last executing test programs: 12m12.493632067s ago: executing program 4 (id=2056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f00000000c0)={0x2}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2b, 0x1, 0x0, 0x6000, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x2040}, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(0x0, 0x2, 0x0) r6 = syz_open_procfs$userns(0x0, 0x0) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000005c80)=""/4108, 0x100c}, {&(0x7f0000001640)=""/238, 0xee}], 0x3}, 0x80000000}], 0x3, 0x40008062, 0x0) 12m8.729544292s ago: executing program 4 (id=2065): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) syz_io_uring_setup(0x4f6b, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x4d, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000040)) eventfd2(0xff, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='afs\x00', 0x8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r5 = userfaultfd(0x801) r6 = socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) getpid() ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 12m7.104882555s ago: executing program 4 (id=2068): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x8, 0x9}, 0x0) memfd_secret(0x0) 12m6.243113368s ago: executing program 4 (id=2071): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x2040, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x6}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x624, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) 12m3.865307382s ago: executing program 4 (id=2074): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setrlimit(0xd, &(0x7f0000000140)={0x2, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x21}, 0x4}}}, 0x32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0000311b51130000140012800b00010062726964676500000400028008000a00", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 12m2.534445062s ago: executing program 4 (id=2079): ioperm(0x7, 0x7fff, 0x527) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x400000, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @val=@iter={0x0}}, 0x20) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 11m45.804694374s ago: executing program 32 (id=2079): ioperm(0x7, 0x7fff, 0x527) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x400000, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @val=@iter={0x0}}, 0x20) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 9m32.267793603s ago: executing program 3 (id=2386): semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000680)=""/194) 9m32.215316534s ago: executing program 3 (id=2387): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open$dir(&(0x7f0000000180)='./file0\x00', 0x800, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2083) 9m31.759770131s ago: executing program 3 (id=2390): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x2040, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x6}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_setup(0x624, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) 9m30.382939761s ago: executing program 3 (id=2395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x198) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f0000000000), 0x5e) semctl$IPC_RMID(0x0, 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=']) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x3ce8, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x80108907, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="24b800191000090000001d00011800018011006580ac0000"], 0x2c}}, 0x48800) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0xa, 0x0, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) 9m27.355648605s ago: executing program 3 (id=2400): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pause() rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) memfd_secret(0x0) 9m24.765844102s ago: executing program 3 (id=2408): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x2}, 0x1}, 0x20, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x144, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/244, 0xf4, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/47, 0x2f, 0x0, 0x2c}}, 0x0}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000c80)=""/45, 0x2d, 0x2, 0x35}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/192, 0xc0, 0x2, 0x11}}, &(0x7f0000000680)={0x0, 0x28, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x6, 0x0, 0xf}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@fd, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fd}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) timer_delete(0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/47, 0x2f, 0x5) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x30) 9m7.809585699s ago: executing program 33 (id=2408): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x2}, 0x1}, 0x20, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x144, 0x0, &(0x7f0000000d40)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/244, 0xf4, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/47, 0x2f, 0x0, 0x2c}}, 0x0}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000c80)=""/45, 0x2d, 0x2, 0x35}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/192, 0xc0, 0x2, 0x11}}, &(0x7f0000000680)={0x0, 0x28, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x6, 0x0, 0xf}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@fd, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fd}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) timer_delete(0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/47, 0x2f, 0x5) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4694e30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x30) 8m39.042997797s ago: executing program 5 (id=2502): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) ioperm(0x0, 0x8, 0x8000000000004) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdd4, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x10000000) 8m38.11092887s ago: executing program 5 (id=2506): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc}) socket$nl_generic(0x10, 0x3, 0x10) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8m34.342791734s ago: executing program 5 (id=2511): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x5c2, &(0x7f0000000180)={0x0, 0x7208, 0x10, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff4, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000042c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) 8m30.52641608s ago: executing program 5 (id=2517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 8m24.99375009s ago: executing program 5 (id=2525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x5}}}}, 0x32) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init() 8m22.380344218s ago: executing program 5 (id=2528): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xff, 0x9, 0x0, 0x8}, {0xff, 0x7f, 0x8, 0xdc}, {0x98, 0xb, 0x4, 0x3}, {0x9d8, 0x8, 0x80, 0x8}]}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0x10, &(0x7f00000005c0)={&(0x7f0000000640)={0x3, 0x184, 0x87, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1}, 0x6, 0x3, 0x0, 0x0, "194e06619f59a864"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) mkdir(&(0x7f0000000300)='./bus\x00', 0x113) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x21864a, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x780, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1000000, {0x3, 0x6fb4}, {}, {0x0, 0x7}, {0x0, 0x0, 0x400}, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xecfe, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x33}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac8fdab8", @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf250a000000060009000200000006000900ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x8004) r6 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f911, 0x8000, '\x00', @string=0x0}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r7, 0x2, r0, 0xfffffffb, 0x80000}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) 8m5.566837992s ago: executing program 34 (id=2528): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xff, 0x9, 0x0, 0x8}, {0xff, 0x7f, 0x8, 0xdc}, {0x98, 0xb, 0x4, 0x3}, {0x9d8, 0x8, 0x80, 0x8}]}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0x10, &(0x7f00000005c0)={&(0x7f0000000640)={0x3, 0x184, 0x87, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1}, 0x6, 0x3, 0x0, 0x0, "194e06619f59a864"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) mkdir(&(0x7f0000000300)='./bus\x00', 0x113) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x21864a, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x780, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1000000, {0x3, 0x6fb4}, {}, {0x0, 0x7}, {0x0, 0x0, 0x400}, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xecfe, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x33}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac8fdab8", @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf250a000000060009000200000006000900ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x8004) r6 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f911, 0x8000, '\x00', @string=0x0}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r7, 0x2, r0, 0xfffffffb, 0x80000}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) 14.003902243s ago: executing program 1 (id=3638): r0 = openat$kvm(0x0, &(0x7f0000000400), 0x101000, 0x0) mmap$KVM_VCPU(&(0x7f0000a5d000/0x400000)=nil, 0x0, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000190000000000222b00000000139500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0x980929, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10) 14.003299983s ago: executing program 0 (id=3639): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x20}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x48) listen(r3, 0x9) accept4$vsock_stream(r4, 0x0, 0x0, 0x80000) 12.496507186s ago: executing program 1 (id=3640): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) rmdir(0x0) timerfd_create(0x8, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.401369527s ago: executing program 0 (id=3641): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) syz_io_uring_setup(0x4f6b, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x4d}, 0x0, &(0x7f0000000040)) eventfd2(0xff, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='afs\x00', 0x8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r4 = socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 10.683931522s ago: executing program 1 (id=3644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 10.266496528s ago: executing program 0 (id=3645): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000000a3c0)={0x0, 0x0, &(0x7f000000a380)={&(0x7f0000000640)=@newtfilter={0x1048, 0x2c, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1000c, 0xa}, {0xfff3, 0x9}, {0xffe8, 0x9}}, [@f_rsvp={{0x9}, {0x1018, 0x2, [@TCA_RSVP_POLICE={0x1014, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xb5, 0x8001, 0x1, 0x6, 0x401, 0x792e, 0x7, 0xf98, 0x1ff, 0x3, 0x5, 0x7, 0x28, 0x3, 0x2, 0x1, 0xe8, 0x2, 0x5, 0x6, 0x4000000, 0x8, 0x1, 0xffffffff, 0xdfd9, 0x80000000, 0x9, 0x3cd99719, 0xd, 0x8001, 0x6, 0x8, 0x0, 0x3, 0x3, 0xfff, 0x3dba, 0xd, 0xfffffeff, 0x8000, 0x8, 0x5407, 0x1, 0x5, 0xa, 0x4, 0x2, 0x7, 0x1, 0x401, 0xa, 0xd1de, 0xff, 0x6, 0x2, 0x66, 0x8, 0x3, 0x3, 0xa, 0x3ff, 0x4, 0x7, 0x0, 0x1, 0x6000, 0x9, 0x5, 0x3, 0x9, 0xad, 0x88, 0xa, 0x7, 0x100, 0x0, 0x8, 0x20, 0x50c, 0x390e, 0x3, 0xe38, 0x91a, 0x80, 0x6, 0x1f0, 0x10000, 0x89, 0xff, 0x2, 0x6, 0x10001, 0xfffffffa, 0x2c, 0x9, 0x2, 0x2, 0x2, 0x3, 0xff, 0x5, 0x4, 0x5, 0x7d5f400c, 0x9, 0x2, 0xc6, 0x6, 0x2000, 0x500, 0x2, 0x8c, 0x4c6936a1, 0x6, 0x6, 0x3, 0x2, 0x8, 0xb, 0x10000, 0x8, 0x7, 0x7, 0x1, 0x0, 0x100, 0x7, 0x1, 0x7, 0x800, 0x0, 0xdf, 0x67, 0x6, 0x6, 0x849, 0x7, 0x3fffc000, 0xbc2, 0x101, 0x0, 0xa, 0x2, 0xd, 0x9fd, 0x6, 0x100, 0xd, 0x1, 0xc1, 0x5, 0x9, 0x4, 0x4, 0xf89, 0x8, 0x6, 0xbd70, 0x1, 0x0, 0xff, 0x8, 0x8, 0x7, 0xf, 0x3f8000, 0x80000001, 0x100, 0x3, 0x196, 0xa2d, 0x0, 0x1, 0x3, 0x0, 0x1, 0xc0, 0xffff, 0x3, 0x1, 0x8, 0x32e, 0x3, 0x7, 0x9, 0x5, 0x400, 0x4, 0x7, 0x9, 0xb4, 0x9, 0x5, 0x3ff, 0x1, 0x40, 0x6, 0x9f94, 0x8, 0x8, 0x1, 0x20, 0x0, 0xffffff30, 0x9, 0x1, 0x5, 0x2, 0x7f, 0x777, 0x2, 0x4, 0xba, 0x10, 0x8, 0x81, 0x10, 0x1, 0x3, 0x100, 0xffffff00, 0x4, 0x5, 0xd, 0x81fc, 0x4, 0x7, 0xffff, 0xb8, 0x69, 0x3, 0x2000000, 0xf613, 0x1000, 0xfffff001, 0x7, 0x0, 0x7ff, 0x561, 0x10001, 0x101, 0x4, 0x6, 0x4, 0x7, 0x8e, 0xe522, 0x6, 0x2, 0xfffffffe, 0x7fff, 0x2, 0x8, 0x2d5d, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x10001, 0x5, 0x1, 0x7f, 0x0, 0x5, 0x8, 0x10000, 0xdccb, 0x10, 0x2b6, 0x3, 0x8, 0xd8c, 0x6, 0x8, 0x0, 0x5, 0x6f2, 0x0, 0x5, 0x5, 0xa6, 0x8, 0x3ff, 0x7, 0x8, 0x6, 0x2, 0x9, 0x1, 0x6, 0x6, 0xc9a, 0x1, 0xffff, 0x3ff, 0x2, 0x73bb, 0x9, 0x7, 0x4, 0x101, 0xe3b4, 0xc83, 0x7, 0xa, 0x58, 0xffffffff, 0x5, 0x9, 0x0, 0x1, 0x3, 0x1, 0xc4, 0x6bfa, 0x0, 0xfffffff9, 0x200, 0x0, 0x9, 0x2, 0x3ff, 0x2ad, 0x3, 0x3, 0x5, 0x7, 0x7, 0x9, 0x4, 0x3, 0xb947, 0xd0, 0xfe0, 0x5, 0x5, 0x1, 0x4, 0xff, 0x2, 0xdd1, 0x8, 0x0, 0xfff, 0x400, 0x9, 0x4, 0x6, 0xc4, 0x0, 0x6, 0x0, 0x9, 0x5, 0x9, 0x47683e00, 0xfffffffa, 0x5, 0x2, 0x3, 0x6, 0x7, 0x6c22, 0x7fffffff, 0x3, 0xcc9, 0xe1, 0x2e, 0x24, 0x2, 0x6, 0x0, 0x80000000, 0x10fb, 0x0, 0x9, 0x7d76, 0xffff, 0x4, 0x10, 0xf, 0x7f, 0x2, 0x81, 0x4, 0x1, 0x100, 0x2, 0x1, 0x4, 0x7, 0x7, 0x6, 0x8, 0x10, 0x9, 0x0, 0x8b, 0x101, 0x8, 0x101, 0x3, 0x800, 0x4, 0x8, 0x1000, 0x7, 0x89c, 0xc8000000, 0x9, 0x4, 0x40, 0x7, 0x4, 0x8, 0x4, 0x40, 0x4, 0x4, 0x3, 0x6, 0x5, 0x1566, 0x10000, 0x0, 0x9, 0x101, 0x6, 0x10, 0x7, 0xb843, 0x10001, 0xafc3, 0x81, 0xfffffff9, 0x7a, 0x80000000, 0x400, 0x10, 0xc42, 0xfffffffe, 0x0, 0x8, 0x6, 0x5, 0x7, 0xb0, 0x3, 0x7fffffff, 0xfffffff9, 0x8, 0x1, 0xb, 0x7, 0x8, 0x4, 0x9, 0x614, 0x6, 0xb79, 0x6, 0x0, 0x6, 0x3, 0xd, 0x8, 0x3, 0xe, 0x93e00000, 0xc, 0x9, 0x7fffffff, 0x1, 0x1, 0x0, 0x2, 0x8, 0x200, 0x4, 0x4, 0x0, 0x95fc, 0x7, 0x0, 0x8, 0xd32, 0x7, 0x7, 0x5, 0xffffff4c, 0x10001, 0x1, 0xfffffff8, 0x0, 0x2, 0x7, 0xfffffffc, 0xffffffa1, 0x7, 0x5, 0xdf82, 0x0, 0x568, 0x6, 0xce, 0x4d0, 0x4784, 0x57, 0x7, 0x8, 0x1, 0x61]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xe, 0x1, 0x101, 0x7, 0x7, 0x5, 0x0, 0x3, 0x7fff, 0xc37, 0x0, 0x401, 0x3, 0xfffffff7, 0x2, 0x8001, 0x9, 0x8, 0x1000, 0x4, 0x401, 0x5, 0x7, 0x75, 0x0, 0xc40, 0x0, 0x7, 0x0, 0x5, 0x9, 0x1ff, 0x1, 0x9, 0x9, 0x0, 0xffa4, 0x67, 0x9, 0x5, 0x3, 0x2, 0x64, 0x4, 0x1, 0x800, 0x3, 0x3, 0x7f, 0x2, 0x8, 0x4, 0xffff, 0x8, 0x6, 0x401, 0xcbc, 0x54000, 0xd568, 0x5, 0x8, 0x81d4, 0xf, 0x6, 0x35, 0x2d1, 0x5, 0x837c, 0x2, 0x1, 0x8, 0x2, 0x4, 0x1, 0x8, 0x1000, 0xb, 0xffffffff, 0x1, 0x1, 0x5, 0x7fff, 0x5, 0x8, 0x4b, 0x7ff, 0x1, 0xd, 0x400, 0x6, 0x4, 0x3, 0x5, 0x4, 0x4, 0x0, 0x7, 0xffff, 0x7, 0x4, 0x8, 0x9, 0x1, 0x748e353a, 0x2, 0x8, 0x80000000, 0xfffffff7, 0x10, 0x1, 0xfff, 0x800, 0x604d, 0xc32, 0x7fff, 0x172a, 0x9, 0xdd0, 0x7ff, 0x4, 0x4, 0x79b, 0x566, 0x7, 0x8, 0x1, 0x200, 0xffffffff, 0x100, 0xe0ac, 0x6, 0x8, 0xd7, 0x2, 0x21a8, 0x5, 0xd6fa, 0x4, 0x8, 0x1ff, 0x3, 0x7, 0x3, 0x8, 0x21780000, 0x2, 0x5, 0x2, 0x68d, 0x800, 0x0, 0x2, 0x1, 0xc2, 0x4, 0x5, 0x3, 0xf16c, 0x5, 0xc, 0x80, 0xfffffffa, 0x6, 0x7, 0x2, 0x1, 0xffff, 0x29b1, 0x81, 0xe, 0x8, 0x8, 0x3, 0x7, 0x9, 0xc, 0x10001, 0x9, 0x2c, 0x7, 0xec2a, 0x6e2, 0xc, 0x9, 0xfffffff8, 0x48, 0x5, 0x0, 0x7fff, 0x6, 0xe69d, 0xffffff6b, 0x5, 0x7, 0x27f7a206, 0x8, 0x4, 0x8, 0x10, 0x10000, 0x2, 0x3c, 0x100, 0x2, 0x9, 0x8, 0x7, 0x9, 0x1, 0x6, 0x101, 0x4, 0x0, 0xeb2d, 0x4, 0x5, 0x1, 0x98, 0x80000001, 0x5e4, 0x982a, 0xffffffff, 0x3, 0x200, 0x0, 0x8, 0x0, 0x3ff, 0x2, 0x7f, 0x9f8e, 0x81, 0x9, 0x4ce, 0xaa41, 0x1c0, 0xffff, 0x2, 0xe4, 0x3, 0x3, 0x8, 0x1000, 0x8001, 0x6, 0x59, 0x7f, 0x5, 0x5, 0x0, 0x7, 0xcc, 0x0, 0x1, 0x401]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1000, 0x1ff, 0x8000, 0x0, 0x5, 0x3, 0x3, 0x6, 0x6, 0xfffffffa, 0x9a, 0x8, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x9, 0xbd6, 0x621, 0x200, 0x3, 0xd, 0x6, 0x4, 0x4, 0x8, 0x6, 0x8, 0x400, 0xfffffffc, 0x5, 0x80000001, 0x5, 0x18bb, 0x2, 0x7f, 0x5, 0x3, 0x96fe, 0x0, 0x1ff, 0x3, 0x4, 0x1, 0xef, 0x1, 0xffffffff, 0xc, 0x4, 0x0, 0x8, 0x6, 0x8, 0x4, 0xe08, 0xb, 0x8, 0x2, 0x5, 0x61, 0x4, 0x5, 0x9, 0x47, 0xc, 0x5b5, 0x49d, 0x3, 0x9, 0x6, 0x7, 0x80, 0x4, 0x4, 0x3, 0x7, 0x2, 0xfffffff7, 0x6, 0x6, 0x0, 0x1ff, 0x24a, 0x9, 0x8, 0x9, 0x0, 0x10, 0x81, 0x8, 0x0, 0x7fff, 0x68, 0x5, 0x8, 0x4c, 0x4, 0x3, 0x984a, 0x809, 0x7, 0x43, 0xfff, 0x0, 0xd, 0x7, 0x3, 0x14, 0x506, 0x2, 0x1, 0x2915, 0xc15, 0x6, 0xffffffff, 0x80, 0x858, 0x6, 0x4, 0xd, 0x0, 0x1, 0x6, 0x8, 0x36, 0x9, 0x3, 0x1, 0x40000000, 0x5f0, 0x9, 0x0, 0x6, 0x80000000, 0x6, 0x2, 0xe6c, 0x1, 0x71, 0x2dfe, 0x49c, 0xa, 