x29d/0x330 [ 1263.611378][ T5092] ? worker_clr_flags+0x1a0/0x1a0 [ 1263.616992][ T5092] ? kthread_blkcg+0xd0/0xd0 [ 1263.621596][ T5092] ret_from_fork+0x1f/0x30 [ 1263.626044][ T5092] [ 1263.629050][ T5092] [ 1263.631357][ T5092] The buggy address belongs to the physical page: [ 1263.637746][ T5092] page:ffffea000191b000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x646c0 [ 1263.647886][ T5092] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1263.655087][ T5092] raw: 00fff00000000000 ffffea00015a0208 ffff8880b8f413f0 0000000000000000 [ 1263.663656][ T5092] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1263.672228][ T5092] page dumped because: kasan: bad access detected [ 1263.678644][ T5092] page_owner tracks the page as freed [ 1263.683995][ T5092] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x546dc0(GFP_USER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 10166, tgid 10166 (syz-executor), ts 768362130344, free_ts 1263425709898 [ 1263.706389][ T5092] post_alloc_hook+0x173/0x1a0 [ 1263.711163][ T5092] get_page_from_freelist+0x1a1e/0x1ab0 [ 1263.716718][ T5092] __alloc_pages+0x1ec/0x4f0 [ 1263.721399][ T5092] __kmalloc_large_node+0x8c/0x1e0 [ 1263.726585][ T5092] __kmalloc_node+0x10e/0x240 [ 1263.731309][ T5092] kvmalloc_node+0x6c/0x180 [ 1263.735848][ T5092] alloc_netdev_mqs+0x84/0xf00 [ 1263.740665][ T5092] ieee80211_if_add+0xc07/0x1590 [ 1263.745670][ T5092] ieee80211_register_hw+0x2e34/0x39f0 [ 1263.751165][ T5092] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1263.756947][ T5092] hwsim_new_radio_nl+0xafa/0xce0 [ 1263.761966][ T5092] genl_family_rcv_msg_doit+0x22a/0x330 [ 1263.767644][ T5092] genl_rcv_msg+0x604/0x790 [ 1263.772131][ T5092] netlink_rcv_skb+0x1fb/0x450 [ 1263.776933][ T5092] genl_rcv+0x24/0x40 [ 1263.780903][ T5092] netlink_unicast+0x74d/0x8d0 [ 1263.785667][ T5092] page last free stack trace: [ 1263.790423][ T5092] free_unref_page_prepare+0x8b4/0x9a0 [ 1263.795890][ T5092] free_unref_page+0x2e/0x3f0 [ 1263.800563][ T5092] free_large_kmalloc+0xfd/0x190 [ 1263.805493][ T5092] device_release+0x92/0x1c0 [ 1263.810140][ T5092] kobject_put+0x21d/0x460 [ 1263.814560][ T5092] netdev_run_todo+0xcb3/0xdb0 [ 1263.819315][ T5092] ieee80211_unregister_hw+0xfc/0x290 [ 1263.824677][ T5092] mac80211_hwsim_del_radio+0x285/0x480 [ 1263.830215][ T5092] hwsim_exit_net+0x589/0x650 [ 1263.834939][ T5092] cleanup_net+0x706/0xba0 [ 1263.839367][ T5092] process_one_work+0x8a2/0x1160 [ 1263.844400][ T5092] worker_thread+0xaa2/0x1270 [ 1263.849267][ T5092] kthread+0x29d/0x330 [ 1263.853418][ T5092] ret_from_fork+0x1f/0x30 [ 1263.857842][ T5092] [ 1263.860152][ T5092] Memory state around the buggy address: [ 1263.865764][ T5092] ffff8880646bff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1263.873849][ T5092] ffff8880646c0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1263.881931][ T5092] >ffff8880646c0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1263.889991][ T5092] ^ [ 1263.897170][ T5092] ffff8880646c0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1263.905397][ T5092] ffff8880646c0180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1263.913623][ T5092] ================================================================== [ 1264.543776][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 1264.647724][ T5092] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1264.654975][ T5092] CPU: 1 PID: 5092 Comm: kworker/1:12 Not tainted syzkaller #0 [ 1264.662536][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.672607][ T5092] Workqueue: infiniband ib_cache_event_task [ 1264.678534][ T5092] Call Trace: [ 1264.681820][ T5092] [ 1264.684769][ T5092] dump_stack_lvl+0x188/0x24e [ 1264.689462][ T5092] ? memcpy+0x3c/0x60 [ 1264.693629][ T5092] ? show_regs_print_info+0x12/0x12 [ 1264.698850][ T5092] ? load_image+0x400/0x400 [ 1264.703381][ T5092] panic+0x2e5/0x730 [ 1264.707292][ T5092] ? bpf_jit_dump+0xd0/0xd0 [ 1264.711804][ T5092] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1264.717799][ T5092] ? _raw_spin_unlock+0x40/0x40 [ 1264.722666][ T5092] ? print_memory_metadata+0x314/0x400 [ 1264.728145][ T5092] check_panic_on_warn+0x80/0xa0 [ 1264.733182][ T5092] ? siw_query_port+0x358/0x450 [ 1264.738063][ T5092] end_report+0x66/0x110 [ 1264.742331][ T5092] kasan_report+0x118/0x140 [ 1264.746860][ T5092] ? siw_query_port+0x358/0x450 [ 1264.751745][ T5092] siw_query_port+0x358/0x450 [ 1264.756452][ T5092] ib_cache_update+0x1bf/0x9c0 [ 1264.761241][ T5092] ? ib_cache_setup_one+0x5d0/0x5d0 [ 1264.766466][ T5092] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1264.772471][ T5092] ? read_lock_is_recursive+0x10/0x10 [ 1264.778052][ T5092] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1264.783981][ T5092] ib_cache_event_task+0xdc/0x1d0 [ 1264.789027][ T5092] ? process_one_work+0x7b0/0x1160 [ 1264.794157][ T5092] process_one_work+0x8a2/0x1160 [ 1264.799119][ T5092] ? worker_detach_from_pool+0x240/0x240 [ 1264.804791][ T5092] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1264.809840][ T5092] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1264.815415][ T5092] ? kthread_data+0x4b/0xc0 [ 1264.819959][ T5092] worker_thread+0xaa2/0x1270 [ 1264.824678][ T5092] kthread+0x29d/0x330 [ 1264.828770][ T5092] ? worker_clr_flags+0x1a0/0x1a0 [ 1264.833816][ T5092] ? kthread_blkcg+0xd0/0xd0 [ 1264.838427][ T5092] ret_from_fork+0x1f/0x30 [ 1264.842867][ T5092] [ 1264.846396][ T5092] Kernel Offset: disabled [ 1264.850892][ T5092] Rebooting in 86400 seconds..