last executing test programs: 3m53.85158685s ago: executing program 2 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0xffffffff}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x1f, 0x3fffe, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8005}}, 0x50) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3m53.638157612s ago: executing program 2 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703440001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403010303030605f7"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(r2, 0x0) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x3f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m50.439307667s ago: executing program 2 (id=576): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) 3m49.659642399s ago: executing program 2 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x1f, 0x3fffe, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8005}}, 0x50) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3m49.487244118s ago: executing program 2 (id=581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0xa8301, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000020c0)={'virt_wifi0\x00', 0x3, 0x7ff}) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x2, 0x10acc1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/135) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0xca64, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x6, 0x0, &(0x7f0000000380)="263abd030e98", 0x0, 0x1200}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) mincore(&(0x7f000081d000/0x1000)=nil, 0x1000, &(0x7f0000afaf0a)=""/245) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 3m42.872368448s ago: executing program 2 (id=592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) unshare(0x8040480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x26, 0x10022, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, 0x0, 0x0, 0x4000045) 3m27.749238504s ago: executing program 32 (id=592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) unshare(0x8040480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x26, 0x10022, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, 0x0, 0x0, 0x4000045) 25.782349128s ago: executing program 1 (id=971): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80080, 0x0) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), 0x0}, 0x20) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) 25.56711079s ago: executing program 0 (id=972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) 22.819120526s ago: executing program 5 (id=974): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r2, 0x8800000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0xff, 0xa4, 0x9, 0x2}, {0x7498, 0x1, 0xb, 0x5}]}) 22.571684883s ago: executing program 0 (id=977): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x50201, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x6000) 21.577869348s ago: executing program 1 (id=979): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000100)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) 19.968235134s ago: executing program 0 (id=982): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00cd729b7a4b561c0dddcaa4144a21057d1999d1ba519e08b8587acb0ea636f826fdd301fdd62b01e5c31a5e2a79df2a5953dec2494ba4f5c618158c9d07f3ac1c1abd4fc8bf2dd03a137426d72ef6009088faa91afa89d0bb7c18a7b374"]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2b, 0xffffffdd, 0x318145a8, 0xfffe, 0xfffe, 0x2, 0xfffff7f6, 0x0, 0x0, 0x8, 0x800100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a640, 0x0) syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140), &(0x7f0000000280)) r4 = syz_io_uring_setup(0x1166, &(0x7f00000003c0)={0x0, 0xd6e0, 0x40, 0x1, 0x331, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(r2, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r8) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) 18.775576294s ago: executing program 5 (id=983): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406010200000000dfff0c000a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1000, 0x30}, &(0x7f0000000040)=0xc) 18.687807619s ago: executing program 0 (id=984): socket$kcm(0x10, 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000111}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60040050) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) dup(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) 16.419322919s ago: executing program 5 (id=985): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80080, 0x0) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), 0x0}, 0x20) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) 15.599925625s ago: executing program 4 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0x4001, 0x800) eventfd(0xbbf9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffff9c, 0x0, 0x280000) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 14.743388355s ago: executing program 1 (id=987): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4015}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000200)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) 14.684074434s ago: executing program 4 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13.531491931s ago: executing program 1 (id=990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, 0x0, 0xf5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4040800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 13.531104951s ago: executing program 4 (id=991): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 13.478133312s ago: executing program 0 (id=992): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x50201, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x6000) 10.898946678s ago: executing program 1 (id=993): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0)) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4015}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000200)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) 10.879186095s ago: executing program 4 (id=994): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00cd729b7a4b561c0dddcaa4144a21057d1999d1ba519e08b8587acb0ea636f826fdd301fdd62b01e5c31a5e2a79df2a5953dec2494ba4f5c618158c9d07f3ac1c1abd4fc8bf2dd03a137426d72ef6009088faa91afa89d0bb7c18a7b374"]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2b, 0xffffffdd, 0x318145a8, 0xfffe, 0xfffe, 0x2, 0xfffff7f6, 0x0, 0x0, 0x8, 0x800100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a640, 0x0) syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140), &(0x7f0000000280)) r4 = syz_io_uring_setup(0x1166, &(0x7f00000003c0)={0x0, 0xd6e0, 0x40, 0x1, 0x331, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(r2, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r8) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) 10.759365693s ago: executing program 5 (id=995): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mq_open(&(0x7f00000001c0)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) mq_timedreceive(r2, &(0x7f00000004c0)=""/169, 0xa9, 0x3fffffffffff, 0x0) mq_timedreceive(r2, &(0x7f0000000200)=""/38, 0x26, 0x6, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c0}, 0x4048010) r6 = accept4(r5, 0x0, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000580)={'veth0_to_hsr\x00', 0x2}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@deltclass={0x50, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0x7}, {0x0, 0x1d}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @TCA_RATE={0x6, 0x5, {0xa, 0x46}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7f, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) shutdown(r7, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x1}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000400)={0x7, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0xb, 0x10, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x2, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x1, 0x3}, {0x80000007, 0x9, 0x1, 0x7, 0x10000, 0x8, 0x4}]}) 8.378895485s ago: executing program 0 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x32}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000000200000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 8.348724199s ago: executing program 1 (id=997): syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x5100, 0x0) 8.081358182s ago: executing program 5 (id=998): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000440)='net/rfcomm\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="14", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000843943fada66585c0d75fe48"], 0x14, 0x8001}], 0x1, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.652221701s ago: executing program 4 (id=999): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70060fa8c8696a", 0x19) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa", 0x1b) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) 6.415433709s ago: executing program 5 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0xa8301, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000020c0)={'virt_wifi0\x00', 0x3, 0x7ff}) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x2, 0x10acc1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/135) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0xca64, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x6, 0x0, &(0x7f0000000380)="263abd030e98", 0x0, 0x1200}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) mincore(&(0x7f000081d000/0x1000)=nil, 0x1000, &(0x7f0000afaf0a)=""/245) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 5.465923032s ago: executing program 3 (id=1001): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000}, 0x10) mount(&(0x7f00000001c0)=@sr0, &(0x7f00000007c0)='./cgroup\x00', 0x0, 0x221000d, 0x0) 4.993740099s ago: executing program 3 (id=1002): socket$kcm(0x10, 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", 0xffffffffffffffff}) r2 = fcntl$getown(r1, 0x9) prlimit64(r2, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000111}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60040050) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) dup(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) 4.144989279s ago: executing program 4 (id=1003): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000100)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x8800000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) 3.503552427s ago: executing program 3 (id=1004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, 0x0, 0xf5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4040800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.855354356s ago: executing program 3 (id=1005): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getpgrp(0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 739.58138ms ago: executing program 3 (id=1006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x1aa, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000100, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x2e, 0x0, 0x0) 0s ago: executing program 3 (id=1007): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0)) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4015}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000200)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) kernel console output (not intermixed with test programs): _CHANGE): hsr0: link becomes ready [ 58.911688][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.921267][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.929961][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.941458][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.950659][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.960517][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.971221][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.986219][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.002047][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.016303][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.038687][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.054905][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.064674][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.073571][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.081934][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.117256][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.144782][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.190919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.208611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.240035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.274369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.313017][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.355459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.378617][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.409085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.417876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.432776][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 59.438784][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 59.445499][ T4271] Bluetooth: hci3: command 0x041b tx timeout [ 59.451519][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 59.459130][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 59.476958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.487681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.522855][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.529920][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.557502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.565520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.573480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.593501][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.624145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.635127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.653815][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.660910][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.683059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.692476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.713853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.737814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.782111][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.800473][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.816814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.824730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.833503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.841749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.850901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.861858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.870275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.879045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.886676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.894282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.922357][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.950810][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.965492][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.973536][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.981005][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.990329][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.014047][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.047569][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.055355][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.066642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.078077][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.110508][ T4266] device veth0_vlan entered promiscuous mode [ 60.121144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.137122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.147227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.156230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.165307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.173853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.181998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.190065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.197919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.205812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.217521][ T4276] device veth0_vlan entered promiscuous mode [ 60.246553][ T4266] device veth1_vlan entered promiscuous mode [ 60.260938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.269652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.284518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.304768][ T4276] device veth1_vlan entered promiscuous mode [ 60.327833][ T4279] device veth0_vlan entered promiscuous mode [ 60.362560][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.378181][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.387179][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.396523][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.405925][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.414059][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.428328][ T4267] device veth0_vlan entered promiscuous mode [ 60.447363][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.468562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.487020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.497893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.510805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.521443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.535548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.547065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.571311][ T4279] device veth1_vlan entered promiscuous mode [ 60.586679][ T4276] device veth0_macvtap entered promiscuous mode [ 60.596554][ T4266] device veth0_macvtap entered promiscuous mode [ 60.604601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.613352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.621892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.631112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.640532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.649177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.657356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.666388][ T4267] device veth1_vlan entered promiscuous mode [ 60.705602][ T4266] device veth1_macvtap entered promiscuous mode [ 60.725303][ T4276] device veth1_macvtap entered promiscuous mode [ 60.751893][ T4279] device veth0_macvtap entered promiscuous mode [ 60.778165][ T4279] device veth1_macvtap entered promiscuous mode [ 60.785523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.804252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.812277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.821279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.829580][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.837700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.847508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.855985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.869990][ T4267] device veth0_macvtap entered promiscuous mode [ 60.886330][ T4267] device veth1_macvtap entered promiscuous mode [ 60.905032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.919718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.932214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.971879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.991029][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.020186][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.042267][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.059873][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.068601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.081570][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.090672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.099423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.108246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.120561][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.129903][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.140723][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.150806][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.161432][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.172889][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.180504][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.191748][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.201969][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.214016][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.223867][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.234445][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.246088][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.257004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.265765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.275321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.284327][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.292911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.302083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.313477][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.322307][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.331180][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.340097][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.351957][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.364706][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.375733][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.386853][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.397579][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.408192][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.419079][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.429960][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.437614][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.451615][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.461571][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.472097][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.482005][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.492903][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.504231][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.513306][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 61.519596][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 61.526263][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 61.526287][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 61.532249][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 61.551597][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.560415][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.569689][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.578413][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.587739][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.597701][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.609298][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.618354][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.627106][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.636027][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.648442][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.658736][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.667681][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.676877][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.696045][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.704911][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.715699][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.724726][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.746398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.758395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.830003][ T4272] device veth0_vlan entered promiscuous mode [ 61.855731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.865412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.925100][ T4272] device veth1_vlan entered promiscuous mode [ 61.941191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.951783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.959777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.014529][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.022492][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.028033][ T4272] device veth0_macvtap entered promiscuous mode [ 62.030350][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.045422][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.055284][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.068517][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.070920][ T4272] device veth1_macvtap entered promiscuous mode [ 62.095396][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.097741][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.108354][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.118736][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.118978][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.134912][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.143322][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.158647][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.169777][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.182820][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.193299][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.203389][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.214304][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.224317][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.235121][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.246147][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.263698][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.279350][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.290950][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.301994][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.312260][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.324550][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.334694][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.345453][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.355643][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.367162][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.378156][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.406814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.421651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.437372][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.442800][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.453365][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.463075][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.470547][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.480289][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.507938][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.508144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.524734][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.533399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.620138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.621904][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.628251][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.655332][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.662326][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.672493][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.692509][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.702368][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.745192][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.593407][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 63.599493][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 64.702631][ C1] sched: RT throttling activated [ 64.703327][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 64.715086][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 64.721560][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 64.793244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.801554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.809833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 64.818126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 64.826484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 64.834851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 64.843222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 64.851566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 64.859920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 64.868282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 65.178760][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.343624][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.569819][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.329254][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.348390][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.415832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.761355][ T4390] capability: warning: `syz.0.10' uses 32-bit capabilities (legacy support in use) [ 66.793871][ T4385] device syzkaller0 entered promiscuous mode [ 66.931902][ T26] audit: type=1804 audit(1773091335.934:2): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.13" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 67.829306][ T4423] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.201747][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.208327][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.788667][ T4459] sctp: [Deprecated]: syz.4.28 (pid 4459) Use of int in max_burst socket option. [ 73.788667][ T4459] Use struct sctp_assoc_value instead [ 75.326614][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.512734][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 75.558890][ T27] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.585122][ T27] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.595367][ T27] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 75.608883][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.617091][ T27] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 75.626844][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.654180][ T27] usb 5-1: config 0 descriptor?? [ 75.864384][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 75.875574][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 75.893295][ T27] usb 5-1: USB disconnect, device number 2 [ 76.316321][ T14] cfg80211: failed to load regulatory.db [ 77.507796][ T4475] device syzkaller0 entered promiscuous mode [ 78.449521][ T26] audit: type=1326 audit(1773091347.454:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.496420][ T4497] syz.0.40 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.548052][ T26] audit: type=1326 audit(1773091347.494:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750575][ T26] audit: type=1326 audit(1773091347.494:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750610][ T26] audit: type=1326 audit(1773091347.494:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750638][ T26] audit: type=1326 audit(1773091347.504:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750668][ T26] audit: type=1326 audit(1773091347.554:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750696][ T26] audit: type=1326 audit(1773091347.554:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750723][ T26] audit: type=1326 audit(1773091347.554:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750751][ T26] audit: type=1326 audit(1773091347.684:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 78.750778][ T26] audit: type=1326 audit(1773091347.684:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4494 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff50239c799 code=0x7ffc0000 [ 79.458812][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.812420][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.844799][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.163594][ T4499] tty tty21: ldisc open failed (-12), clearing slot 20 [ 88.302121][ T4587] Zero length message leads to an empty skb [ 88.355668][ T4587] device syzkaller0 entered promiscuous mode [ 89.597054][ T4605] fuse: Bad value for 'rootmode' [ 89.902769][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.632700][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 90.639884][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.742641][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 90.760568][ T4617] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 91.468419][ T14] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 91.478227][ T14] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 91.488994][ T14] usb 2-1: config 4 has no interface number 0 [ 91.497876][ T14] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 91.608281][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.823148][ T4616] netlink: 'syz.2.71': attribute type 4 has an invalid length. [ 91.847415][ T4616] netlink: 'syz.2.71': attribute type 4 has an invalid length. [ 91.892697][ T14] usb 2-1: Product: syz [ 91.896900][ T14] usb 2-1: Manufacturer: syz [ 91.921981][ T14] usb 2-1: SerialNumber: syz [ 92.310539][ T4602] loop1: detected capacity change from 0 to 1024 [ 92.340447][ T4602] ======================================================= [ 92.340447][ T4602] WARNING: The mand mount option has been deprecated and [ 92.340447][ T4602] and is ignored by this kernel. Remove the mand [ 92.340447][ T4602] option from the mount to silence this warning. [ 92.340447][ T4602] ======================================================= [ 92.375305][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.322943][ T4602] EXT4-fs: Ignoring removed orlov option [ 93.411710][ T4602] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 93.581940][ T14] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 93.582062][ T14] usb 2-1: No valid video chain found. [ 93.604046][ T14] usb 2-1: USB disconnect, device number 2 [ 93.899896][ T4651] fuse: Bad value for 'rootmode' [ 96.632778][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.834113][ T27] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.852349][ T27] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.915193][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 96.971965][ T4677] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 97.437322][ T27] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.782754][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.827621][ T4669] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.332767][ T4375] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.177281][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 99.233233][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 99.254060][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 99.267262][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 99.284808][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 99.301314][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 99.346010][ T4375] usb 1-1: Using ep0 maxpacket: 8 [ 99.441658][ T4375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.598472][ T4375] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 99.818067][ T4375] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 99.962661][ T4375] usb 1-1: config 4 has no interface number 0 [ 99.995959][ T4375] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 100.016210][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.031905][ T4375] usb 1-1: Product: syz [ 100.040392][ T4375] usb 1-1: Manufacturer: syz [ 100.062663][ T4375] usb 1-1: SerialNumber: syz [ 100.535093][ T4723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.93'. [ 100.971641][ T4720] sctp: failed to load transform for md5: -2 [ 101.107714][ T4691] loop0: detected capacity change from 0 to 1024 [ 101.173437][ T4691] EXT4-fs: Ignoring removed orlov option [ 101.418531][ T4691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.547298][ T14] usb 5-1: USB disconnect, device number 3 [ 101.607859][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 101.607872][ T26] audit: type=1800 audit(1773091370.614:79): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.87" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 101.621323][ T4737] fuse: Bad value for 'rootmode' [ 101.653238][ T4735] Trying to write to read-only block-device loop0 [ 101.712939][ T4735] Trying to write to read-only block-device loop0 [ 101.749909][ T4735] Trying to write to read-only block-device loop0 [ 102.539744][ T4735] Trying to write to read-only block-device loop0 [ 102.654810][ T4735] Trying to write to read-only block-device loop0 [ 102.696505][ T4742] device syzkaller0 entered promiscuous mode [ 102.702238][ T4735] Trying to write to read-only block-device loop0 [ 102.987353][ T4375] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 103.032792][ T4375] usb 1-1: No valid video chain found. [ 103.077282][ T4375] usb 1-1: USB disconnect, device number 2 [ 103.092588][ T4435] Trying to write to read-only block-device loop0 [ 103.093841][ T4276] Trying to write to read-only block-device loop0 [ 103.139572][ T4435] Trying to write to read-only block-device loop0 [ 103.196952][ T4435] Trying to write to read-only block-device loop0 [ 103.276071][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 103.697490][ T4763] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 103.753129][ T4765] device syzkaller0 entered promiscuous mode [ 103.789991][ T4763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 103.975137][ T4766] xt_nfacct: accounting object `syz1' does not exist [ 104.172527][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 104.232898][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 104.269745][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 104.280852][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 104.291491][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 104.301903][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 107.050157][ T4788] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 107.099477][ T4788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.106'. [ 107.133368][ T4788] xt_nfacct: accounting object `syz1' does not exist [ 107.154086][ T4790] device syzkaller0 entered promiscuous mode [ 107.642719][ T4311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.710025][ T4798] device syzkaller0 entered promiscuous mode [ 107.832955][ T4311] usb 1-1: Using ep0 maxpacket: 8 [ 107.840214][ T4311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.888062][ T4311] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 107.931397][ T4311] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 107.961108][ T4311] usb 1-1: config 4 has no interface number 0 [ 107.997207][ T4311] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 108.018613][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.037332][ T4311] usb 1-1: Product: syz [ 108.048517][ T4311] usb 1-1: Manufacturer: syz [ 108.069024][ T4311] usb 1-1: SerialNumber: syz [ 108.282699][ T4312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.348807][ T4792] loop0: detected capacity change from 0 to 1024 [ 108.380692][ T4792] EXT4-fs: Ignoring removed orlov option [ 108.396021][ T4792] /dev/loop0: Can't open blockdev [ 108.492800][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 108.499857][ T4312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.524948][ T4312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.556627][ T4312] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.581544][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.605688][ T4312] usb 3-1: Product: syz [ 108.618267][ T4312] usb 3-1: Manufacturer: syz [ 108.641364][ T4312] usb 3-1: SerialNumber: syz [ 109.098655][ T4312] usb 3-1: cannot find UAC_HEADER [ 109.160332][ T4312] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 109.197096][ T4312] usb 3-1: USB disconnect, device number 2 [ 109.236785][ T4690] udevd[4690]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.563573][ T4816] fuse: Unknown parameter 'use00000000000000000000' [ 112.097816][ T4818] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 112.531396][ T4311] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 112.539938][ T4311] usb 1-1: No valid video chain found. [ 112.550668][ T4311] usb 1-1: USB disconnect, device number 3 [ 112.586579][ T4818] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.677195][ T4835] device syzkaller0 entered promiscuous mode [ 113.983205][ T4840] device syzkaller0 entered promiscuous mode [ 114.464758][ T4857] netlink: 52 bytes leftover after parsing attributes in process `syz.1.125'. [ 114.963210][ T4855] sctp: failed to load transform for md5: -2 [ 115.059267][ T4864] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 115.191532][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.123'. [ 115.842732][ T4312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.044889][ T4312] usb 2-1: Using ep0 maxpacket: 8 [ 116.051983][ T4312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.066115][ T4312] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 116.092695][ T4312] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 116.111358][ T4312] usb 2-1: config 4 has no interface number 0 [ 116.138253][ T4312] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 116.171057][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.189242][ T4312] usb 2-1: Product: syz [ 116.201265][ T4312] usb 2-1: Manufacturer: syz [ 116.229606][ T4312] usb 2-1: SerialNumber: syz [ 116.472696][ T4872] loop1: detected capacity change from 0 to 1024 [ 116.484114][ T4872] EXT4-fs: Ignoring removed orlov option [ 116.552442][ T4872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.572145][ T4879] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 116.598575][ T26] audit: type=1800 audit(1773091385.604:80): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 116.673086][ T4872] bio_check_ro: 7 callbacks suppressed [ 116.673098][ T4872] Trying to write to read-only block-device loop1 [ 116.711476][ T4872] Trying to write to read-only block-device loop1 [ 116.755758][ T4872] Trying to write to read-only block-device loop1 [ 116.770291][ T4880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 116.811704][ T4879] xt_nfacct: accounting object `syz1' does not exist [ 118.845872][ T4312] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 118.891216][ T4312] usb 2-1: No valid video chain found. [ 118.920960][ T4312] usb 2-1: USB disconnect, device number 3 [ 118.945993][ T4317] Trying to write to read-only block-device loop1 [ 118.946233][ T4267] Trying to write to read-only block-device loop1 [ 118.971599][ T4317] Trying to write to read-only block-device loop1 [ 118.978799][ T4267] Trying to write to read-only block-device loop1 [ 118.988883][ T4267] Trying to write to read-only block-device loop1 [ 119.001415][ T4267] Trying to write to read-only block-device loop1 [ 119.022866][ T4317] Trying to write to read-only block-device loop1 [ 119.057110][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 119.560096][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 119.620420][ T4898] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 120.530105][ T4903] fuse: Unknown parameter 'use00000000000000000000' [ 120.661683][ T4905] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 122.083313][ T4905] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.583106][ T4928] netlink: 52 bytes leftover after parsing attributes in process `syz.4.138'. [ 123.120420][ T4924] sctp: failed to load transform for md5: -2 [ 123.640302][ T4942] device syzkaller0 entered promiscuous mode [ 124.084715][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 124.139348][ T4959] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 125.072848][ T4970] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 125.166316][ T4970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.141'. [ 125.677838][ T4983] netlink: 52 bytes leftover after parsing attributes in process `syz.4.152'. [ 126.224018][ T4980] sctp: failed to load transform for md5: -2 [ 128.930795][ T4999] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 128.969144][ T4999] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.311544][ T5013] device syzkaller0 entered promiscuous mode [ 130.022814][ T5034] netlink: 52 bytes leftover after parsing attributes in process `syz.1.164'. [ 130.427267][ T5031] sctp: failed to load transform for md5: -2 [ 131.033192][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 132.634747][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.641174][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.308910][ T5069] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 134.451211][ T5074] device syzkaller0 entered promiscuous mode [ 136.587928][ T5117] fuse: Unknown parameter 'user_i00000000000000000000' [ 137.672945][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 140.818143][ T5139] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 140.889913][ T5139] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.286071][ T5171] netlink: 52 bytes leftover after parsing attributes in process `syz.1.201'. [ 142.756781][ T5168] sctp: failed to load transform for md5: -2 [ 142.886757][ T5178] fuse: Unknown parameter 'user_id00000000000000000000' [ 144.887991][ T5203] device syzkaller0 entered promiscuous mode [ 145.388552][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 146.484981][ T5223] netlink: 52 bytes leftover after parsing attributes in process `syz.1.213'. [ 146.975862][ T5220] sctp: failed to load transform for md5: -2 [ 149.384370][ T5251] fuse: Unknown parameter 'user_id00000000000000000000' [ 149.842716][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 151.113303][ T5267] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 151.225737][ T5269] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 153.753599][ T5293] netlink: 'syz.2.228': attribute type 4 has an invalid length. [ 153.878527][ T5295] netlink: 'syz.2.228': attribute type 4 has an invalid length. [ 155.383437][ T5305] device syzkaller0 entered promiscuous mode [ 156.258624][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'. [ 156.307904][ T5331] xt_nfacct: accounting object `syz1' does not exist [ 159.816217][ T5356] netlink: 'syz.3.246': attribute type 4 has an invalid length. [ 159.973919][ T5359] netlink: 'syz.3.246': attribute type 4 has an invalid length. [ 160.352980][ T5365] fuse: Bad value for 'fd' [ 160.508606][ T5367] netlink: 'syz.2.249': attribute type 4 has an invalid length. [ 160.631127][ T5370] overlayfs: overlapping lowerdir path [ 162.438399][ T5375] netlink: 'syz.2.249': attribute type 4 has an invalid length. [ 163.193445][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 163.258012][ T5388] netlink: 'syz.4.254': attribute type 10 has an invalid length. [ 166.354819][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'. [ 166.385200][ T5419] xt_nfacct: accounting object `syz1' does not exist [ 166.980808][ T5430] loop3: detected capacity change from 0 to 128 [ 167.113591][ T5431] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.263'. [ 167.124260][ T5430] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.263'. [ 169.672765][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 171.002760][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 171.212969][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 171.221465][ T27] usb 4-1: config 250 has an invalid interface number: 230 but max is 0 [ 171.255907][ T27] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 171.383204][ T27] usb 4-1: config 250 has no interface number 0 [ 171.391598][ T27] usb 4-1: config 250 interface 230 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.405281][ T27] usb 4-1: config 250 interface 230 has no altsetting 0 [ 171.415724][ T27] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 171.425417][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.440380][ T27] usb 4-1: Product: syz [ 172.160019][ T27] usb 4-1: Manufacturer: syz [ 172.180334][ T27] usb 4-1: SerialNumber: syz [ 172.225360][ T5457] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 172.411258][ T27] ums-usbat 4-1:250.230: USB Mass Storage device detected [ 173.459724][ T27] ums-usbat 4-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 173.508907][ T5461] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 173.557785][ T27] usb 4-1: USB disconnect, device number 2 [ 174.152745][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 174.998441][ T5490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.276'. [ 175.467303][ T5488] sctp: failed to load transform for md5: -2 [ 178.347005][ T5504] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 178.378903][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'. [ 178.408013][ T5504] xt_nfacct: accounting object `syz1' does not exist [ 178.742817][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 178.932970][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 179.783266][ T14] usb 2-1: config 250 has an invalid interface number: 230 but max is 0 [ 179.842113][ T14] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 179.948992][ T14] usb 2-1: config 250 has no interface number 0 [ 179.989479][ T14] usb 2-1: config 250 interface 230 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.175750][ T14] usb 2-1: config 250 interface 230 has no altsetting 0 [ 180.224679][ T14] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 180.278160][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.792855][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 180.799714][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 180.800265][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 180.800310][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 180.818862][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 181.221848][ T14] usb 2-1: Product: syz [ 181.226165][ T14] usb 2-1: Manufacturer: syz [ 181.230937][ T14] usb 2-1: SerialNumber: syz [ 181.305976][ T5560] netlink: 'syz.2.294': attribute type 4 has an invalid length. [ 181.466996][ T5563] netlink: 'syz.2.294': attribute type 4 has an invalid length. [ 181.477563][ T14] ums-usbat 2-1:250.230: USB Mass Storage device detected [ 181.640732][ T14] ums-usbat 2-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 181.725094][ T5572] loop4: detected capacity change from 0 to 128 [ 183.104618][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 183.386631][ T14] usb 2-1: USB disconnect, device number 4 [ 183.418691][ T5573] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.298'. [ 183.420242][ T5572] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.298'. [ 184.972821][ T5577] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 186.592825][ T4375] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 186.730367][ T5614] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 186.785733][ T4375] usb 3-1: Using ep0 maxpacket: 32 [ 186.800200][ T4375] usb 3-1: config 250 has an invalid interface number: 230 but max is 0 [ 186.815695][ T4375] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 186.828185][ T5606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 186.869118][ T4375] usb 3-1: config 250 has no interface number 0 [ 186.892443][ T5606] xt_nfacct: accounting object `syz1' does not exist [ 186.922054][ T4375] usb 3-1: config 250 interface 230 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.003137][ T4375] usb 3-1: config 250 interface 230 has no altsetting 0 [ 187.043012][ T4375] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 187.062773][ T4375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.119924][ T4375] usb 3-1: Product: syz [ 187.124833][ T4375] usb 3-1: Manufacturer: syz [ 187.138219][ T4375] usb 3-1: SerialNumber: syz [ 188.011896][ T4375] ums-usbat 3-1:250.230: USB Mass Storage device detected [ 188.101460][ T4375] ums-usbat 3-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 188.176003][ T4375] usb 3-1: USB disconnect, device number 3 [ 188.180392][ T5637] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 188.623523][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 188.697311][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 188.720832][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 188.732435][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 188.743633][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 188.753301][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 189.266184][ T5652] fuse: Bad value for 'fd' [ 192.410869][ T5688] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 192.463959][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 192.500821][ T5688] xt_nfacct: accounting object `syz1' does not exist [ 192.742840][ T4309] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.942716][ T4309] usb 5-1: Using ep0 maxpacket: 32 [ 192.952480][ T4309] usb 5-1: config 250 has an invalid interface number: 230 but max is 0 [ 192.985387][ T4309] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 193.119701][ T4309] usb 5-1: config 250 has no interface number 0 [ 193.128338][ T4309] usb 5-1: config 250 interface 230 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.142006][ T4309] usb 5-1: config 250 interface 230 has no altsetting 0 [ 193.152065][ T4309] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 193.161419][ T4309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.169727][ T4309] usb 5-1: Product: syz [ 193.174218][ T4309] usb 5-1: Manufacturer: syz [ 193.179097][ T4309] usb 5-1: SerialNumber: syz [ 193.408224][ T4309] ums-usbat 5-1:250.230: USB Mass Storage device detected [ 193.449722][ T4309] ums-usbat 5-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 193.521295][ T4309] usb 5-1: USB disconnect, device number 4 [ 194.089539][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.095930][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.162909][ T4309] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.365731][ T4309] usb 2-1: Using ep0 maxpacket: 32 [ 196.377398][ T4309] usb 2-1: config 250 has an invalid interface number: 230 but max is 0 [ 196.392980][ T4309] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 196.425084][ T4309] usb 2-1: config 250 has no interface number 0 [ 196.443414][ T4309] usb 2-1: config 250 interface 230 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.477033][ T4309] usb 2-1: config 250 interface 230 has no altsetting 0 [ 196.538503][ T4309] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 196.571379][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.601713][ T4309] usb 2-1: Product: syz [ 196.650880][ T4309] usb 2-1: Manufacturer: syz [ 196.680054][ T4309] usb 2-1: SerialNumber: syz [ 197.129584][ T4309] ums-usbat 2-1:250.230: USB Mass Storage device detected [ 197.710493][ T4309] ums-usbat 2-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 197.777115][ T4309] usb 2-1: USB disconnect, device number 5 [ 198.068210][ T5766] netlink: 'syz.0.353': attribute type 4 has an invalid length. [ 198.116632][ T5766] netlink: 'syz.0.353': attribute type 4 has an invalid length. [ 198.423441][ T5774] fuse: Bad value for 'fd' [ 202.624064][ T5798] binder: 5797:5798 ioctl 4018620d 0 returned -22 [ 204.917405][ T5831] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 204.954343][ T5831] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 206.152758][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 207.842707][ T4314] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.042761][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 208.052536][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 208.107232][ T4314] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 208.129890][ T4314] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 208.142497][ T4314] usb 3-1: config 4 has no interface number 0 [ 208.156723][ T4314] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 208.168706][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.179783][ T4314] usb 3-1: Product: syz [ 208.217853][ T4314] usb 3-1: Manufacturer: syz [ 208.222501][ T4314] usb 3-1: SerialNumber: syz [ 208.577500][ T5860] loop2: detected capacity change from 0 to 1024 [ 208.655799][ T5860] EXT4-fs: Ignoring removed orlov option [ 209.350849][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.373409][ T26] audit: type=1800 audit(1773091478.384:81): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.382" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 209.492053][ T5860] bio_check_ro: 4 callbacks suppressed [ 209.492068][ T5860] Trying to write to read-only block-device loop2 [ 209.726000][ T5860] Trying to write to read-only block-device loop2 [ 209.874030][ T5888] EXT4-fs error (device loop2): mb_free_blocks:1824: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 209.879589][ T5860] Trying to write to read-only block-device loop2 [ 210.059848][ T5860] Trying to write to read-only block-device loop2 [ 211.231990][ T5918] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 211.407099][ T5921] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 212.809700][ T4314] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 212.842962][ T4314] usb 3-1: No valid video chain found. [ 212.885381][ T4314] usb 3-1: USB disconnect, device number 4 [ 212.893887][ T4325] Trying to write to read-only block-device loop2 [ 212.900566][ T4279] Trying to write to read-only block-device loop2 [ 212.912706][ T4325] Trying to write to read-only block-device loop2 [ 212.942673][ T4279] Trying to write to read-only block-device loop2 [ 212.949219][ T4279] Trying to write to read-only block-device loop2 [ 212.969509][ T4325] Trying to write to read-only block-device loop2 [ 213.009930][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 213.234537][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 213.245284][ T5935] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 215.369018][ T5958] fuse: Bad value for 'fd' [ 215.503892][ T5960] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 216.338449][ T5960] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.395428][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 216.413705][ T5969] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 216.592736][ T5974] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 216.704183][ T5977] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 216.924425][ T5979] netlink: 'syz.3.419': attribute type 4 has an invalid length. [ 216.960620][ T5979] netlink: 'syz.3.419': attribute type 4 has an invalid length. [ 219.723110][ T6006] fuse: Bad value for 'fd' [ 220.853694][ T6016] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 222.792738][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 224.391344][ T6047] netlink: 'syz.3.440': attribute type 4 has an invalid length. [ 224.434313][ T6047] netlink: 'syz.3.440': attribute type 4 has an invalid length. [ 224.534181][ T6053] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 224.591148][ T6056] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 226.858093][ T4312] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 227.807686][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 227.822426][ T4312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.912246][ T4312] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 227.952086][ T4312] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 227.994820][ T4312] usb 3-1: config 4 has no interface number 0 [ 228.027195][ T4312] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 228.067440][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.097116][ T4312] usb 3-1: Product: syz [ 228.111944][ T4312] usb 3-1: Manufacturer: syz [ 228.131086][ T4312] usb 3-1: SerialNumber: syz [ 228.386846][ T6082] loop2: detected capacity change from 0 to 1024 [ 228.424983][ T6082] EXT4-fs: Ignoring removed orlov option [ 228.434009][ T6082] /dev/loop2: Can't open blockdev [ 228.984303][ T6117] binder: 6115:6117 ioctl c0306201 0 returned -14 [ 229.279551][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 229.335865][ T6122] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 230.164196][ T6125] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 230.391205][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'. [ 230.442244][ T6130] xt_nfacct: accounting object `syz1' does not exist [ 230.459202][ T6128] netlink: 'syz.1.459': attribute type 4 has an invalid length. [ 230.511072][ T6128] netlink: 'syz.1.459': attribute type 4 has an invalid length. [ 231.565895][ T6143] netlink: 52 bytes leftover after parsing attributes in process `syz.1.461'. [ 232.079920][ T6139] sctp: failed to load transform for md5: -2 [ 232.215389][ T4312] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 232.250978][ T4312] usb 3-1: No valid video chain found. [ 232.305702][ T4312] usb 3-1: USB disconnect, device number 5 [ 233.474663][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 234.872745][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 238.337271][ T6211] tmpfs: Unknown parameter 'usrquota' [ 239.037556][ T4278] block nbd2: Receive control failed (result -107) [ 239.046969][ T6232] nbd2: detected capacity change from 0 to 18 [ 239.049026][ T52] block nbd2: Dead connection, failed to find a fallback [ 239.061437][ T52] block nbd2: shutting down sockets [ 239.067458][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.077181][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.085754][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.094988][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.103536][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.112743][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.121057][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.130289][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.139707][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.148941][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.158050][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.167162][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.175325][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.184471][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.196200][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.208030][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.216028][ T4690] ldm_validate_partition_table(): Disk read failed. [ 239.240867][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.250272][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.260150][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.269289][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 239.278829][ T4690] Dev nbd2: unable to read RDB block 0 [ 239.322212][ T4690] nbd2: unable to read partition table [ 239.350591][ T4690] nbd2: partition table beyond EOD, truncated [ 239.498480][ T4690] ldm_validate_partition_table(): Disk read failed. [ 239.527029][ T4690] Dev nbd2: unable to read RDB block 0 [ 239.571383][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.579978][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.616321][ T4690] nbd2: unable to read partition table [ 239.653023][ T4690] nbd2: partition table beyond EOD, truncated [ 240.624521][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.669851][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.226149][ T6217] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.237425][ T6217] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.246713][ T6217] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.257227][ T6217] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.362798][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 241.621827][ T6217] syz.2.483 (6217) used greatest stack depth: 20528 bytes left [ 241.709483][ T6254] loop1: detected capacity change from 0 to 128 [ 243.272778][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 243.322988][ T6254] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.491'. [ 246.789497][ T6280] netlink: 48 bytes leftover after parsing attributes in process `syz.4.501'. [ 247.368654][ T6295] loop4: detected capacity change from 0 to 128 [ 247.844653][ T6295] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.506'. [ 249.843370][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 250.672009][ T6313] sctp: [Deprecated]: syz.3.511 (pid 6313) Use of int in max_burst socket option. [ 250.672009][ T6313] Use struct sctp_assoc_value instead [ 252.245504][ T6321] loop5: detected capacity change from 0 to 7 [ 252.265619][ T4690] Dev loop5: unable to read RDB block 7 [ 252.271226][ T4690] loop5: unable to read partition table [ 252.282731][ T4690] loop5: partition table beyond EOD, truncated [ 252.355705][ T6321] Dev loop5: unable to read RDB block 7 [ 252.372784][ T6321] loop5: unable to read partition table [ 252.431722][ T6321] loop5: partition table beyond EOD, truncated [ 252.461731][ T6321] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 252.545899][ T6325] netlink: 48 bytes leftover after parsing attributes in process `syz.3.515'. [ 252.774115][ T4310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 252.974080][ T4310] usb 2-1: config 0 has no interfaces? [ 252.981589][ T4310] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.990840][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.999246][ T4310] usb 2-1: Product: syz [ 253.003897][ T4310] usb 2-1: Manufacturer: syz [ 253.008575][ T4310] usb 2-1: SerialNumber: syz [ 253.021184][ T4310] usb 2-1: config 0 descriptor?? [ 253.273246][ T4310] usb 2-1: USB disconnect, device number 6 [ 253.522883][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 255.162883][ T6248] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 255.164826][ T6360] sctp: [Deprecated]: syz.3.529 (pid 6360) Use of int in max_burst socket option. [ 255.164826][ T6360] Use struct sctp_assoc_value instead [ 255.352796][ T6248] usb 2-1: Using ep0 maxpacket: 8 [ 255.372421][ T6248] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.388296][ T6248] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 255.397326][ T6248] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 255.499098][ T6248] usb 2-1: config 4 has no interface number 0 [ 255.515460][ T6248] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 255.525308][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531630][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.588066][ T6248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.596363][ T6248] usb 2-1: Product: syz [ 255.602807][ T6248] usb 2-1: Manufacturer: syz [ 255.612729][ T6248] usb 2-1: SerialNumber: syz [ 255.884088][ T6352] loop1: detected capacity change from 0 to 1024 [ 255.949444][ T6352] EXT4-fs: Ignoring removed orlov option [ 255.986524][ T6352] /dev/loop1: Can't open blockdev [ 257.946895][ T6249] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 258.064037][ T6388] sctp: [Deprecated]: syz.2.538 (pid 6388) Use of int in max_burst socket option. [ 258.064037][ T6388] Use struct sctp_assoc_value instead [ 258.155479][ T6249] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.172042][ T6249] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.187343][ T6249] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.202805][ T6249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.246868][ T6385] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 258.642707][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 261.177005][ T4309] usb 4-1: USB disconnect, device number 3 [ 261.275416][ T6248] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 261.281876][ T6248] usb 2-1: No valid video chain found. [ 261.443495][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 261.633058][ T6248] usb 2-1: USB disconnect, device number 7 [ 261.772192][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 261.779319][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 261.832768][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 262.097518][ T6412] sctp: [Deprecated]: syz.2.544 (pid 6412) Use of int in max_burst socket option. [ 262.097518][ T6412] Use struct sctp_assoc_value instead [ 262.432582][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 262.438716][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 262.451421][ T6399] ceph: No mds server is up or the cluster is laggy [ 262.632922][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 262.795398][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 262.846029][ T6416] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 264.973762][ T6442] sctp: [Deprecated]: syz.2.553 (pid 6442) Use of int in max_burst socket option. [ 264.973762][ T6442] Use struct sctp_assoc_value instead [ 265.032720][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 265.423339][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 265.612711][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 265.620428][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.636613][ T7] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 265.653430][ T7] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 265.689077][ T7] usb 2-1: config 4 has no interface number 0 [ 265.712697][ T7] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 265.721994][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.730658][ T7] usb 2-1: Product: syz [ 265.735428][ T7] usb 2-1: Manufacturer: syz [ 265.740099][ T7] usb 2-1: SerialNumber: syz [ 265.979453][ T6438] loop1: detected capacity change from 0 to 1024 [ 266.020668][ T6438] EXT4-fs: Ignoring removed orlov option [ 266.076230][ T6438] /dev/loop1: Can't open blockdev [ 266.182883][ T6444] netlink: 'syz.0.549': attribute type 4 has an invalid length. [ 266.443620][ T6452] device syzkaller0 entered promiscuous mode [ 268.682347][ T7] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 268.696814][ T7] usb 2-1: No valid video chain found. [ 268.704617][ T7] usb 2-1: USB disconnect, device number 8 [ 268.806508][ T6473] sctp: [Deprecated]: syz.1.560 (pid 6473) Use of int in max_burst socket option. [ 268.806508][ T6473] Use struct sctp_assoc_value instead [ 268.877908][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 269.081356][ T6477] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 269.147854][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.558'. [ 269.178021][ T6477] xt_nfacct: accounting object `syz1' does not exist [ 272.140394][ T6471] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 272.156088][ T6483] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 272.216612][ T6484] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 272.352745][ T4375] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 272.392784][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 272.545309][ T4375] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.582798][ T4375] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.649445][ T4375] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.679730][ T4375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.736312][ T6493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.982751][ T6249] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 274.234117][ T6249] usb 3-1: Using ep0 maxpacket: 8 [ 274.241912][ T6249] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.259075][ T6249] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 274.275962][ T6249] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 274.294303][ T6249] usb 3-1: config 4 has no interface number 0 [ 274.311836][ T6249] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 275.378854][ T6249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.395059][ T6249] usb 3-1: Product: syz [ 275.399286][ T6249] usb 3-1: Manufacturer: syz [ 275.404199][ T6249] usb 3-1: SerialNumber: syz [ 275.701638][ T6249] usb 3-1: can't set config #4, error -71 [ 275.711030][ T6249] usb 3-1: USB disconnect, device number 6 [ 276.248772][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 276.344308][ T6529] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 276.482427][ T6533] device syzkaller0 entered promiscuous mode [ 277.432790][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 277.442509][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 278.472704][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 278.482436][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 279.102708][ T6249] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 279.412860][ T6249] usb 4-1: device descriptor read/64, error -71 [ 279.682730][ T6249] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 279.859205][ T6249] usb 4-1: device descriptor read/64, error -71 [ 279.987857][ T6249] usb usb4-port1: attempt power cycle [ 281.647037][ T26] audit: type=1326 audit(1773091550.654:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 281.669109][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.693322][ T6556] process 'syz.3.585' launched './file2' with NULL argv: empty string added [ 281.715310][ T26] audit: type=1326 audit(1773091550.694:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 281.737945][ T26] audit: type=1326 audit(1773091550.694:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 281.797001][ T26] audit: type=1326 audit(1773091550.694:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 281.819162][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.866327][ T26] audit: type=1326 audit(1773091550.694:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 281.866798][ T5276] usb 5-1: USB disconnect, device number 5 [ 281.905528][ T26] audit: type=1326 audit(1773091550.694:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 281.968170][ T26] audit: type=1326 audit(1773091550.694:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 282.009602][ T26] audit: type=1326 audit(1773091550.694:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 282.070118][ T26] audit: type=1326 audit(1773091550.704:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 282.150637][ T26] audit: type=1326 audit(1773091551.154:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aef9c799 code=0x7ffc0000 [ 282.392791][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 283.055429][ T6539] device macvtap1 entered promiscuous mode [ 283.066728][ T6539] device dummy0 entered promiscuous mode [ 283.086618][ T6539] team0: Device macvtap1 failed to register rx_handler [ 283.108616][ T6539] device dummy0 left promiscuous mode [ 285.415960][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 285.423984][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.201121][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.257718][ T6590] netlink: 52 bytes leftover after parsing attributes in process `syz.4.591'. [ 286.271373][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.388680][ T6581] sctp: failed to load transform for md5: -2 [ 286.442729][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.450187][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.470507][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.478146][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.485621][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 286.535586][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 287.207097][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 287.272685][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 287.342783][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 287.457339][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 287.512784][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 287.523009][ T4309] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 287.523354][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 289.409122][ T4309] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 291.064688][ T6612] fido_id[6612]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.088812][ T6627] device syzkaller0 entered promiscuous mode [ 291.512991][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 295.790427][ T6656] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 295.819636][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 295.844331][ T6656] xt_nfacct: accounting object `syz1' does not exist [ 296.211059][ T6666] sctp: [Deprecated]: syz.3.614 (pid 6666) Use of int in max_burst socket option. [ 296.211059][ T6666] Use struct sctp_assoc_value instead [ 298.928277][ T4271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.938073][ T4271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.953306][ T4271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.965128][ T4271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.972553][ T4271] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 298.980128][ T4271] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.473788][ T4283] Bluetooth: hci5: command 0xfc11 tx timeout [ 300.492706][ T4278] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 301.032763][ T4278] Bluetooth: hci6: command 0x0409 tx timeout [ 301.522900][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 301.532816][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 301.856045][ T6681] netlink: 'syz.3.617': attribute type 10 has an invalid length. [ 302.341880][ T6700] device syzkaller0 entered promiscuous mode [ 302.632143][ T6712] netlink: 'syz.3.626': attribute type 4 has an invalid length. [ 302.670260][ T6712] netlink: 'syz.3.626': attribute type 4 has an invalid length. [ 302.713417][ T6682] chnl_net:caif_netlink_parms(): no params data found [ 302.953808][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.108276][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.115712][ T4278] Bluetooth: hci6: command 0x041b tx timeout [ 304.507615][ T6682] device bridge_slave_0 entered promiscuous mode [ 305.192721][ T4278] Bluetooth: hci6: command 0x040f tx timeout [ 305.362754][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 305.378357][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.385787][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.393904][ T6682] device bridge_slave_1 entered promiscuous mode [ 305.416083][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.485990][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.914082][ T6737] sctp: [Deprecated]: syz.3.631 (pid 6737) Use of int in max_burst socket option. [ 305.914082][ T6737] Use struct sctp_assoc_value instead [ 306.105342][ T6682] team0: Port device team_slave_0 added [ 306.121249][ T6682] team0: Port device team_slave_1 added [ 306.150171][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.169833][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.202927][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.275961][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.347301][ T4278] Bluetooth: hci6: command 0x0419 tx timeout [ 307.387106][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.572710][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.805736][ T6750] netlink: 'syz.3.635': attribute type 10 has an invalid length. [ 307.906553][ T6755] device syzkaller0 entered promiscuous mode [ 307.941751][ T6682] device hsr_slave_0 entered promiscuous mode [ 307.956798][ T6682] device hsr_slave_1 entered promiscuous mode [ 307.971529][ T6682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.988714][ T6682] Cannot create hsr debugfs directory [ 308.280836][ T6768] fuse: Unknown parameter '00000000000000000000' [ 310.075719][ T6769] netlink: 'syz.4.641': attribute type 4 has an invalid length. [ 310.214028][ T6781] sctp: [Deprecated]: syz.0.644 (pid 6781) Use of int in max_burst socket option. [ 310.214028][ T6781] Use struct sctp_assoc_value instead [ 311.090697][ T6773] netlink: 'syz.4.641': attribute type 4 has an invalid length. [ 312.320844][ T6682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.402763][ T6682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.449369][ T6682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.495989][ T6682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 312.746270][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.828854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.843503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.895081][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.919790][ T6799] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 313.005893][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.039132][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.092928][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.100043][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.150359][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.169707][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.188134][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.218889][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.227013][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.245637][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.284486][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.310970][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.321975][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.330958][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.342086][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.363380][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.472796][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 317.304698][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310993][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.412490][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.419957][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.776778][ T6824] sctp: [Deprecated]: syz.0.656 (pid 6824) Use of int in max_burst socket option. [ 318.776778][ T6824] Use struct sctp_assoc_value instead [ 319.217862][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.465365][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.573104][ T6827] serio: Serial port ptm0 [ 319.863760][ T6794] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.879458][ T6794] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.889592][ T6794] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.902720][ T6794] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.055944][ T6812] device syzkaller0 entered promiscuous mode [ 322.901070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.911713][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.920328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.929011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.940612][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.948585][ T6833] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 322.968753][ T6836] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 322.989950][ T6842] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 323.043575][ T6843] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 324.315294][ T6863] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:0 [ 324.706134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.732497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.861045][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.014293][ T6877] sctp: [Deprecated]: syz.3.671 (pid 6877) Use of int in max_burst socket option. [ 325.014293][ T6877] Use struct sctp_assoc_value instead [ 325.552686][ T127] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 325.952852][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 325.959831][ T127] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.972498][ T127] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.982680][ T127] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 326.002330][ T127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.009249][ T127] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 326.019310][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.039598][ T127] usb 4-1: config 0 descriptor?? [ 326.256700][ T127] usbhid 4-1:0.0: can't add hid device: -71 [ 326.268398][ T127] usbhid: probe of 4-1:0.0 failed with error -71 [ 326.288682][ T127] usb 4-1: USB disconnect, device number 7 [ 326.561088][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.568302][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.814589][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.875978][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.049452][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 331.412091][ T6873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.421349][ T6873] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.430582][ T6873] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.440281][ T6873] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.672356][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.758429][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.169581][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.224134][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.349323][ T6682] device veth0_vlan entered promiscuous mode [ 333.446214][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.533906][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.781024][ T6682] device veth1_vlan entered promiscuous mode [ 334.135579][ T6682] device veth0_macvtap entered promiscuous mode [ 336.614400][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.663711][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.730978][ T6682] device veth1_macvtap entered promiscuous mode [ 336.757238][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.950835][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.613143][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.623065][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.633578][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.647733][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.661937][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.672435][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.682311][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.692797][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.746056][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.773177][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.802984][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.823454][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.862532][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.925172][ T6682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.972723][ T6682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.998551][ T6682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.017502][ T6682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.164218][ T6971] device syzkaller0 entered promiscuous mode [ 345.890143][ T7005] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 345.917834][ T7006] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 345.951289][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.984031][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.032358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.240069][ T4704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.266302][ T4704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.064178][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.297228][ T7022] sctp: [Deprecated]: syz.1.704 (pid 7022) Use of int in max_burst socket option. [ 348.297228][ T7022] Use struct sctp_assoc_value instead [ 352.989777][ T7049] device syzkaller0 entered promiscuous mode [ 355.060870][ T7086] loop5: detected capacity change from 0 to 128 [ 355.152803][ T6249] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 355.409463][ T6249] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.513031][ T6249] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 355.731975][ T6249] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.741628][ T6249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.795540][ T7082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.696962][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 358.548450][ T7068] device syzkaller0 entered promiscuous mode [ 360.127282][ T7103] sctp: [Deprecated]: syz.1.724 (pid 7103) Use of int in max_burst socket option. [ 360.127282][ T7103] Use struct sctp_assoc_value instead [ 364.232302][ T4309] usb 1-1: USB disconnect, device number 4 [ 364.906006][ T7140] fuse: Bad value for 'rootmode' [ 366.152795][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 367.913552][ T7149] device syzkaller0 entered promiscuous mode [ 369.103114][ T7161] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 369.349485][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'. [ 369.583108][ T3598] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 370.212849][ T7167] xt_nfacct: accounting object `syz1' does not exist [ 370.413175][ T3598] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.432732][ T3598] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.485015][ T3598] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.520302][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.571787][ T7164] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.975028][ T7190] fuse: Bad value for 'rootmode' [ 375.996187][ T7213] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 376.015520][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.754'. [ 376.033492][ T7213] xt_nfacct: accounting object `syz1' does not exist [ 377.231010][ T6249] usb 2-1: USB disconnect, device number 9 [ 378.907819][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.914193][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.903859][ T7246] sctp: [Deprecated]: syz.3.765 (pid 7246) Use of int in max_burst socket option. [ 379.903859][ T7246] Use struct sctp_assoc_value instead [ 380.396807][ T7249] device syzkaller0 entered promiscuous mode [ 380.692759][ T4309] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 381.593357][ T4309] usb 4-1: Using ep0 maxpacket: 16 [ 381.602954][ T7266] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 381.613318][ T4309] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.646454][ T4309] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.660130][ T4309] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 381.693150][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.5.761'. [ 381.732773][ T4309] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.739404][ T4309] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 381.768707][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.797552][ T4309] usb 4-1: config 0 descriptor?? [ 382.037421][ T7266] xt_nfacct: accounting object `syz1' does not exist [ 382.054410][ T4309] usbhid 4-1:0.0: can't add hid device: -71 [ 382.090181][ T4309] usbhid: probe of 4-1:0.0 failed with error -71 [ 382.107001][ T4309] usb 4-1: USB disconnect, device number 8 [ 382.417283][ T3598] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 383.412688][ T3598] usb 1-1: device descriptor read/64, error -71 [ 383.682699][ T3598] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 383.902686][ T3598] usb 1-1: device descriptor read/64, error -71 [ 384.046559][ T3598] usb usb1-port1: attempt power cycle [ 386.073492][ T3598] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 387.963125][ T7300] device syzkaller0 entered promiscuous mode [ 388.243402][ T7304] loop3: detected capacity change from 0 to 128 [ 390.076450][ T7311] netlink: 'syz.1.783': attribute type 4 has an invalid length. [ 390.108123][ T7311] netlink: 'syz.1.783': attribute type 4 has an invalid length. [ 390.202714][ T127] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 390.304205][ T7318] sctp: [Deprecated]: syz.4.785 (pid 7318) Use of int in max_burst socket option. [ 390.304205][ T7318] Use struct sctp_assoc_value instead [ 390.765555][ T127] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.782818][ T127] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 390.842690][ T127] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.901569][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.963438][ T7313] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 391.017489][ T3598] usb 1-1: device descriptor read/8, error -71 [ 391.062848][ T4311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 391.252752][ T4311] usb 5-1: Using ep0 maxpacket: 16 [ 391.386122][ T127] usb 6-1: USB disconnect, device number 2 [ 391.386510][ T4311] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.557680][ T4311] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.643827][ T4311] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 391.763675][ T4311] usb 5-1: config 0 interface 0 has no altsetting 0 [ 392.002749][ T4311] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 392.905351][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.917504][ T4311] usb 5-1: config 0 descriptor?? [ 393.141264][ T7341] device macvtap1 entered promiscuous mode [ 393.158932][ T7341] device dummy0 entered promiscuous mode [ 393.214672][ T4311] usb 5-1: can't set config #0, error -71 [ 393.993710][ T4311] usb 5-1: USB disconnect, device number 6 [ 394.024621][ T7341] team0: Device macvtap1 failed to register rx_handler [ 396.017727][ T7353] loop4: detected capacity change from 0 to 128 [ 398.305359][ T7341] device dummy0 left promiscuous mode [ 399.132843][ T4314] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 400.599575][ T7368] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 400.629593][ T7368] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 400.734200][ T4314] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.792933][ T4314] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 400.892080][ T4314] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 400.968483][ T7385] sctp: [Deprecated]: syz.5.806 (pid 7385) Use of int in max_burst socket option. [ 400.968483][ T7385] Use struct sctp_assoc_value instead [ 401.091704][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.410063][ T4314] usb 5-1: can't set config #27, error -71 [ 402.423620][ T4314] usb 5-1: USB disconnect, device number 7 [ 402.645420][ T7397] device macvtap1 entered promiscuous mode [ 402.659512][ T7397] device dummy0 entered promiscuous mode [ 402.692485][ T7397] team0: Device macvtap1 failed to register rx_handler [ 402.702808][ T6249] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 402.724548][ T7397] device dummy0 left promiscuous mode [ 402.902839][ T6249] usb 6-1: Using ep0 maxpacket: 16 [ 402.910781][ T6249] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.402806][ T6249] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.481310][ T6249] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 404.582448][ T6249] usb 6-1: config 0 interface 0 has no altsetting 0 [ 404.635154][ T6249] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 404.644551][ T6249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.654935][ T7411] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 404.671697][ T6249] usb 6-1: config 0 descriptor?? [ 404.687441][ T6249] usb 6-1: can't set config #0, error -71 [ 404.718831][ T6249] usb 6-1: USB disconnect, device number 3 [ 404.728346][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 404.872211][ T7411] xt_nfacct: accounting object `syz1' does not exist [ 404.936749][ T7416] loop5: detected capacity change from 0 to 128 [ 405.086175][ T7417] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.812'. [ 405.097790][ T7416] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.812'. [ 408.107909][ T7433] device macvtap1 entered promiscuous mode [ 408.139391][ T7433] device dummy0 entered promiscuous mode [ 408.155498][ T7433] team0: Device macvtap1 failed to register rx_handler [ 408.173361][ T7433] device dummy0 left promiscuous mode [ 412.342782][ T7446] sctp: [Deprecated]: syz.3.822 (pid 7446) Use of int in max_burst socket option. [ 412.342782][ T7446] Use struct sctp_assoc_value instead [ 413.022793][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 414.500538][ T7458] device macvtap1 entered promiscuous mode [ 414.509641][ T7458] device dummy0 entered promiscuous mode [ 414.525037][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 414.543637][ T7458] team0: Device macvtap1 failed to register rx_handler [ 414.554425][ T7458] device dummy0 left promiscuous mode [ 417.268488][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 417.294524][ T7] usb 4-1: can't read configurations, error -71 [ 417.325298][ T7476] fuse: Unknown parameter 'user_i00000000000000000000' [ 418.485937][ T7484] netlink: 'syz.1.831': attribute type 4 has an invalid length. [ 418.501583][ T7484] netlink: 'syz.1.831': attribute type 4 has an invalid length. [ 421.218996][ T7500] device macvtap1 entered promiscuous mode [ 421.273827][ T7500] device dummy0 entered promiscuous mode [ 421.284506][ T7500] team0: Device macvtap1 failed to register rx_handler [ 421.432698][ T4278] Bluetooth: hci6: command 0x0406 tx timeout [ 422.893703][ T7500] device dummy0 left promiscuous mode [ 424.847794][ T7521] sctp: [Deprecated]: syz.4.840 (pid 7521) Use of int in max_burst socket option. [ 424.847794][ T7521] Use struct sctp_assoc_value instead [ 425.224278][ T7520] device macvtap1 entered promiscuous mode [ 425.263914][ T7520] device dummy0 entered promiscuous mode [ 425.360999][ T7520] team0: Device macvtap1 failed to register rx_handler [ 425.472817][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 426.084730][ T7520] device dummy0 left promiscuous mode [ 426.309652][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 429.409270][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 429.427444][ T7] usb 5-1: can't read configurations, error -71 [ 429.510414][ T7552] device macvtap1 entered promiscuous mode [ 429.516915][ T7552] device dummy0 entered promiscuous mode [ 429.529720][ T7552] team0: Device macvtap1 failed to register rx_handler [ 429.539325][ T7552] device dummy0 left promiscuous mode [ 433.756134][ T7572] netlink: 'syz.1.856': attribute type 4 has an invalid length. [ 433.780287][ T7573] netlink: 'syz.1.856': attribute type 4 has an invalid length. [ 435.139819][ T7586] sctp: [Deprecated]: syz.5.862 (pid 7586) Use of int in max_burst socket option. [ 435.139819][ T7586] Use struct sctp_assoc_value instead [ 436.953182][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 437.243015][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 437.261115][ T7] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.950071][ T7] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.374413][ T7] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 438.431558][ T7610] device macvtap1 entered promiscuous mode [ 438.440342][ T7610] device dummy0 entered promiscuous mode [ 438.449808][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 438.450350][ T7610] team0: Device macvtap1 failed to register rx_handler [ 438.472830][ T7610] device dummy0 left promiscuous mode [ 438.556474][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 439.844968][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.851250][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.571128][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.590013][ T7] usb 6-1: config 0 descriptor?? [ 440.595552][ T7] usb 6-1: can't set config #0, error -71 [ 440.605490][ T7] usb 6-1: USB disconnect, device number 4 [ 442.736392][ T7636] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:52769 [ 442.835725][ T7636] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 443.112086][ T7648] sctp: [Deprecated]: syz.1.881 (pid 7648) Use of int in max_burst socket option. [ 443.112086][ T7648] Use struct sctp_assoc_value instead [ 443.122493][ T7636] block nbd5: shutting down sockets [ 443.593302][ T4365] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 444.406854][ T4365] usb 2-1: Using ep0 maxpacket: 16 [ 444.414232][ T4365] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.442695][ T4365] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.452910][ T4365] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 444.476336][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.504064][ T4365] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 444.528653][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.544540][ T4365] usb 2-1: config 0 descriptor?? [ 445.115930][ T4365] usbhid 2-1:0.0: can't add hid device: -71 [ 445.121976][ T4365] usbhid: probe of 2-1:0.0 failed with error -71 [ 445.159952][ T7659] netlink: 'syz.3.887': attribute type 10 has an invalid length. [ 445.162799][ T4365] usb 2-1: USB disconnect, device number 10 [ 449.260409][ T7702] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 450.195969][ T7713] sctp: [Deprecated]: syz.5.901 (pid 7713) Use of int in max_burst socket option. [ 450.195969][ T7713] Use struct sctp_assoc_value instead [ 450.650574][ T7715] vivid-000: ================= START STATUS ================= [ 450.662944][ T4314] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 450.679333][ T7715] vivid-000: Test Pattern: 75% Colorbar [ 450.707054][ T7715] vivid-000: Fill Percentage of Frame: 100 [ 450.912670][ T4314] usb 6-1: Using ep0 maxpacket: 16 [ 451.549695][ T4314] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.568632][ T4314] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.578825][ T4314] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 451.593553][ T4314] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.600681][ T4314] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 451.609855][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.615786][ T7715] vivid-000: Horizontal Movement: No Movement [ 451.635863][ T4314] usb 6-1: config 0 descriptor?? [ 451.681355][ T7715] vivid-000: Vertical Movement: No Movement [ 451.690801][ T7715] vivid-000: OSD Text Mode: All [ 451.701359][ T7715] vivid-000: Show Border: false [ 451.706612][ T7715] vivid-000: Show Square: false [ 451.711534][ T7715] vivid-000: Sensor Flipped Horizontally: false [ 451.718866][ T7715] vivid-000: Sensor Flipped Vertically: false [ 451.725122][ T7715] vivid-000: Insert SAV Code in Image: false [ 451.739932][ T7715] vivid-000: Insert EAV Code in Image: false [ 451.761894][ T7715] vivid-000: Insert Video Guard Band: false [ 451.833659][ T7715] vivid-000: Reduced Framerate: false [ 451.839130][ T7715] vivid-000: Enable Capture Cropping: true grabbed [ 451.867837][ T4314] usbhid 6-1:0.0: can't add hid device: -71 [ 451.874113][ T4314] usbhid: probe of 6-1:0.0 failed with error -71 [ 452.008894][ T7715] vivid-000: Enable Capture Composing: true grabbed [ 452.019409][ T4314] usb 6-1: USB disconnect, device number 5 [ 452.052826][ T7715] vivid-000: Enable Capture Scaler: true grabbed [ 452.956294][ T7715] vivid-000: Timestamp Source: End of Frame [ 453.035030][ T7715] vivid-000: Colorspace: sRGB [ 453.095319][ T7715] vivid-000: Transfer Function: Default [ 453.102020][ T7715] vivid-000: Y'CbCr Encoding: Default [ 453.125352][ T7715] vivid-000: HSV Encoding: Hue 0-179 [ 453.159714][ T7715] vivid-000: Quantization: Default [ 453.165036][ T7715] vivid-000: Apply Alpha To Red Only: false [ 453.171151][ T7715] vivid-000: Standard Aspect Ratio: 4x3 [ 453.179633][ T7715] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 453.187619][ T7715] vivid-000: DV Timings: 640x480p59 inactive [ 453.192846][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 453.194476][ T7715] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 453.210734][ T7715] vivid-000: Maximum EDID Blocks: 2 [ 453.216218][ T7715] vivid-000: Limited RGB Range (16-235): false [ 453.222800][ T7715] vivid-000: Rx RGB Quantization Range: Automatic [ 453.229412][ T7715] vivid-000: Power Present: 0x00000001 [ 453.239724][ T7715] tpg source WxH: 640x360 (Y'CbCr) [ 453.245673][ T7715] tpg field: 1 [ 453.249139][ T7715] tpg crop: 640x360@0x0 [ 453.279537][ T7715] tpg compose: 640x360@0x0 [ 453.308209][ T7715] tpg colorspace: 8 [ 453.312056][ T7715] tpg transfer function: 0/2 [ 453.380671][ T7715] tpg Y'CbCr encoding: 0/1 [ 453.412269][ T7715] tpg quantization: 0/2 [ 453.477842][ T7715] tpg RGB range: 0/2 [ 453.512485][ T7715] vivid-000: ================== END STATUS ================== [ 454.553189][ T7746] tty tty3: ldisc open failed (-12), clearing slot 2 [ 455.673361][ T4704] wlan0: Trigger new scan to find an IBSS to join [ 457.894122][ T7776] fuse: Unknown parameter 'user_id00000000000000000000' [ 459.673118][ T4325] wlan0: Trigger new scan to find an IBSS to join [ 461.231603][ T7792] sctp: [Deprecated]: syz.5.922 (pid 7792) Use of int in max_burst socket option. [ 461.231603][ T7792] Use struct sctp_assoc_value instead [ 461.865115][ T4833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.884304][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.402892][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 464.609208][ T7808] sctp: [Deprecated]: syz.3.928 (pid 7808) Use of int in max_burst socket option. [ 464.609208][ T7808] Use struct sctp_assoc_value instead [ 464.809144][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.817154][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.912867][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 464.921188][ T7822] device bridge_slave_1 left promiscuous mode [ 464.951568][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.050274][ T7822] device bridge_slave_0 left promiscuous mode [ 465.069038][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.123089][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 465.137704][ T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.154354][ T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.170030][ T27] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 465.184536][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 465.191368][ T27] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 465.201333][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.211612][ T27] usb 4-1: config 0 descriptor?? [ 465.420327][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 465.438082][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 465.468809][ T27] usb 4-1: USB disconnect, device number 11 [ 465.903578][ T7837] netlink: 'syz.4.937': attribute type 10 has an invalid length. [ 466.716281][ T7850] sctp: [Deprecated]: syz.0.940 (pid 7850) Use of int in max_burst socket option. [ 466.716281][ T7850] Use struct sctp_assoc_value instead [ 466.772805][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 467.160804][ T7848] netlink: 'syz.3.938': attribute type 4 has an invalid length. [ 467.191453][ T7848] netlink: 'syz.3.938': attribute type 4 has an invalid length. [ 467.224028][ T27] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.269111][ T27] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.283861][ T27] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.292964][ T7732] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 467.301135][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.315154][ T7846] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 467.472829][ T7732] usb 1-1: Using ep0 maxpacket: 16 [ 467.480000][ T7732] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.560122][ T7732] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.615101][ T7732] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 467.633313][ T7732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.645646][ T7732] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 467.655963][ T7732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.685475][ T7] usb 5-1: USB disconnect, device number 10 [ 467.698861][ T7732] usb 1-1: config 0 descriptor?? [ 467.917130][ T7732] usbhid 1-1:0.0: can't add hid device: -71 [ 467.932979][ T7732] usbhid: probe of 1-1:0.0 failed with error -71 [ 467.960078][ T7732] usb 1-1: USB disconnect, device number 9 [ 470.254203][ T7869] IPVS: Scheduler module ip_vs_sip not found [ 470.363634][ T7877] sctp: [Deprecated]: syz.5.949 (pid 7877) Use of int in max_burst socket option. [ 470.363634][ T7877] Use struct sctp_assoc_value instead [ 470.662746][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 470.892761][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 470.899804][ T7] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.938081][ T7] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.968305][ T7] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 472.065884][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.122457][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 472.165385][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.415165][ T7] usb 6-1: config 0 descriptor?? [ 473.441812][ T7886] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 473.618706][ T7] usb 6-1: can't set config #0, error -71 [ 473.653713][ T7] usb 6-1: USB disconnect, device number 7 [ 474.145080][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 474.199607][ T7918] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 479.932373][ T7943] sctp: [Deprecated]: syz.5.967 (pid 7943) Use of int in max_burst socket option. [ 479.932373][ T7943] Use struct sctp_assoc_value instead [ 480.603215][ T7732] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 480.743436][ T7952] netlink: 'syz.4.970': attribute type 10 has an invalid length. [ 480.831443][ T7956] sctp: [Deprecated]: syz.1.971 (pid 7956) Use of int in max_burst socket option. [ 480.831443][ T7956] Use struct sctp_assoc_value instead [ 480.862792][ T7732] usb 6-1: Using ep0 maxpacket: 16 [ 481.192909][ T7732] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.260064][ T7732] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.547744][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 482.141067][ T7732] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 482.154189][ T7732] usb 6-1: config 0 interface 0 has no altsetting 0 [ 482.160810][ T7732] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 482.169934][ T7732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.203388][ T7732] usb 6-1: config 0 descriptor?? [ 482.343102][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 483.257558][ T7963] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 483.292531][ T7732] usb 6-1: can't set config #0, error -71 [ 483.310112][ T7732] usb 6-1: USB disconnect, device number 8 [ 483.372750][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 483.380289][ T14] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.583637][ T14] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.613782][ T14] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 483.683691][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 483.842739][ T14] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 483.851815][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.878867][ T14] usb 2-1: config 0 descriptor?? [ 484.546418][ T14] usb 2-1: can't set config #0, error -71 [ 484.557967][ T14] usb 2-1: USB disconnect, device number 11 [ 484.651472][ T7981] netlink: 'syz.5.974': attribute type 4 has an invalid length. [ 486.147581][ T7986] netlink: 'syz.5.974': attribute type 4 has an invalid length. [ 486.255739][ T8004] device macvtap1 entered promiscuous mode [ 486.363384][ T8004] device dummy0 entered promiscuous mode [ 486.479453][ T8004] team0: Device macvtap1 failed to register rx_handler [ 486.593405][ T8004] device dummy0 left promiscuous mode [ 490.724643][ T8027] sctp: [Deprecated]: syz.5.985 (pid 8027) Use of int in max_burst socket option. [ 490.724643][ T8027] Use struct sctp_assoc_value instead [ 491.188695][ T8029] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 491.285703][ T7] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 491.540769][ T4704] bond0: (slave wlan1): Releasing backup interface [ 491.547764][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 491.558582][ T7] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.480957][ T7] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.622662][ T7] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 492.697608][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 492.722273][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 493.619003][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.891387][ T7] usb 6-1: config 0 descriptor?? [ 495.115837][ T4317] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 495.356605][ T7] usb 6-1: can't set config #0, error -71 [ 495.366955][ T7] usb 6-1: USB disconnect, device number 9 [ 496.331538][ T8051] sctp: [Deprecated]: syz.3.989 (pid 8051) Use of int in max_burst socket option. [ 496.331538][ T8051] Use struct sctp_assoc_value instead [ 497.989086][ T4704] device hsr_slave_0 left promiscuous mode [ 498.025605][ T4704] device hsr_slave_1 left promiscuous mode [ 498.068170][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.133576][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.163898][ T4704] device bridge_slave_1 left promiscuous mode [ 498.180997][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.336231][ T4704] device bridge_slave_0 left promiscuous mode [ 498.358759][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.462715][ T7732] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 499.544319][ T7732] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.605798][ T7732] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 499.683415][ T7732] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.776867][ T7732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.921239][ T8086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 501.285548][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.292820][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.822471][ T4704] team0 (unregistering): Port device team_slave_1 removed [ 501.978011][ T4704] team0 (unregistering): Port device team_slave_0 removed [ 502.098144][ T4704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.279099][ T4704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.467837][ T4704] bond0 (unregistering): Released all slaves [ 506.258587][ T8084] ------------[ cut here ]------------ [ 506.264845][ T8084] WARNING: CPU: 1 PID: 8084 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 506.275633][ T8084] Modules linked in: [ 506.279550][ T8084] CPU: 1 PID: 8084 Comm: syz.1.997 Not tainted syzkaller #0 [ 506.286885][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.296978][ T8084] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 506.303886][ T8084] Code: 7c 2d 00 00 74 08 48 89 df e8 1c 49 1e f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a5 df 80 00 e8 00 5e cd f7 <0f> 0b eb c5 48 c7 c1 24 0c 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 506.323539][ T8084] RSP: 0018:ffffc90003917500 EFLAGS: 00010287 [ 506.329596][ T8084] RAX: ffffffff89b514b0 RBX: ffff88801e6555a8 RCX: 0000000000080000 [ 506.337586][ T8084] RDX: ffffc90005cb9000 RSI: 0000000000005669 RDI: 000000000000566a [ 506.345564][ T8084] RBP: 0000000000000000 R08: ffffffff8e1fd76f R09: 1ffffffff1c3faed [ 506.353558][ T8084] R10: dffffc0000000000 R11: fffffbfff1c3faee R12: ffff88801e656ab0 [ 506.361523][ T8084] R13: 1ffff11003ccaab5 R14: ffff88801e656228 R15: dffffc0000000000 [ 506.369523][ T8084] FS: 00007fea9353d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 506.378553][ T8084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.385154][ T8084] CR2: 000000110c3447cc CR3: 0000000028cc6000 CR4: 00000000003506e0 [ 506.393161][ T8084] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 506.401139][ T8084] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 506.409143][ T8084] Call Trace: [ 506.412426][ T8084] [ 506.415369][ T8084] ieee80211_if_change_type+0x20a/0xa50 [ 506.420945][ T8084] ieee80211_change_iface+0x58/0x4c0 [ 506.426249][ T8084] cfg80211_change_iface+0x7e6/0xf80 [ 506.431536][ T8084] nl80211_set_interface+0x5ea/0x840 [ 506.436865][ T8084] ? nl80211_dump_interface+0x5c0/0x5c0 [ 506.442404][ T8084] ? nl80211_pre_doit+0x4f7/0x930 [ 506.447443][ T8084] genl_family_rcv_msg_doit+0x22a/0x330 [ 506.453004][ T8084] ? end_current_label_crit_section+0x170/0x170 [ 506.459235][ T8084] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 506.465141][ T8084] ? bpf_lsm_capable+0x5/0x10 [ 506.469825][ T8084] ? security_capable+0x85/0xb0 [ 506.474688][ T8084] genl_rcv_msg+0x604/0x790 [ 506.479183][ T8084] ? genl_bind+0x360/0x360 [ 506.483598][ T8084] ? nl80211_dump_interface+0x5c0/0x5c0 [ 506.489158][ T8084] netlink_rcv_skb+0x1fb/0x450 [ 506.493927][ T8084] ? genl_bind+0x360/0x360 [ 506.498326][ T8084] ? netlink_ack+0x1170/0x1170 [ 506.503110][ T8084] ? down_read+0x1a8/0x2d0 [ 506.507514][ T8084] genl_rcv+0x24/0x40 [ 506.511475][ T8084] netlink_unicast+0x74d/0x8d0 [ 506.516251][ T8084] netlink_sendmsg+0x8ad/0xbd0 [ 506.521024][ T8084] ? netlink_getsockopt+0x550/0x550 [ 506.526229][ T8084] ? aa_sock_msg_perm+0x94/0x150 [ 506.531154][ T8084] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 506.536461][ T8084] ? security_socket_sendmsg+0x7c/0xa0 [ 506.541908][ T8084] __sys_sendto+0x497/0x650 [ 506.546418][ T8084] ? __ia32_sys_getpeername+0x80/0x80 [ 506.551804][ T8084] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 506.557789][ T8084] ? lock_chain_count+0x20/0x20 [ 506.562657][ T8084] __x64_sys_sendto+0xda/0xf0 [ 506.567321][ T8084] do_syscall_64+0x4c/0xa0 [ 506.571767][ T8084] ? clear_bhb_loop+0x60/0xb0 [ 506.576471][ T8084] ? clear_bhb_loop+0x60/0xb0 [ 506.581145][ T8084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.587056][ T8084] RIP: 0033:0x7fea9255cfce [ 506.591471][ T8084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.611099][ T8084] RSP: 002b:00007fea9353bde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.619569][ T8084] RAX: ffffffffffffffda RBX: 00007fea9353d6c0 RCX: 00007fea9255cfce [ 506.627572][ T8084] RDX: 0000000000000024 RSI: 00007fea9353bfe0 RDI: 0000000000000003 [ 506.635568][ T8084] RBP: 0000000000000000 R08: 00007fea9353be64 R09: 000000000000000c [ 506.643545][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 506.651518][ T8084] R13: 0000000000000000 R14: 00007fea9353bfe0 R15: 0000000000000000 [ 506.659507][ T8084] [ 506.662526][ T8084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.669786][ T8084] CPU: 1 PID: 8084 Comm: syz.1.997 Not tainted syzkaller #0 [ 506.677049][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.687086][ T8084] Call Trace: [ 506.690356][ T8084] [ 506.693269][ T8084] dump_stack_lvl+0x188/0x24e [ 506.697934][ T8084] ? memcpy+0x3c/0x60 [ 506.701905][ T8084] ? show_regs_print_info+0x12/0x12 [ 506.707089][ T8084] ? load_image+0x400/0x400 [ 506.711583][ T8084] panic+0x2e5/0x730 [ 506.715462][ T8084] ? bpf_jit_dump+0xd0/0xd0 [ 506.719950][ T8084] __warn+0x2f8/0x4f0 [ 506.723914][ T8084] ? ieee80211_link_release_channel+0x150/0x180 [ 506.730144][ T8084] ? ieee80211_link_release_channel+0x150/0x180 [ 506.736368][ T8084] report_bug+0x2ba/0x4f0 [ 506.740681][ T8084] ? ieee80211_link_release_channel+0x150/0x180 [ 506.746906][ T8084] handle_bug+0x3a/0x70 [ 506.751041][ T8084] exc_invalid_op+0x16/0x40 [ 506.755525][ T8084] asm_exc_invalid_op+0x16/0x20 [ 506.760354][ T8084] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 506.767185][ T8084] Code: 7c 2d 00 00 74 08 48 89 df e8 1c 49 1e f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a5 df 80 00 e8 00 5e cd f7 <0f> 0b eb c5 48 c7 c1 24 0c 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 506.786772][ T8084] RSP: 0018:ffffc90003917500 EFLAGS: 00010287 [ 506.792821][ T8084] RAX: ffffffff89b514b0 RBX: ffff88801e6555a8 RCX: 0000000000080000 [ 506.800769][ T8084] RDX: ffffc90005cb9000 RSI: 0000000000005669 RDI: 000000000000566a [ 506.808716][ T8084] RBP: 0000000000000000 R08: ffffffff8e1fd76f R09: 1ffffffff1c3faed [ 506.816669][ T8084] R10: dffffc0000000000 R11: fffffbfff1c3faee R12: ffff88801e656ab0 [ 506.824618][ T8084] R13: 1ffff11003ccaab5 R14: ffff88801e656228 R15: dffffc0000000000 [ 506.832573][ T8084] ? ieee80211_link_release_channel+0x150/0x180 [ 506.838817][ T8084] ieee80211_if_change_type+0x20a/0xa50 [ 506.844352][ T8084] ieee80211_change_iface+0x58/0x4c0 [ 506.849619][ T8084] cfg80211_change_iface+0x7e6/0xf80 [ 506.854891][ T8084] nl80211_set_interface+0x5ea/0x840 [ 506.860163][ T8084] ? nl80211_dump_interface+0x5c0/0x5c0 [ 506.865695][ T8084] ? nl80211_pre_doit+0x4f7/0x930 [ 506.870704][ T8084] genl_family_rcv_msg_doit+0x22a/0x330 [ 506.876232][ T8084] ? end_current_label_crit_section+0x170/0x170 [ 506.882455][ T8084] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 506.888330][ T8084] ? bpf_lsm_capable+0x5/0x10 [ 506.892989][ T8084] ? security_capable+0x85/0xb0 [ 506.897822][ T8084] genl_rcv_msg+0x604/0x790 [ 506.902307][ T8084] ? genl_bind+0x360/0x360 [ 506.906698][ T8084] ? nl80211_dump_interface+0x5c0/0x5c0 [ 506.912234][ T8084] netlink_rcv_skb+0x1fb/0x450 [ 506.916985][ T8084] ? genl_bind+0x360/0x360 [ 506.921379][ T8084] ? netlink_ack+0x1170/0x1170 [ 506.926137][ T8084] ? down_read+0x1a8/0x2d0 [ 506.930537][ T8084] genl_rcv+0x24/0x40 [ 506.934498][ T8084] netlink_unicast+0x74d/0x8d0 [ 506.939250][ T8084] netlink_sendmsg+0x8ad/0xbd0 [ 506.944003][ T8084] ? netlink_getsockopt+0x550/0x550 [ 506.949183][ T8084] ? aa_sock_msg_perm+0x94/0x150 [ 506.954106][ T8084] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 506.959377][ T8084] ? security_socket_sendmsg+0x7c/0xa0 [ 506.964821][ T8084] __sys_sendto+0x497/0x650 [ 506.969308][ T8084] ? __ia32_sys_getpeername+0x80/0x80 [ 506.974674][ T8084] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 506.980641][ T8084] ? lock_chain_count+0x20/0x20 [ 506.985479][ T8084] __x64_sys_sendto+0xda/0xf0 [ 506.990140][ T8084] do_syscall_64+0x4c/0xa0 [ 506.994537][ T8084] ? clear_bhb_loop+0x60/0xb0 [ 506.999195][ T8084] ? clear_bhb_loop+0x60/0xb0 [ 507.003849][ T8084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.009724][ T8084] RIP: 0033:0x7fea9255cfce [ 507.014119][ T8084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 507.033705][ T8084] RSP: 002b:00007fea9353bde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 507.042099][ T8084] RAX: ffffffffffffffda RBX: 00007fea9353d6c0 RCX: 00007fea9255cfce [ 507.050048][ T8084] RDX: 0000000000000024 RSI: 00007fea9353bfe0 RDI: 0000000000000003 [ 507.058002][ T8084] RBP: 0000000000000000 R08: 00007fea9353be64 R09: 000000000000000c [ 507.065954][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 507.073904][ T8084] R13: 0000000000000000 R14: 00007fea9353bfe0 R15: 0000000000000000 [ 507.081862][ T8084] [ 507.085219][ T8084] Kernel Offset: disabled [ 507.089615][ T8084] Rebooting in 86400 seconds..