0x3ff, 0x0, 0x8, 0x6, 0xd8f, 0x5, 0xfbb, 0x6, 0x7, 0x9, 0xffff7fff, 0x4, 0x10001, 0x3, 0x3, 0x200, 0x3f3, 0x9, 0x7, 0x0, 0xfffffffe, 0x80, 0x600000, 0x6, 0x5, 0xaf, 0x0, 0x800, 0x8, 0x1, 0x7, 0x4, 0xeb5, 0x0, 0xc, 0x5, 0x0, 0x2, 0x0, 0x2, 0x100, 0x8, 0x7, 0xffffff63, 0x6, 0x200, 0x29aa9a03, 0x5, 0x3, 0x2, 0x4, 0x1ff, 0xffff0001, 0x0, 0xa, 0x1, 0x5, 0x0, 0x3, 0x6, 0x3fe, 0x8d, 0x7, 0x0, 0x8001, 0x8001, 0x5, 0x1, 0x9, 0x1, 0x5, 0x7, 0x50, 0x6, 0x7, 0x8000, 0x8, 0x200, 0xffff, 0x1c59, 0x1, 0x800, 0xfffffff7, 0x9, 0x7, 0x1ff, 0x6, 0x9, 0x7f, 0xfffffffb, 0x8000, 0x7, 0x5, 0x8, 0x0, 0x7, 0x9, 0x6, 0x9, 0x9, 0x5, 0x10001, 0x8, 0x1, 0x7, 0x6, 0x2, 0x81, 0x0, 0x8, 0x200, 0x3]}]}]}}]}, 0x1048}, 0x1, 0x0, 0x0, 0x200008c1}, 0x54) 9.231992313s ago: executing program 0 (id=3647): openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="89e7ee2c78daddb4b473fea888cafb", 0xf}, {&(0x7f0000000300)="125fb0dc3cc5c519a6c3c01e0cac7ae8642f75e77b40e703927b39b228cd55", 0x1f}], 0x2) 9.221659464s ago: executing program 1 (id=3648): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000120009000200", 0x22) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) timer_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000100), &(0x7f0000000200)=0x4) 9.187913425s ago: executing program 2 (id=3649): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7ff}, 0x0, &(0x7f00000003c0)={0x3ff, 0x20000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, 0x0, 0x0) 8.179186429s ago: executing program 1 (id=3651): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x210c80, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) symlink(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a002800002001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rmdir(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003000000"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r6, @ANYBLOB="006080a3cb000000b7050000850000004608f0ff76000000bf98000002000000560800000000000085000000c1e3bafb6c24207a6a0700000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0xf00, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f000019b000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="f20f519b06000f20d86635080000000f22d866b8000000000f23c80f21f866350400e0000f23f826660feed6b818018ec0f32ef466b9d909000066b8c9231fff66bab8e0386d0f30660fd2c766b90f0400000f3266b04c", 0x57}], 0x1, 0x10, &(0x7f0000000540), 0x0) fanotify_mark(r7, 0x400, 0x48000019, r1, &(0x7f0000000280)='./file0\x00') preadv(r1, &(0x7f0000000f80)=[{&(0x7f0000000580)=""/76, 0x4c}], 0x1, 0x0, 0x1) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 7.192552874s ago: executing program 2 (id=3653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 7.148234304s ago: executing program 7 (id=3654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) rmdir(0x0) timerfd_create(0x8, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.096865055s ago: executing program 0 (id=3655): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) syz_io_uring_setup(0x4f6b, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x4d}, 0x0, &(0x7f0000000040)) eventfd2(0xff, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='afs\x00', 0x8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r4 = socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 6.229809618s ago: executing program 7 (id=3657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x8001, 0x1, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x44) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffffffc, @remote}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80), 0x0, 0xbcff, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40844, 0x0, 0x0) writev(r5, &(0x7f0000000600), 0x0) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.122035189s ago: executing program 2 (id=3658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 6.009947931s ago: executing program 6 (id=3659): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) 3.799116574s ago: executing program 7 (id=3660): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mq_open(0x0, 0x40, 0x14, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'veth0_to_bond\x00', 0x1ff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0xfffffffffffffffe, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x50, 0x1}}}]}, 0x24}}, 0x0) 3.791136474s ago: executing program 2 (id=3661): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000120009000200", 0x22) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) timer_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000100), &(0x7f0000000200)=0x4) 3.710377405s ago: executing program 6 (id=3662): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) 2.603897742s ago: executing program 7 (id=3663): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7ff}, 0x0, &(0x7f00000003c0)={0x3ff, 0x20000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, 0x0, 0x0) 2.513915923s ago: executing program 6 (id=3664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) 2.166438688s ago: executing program 0 (id=3665): openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="89e7ee2c78daddb4b473fea888cafb", 0xf}, {&(0x7f0000000300)="125fb0dc3cc5c519a6c3c01e0cac7ae8642f75e77b40e703927b39b228cd55", 0x1f}], 0x2) 2.163848158s ago: executing program 2 (id=3666): write(0xffffffffffffffff, &(0x7f0000000180), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000000c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6f102a5319a5ac7c, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) recvfrom(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04910c20"], 0x7) 1.940970571s ago: executing program 6 (id=3667): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x4, &(0x7f0000000300)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r2 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x800) 1.029547715s ago: executing program 7 (id=3668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) rmdir(0x0) timerfd_create(0x8, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 968.551225ms ago: executing program 6 (id=3669): syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100b63883ba0000000006"], 0x54}, 0x2, 0x34005}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffedf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 730.227199ms ago: executing program 1 (id=3670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40) 121.930248ms ago: executing program 6 (id=3671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 5.9958ms ago: executing program 2 (id=3672): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae", 0x7) accept4(r0, 0x0, 0x0, 0x1c0000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r4, 0xffffffffffffffff}) close(r5) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r7, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r7}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, 0x0, 0x40810) 0s ago: executing program 7 (id=3673): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mq_open(0x0, 0x40, 0x14, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'veth0_to_bond\x00', 0x1ff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0xfffffffffffffffe, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x50, 0x1}}}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): fig #0, error -71 [ 835.253281][T10535] usb 2-1: USB disconnect, device number 27 [ 836.340259][T10917] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 836.549274][T10917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.586669][T10917] usb 3-1: config 0 descriptor?? [ 836.617406][T10917] usb 3-1: can't set config #0, error -71 [ 836.673171][T10917] usb 3-1: USB disconnect, device number 12 [ 836.772285][T11297] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 836.839084][T11297] device bond4 entered promiscuous mode [ 836.845513][T11297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.160290][T11301] binder: 11295:11301 ioctl c0306201 0 returned -14 [ 837.964059][T11306] hub 9-0:1.0: USB hub found [ 837.969125][T11306] hub 9-0:1.0: 1 port detected [ 838.161722][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2023'. [ 838.876706][T11320] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2025'. [ 842.737306][T11356] hub 9-0:1.0: USB hub found [ 842.742440][T11356] hub 9-0:1.0: 1 port detected [ 842.837844][T11362] binder: 11349:11362 ioctl c0306201 0 returned -14 [ 843.981857][T11383] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 843.992152][T11383] Invalid ELF header type: 0 != 1 [ 850.281559][T11420] binder: 11413:11420 ioctl c0306201 0 returned -14 [ 850.765497][T11424] kAFS: No cell specified [ 850.818342][T11423] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2052'. [ 852.683894][T11440] hub 9-0:1.0: USB hub found [ 852.805924][T11440] hub 9-0:1.0: 1 port detected [ 854.152941][T11453] netlink: 'syz.3.2059': attribute type 1 has an invalid length. [ 854.199052][T11453] device bond2 entered promiscuous mode [ 854.205131][T11453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 854.548160][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 854.605636][T11465] qnx4: no qnx4 filesystem (no root dir). [ 855.090613][ T4256] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 856.175487][T11474] kAFS: No cell specified [ 856.234829][ T4256] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 856.267870][ T4256] usb 4-1: config 0 has no interface number 0 [ 856.396560][ T4256] usb 4-1: config 0 interface 113 has no altsetting 0 [ 856.441057][T11479] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2066'. [ 857.410559][ T4256] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 857.451731][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.636443][ T4256] usb 4-1: Product: syz [ 858.538425][ T4256] usb 4-1: Manufacturer: syz [ 858.543283][ T4256] usb 4-1: SerialNumber: syz [ 859.945123][ T4256] usb 4-1: config 0 descriptor?? [ 860.284602][ T4256] usb 4-1: can't set config #0, error -71 [ 860.308645][ T4256] usb 4-1: USB disconnect, device number 16 [ 860.386675][T11511] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 860.575157][T11511] device bond5 entered promiscuous mode [ 860.581083][T11511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 863.353400][T11531] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2080'. [ 863.908559][T11537] hub 9-0:1.0: USB hub found [ 863.923466][T11538] kAFS: No cell specified [ 863.991174][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2082'. [ 864.605503][T11537] hub 9-0:1.0: 1 port detected [ 866.409388][T11555] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 871.533419][T11603] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 876.548708][T11641] kAFS: No cell specified [ 878.904933][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 880.866582][ T4215] Bluetooth: hci5: command 0x0409 tx timeout [ 880.957906][ T4270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.349211][ T4270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.612581][T11686] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 882.637440][ T4270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.905183][T11694] kAFS: No cell specified [ 882.916383][ T4270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.057381][ T4215] Bluetooth: hci5: command 0x041b tx timeout [ 883.642694][T11654] chnl_net:caif_netlink_parms(): no params data found [ 884.486377][T11708] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2125'. [ 884.602821][T11654] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.628854][T11654] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.662080][T11654] device bridge_slave_0 entered promiscuous mode [ 884.691160][T11654] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.716495][T11654] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.728742][T11654] device bridge_slave_1 entered promiscuous mode [ 884.883142][T11654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.927262][T11654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.280949][ T7515] Bluetooth: hci5: command 0x040f tx timeout [ 886.045423][T11654] team0: Port device team_slave_0 added [ 887.051694][T11654] team0: Port device team_slave_1 added [ 887.351801][T11654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.361231][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.751684][ T4215] Bluetooth: hci5: command 0x0419 tx timeout [ 888.943336][T11654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.974534][T11654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.982411][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.261198][T11654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.043974][T11761] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2136'. [ 895.108669][T11654] device hsr_slave_0 entered promiscuous mode [ 895.139074][T11654] device hsr_slave_1 entered promiscuous mode [ 895.156844][T11654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.177995][T11654] Cannot create hsr debugfs directory [ 895.232070][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 896.195405][T11795] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 897.352471][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 897.365895][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.999602][ T4270] device hsr_slave_0 left promiscuous mode [ 898.061581][ T4270] device hsr_slave_1 left promiscuous mode [ 898.126102][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.133680][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.141907][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.149474][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.162351][ T4270] device veth1_macvtap left promiscuous mode [ 898.168620][ T4270] device veth0_macvtap left promiscuous mode [ 898.174918][ T4270] device veth1_vlan left promiscuous mode [ 898.180863][ T4270] device veth0_vlan left promiscuous mode [ 899.653260][ T4270] bond5 (unregistering): Released all slaves [ 899.974939][ T4270] bond4 (unregistering): Released all slaves [ 900.198019][ T4270] bond3 (unregistering): Released all slaves [ 900.218156][ T4270] bond2 (unregistering): Released all slaves [ 900.245121][ T4270] bond1 (unregistering): Released all slaves [ 900.506673][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 900.553266][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 900.770300][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.117010][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.612686][ T4270] bond0 (unregistering): Released all slaves [ 901.724249][T11654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 902.071371][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 902.190152][T11654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 902.595453][T11857] netlink: 'syz.2.2157': attribute type 1 has an invalid length. [ 902.621820][T11654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 902.709648][T11654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 902.846184][T11872] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2160'. [ 903.267433][T11876] kAFS: No cell specified [ 903.923715][T11654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.048188][T11654] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.081368][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 904.141619][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 904.182860][T11654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 904.368137][T11654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 904.544500][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 904.609122][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 904.726002][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.733467][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.909919][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 905.027729][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 905.159343][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.166470][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.380773][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 905.580953][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 905.617781][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 905.685204][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 905.738745][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 905.802575][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 906.371639][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 906.534657][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 906.593570][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 906.641528][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 906.700946][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 906.742289][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 906.784826][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 908.055073][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 908.084357][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.121820][T11654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.933978][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 909.963005][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 910.006859][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 910.164109][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 910.184878][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 910.237928][T11654] device veth0_vlan entered promiscuous mode [ 910.371583][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 910.508520][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 911.227732][T11654] device veth1_vlan entered promiscuous mode [ 912.391398][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 912.401379][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 912.717941][T11654] device veth0_macvtap entered promiscuous mode [ 912.960246][T11654] device veth1_macvtap entered promiscuous mode [ 913.302591][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.379434][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.448056][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.632439][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.642490][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.706199][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.800173][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.964504][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.185126][T11654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.508955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 914.520856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 914.532491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 914.544066][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.594653][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.604638][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.661161][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.694366][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.749360][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.760029][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.770534][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.782018][T11654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.802626][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 914.835739][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 915.923314][T11654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.952560][T11654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.994342][T11654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.023044][T11654] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.343814][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.379925][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.400126][T11989] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2179'. [ 916.469009][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.523428][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.551796][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.620290][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 920.166270][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 920.542371][T12038] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 923.440675][T12062] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 923.478698][T12062] device bond3 entered promiscuous mode [ 923.485901][T12062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 926.545756][T12100] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 927.418199][T12101] kAFS: No cell specified [ 928.464655][T12117] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 928.515024][T12117] device bond2 entered promiscuous mode [ 928.521674][T12117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 928.570175][T12123] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2205'. [ 928.676690][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 932.583562][T12167] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 933.251927][T12168] kAFS: No cell specified [ 940.196788][T12225] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 948.045624][T12277] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 949.552604][T12292] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 954.368829][T12334] kAFS: No cell specified [ 961.775775][T12401] kAFS: No cell specified [ 962.598826][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 962.605228][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.099244][T12490] input: syz0 as /devices/virtual/input/input7 [ 981.146739][T12586] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2311'. [ 982.524079][T12605] device vlan0 entered promiscuous mode [ 982.684268][T12607] overlayfs: missing 'lowerdir' [ 982.731124][T12605] team0: Port device vlan0 added [ 983.175125][ T6862] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 984.372150][ T6862] usb 6-1: Using ep0 maxpacket: 8 [ 985.355899][ T6862] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 986.126790][ T6862] usb 6-1: config 179 has no interface number 0 [ 986.412042][ T6862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 986.496250][ T6862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 986.509246][ T6862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 986.522516][T12634] nbd2: detected capacity change from 0 to 4294967296 [ 986.527969][ T6862] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 986.545233][ T6862] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 986.565134][ T6862] usb 6-1: config 179 interface 65 has no altsetting 0 [ 986.573397][ T6862] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 986.582984][ T6862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.626831][T12633] block nbd2: shutting down sockets [ 986.638953][ T6862] usb 6-1: can't set config #179, error -71 [ 986.654507][ C0] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.665616][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.676732][ T1202] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.687967][ T1202] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.698215][ T1202] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.709055][ T1202] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.717325][ T1202] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.728146][ T1202] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.736307][ T1202] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.747152][ T1202] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.755375][ T1202] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.766194][ T1202] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.775211][ T1202] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.786876][ T1202] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.795401][ T1202] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.807654][ T1202] Buffer I/O error on dev nbd2, logical block 0, async page read [ 986.815556][T12128] ldm_validate_partition_table(): Disk read failed. [ 986.846850][ T6862] usb 6-1: USB disconnect, device number 2 [ 986.863135][T12128] Dev nbd2: unable to read RDB block 0 [ 986.889122][T12128] nbd2: unable to read partition table [ 986.930880][T12128] nbd2: partition table beyond EOD, truncated [ 987.887184][T12670] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2329'. [ 988.125013][T12675] binder: 12674:12675 ioctl c0306201 0 returned -14 [ 990.315687][T12691] input: syz0 as /devices/virtual/input/input8 [ 991.412872][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 991.910711][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 992.177946][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 992.296043][T12703] device bridge_slave_0 left promiscuous mode [ 992.344628][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.414016][T12703] device bridge_slave_1 left promiscuous mode [ 992.420298][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.462439][T12703] bond0: (slave bond_slave_0): Releasing backup interface [ 992.757574][T12703] bond0: (slave bond_slave_1): Releasing backup interface [ 992.974875][T12703] team0: Port device team_slave_0 removed [ 993.044568][T12703] team0: Port device team_slave_1 removed [ 993.051208][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.102554][T12703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.126258][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.144981][T12703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.406709][T12735] binder: 12734:12735 ioctl c0306201 0 returned -14 [ 997.573985][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 998.738024][T12793] nbd5: detected capacity change from 0 to 4294967296 [ 998.909161][T12803] block nbd5: shutting down sockets [ 999.799081][ C1] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 999.810168][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 999.834931][ T1202] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 999.846279][ T1202] Buffer I/O error on dev nbd5, logical block 0, async page read [ 999.861708][T12338] ldm_validate_partition_table(): Disk read failed. [ 999.877928][T12338] Dev nbd5: unable to read RDB block 0 [ 999.963690][T12338] nbd5: unable to read partition table [ 1000.029458][T12338] nbd5: partition table beyond EOD, truncated [ 1001.412197][T12826] 9pnet: Insufficient options for proto=fd [ 1002.419162][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 1005.989300][T12850] tipc: Started in network mode [ 1006.031689][T12850] tipc: Node identity 0aa2c620fbbb, cluster identity 4711 [ 1006.064841][T12850] tipc: Enabled bearer , priority 0 [ 1006.118933][T12852] device syzkaller0 entered promiscuous mode [ 1006.275684][T12849] tipc: Resetting bearer [ 1006.515253][T12849] tipc: Disabling bearer [ 1007.306796][T12491] tipc: Node number set to 4044998176 [ 1009.492710][T12892] 9pnet: Insufficient options for proto=fd [ 1012.872115][T12937] netlink: 'syz.5.2391': attribute type 1 has an invalid length. [ 1012.894314][T12937] device bond1 entered promiscuous mode [ 1012.900180][T12937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1013.553112][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 1014.057040][T12958] 9pnet: Insufficient options for proto=fd [ 1014.322580][ T1109] Bluetooth: hci5: command 0x0406 tx timeout [ 1019.159385][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1020.196364][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1020.293960][T13021] 9pnet: Insufficient options for proto=fd [ 1021.960452][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1021.968185][ T23] usb 1-1: can't read configurations, error -71 [ 1023.198332][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1024.960871][T13054] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1025.372050][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 1028.810612][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.817041][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.898621][ T7] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1029.187200][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 1030.128132][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.357194][ T7] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1031.449999][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.508023][ T7] usb 2-1: config 0 descriptor?? [ 1031.622657][ T7] usb 2-1: can't set config #0, error -71 [ 1031.658906][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 1031.690037][ T7] usb 2-1: USB disconnect, device number 28 [ 1035.791932][T13132] 9pnet: Insufficient options for proto=fd [ 1037.230640][T13143] kAFS: No cell specified [ 1039.147109][T13165] tipc: Started in network mode [ 1039.152298][T13165] tipc: Node identity aa79ce1cd4ef, cluster identity 4711 [ 1039.160130][T13165] tipc: Enabled bearer , priority 0 [ 1039.290269][T13165] device syzkaller0 entered promiscuous mode [ 1040.303054][ T4215] Bluetooth: hci0: command 0x0409 tx timeout [ 1040.398417][T12491] tipc: Node number set to 2123812380 [ 1040.476245][T13163] tipc: Resetting bearer [ 1041.796232][T13172] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2450'. [ 1042.209668][T13163] tipc: Disabling bearer [ 1042.356761][T13151] chnl_net:caif_netlink_parms(): no params data found [ 1042.670818][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 1044.830649][T13151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.870333][T12491] Bluetooth: hci0: command 0x040f tx timeout [ 1045.039430][T13151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.061556][T13151] device bridge_slave_0 entered promiscuous mode [ 1046.377854][T13151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.384983][T13151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.412925][T13151] device bridge_slave_1 entered promiscuous mode [ 1046.667831][T13214] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.463343][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 1047.745824][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2461'. [ 1048.530387][T13151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.730655][T13151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.346738][T13235] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2465'. [ 1049.813469][T13151] team0: Port device team_slave_0 added [ 1049.835945][T13151] team0: Port device team_slave_1 added [ 1051.514002][ T1230] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.059660][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2471'. [ 1052.471626][ T1230] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.526910][T13151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.534017][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.618842][T13151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.691511][T13151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.698667][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.724983][T13151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.768546][ T1230] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.857145][ T1230] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.998318][T13151] device hsr_slave_0 entered promiscuous mode [ 1054.030348][T13151] device hsr_slave_1 entered promiscuous mode [ 1054.182851][T13151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.191899][T13151] Cannot create hsr debugfs directory [ 1054.232080][T13280] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1054.443651][T13280] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.086829][T13151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1060.175846][T13151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1060.190938][T13151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1060.208550][T13151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1060.573281][T13151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.684752][T13151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.879725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1062.915298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1064.045265][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1064.055889][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1064.064612][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.071714][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.079754][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1064.530544][T13358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2497'. [ 1064.618091][T13372] 9pnet: Insufficient options for proto=fd [ 1064.650867][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1064.671246][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1064.689203][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.696516][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.819364][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1064.854959][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1065.508869][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1065.542849][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1065.722899][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1065.741970][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1065.866394][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1066.526752][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1066.536054][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1066.557085][T13151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.854713][T13151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1066.967470][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.008192][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1068.383950][ T1230] device hsr_slave_0 left promiscuous mode [ 1068.525588][ T1230] device hsr_slave_1 left promiscuous mode [ 1069.254525][ T1230] device veth1_macvtap left promiscuous mode [ 1069.276088][ T1230] device veth0_macvtap left promiscuous mode [ 1069.310542][ T1230] device veth1_vlan left promiscuous mode [ 1069.316767][ T1230] device veth0_vlan left promiscuous mode [ 1069.525049][ T1230] bond3 (unregistering): Released all slaves [ 1069.792821][ T1230] bond2 (unregistering): Released all slaves [ 1069.807087][ T1230] bond1 (unregistering): Released all slaves [ 1071.079519][T13434] 9pnet: Insufficient options for proto=fd [ 1072.865447][ T1230] bond0 (unregistering): Released all slaves [ 1072.992958][T13151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.013566][T13440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2513'. [ 1073.053258][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1073.061211][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1076.160379][T13478] 9pnet: Insufficient options for proto=fd [ 1076.515421][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1076.627458][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1077.154396][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1077.229072][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1077.392805][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1077.596550][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1077.671493][T13151] device veth0_vlan entered promiscuous mode [ 1077.747241][T13151] device veth1_vlan entered promiscuous mode [ 1077.837829][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1077.875831][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1077.918424][T13151] device veth0_macvtap entered promiscuous mode [ 1078.070940][T13151] device veth1_macvtap entered promiscuous mode [ 1078.557047][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.588491][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.619995][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.669872][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.725156][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.785510][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.837371][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.941336][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.199851][T13151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.667880][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1079.704523][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1079.837276][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1079.938609][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1080.411906][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.545272][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.665435][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.676142][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.139359][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.197077][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.207086][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.258274][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.288876][T13151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.310039][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1081.326842][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.403396][T13151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.432272][T13151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.563396][T13151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.652441][T13523] xt_hashlimit: size too large, truncated to 1048576 [ 1081.688081][T13151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.853602][ T8816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.862048][ T8816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.072546][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.117917][T13545] 9pnet: Insufficient options for proto=fd [ 1086.763674][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1086.765304][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.834003][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1086.965407][T13553] team0: No ports can be present during mode change [ 1086.990128][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1088.158379][T13553] team0 (unregistering): Port device team_slave_0 removed [ 1088.224519][T13553] team0 (unregistering): Port device team_slave_1 removed [ 1088.583473][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2443'. [ 1091.398365][T13592] 9pnet: Insufficient options for proto=fd [ 1094.111741][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1094.118217][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.113514][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1095.971489][T13618] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1098.586982][T13649] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2554'. [ 1099.531354][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1099.991360][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.557792][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1100.567292][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.702816][ T23] usb 1-1: config 0 descriptor?? [ 1100.707770][T13652] chnl_net:caif_netlink_parms(): no params data found [ 1101.145701][ T7194] Bluetooth: hci2: command 0x0409 tx timeout [ 1101.179468][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.192982][T13652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.203842][T13652] device bridge_slave_0 entered promiscuous mode [ 1101.225102][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.252552][T13652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.263566][ T23] ath6kl: Failed to read usb control message: -71 [ 1101.270130][ T23] ath6kl: Unable to read the bmi data from the device: -71 [ 1101.321900][T13652] device bridge_slave_1 entered promiscuous mode [ 1101.328787][ T23] ath6kl: Unable to recv target info: -71 [ 1101.401234][ T23] ath6kl: Failed to init ath6kl core: -71 [ 1101.554656][ T23] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1101.588451][ T23] usb 1-1: USB disconnect, device number 19 [ 1101.739315][T13652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.055985][T13652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.065412][ T6862] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1102.157360][T13698] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2561'. [ 1102.238926][T13652] team0: Port device team_slave_0 added [ 1102.313062][ T4261] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.339420][ T6862] usb 7-1: Using ep0 maxpacket: 16 [ 1102.347872][T13652] team0: Port device team_slave_1 added [ 1102.424984][ T4261] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.481139][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2562'. [ 1102.492531][ T6862] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1102.494077][T13652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.546185][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.623817][T13652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.868946][ T4261] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.369488][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 1103.640420][ T6862] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1103.650418][ T6862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.659858][ T6862] usb 7-1: Product: syz [ 1103.660308][T13652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.664124][ T6862] usb 7-1: Manufacturer: syz [ 1103.676517][ T6862] usb 7-1: SerialNumber: syz [ 1103.684662][ T6862] usb 7-1: config 0 descriptor?? [ 1103.714792][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.753575][ T6862] appledisplay 7-1:0.0: Could not find int-in endpoint [ 1103.860953][ T6862] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1104.482675][T13652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.666583][T13724] ubi31: attaching mtd0 [ 1104.688136][T13724] ubi31: scanning is finished [ 1104.692987][T13724] ubi31: empty MTD device detected [ 1104.901750][T13724] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1105.144041][ T7] usb 7-1: USB disconnect, device number 2 [ 1105.237814][T13652] device hsr_slave_0 entered promiscuous mode [ 1105.857206][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 1105.991555][T13652] device hsr_slave_1 entered promiscuous mode [ 1107.291840][T13652] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1107.390960][T11176] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1107.692149][T13652] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1107.817252][T11176] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.857444][T11176] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1107.911982][T11176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.127069][T11176] usb 3-1: config 0 descriptor?? [ 1108.157345][ T7515] Bluetooth: hci2: command 0x0419 tx timeout [ 1108.202089][T13652] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1108.251626][T13652] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1108.568490][T13652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.629222][T11176] ath6kl: Failed to read usb control message: -71 [ 1108.657633][T11176] ath6kl: Unable to read the bmi data from the device: -71 [ 1108.662756][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1108.690025][T11176] ath6kl: Unable to recv target info: -71 [ 1108.692685][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1108.756172][T13652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.798782][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1108.823037][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1108.851547][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.858976][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.940030][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 1108.946150][T11062] Bluetooth: hci5: sending frame failed (-49) [ 1108.958991][ T4261] device hsr_slave_0 left promiscuous mode [ 1108.965711][ T4261] device hsr_slave_1 left promiscuous mode [ 1108.976048][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.987458][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.996043][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.014168][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.048686][ T4261] device bridge_slave_1 left promiscuous mode [ 1109.054970][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.080162][ T4261] device bridge_slave_0 left promiscuous mode [ 1109.086443][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.134679][ T4261] device veth1_macvtap left promiscuous mode [ 1109.153077][ T4261] device veth0_macvtap left promiscuous mode [ 1109.159199][ T4261] device veth1_vlan left promiscuous mode [ 1109.180385][ T4261] device veth0_vlan left promiscuous mode [ 1110.224217][T11176] ath6kl: Failed to init ath6kl core: -71 [ 1110.537812][ T4261] bond1 (unregistering): Released all slaves [ 1111.159468][ T7194] Bluetooth: hci5: command 0x1001 tx timeout [ 1111.174486][T11062] Bluetooth: hci5: sending frame failed (-49) [ 1111.584350][ T4261] team0 (unregistering): Port device team_slave_1 removed [ 1111.816023][ T4261] team0 (unregistering): Port device team_slave_0 removed [ 1112.043513][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.254535][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.508336][ T4261] bond0 (unregistering): Released all slaves [ 1112.611427][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1112.611433][T11176] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1112.684928][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1112.703576][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1112.734766][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.742006][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.750985][T11176] usb 3-1: USB disconnect, device number 13 [ 1112.803811][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1112.844211][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1112.998552][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1113.019213][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1113.325289][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1113.375430][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1113.567902][T10917] Bluetooth: hci5: command 0x1009 tx timeout [ 1113.585431][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1113.596047][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1113.605549][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1113.616659][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1113.637028][T13652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1113.646730][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1114.575966][T13652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.601545][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1114.632449][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1117.755691][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1118.090117][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1119.869366][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1119.925221][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1119.943317][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1119.967872][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1120.882671][T13652] device veth0_vlan entered promiscuous mode [ 1120.958134][T13652] device veth1_vlan entered promiscuous mode [ 1121.071229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1121.114718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1121.151598][T13652] device veth0_macvtap entered promiscuous mode [ 1121.179887][ T5153] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1121.199635][T13652] device veth1_macvtap entered promiscuous mode [ 1121.671602][ T5153] usb 3-1: Using ep0 maxpacket: 8 [ 1122.131807][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1122.163966][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1122.337911][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.751822][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.920211][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.021935][ T5153] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1123.075610][ T5153] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1123.085965][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.115980][ T5153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1123.117270][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.153702][ T5153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1123.170702][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.186998][ T5153] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.202085][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.212866][ T5153] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1123.232498][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.249488][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.273565][T13652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.314041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1123.350800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1123.388741][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.440846][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.526480][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.537657][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.547743][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.558656][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.564038][ T5153] usb 3-1: GET_CAPABILITIES returned 0 [ 1123.568633][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.584638][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.600947][ T5153] usbtmc 3-1:16.0: can't read capabilities [ 1123.664153][T13652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.733416][T13652] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.859073][T13652] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.879323][ T5153] usb 3-1: USB disconnect, device number 14 [ 1124.095208][T13652] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.733117][T13652] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.806939][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1124.878111][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1125.407243][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.484910][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.549930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1127.594244][T13962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1127.609236][ T4215] Bluetooth: hci5: command 0x1003 tx timeout [ 1127.616104][T11062] Bluetooth: hci5: sending frame failed (-49) [ 1127.815263][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.596413][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.667717][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1129.583230][T13982] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1129.696876][T13982] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1129.731414][T13982] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1129.798739][ T4215] Bluetooth: hci5: command 0x1001 tx timeout [ 1129.805806][T11062] Bluetooth: hci5: sending frame failed (-49) [ 1132.270193][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 1132.351714][ T4215] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1132.640241][ T4215] usb 8-1: Using ep0 maxpacket: 16 [ 1134.768179][ T4215] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1135.890708][ T4215] usb 8-1: unable to read config index 0 descriptor/all [ 1135.898473][ T4215] usb 8-1: can't read configurations, error -71 [ 1136.830870][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1136.840578][T14052] netlink: del zone limit has 8 unknown bytes [ 1141.874922][T14084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'. [ 1145.904930][T14097] netlink: 'syz.7.2643': attribute type 1 has an invalid length. [ 1146.265689][T14112] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1150.560379][T14142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1158.013620][T14177] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1158.392049][T14206] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2669'. [ 1159.756966][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1159.763470][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1162.470827][T14225] tipc: Started in network mode [ 1162.535255][T14225] tipc: Node identity 32bfedca8ce2, cluster identity 4711 [ 1162.689152][T14225] tipc: Enabled bearer , priority 0 [ 1163.666677][T14225] tipc: Disabling bearer [ 1165.878636][ T4215] Bluetooth: hci0: command 0x2016 tx timeout [ 1168.911813][T14299] tipc: Enabled bearer , priority 0 [ 1170.280764][T14289] tipc: Disabling bearer [ 1171.152757][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2693'. [ 1172.818499][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 1181.283627][T14336] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1181.540716][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'. [ 1181.675717][T14362] netlink: 'syz.6.2707': attribute type 1 has an invalid length. [ 1181.693571][T14362] device bond1 entered promiscuous mode [ 1181.699545][T14362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1181.902931][T14374] tipc: Started in network mode [ 1181.908165][T14374] tipc: Node identity ded3f5038464, cluster identity 4711 [ 1181.916452][T14374] tipc: Enabled bearer , priority 0 [ 1183.704153][T10535] tipc: Node number set to 1522005251 [ 1184.035973][T14369] tipc: Disabling bearer [ 1186.095622][T14413] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 1186.118726][T14413] device bond1 entered promiscuous mode [ 1186.124680][T14413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1189.764254][T14449] tipc: Enabled bearer , priority 0 [ 1191.007407][T14444] tipc: Disabling bearer [ 1192.453368][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 1192.565835][T14467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2733'. [ 1197.884326][T14536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2748'. [ 1198.962392][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 1204.616447][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'. [ 1206.677116][T14604] chnl_net:caif_netlink_parms(): no params data found [ 1207.508822][ T4215] Bluetooth: hci1: command 0x0409 tx timeout [ 1207.917143][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.924758][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.933136][T14604] device bridge_slave_0 entered promiscuous mode [ 1207.942173][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.949468][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.958000][T14604] device bridge_slave_1 entered promiscuous mode [ 1207.988132][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.001708][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.109721][T14604] team0: Port device team_slave_0 added [ 1209.100249][T14661] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2773'. [ 1209.130286][T14604] team0: Port device team_slave_1 added [ 1209.191604][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.268461][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.489497][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.502756][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.510107][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.641272][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.703859][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 1210.189497][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 1210.460673][T14604] device hsr_slave_0 entered promiscuous mode [ 1210.498445][T14604] device hsr_slave_1 entered promiscuous mode [ 1210.678314][T14604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1210.713137][T14604] Cannot create hsr debugfs directory [ 1211.501560][T14604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.623664][T14699] netlink: 'syz.7.2779': attribute type 1 has an invalid length. [ 1212.358757][T14604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.413797][ T4218] Bluetooth: hci1: command 0x040f tx timeout [ 1213.863298][T14604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.483698][T14728] vivid-000: disconnect [ 1214.892160][T14604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.909378][ T4218] Bluetooth: hci1: command 0x0419 tx timeout [ 1214.931415][T14728] netlink: 'syz.0.2784': attribute type 13 has an invalid length. [ 1214.979627][T14728] vivid-000: reconnect [ 1215.233189][T14604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1215.271177][T14604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1215.329146][T14604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1215.377308][T14604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1215.387690][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 1215.656279][T14604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.303945][T14604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.570545][T14604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1216.608659][T14604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1216.621695][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1216.644052][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1216.657381][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1216.667058][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1216.675941][T13029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.683431][T13029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.691873][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1216.701046][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1216.710264][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.717393][T13029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.749855][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1216.795774][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1216.825875][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1216.845410][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1216.854984][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1216.864757][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1216.874092][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1216.882814][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1216.892179][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1216.901302][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1217.097584][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1217.255343][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1217.418815][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1217.736736][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2791'. [ 1218.920515][T14583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.960681][T14583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1219.699514][T14604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.130199][T14604] device veth0_vlan entered promiscuous mode [ 1220.176963][T14604] device veth1_vlan entered promiscuous mode [ 1220.304199][T14604] device veth0_macvtap entered promiscuous mode [ 1220.338860][T14604] device veth1_macvtap entered promiscuous mode [ 1220.406368][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.580098][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.606669][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.628860][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.654220][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.673604][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.684043][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.808983][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.809020][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.809040][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.833490][T14604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.944066][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1221.148039][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1221.148648][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1221.149242][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1221.149853][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1221.150510][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1221.151034][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1221.151561][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1221.152123][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1221.152667][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1221.153227][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1221.153777][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1221.155060][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1221.239820][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1221.253620][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1221.290039][T14807] tipc: Enabling of bearer rejected, failed to enable media [ 1221.317156][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.317446][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.317554][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.317886][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.318173][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.318190][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.320863][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.321319][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.322012][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.322288][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.368178][T14604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.375155][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1221.378135][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1221.551339][T14604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.555740][T14604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.557454][T14604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.558702][T14604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.962470][T14823] overlayfs: failed to resolve './file0': -2 [ 1224.835959][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2805'. [ 1225.007338][T14583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.021826][T14583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.101112][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1225.137796][T14155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.268047][T14155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.330846][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1225.337329][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1225.554272][T13029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1227.459068][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2814'. [ 1228.479992][T14873] tipc: Enabling of bearer rejected, failed to enable media [ 1230.156710][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2820'. [ 1230.334382][T14894] overlayfs: failed to resolve './file0': -2 [ 1232.272150][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2824'. [ 1232.350155][T14910] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1233.653440][ T1106] Bluetooth: hci2: command 0x0406 tx timeout [ 1234.649782][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2832'. [ 1235.386179][T14964] tipc: Enabling of bearer rejected, failed to enable media [ 1235.501780][T14962] input: syz1 as /devices/virtual/input/input10 [ 1235.604794][T14969] overlayfs: failed to resolve './file0': -2 [ 1237.860231][T14982] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2837'. [ 1241.469045][T14999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2844'. [ 1242.929120][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 1243.880177][T11176] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1244.738420][T15040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2852'. [ 1244.844756][T11176] usb 8-1: Using ep0 maxpacket: 16 [ 1246.056943][T11176] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.091908][T15053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1246.121017][T11176] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1246.130113][T11176] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.066046][T11176] usb 8-1: config 0 descriptor?? [ 1247.470784][T11176] usb 8-1: can't set config #0, error -71 [ 1247.485730][T11176] usb 8-1: USB disconnect, device number 4 [ 1248.362057][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1248.989770][T15082] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1250.780721][T15075] tipc: Started in network mode [ 1250.785718][T15075] tipc: Node identity 0614873e146f, cluster identity 4711 [ 1250.793109][T15075] tipc: Enabled bearer , priority 0 [ 1251.626911][T15075] device syzkaller0 entered promiscuous mode [ 1251.646360][T15073] tipc: Resetting bearer [ 1252.673770][T15073] tipc: Disabling bearer [ 1252.962738][ T4256] tipc: Node number set to 310085438 [ 1253.217032][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2874'. [ 1254.139602][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'. [ 1254.986057][T15148] device bridge1 entered promiscuous mode [ 1258.655992][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.664044][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.672153][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.680925][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.695689][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.707597][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.811051][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.820271][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.828662][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1258.838424][T15170] netlink: 'syz.7.2886': attribute type 2 has an invalid length. [ 1259.865729][T15185] tipc: Enabled bearer , priority 0 [ 1260.013709][T15185] device syzkaller0 entered promiscuous mode [ 1261.998856][T15179] tipc: Resetting bearer [ 1262.643398][T15192] overlayfs: failed to resolve './file1': -2 [ 1263.611955][T15201] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2894'. [ 1263.999090][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1265.477684][T15179] tipc: Disabling bearer [ 1266.843202][T15233] validate_nla: 44 callbacks suppressed [ 1266.843222][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1266.899139][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1266.907345][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1266.915819][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1266.923738][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1266.932378][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1266.973769][T15240] overlayfs: unrecognized mount option "obj_type=[-\\" or missing value [ 1266.986859][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1267.001078][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1267.044258][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1267.064326][T15233] netlink: 'syz.6.2901': attribute type 2 has an invalid length. [ 1267.111431][T15238] device bond2 entered promiscuous mode [ 1267.117902][T15238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1267.364346][T15252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2906'. [ 1268.831004][T15258] overlayfs: failed to resolve './file1': -2 [ 1269.194150][T15267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2911'. [ 1270.464849][T15270] tipc: Enabled bearer , priority 0 [ 1270.584758][T15270] device syzkaller0 entered promiscuous mode [ 1271.772753][T15261] tipc: Resetting bearer [ 1271.862387][T15261] tipc: Disabling bearer [ 1273.671111][ T4218] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1274.103492][ T8816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.195856][ T8816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1274.473877][ T4218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.544527][ T4218] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1274.566387][ T4218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.582259][ T4218] usb 2-1: config 0 descriptor?? [ 1274.625561][ T8816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.663963][ T8816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1274.828441][ T8816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.864315][ T8816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1276.146242][T14328] Bluetooth: hci4: command 0x0409 tx timeout [ 1276.156398][ T4218] ath6kl: Unsupported hardware version: 0x0 [ 1276.225918][T15285] chnl_net:caif_netlink_parms(): no params data found [ 1276.462768][T15328] overlayfs: failed to resolve './file1': -2 [ 1276.614557][ T4218] ath6kl: Failed to init ath6kl core: -22 [ 1277.070185][ T4218] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 1277.081757][ T4218] usb 2-1: USB disconnect, device number 29 [ 1277.680028][T15340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1278.259095][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.266226][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.324683][T15285] device bridge_slave_0 entered promiscuous mode [ 1278.373160][ T4218] Bluetooth: hci4: command 0x041b tx timeout [ 1278.381835][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.444178][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.514026][T15285] device bridge_slave_1 entered promiscuous mode [ 1279.470697][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.783505][T14328] Bluetooth: hci4: command 0x040f tx timeout [ 1281.360653][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.996635][T15285] team0: Port device team_slave_0 added [ 1282.225125][T15285] team0: Port device team_slave_1 added [ 1282.365505][T15393] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 1282.569261][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.586723][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.041201][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.080922][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.096291][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.122602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.221391][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.282268][ T7515] Bluetooth: hci4: command 0x0419 tx timeout [ 1283.850051][T15285] device hsr_slave_0 entered promiscuous mode [ 1283.881368][T15285] device hsr_slave_1 entered promiscuous mode [ 1283.913306][T15285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1283.920913][T15285] Cannot create hsr debugfs directory [ 1283.994005][T15412] tipc: Enabled bearer , priority 0 [ 1284.135438][T15414] device syzkaller0 entered promiscuous mode [ 1284.241750][T15414] tipc: Resetting bearer [ 1284.326920][T15414] tipc: Disabling bearer [ 1284.870066][T15435] validate_nla: 44 callbacks suppressed [ 1284.870090][T15435] netlink: 'syz.2.2943': attribute type 1 has an invalid length. [ 1287.065674][ T8816] device hsr_slave_0 left promiscuous mode [ 1287.102466][ T8816] device hsr_slave_1 left promiscuous mode [ 1287.123428][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.134128][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.152805][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.160627][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.313016][ T8816] device bridge_slave_1 left promiscuous mode [ 1287.319393][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.120166][ T8816] device bridge_slave_0 left promiscuous mode [ 1288.135393][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.167971][ T8816] device veth1_macvtap left promiscuous mode [ 1288.185227][ T8816] device veth0_macvtap left promiscuous mode [ 1288.199532][ T8816] device veth1_vlan left promiscuous mode [ 1288.214622][ T8816] device veth0_vlan left promiscuous mode [ 1288.331362][ T26] audit: type=1326 audit(1747627494.269:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.7.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1288.385864][ T26] audit: type=1326 audit(1747627494.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.7.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1288.408411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.426548][ T26] audit: type=1326 audit(1747627494.316:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.7.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1288.884778][ T8816] bond2 (unregistering): Released all slaves [ 1288.951507][ T8816] bond1 (unregistering): Released all slaves [ 1289.127057][ T8816] team0 (unregistering): Port device team_slave_1 removed [ 1289.142945][ T8816] team0 (unregistering): Port device team_slave_0 removed [ 1289.157427][ T8816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.198271][ T8816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.340848][ T8816] bond0 (unregistering): Released all slaves [ 1289.595643][T15285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1289.655841][T15285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1289.676744][T15285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1289.688706][T15285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1290.822679][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.937149][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1290.945198][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1290.982636][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.000727][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1291.025125][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1291.031597][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1291.038864][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.129458][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.136623][T14155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.758771][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1292.009815][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1292.019124][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.050675][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.057814][T14155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.116350][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1292.192188][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1292.227832][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1292.272501][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1292.488233][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1292.914727][T15285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1293.485208][T15285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.528441][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1293.549790][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.604617][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.666469][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.714825][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.769759][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.821173][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1295.378168][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1295.530598][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1296.518987][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.437930][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1297.469805][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1298.035293][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1298.826387][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1298.837168][T15285] device veth0_vlan entered promiscuous mode [ 1299.145433][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1299.175382][T14155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1299.993964][T15285] device veth1_vlan entered promiscuous mode [ 1300.149774][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1301.079232][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1301.133711][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1301.166197][T15285] device veth0_macvtap entered promiscuous mode [ 1301.210599][T15285] device veth1_macvtap entered promiscuous mode [ 1302.088651][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1302.139762][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1302.236096][T15580] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2972'. [ 1302.323001][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.853291][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.030983][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.210314][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.280858][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.291659][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.301551][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.315786][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.327329][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.338146][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.352311][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.362544][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.373384][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.386113][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.397045][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.444785][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.494002][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.578388][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.697986][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.709184][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.719952][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.783063][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.341623][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1304.560559][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1304.580235][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1305.352351][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1305.724899][T15285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.767999][T15285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.788343][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1305.805223][T15285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.834630][T15285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.927286][T15638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1308.826365][T14583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.869287][T14583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.878518][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.894374][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.043256][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1309.134016][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1310.209966][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2990'. [ 1311.898048][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2994'. [ 1314.104713][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3002'. [ 1315.729020][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'. [ 1320.107565][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3020'. [ 1322.238223][T15200] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1322.634072][T15200] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.693863][T15200] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1322.814266][T15200] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.009346][T15200] usb 8-1: config 0 descriptor?? [ 1323.195263][T15200] pwc: Askey VC010 type 2 USB webcam detected. [ 1323.595887][T15200] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1324.408525][T15200] pwc: recv_control_msg error -32 req 02 val 2700 [ 1324.472541][T15200] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1324.515389][T15200] pwc: recv_control_msg error -32 req 04 val 1000 [ 1324.602580][T15853] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1324.992341][T15200] pwc: recv_control_msg error -32 req 04 val 1300 [ 1325.071294][T15200] pwc: recv_control_msg error -32 req 04 val 1400 [ 1325.402642][T15200] pwc: recv_control_msg error -71 req 02 val 2100 [ 1325.425541][T15200] pwc: recv_control_msg error -71 req 04 val 1500 [ 1325.456552][T15200] pwc: recv_control_msg error -71 req 02 val 2500 [ 1326.664697][ T4188] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1326.867322][T15200] pwc: recv_control_msg error -71 req 02 val 2400 [ 1326.899300][T15200] pwc: recv_control_msg error -71 req 02 val 2600 [ 1326.923295][T15200] pwc: recv_control_msg error -71 req 02 val 2900 [ 1326.945518][T15200] pwc: recv_control_msg error -71 req 02 val 2800 [ 1326.984823][T15200] pwc: recv_control_msg error -71 req 04 val 1100 [ 1327.048995][T15200] pwc: recv_control_msg error -71 req 04 val 1200 [ 1327.221544][T15200] pwc: Registered as video103. [ 1327.364789][T15200] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11 [ 1327.524872][T15200] usb 8-1: USB disconnect, device number 5 [ 1328.946589][T15901] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 1329.030993][T15901] device bond1 entered promiscuous mode [ 1329.036859][T15901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1329.122755][T15898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1333.450385][T15937] tmpfs: Unknown parameter 'quota' [ 1333.983499][T15946] netlink: 'syz.6.3060': attribute type 1 has an invalid length. [ 1334.084424][T15946] device bond2 entered promiscuous mode [ 1334.090305][T15946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1340.475773][T16014] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3078'. [ 1340.599794][T13029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.857681][ T7515] Bluetooth: hci3: command 0x0409 tx timeout [ 1343.560762][T13029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.897876][T13029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.499793][T13029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.912133][T14505] Bluetooth: hci3: command 0x041b tx timeout [ 1346.143859][T16041] tipc: Enabled bearer , priority 0 [ 1346.226062][T16009] chnl_net:caif_netlink_parms(): no params data found [ 1346.285279][T13029] tipc: Left network mode [ 1346.297560][T16041] tipc: Disabling bearer [ 1346.694923][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.706133][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.723089][T16009] device bridge_slave_0 entered promiscuous mode [ 1346.953754][T16059] netlink: 'syz.7.3086': attribute type 1 has an invalid length. [ 1346.963379][T16009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.020768][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.073342][T16009] device bridge_slave_1 entered promiscuous mode [ 1347.196140][T16009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.239214][T16009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.355144][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3089'. [ 1347.440075][T16009] team0: Port device team_slave_0 added [ 1347.480031][T16009] team0: Port device team_slave_1 added [ 1347.546870][T16009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.566366][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.636264][T16009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.685228][T16009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.722808][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.041938][T16009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.299322][T14505] Bluetooth: hci3: command 0x040f tx timeout [ 1348.539868][T16009] device hsr_slave_0 entered promiscuous mode [ 1348.561381][T16009] device hsr_slave_1 entered promiscuous mode [ 1348.592964][T16009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1348.703677][T16009] Cannot create hsr debugfs directory [ 1349.132924][T13029] device hsr_slave_0 left promiscuous mode [ 1349.155266][T13029] device hsr_slave_1 left promiscuous mode [ 1349.181725][T13029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.198405][T13029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.206879][T13029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1349.221683][T13029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.233031][T13029] device bridge_slave_1 left promiscuous mode [ 1349.255711][T13029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.266098][T13029] device bridge_slave_0 left promiscuous mode [ 1349.278926][T13029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.300649][T13029] device veth1_macvtap left promiscuous mode [ 1349.313353][T13029] device veth0_macvtap left promiscuous mode [ 1349.324197][T13029] device veth1_vlan left promiscuous mode [ 1349.335811][T13029] device veth0_vlan left promiscuous mode [ 1349.475769][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 1349.552509][T13029] bond2 (unregistering): Released all slaves [ 1349.566957][T13029] bond1 (unregistering): Released all slaves [ 1349.726149][T13029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.741098][T13029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.796932][T13029] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1349.806893][T13029] bond0 (unregistering): Released all slaves [ 1350.575508][ T6862] Bluetooth: hci3: command 0x0419 tx timeout [ 1350.938493][T16132] netlink: 'syz.0.3098': attribute type 1 has an invalid length. [ 1351.128487][T16009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1351.295805][T16009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1351.327671][T16009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1351.392907][T16009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1351.697865][T16009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.750713][T14583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1351.788173][T14583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1351.816537][T16009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.850826][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1351.877461][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1351.899650][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.906810][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.949776][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1351.968401][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1351.987157][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1352.004739][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.012038][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.063477][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1352.119986][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1352.141770][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1352.163705][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1352.207798][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1352.324913][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1352.484102][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1352.624401][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1352.757082][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1352.885896][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1353.016252][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.615623][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1353.626733][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1353.661203][T16009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.761842][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1353.794923][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1353.869952][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1353.889191][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1353.909726][T16009] device veth0_vlan entered promiscuous mode [ 1353.923679][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1353.949065][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1353.998748][T16009] device veth1_vlan entered promiscuous mode [ 1354.112825][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1354.132213][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1354.157456][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1354.208374][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1354.254619][T16009] device veth0_macvtap entered promiscuous mode [ 1354.279788][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1354.338558][T16009] device veth1_macvtap entered promiscuous mode [ 1354.414283][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.452460][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.486726][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.518557][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.577077][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.617041][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.661442][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.673082][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3105'. [ 1354.693843][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.716231][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.747089][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.809731][T16009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.838911][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1354.854884][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1354.891054][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.912578][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.937338][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.968017][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.020014][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.049910][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.068353][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.094484][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.111408][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.134794][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.212166][T16009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.307921][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1355.359204][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1355.509231][T16212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3107'. [ 1355.536530][T16009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.641718][T16009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.745017][T16009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.844759][T16009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.696394][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.702835][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1357.607613][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.633831][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.675304][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.682664][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1357.695429][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.803399][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1359.174463][ T7194] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1359.442067][ T7194] usb 7-1: Using ep0 maxpacket: 32 [ 1360.042970][T16269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3118'. [ 1360.207801][T16268] binder: 16266:16268 ioctl c0306201 2000000001c0 returned -14 [ 1360.264724][ T7194] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1360.284668][ T7194] usb 7-1: config 0 has no interface number 0 [ 1360.652946][ T7194] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1360.662723][ T7194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.673606][ T7194] usb 7-1: Product: syz [ 1360.677967][ T7194] usb 7-1: Manufacturer: syz [ 1361.347740][ T7194] usb 7-1: SerialNumber: syz [ 1361.394448][ T7194] usb 7-1: config 0 descriptor?? [ 1361.452145][ T7194] usb 7-1: can't set config #0, error -71 [ 1361.516854][ T7194] usb 7-1: USB disconnect, device number 3 [ 1361.875704][T16283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1361.955647][T16291] device syzkaller0 entered promiscuous mode [ 1363.685735][ T1106] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1364.032366][T16316] [U] [ 1364.035541][T16316] [U] [ 1364.038267][T16316] [U] [ 1364.040969][T16316] [U] [ 1364.043768][T16316] [U] [ 1364.046484][T16316] [U] [ 1364.049189][T16316] [U] [ 1364.051897][T16316] [U] [ 1364.055249][T16316] [U] [ 1364.057973][T16316] [U] [ 1364.060692][T16316] [U] [ 1364.134948][ T1106] usb 3-1: Using ep0 maxpacket: 8 [ 1364.274275][ T1106] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1364.304423][ T1106] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.417163][ T1106] usb 3-1: config 0 has no interface number 0 [ 1364.484709][ T1106] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1364.644098][T16311] [U] [ 1364.669301][ T1106] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1364.708541][ T1106] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1364.830534][ T1106] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1364.839803][ T1106] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1364.867642][ T1106] usb 3-1: Manufacturer: syz [ 1364.886313][ T1106] usb 3-1: config 0 descriptor?? [ 1365.805250][ T1106] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input12 [ 1366.390973][ T4218] usb 3-1: USB disconnect, device number 15 [ 1366.401019][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1367.736072][T16344] tipc: Enabled bearer , priority 0 [ 1367.806160][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3139'. [ 1367.878519][T16344] device syzkaller0 entered promiscuous mode [ 1369.848152][T15302] tipc: Node number set to 3193826762 [ 1369.871638][T16341] tipc: Resetting bearer [ 1370.230015][T16341] tipc: Disabling bearer [ 1370.337828][T16355] hfs: can't find a HFS filesystem on dev nullb0 [ 1371.817619][T16373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1372.946108][T16392] vivid-000: disconnect [ 1372.951836][T16392] vivid-000: reconnect [ 1373.862746][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 1374.017511][ T6862] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1374.515395][ T6862] usb 2-1: Using ep0 maxpacket: 8 [ 1374.740261][ T6862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.782169][ T6862] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1374.838147][ T6862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.954270][ T6862] usb 2-1: config 0 descriptor?? [ 1375.755118][T14505] Bluetooth: hci1: command 0x0406 tx timeout [ 1375.810843][ T6862] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1375.994306][T16421] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3159'. [ 1377.303571][ T1106] usb 2-1: USB disconnect, device number 30 [ 1377.638535][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1381.350716][T16480] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1382.354634][T16482] kAFS: No cell specified [ 1383.163918][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'. [ 1383.904332][ T26] audit: type=1326 audit(1747627583.665:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1384.159967][ T26] audit: type=1326 audit(1747627583.665:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1384.736119][ T26] audit: type=1326 audit(1747627583.665:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1384.855701][ T26] audit: type=1326 audit(1747627583.665:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1384.909447][T16514] batman_adv: batadv0: Adding interface: dummy0 [ 1384.920067][ T26] audit: type=1326 audit(1747627583.665:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1385.226304][T16514] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.254383][ T26] audit: type=1326 audit(1747627583.665:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1385.278288][T16514] batman_adv: batadv0: Interface activated: dummy0 [ 1385.285245][ T26] audit: type=1326 audit(1747627583.665:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1385.308038][ T26] audit: type=1326 audit(1747627583.665:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1385.331673][ T26] audit: type=1326 audit(1747627583.665:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1385.384647][T16518] batadv0: mtu less than device minimum [ 1385.395077][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.407560][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.419738][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.431715][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.443625][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.455404][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.467324][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.479112][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.490961][T16518] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1385.529309][ T26] audit: type=1326 audit(1747627583.665:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.7.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43597d5969 code=0x7ffc0000 [ 1386.966860][T14328] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1387.600968][T14328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.636517][T14328] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1387.709238][T14328] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1387.782309][T14328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.833888][T14328] usb 3-1: config 0 descriptor?? [ 1388.158392][T16549] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1388.169287][T16549] team0: Device ipvlan2 is already an upper device of the team interface [ 1389.194309][T16548] overlayfs: failed to resolve './file0': -2 [ 1389.216973][T16525] netlink: 'syz.2.3185': attribute type 8 has an invalid length. [ 1389.369950][T16525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.378420][T16525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.707216][T15200] usb 3-1: USB disconnect, device number 16 [ 1389.757565][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1390.070231][ T7194] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1390.583591][ T7194] usb 7-1: Using ep0 maxpacket: 8 [ 1390.711623][ T7194] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1390.725388][ T7194] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1390.739923][ T7194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.753902][ T7194] usb 7-1: config 0 descriptor?? [ 1392.472951][T16578] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1392.959194][ T7194] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1394.690305][T14505] usb 7-1: USB disconnect, device number 4 [ 1396.229239][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3213'. [ 1396.922742][T10917] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1397.371942][T10917] usb 7-1: config 171 has an invalid interface number: 109 but max is 0 [ 1398.233587][T10917] usb 7-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.244493][T10917] usb 7-1: config 171 has no interface number 0 [ 1398.251251][T10917] usb 7-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1398.753436][T10917] usb 7-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 199, changing to 11 [ 1398.765202][T10917] usb 7-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 16434, setting to 1024 [ 1398.776832][T10917] usb 7-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1398.963108][T16647] 9pnet: Insufficient options for proto=fd [ 1399.584758][T10917] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1399.616174][T10917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.648876][T10917] usb 7-1: Product: syz [ 1400.127767][T16659] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1400.140580][T16659] team0: Device ipvlan2 is already an upper device of the team interface [ 1400.579007][T10917] usb 7-1: can't set config #171, error -71 [ 1400.601598][T10917] usb 7-1: USB disconnect, device number 5 [ 1400.622435][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3229'. [ 1403.591337][T16700] vivid-000: disconnect [ 1403.595978][T16697] vivid-000: reconnect [ 1408.263708][T10535] Bluetooth: hci4: command 0x0406 tx timeout [ 1409.522341][T16746] vivid-000: disconnect [ 1409.527750][T16745] vivid-000: reconnect [ 1411.056706][T16764] virtio-fs: tag not found [ 1413.607123][T16786] kAFS: No cell specified [ 1414.517174][T16789] vivid-000: disconnect [ 1414.639074][T16788] vivid-000: reconnect [ 1422.392301][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.400022][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.386891][ T7515] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1424.729061][ T7515] usb 2-1: Using ep0 maxpacket: 8 [ 1425.865129][ T7515] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1425.955008][ T7515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.158099][ T7515] usb 2-1: config 0 descriptor?? [ 1427.659183][ T7515] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1427.690530][ T7515] asix: probe of 2-1:0.0 failed with error -71 [ 1427.747575][ T7515] usb 2-1: USB disconnect, device number 31 [ 1433.540958][ T1109] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1434.200923][ T1109] usb 8-1: Using ep0 maxpacket: 8 [ 1434.367700][ T1109] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1434.401577][ T1109] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.444509][T16959] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1434.533489][ T1109] usb 8-1: config 0 descriptor?? [ 1438.060338][ T1109] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1438.235992][ T1109] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1438.324747][ T1109] asix: probe of 8-1:0.0 failed with error -71 [ 1438.348052][ T1109] usb 8-1: USB disconnect, device number 6 [ 1438.463938][T16997] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3322'. [ 1440.691583][T17004] virtio-fs: tag not found [ 1442.916285][T17048] kAFS: No cell specified [ 1443.134235][T17052] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3337'. [ 1446.795523][T17075] virtio-fs: tag not found [ 1448.894287][T17095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3350'. [ 1459.692016][T17190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3375'. [ 1463.653706][T14328] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1464.926057][T14328] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1465.291254][T14328] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.443917][T14328] usb 8-1: Product: syz [ 1465.500715][T14328] usb 8-1: Manufacturer: syz [ 1465.561814][T14328] usb 8-1: SerialNumber: syz [ 1465.688407][T14328] usb 8-1: config 0 descriptor?? [ 1466.196802][T14328] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1466.859251][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1467.946760][T12491] usb 8-1: USB disconnect, device number 7 [ 1474.146112][ T6862] Bluetooth: hci3: command 0x0406 tx timeout [ 1488.191279][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.356963][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.508195][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3440'. [ 1493.292193][T17428] program syz.6.3442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.667890][T17436] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3442'. [ 1498.142743][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3452'. [ 1498.886706][T17474] kAFS: No cell specified [ 1499.621111][T17488] netlink: 'syz.1.3458': attribute type 2 has an invalid length. [ 1501.150362][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'. [ 1501.917307][T17513] kAFS: No cell specified [ 1502.354428][T17518] program syz.1.3467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1502.790259][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1505.209005][T17534] net_ratelimit: 10 callbacks suppressed [ 1505.209026][T17534] netlink: zone id is out of range [ 1506.544657][T17555] kAFS: No cell specified [ 1506.854245][ T6862] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1508.473707][ T6862] usb 8-1: config 3 has an invalid interface number: 71 but max is 0 [ 1508.494826][ T6862] usb 8-1: config 3 has no interface number 0 [ 1508.503789][ T6862] usb 8-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1508.513973][ T6862] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 1508.523567][ T6862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.604490][ T6862] ati_remote_probe: Unexpected endpoint_in [ 1509.223688][ T4218] usb 8-1: USB disconnect, device number 8 [ 1510.142995][ T6862] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1511.472684][ T6862] usb 2-1: Using ep0 maxpacket: 32 [ 1511.750639][ T6862] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1511.758765][ T6862] usb 2-1: config 0 has no interface number 0 [ 1511.769231][T17602] tipc: Enabled bearer , priority 0 [ 1512.127371][T17601] tipc: Disabling bearer [ 1512.157685][T17610] kAFS: No cell specified [ 1512.509670][ T6862] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1512.530245][ T6862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.552782][ T6862] usb 2-1: Product: syz [ 1513.038851][ T6862] usb 2-1: config 0 descriptor?? [ 1513.151325][ T6862] usb 2-1: can't set config #0, error -71 [ 1513.182455][ T6862] usb 2-1: USB disconnect, device number 32 [ 1516.724201][T17664] kAFS: No cell specified [ 1519.362361][T17684] netlink: set zone limit has 8 unknown bytes [ 1520.225347][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 1520.511611][T17688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1521.049412][T17688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.132350][T17688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.331705][T17688] device bridge_slave_0 left promiscuous mode [ 1521.582978][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.180569][T17688] device bridge_slave_1 left promiscuous mode [ 1522.197960][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.229482][T17688] bond0: (slave bond_slave_0): Releasing backup interface [ 1523.805706][T17688] bond0: (slave bond_slave_1): Releasing backup interface [ 1524.194626][T17688] team0: Port device team_slave_0 removed [ 1524.424891][T17722] kAFS: No cell specified [ 1524.435876][T17688] team0: Port device team_slave_1 removed [ 1524.579666][T17688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.590584][T17688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1524.604756][T17688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1524.651992][T17688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.889923][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3529'. [ 1531.652056][T17784] kAFS: No cell specified [ 1531.737018][T17789] device syzkaller0 entered promiscuous mode [ 1532.116960][T17786] overlayfs: unrecognized mount option "verity=on" or missing value [ 1535.815698][T17829] device syzkaller0 entered promiscuous mode [ 1536.134943][T17839] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3558'. [ 1536.165524][T17841] kAFS: No cell specified [ 1542.255640][T17875] device syzkaller0 entered promiscuous mode [ 1542.499332][T17890] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3569'. [ 1543.386179][T17895] kAFS: No cell specified [ 1549.050399][T17940] device syzkaller0 entered promiscuous mode [ 1550.060042][T17951] kAFS: No cell specified [ 1552.698134][T17981] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1553.619448][T17984] device syzkaller0 entered promiscuous mode [ 1553.747088][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1553.753441][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.369303][T18004] kAFS: No cell specified [ 1558.435428][T18031] device syzkaller0 entered promiscuous mode [ 1559.967437][T18048] kAFS: No cell specified [ 1563.278557][T18074] device syzkaller0 entered promiscuous mode [ 1566.221457][T18094] kAFS: No cell specified [ 1567.723220][T18115] device syzkaller0 entered promiscuous mode [ 1571.574709][T18145] kAFS: No cell specified [ 1575.606857][T18173] device syzkaller0 entered promiscuous mode [ 1576.858057][T18205] kAFS: No cell specified [ 1582.860543][T18247] device syzkaller0 entered promiscuous mode [ 1582.888111][T18256] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3669'. [ 1583.128089][T18259] ------------[ cut here ]------------ [ 1583.833563][T18259] WARNING: CPU: 1 PID: 18259 at net/mac80211/cfg.c:3690 ieee80211_probe_client+0x594/0x710 [ 1583.862015][T18259] Modules linked in: [ 1583.865967][T18259] CPU: 0 PID: 18259 Comm: syz.1.3670 Not tainted 5.15.183-syzkaller #0 [ 1584.132869][T18259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1584.360648][T18259] RIP: 0010:ieee80211_probe_client+0x594/0x710 [ 1584.368278][T18259] Code: f8 c6 05 34 e7 24 04 01 48 c7 c7 60 2a 18 8b be 69 0e 00 00 48 c7 c2 40 2f 18 8b e8 a6 58 66 00 e9 b3 fb ff ff e8 4c a4 47 f8 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 [ 1584.417692][T18259] RSP: 0018:ffffc9000313f370 EFLAGS: 00010287 [ 1584.445097][T18259] RAX: ffffffff89301cf4 RBX: 0000000000000000 RCX: 0000000000080000 [ 1584.518525][T18259] RDX: ffffc9000fea0000 RSI: 00000000000002c9 RDI: 00000000000002ca [ 1584.874331][T18259] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1ff3219 [ 1584.882545][T18259] R10: fffffbfff1ff3219 R11: 1ffffffff1ff3218 R12: ffff88805bafc000 [ 1584.890679][T18259] R13: ffffc9000313f460 R14: ffff88806224845c R15: ffff888068752960 [ 1584.900615][T18259] FS: 00007f3521cc56c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1584.917716][T18259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1584.924840][T18259] CR2: 00007f5c6f8b9da0 CR3: 000000005aac8000 CR4: 00000000003506e0 [ 1584.940204][T18259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1584.948315][T18259] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1584.956378][T18259] Call Trace: [ 1584.960523][T18259] [ 1584.963487][T18259] ? genlmsg_put+0x12c/0x2d0 [ 1584.968104][T18259] nl80211_probe_client+0x3b5/0x6f0 [ 1584.974022][T18259] ? nl80211_register_unexpected_frame+0x180/0x180 [ 1584.980597][T18259] genl_rcv_msg+0xbc6/0xf40 [ 1584.985301][T18259] ? genl_bind+0x370/0x370 [ 1584.989966][T18259] ? verify_lock_unused+0x140/0x140 [ 1584.995968][T18259] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 1585.001219][T18259] ? dev_queue_xmit+0x20/0x20 [ 1585.006050][T18259] ? nl80211_register_unexpected_frame+0x180/0x180 [ 1585.012721][T18259] netlink_rcv_skb+0x1e0/0x430 [ 1585.017650][T18259] ? genl_bind+0x370/0x370 [ 1585.023079][T18259] ? netlink_ack+0xb60/0xb60 [ 1585.029346][T18259] ? __lock_acquire+0x7c60/0x7c60 [ 1585.034426][T18259] ? preempt_count_add+0x8d/0x190 [ 1585.039548][T18259] ? down_read+0x1aa/0x2e0 [ 1585.044166][T18259] genl_rcv+0x24/0x40 [ 1585.051368][T18259] netlink_unicast+0x77c/0x920 [ 1585.056309][T18259] netlink_sendmsg+0x8ab/0xbc0 [ 1585.061378][T18259] ? netlink_getsockopt+0x560/0x560 [ 1585.066595][T18259] ? aa_sock_msg_perm+0x94/0x150 [ 1585.071664][T18259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1585.077080][T18259] ? security_socket_sendmsg+0x7c/0xa0 [ 1585.082769][T18259] ? netlink_getsockopt+0x560/0x560 [ 1585.088028][T18259] ____sys_sendmsg+0x5a2/0x8c0 [ 1585.093280][T18259] ? memset+0x1e/0x40 [ 1585.097327][T18259] ? __sys_sendmsg_sock+0x30/0x30 [ 1585.102667][T18259] ? import_iovec+0x6f/0xa0 [ 1585.107237][T18259] ___sys_sendmsg+0x1f0/0x260 [ 1585.112467][T18259] ? __sys_sendmsg+0x250/0x250 [ 1585.117592][T18259] ? sock_do_ioctl+0x27c/0x2f0 [ 1585.122581][T18259] ? __fdget+0x18b/0x210 [ 1585.127183][T18259] __se_sys_sendmsg+0x190/0x250 [ 1585.133691][T18259] ? __x64_sys_sendmsg+0x80/0x80 [ 1585.138683][T18259] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1585.145071][T18259] ? lockdep_hardirqs_on+0x94/0x140 [ 1585.150397][T18259] do_syscall_64+0x4c/0xa0 [ 1585.155071][T18259] ? clear_bhb_loop+0x15/0x70 [ 1585.159966][T18259] ? clear_bhb_loop+0x15/0x70 [ 1585.168454][T18259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1585.174539][T18259] RIP: 0033:0x7f3523e5d969 [ 1585.178975][T18259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.198780][T18259] RSP: 002b:00007f3521cc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.207274][T18259] RAX: ffffffffffffffda RBX: 00007f3524084fa0 RCX: 00007f3523e5d969 [ 1585.215311][T18259] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1585.224167][T18259] RBP: 00007f3523edfab1 R08: 0000000000000000 R09: 0000000000000000 [ 1585.234473][T18259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1585.243199][T18259] R13: 0000000000000000 R14: 00007f3524084fa0 R15: 00007ffd87c082b8 [ 1585.251338][T18259] [ 1585.254376][T18259] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1585.261666][T18259] CPU: 1 PID: 18259 Comm: syz.1.3670 Not tainted 5.15.183-syzkaller #0 [ 1585.269932][T18259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1585.279998][T18259] Call Trace: [ 1585.283283][T18259] [ 1585.286231][T18259] dump_stack_lvl+0x168/0x230 [ 1585.290932][T18259] ? show_regs_print_info+0x20/0x20 [ 1585.296474][T18259] ? load_image+0x3b0/0x3b0 [ 1585.301087][T18259] panic+0x2c9/0x7f0 [ 1585.305001][T18259] ? bpf_jit_dump+0xd0/0xd0 [ 1585.309666][T18259] ? ieee80211_probe_client+0x594/0x710 [ 1585.315229][T18259] __warn+0x248/0x2b0 [ 1585.319244][T18259] ? ieee80211_probe_client+0x594/0x710 [ 1585.324808][T18259] report_bug+0x1b7/0x2e0 [ 1585.329162][T18259] handle_bug+0x3a/0x70 [ 1585.333314][T18259] exc_invalid_op+0x16/0x40 [ 1585.337822][T18259] asm_exc_invalid_op+0x16/0x20 [ 1585.342759][T18259] RIP: 0010:ieee80211_probe_client+0x594/0x710 [ 1585.348937][T18259] Code: f8 c6 05 34 e7 24 04 01 48 c7 c7 60 2a 18 8b be 69 0e 00 00 48 c7 c2 40 2f 18 8b e8 a6 58 66 00 e9 b3 fb ff ff e8 4c a4 47 f8 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 [ 1585.368746][T18259] RSP: 0018:ffffc9000313f370 EFLAGS: 00010287 [ 1585.374837][T18259] RAX: ffffffff89301cf4 RBX: 0000000000000000 RCX: 0000000000080000 [ 1585.382923][T18259] RDX: ffffc9000fea0000 RSI: 00000000000002c9 RDI: 00000000000002ca [ 1585.390993][T18259] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1ff3219 [ 1585.398987][T18259] R10: fffffbfff1ff3219 R11: 1ffffffff1ff3218 R12: ffff88805bafc000 [ 1585.407083][T18259] R13: ffffc9000313f460 R14: ffff88806224845c R15: ffff888068752960 [ 1585.415072][T18259] ? ieee80211_probe_client+0x594/0x710 [ 1585.420638][T18259] ? genlmsg_put+0x12c/0x2d0 [ 1585.425253][T18259] nl80211_probe_client+0x3b5/0x6f0 [ 1585.430485][T18259] ? nl80211_register_unexpected_frame+0x180/0x180 [ 1585.437106][T18259] genl_rcv_msg+0xbc6/0xf40 [ 1585.441630][T18259] ? genl_bind+0x370/0x370 [ 1585.446084][T18259] ? verify_lock_unused+0x140/0x140 [ 1585.451282][T18259] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 1585.456524][T18259] ? dev_queue_xmit+0x20/0x20 [ 1585.461235][T18259] ? nl80211_register_unexpected_frame+0x180/0x180 [ 1585.467755][T18259] netlink_rcv_skb+0x1e0/0x430 [ 1585.472533][T18259] ? genl_bind+0x370/0x370 [ 1585.476964][T18259] ? netlink_ack+0xb60/0xb60 [ 1585.481582][T18259] ? __lock_acquire+0x7c60/0x7c60 [ 1585.486633][T18259] ? preempt_count_add+0x8d/0x190 [ 1585.491681][T18259] ? down_read+0x1aa/0x2e0 [ 1585.496100][T18259] genl_rcv+0x24/0x40 [ 1585.500096][T18259] netlink_unicast+0x77c/0x920 [ 1585.504867][T18259] netlink_sendmsg+0x8ab/0xbc0 [ 1585.509647][T18259] ? netlink_getsockopt+0x560/0x560 [ 1585.514864][T18259] ? aa_sock_msg_perm+0x94/0x150 [ 1585.519811][T18259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1585.525124][T18259] ? security_socket_sendmsg+0x7c/0xa0 [ 1585.530592][T18259] ? netlink_getsockopt+0x560/0x560 [ 1585.535810][T18259] ____sys_sendmsg+0x5a2/0x8c0 [ 1585.540583][T18259] ? memset+0x1e/0x40 [ 1585.544618][T18259] ? __sys_sendmsg_sock+0x30/0x30 [ 1585.549687][T18259] ? import_iovec+0x6f/0xa0 [ 1585.554222][T18259] ___sys_sendmsg+0x1f0/0x260 [ 1585.558921][T18259] ? __sys_sendmsg+0x250/0x250 [ 1585.563712][T18259] ? sock_do_ioctl+0x27c/0x2f0 [ 1585.568491][T18259] ? __fdget+0x18b/0x210 [ 1585.572828][T18259] __se_sys_sendmsg+0x190/0x250 [ 1585.577697][T18259] ? __x64_sys_sendmsg+0x80/0x80 [ 1585.582648][T18259] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1585.588638][T18259] ? lockdep_hardirqs_on+0x94/0x140 [ 1585.593846][T18259] do_syscall_64+0x4c/0xa0 [ 1585.598285][T18259] ? clear_bhb_loop+0x15/0x70 [ 1585.602956][T18259] ? clear_bhb_loop+0x15/0x70 [ 1585.607639][T18259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1585.613660][T18259] RIP: 0033:0x7f3523e5d969 [ 1585.618099][T18259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.637729][T18259] RSP: 002b:00007f3521cc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.646170][T18259] RAX: ffffffffffffffda RBX: 00007f3524084fa0 RCX: 00007f3523e5d969 [ 1585.654158][T18259] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1585.662147][T18259] RBP: 00007f3523edfab1 R08: 0000000000000000 R09: 0000000000000000 [ 1585.670129][T18259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1585.678107][T18259] R13: 0000000000000000 R14: 00007f3524084fa0 R15: 00007ffd87c082b8 [ 1585.686112][T18259] [ 1585.689373][T18259] Kernel Offset: disabled [ 1585.694009][T18259] Rebooting in 86400 seconds..