last executing test programs: 8m5.515352191s ago: executing program 3 (id=2834): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) close(r5) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x101000) ppoll(&(0x7f00000000c0)=[{r7, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000001c0)=0x4) r8 = syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0x2098f907, 0x8}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=0x41424344, @ANYRESHEX=r8, @ANYBLOB="80046071907800e7080a09df168a"], 0x0) timer_create(0x8, &(0x7f0000000340)={0x0, 0x39, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) 8m0.437488649s ago: executing program 3 (id=2842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8000, 0x3, 0x400015f}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, &(0x7f0000000080)=""/108, 0x6c) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x150, 0x0, 0xf, [{{0x0, 0x1, 0x900000000000000, 0x100000001ff, 0x7fffffff, 0x2, {0x6, 0x10, 0xc6, 0x1, 0x2, 0xffffffffffffff82, 0x80, 0xb1, 0x4000402, 0xc000, 0x103, r6, 0x0, 0x4, 0x4a}}, {0x6, 0x10000, 0x8, 0x2, 'rootmode'}}, {{0x5, 0x2, 0x37a, 0x40000000000008, 0xffffffff, 0x6, {0x10000000, 0x4, 0x8fb, 0x2000000ec3, 0x3ff, 0xffffffffffff7f6e, 0x7f, 0xfffff5e3, 0x1, 0xc000, 0xffffffff, r6, r7, 0xfffff077, 0x8}}, {0x4, 0x4, 0x8, 0x7fc, 'rootmode'}}]}, 0x0, 0x0, 0x0}) 7m52.871372627s ago: executing program 3 (id=2853): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000007c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) 7m52.46058203s ago: executing program 3 (id=2857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x116b, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x50) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7m50.791506864s ago: executing program 3 (id=2860): openat$ptmx(0xffffffffffffff9c, 0x0, 0x181341, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000001c0)) 7m49.622248578s ago: executing program 32 (id=2860): openat$ptmx(0xffffffffffffff9c, 0x0, 0x181341, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000001c0)) 8.394275605s ago: executing program 1 (id=3931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x619, r0}, 0x38) 8.323334131s ago: executing program 0 (id=3932): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 8.184875522s ago: executing program 0 (id=3934): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x215b, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) lseek(0xffffffffffffffff, 0x851, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0x7, 0x6, 0x802, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40804}, 0x400c801) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000003c0)={0x7, 0x3, &(0x7f0000000500)=[0xffff, 0x5, 0x2], &(0x7f0000000240), &(0x7f0000000400)=[0x4, 0x6], 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 8.046111913s ago: executing program 1 (id=3935): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.844022619s ago: executing program 4 (id=3940): syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.635226476s ago: executing program 4 (id=3941): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfa, 0x400000}, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49be, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0xfffffffe, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x1, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0xb}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 6.566143282s ago: executing program 2 (id=3942): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d489355d67ea72c6774e253765eda27e0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb06", 0x2b}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x180, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x1a8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040880) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 5.881179327s ago: executing program 4 (id=3943): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 5.827445542s ago: executing program 1 (id=3944): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 5.810974933s ago: executing program 4 (id=3945): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x0, r0}}) io_setup(0x1, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x101000, 0x40) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000300)=0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700000000000011b64b378ee96af15cbbc65d72ae980b6df22b5ca3ea377f36beb44b45c6f84b3f4d2c62ca91b4df16fc8cc5d18b35213e5f67ec200e768ab28feaff2195724b2965ebca822af6c0a4e598d34f9b5f1eb43de209cd5541fe72d89d5f9819c1529c242b72ccdb9541e54fcccf12457df695126458ebffaaebe98748dea4f0a0b0a1683ff327ca05070000000000000088a571761be31e4fdd530604d32149c22f81adc983adc81b335d0579f47763a97af46500c91d5b2640242661beca1b4e695f7aac5ae46a72ac99ec395bdf16e3fc75e7acbb2d10060bef6a793082f8cfd4721588787c8a8c6257a8a11d49f7f7ed9de6efb7dd8058fb0c8125ee9c1691afa39b5a70d489efcd3e95a483c59f8fa7443e795eac454a68ab647e0d5381df6528858895d57274e97046659ac9488c85e5728987fa9d43660eb28b7befbb981f8fde8754d792146e49ee14bff102540e247a8780c80e3ff0688e8cb5c500446756d0b76244766deecc69c4c3435c125f0f06c772a051b690113e59485586e0ff"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) 3.770696917s ago: executing program 1 (id=3946): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x4bfb, &(0x7f0000000380)) 3.618023749s ago: executing program 2 (id=3947): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x9dc6, 0x2000e66, 0x3, 0x8, 0x4086, 0x0, 0xfffffffc]}) 3.538544875s ago: executing program 1 (id=3948): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB], 0xc8}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 2.926469665s ago: executing program 0 (id=3949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="61a201cd5422dd2c43e98bba79f50062f3941b767d235c24651f1ec0e869585a3700fa3777", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = io_uring_setup(0x2609, &(0x7f00000006c0)={0x0, 0xb1ea, 0x1021, 0x1, 0x8a}) r2 = syz_io_uring_setup(0x2339, &(0x7f0000000340)={0x0, 0x7c6b, 0x800, 0x3, 0x310, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_setup(0x41d7, &(0x7f0000000480)={0x0, 0x55ec, 0x10, 0x1, 0x2ff, 0x0, r2}, &(0x7f0000000580), &(0x7f0000000680)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f00000002c0)=0x38, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffa, 0x0, {0x0, 0x1}, {0x80, 0xffff}, @const={0x0, {0xfff, 0x0, 0x2, 0x403}}}) syz_open_dev$evdev(&(0x7f0000000280), 0x4, 0x488840) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 2.750183849s ago: executing program 2 (id=3950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x703}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.749455239s ago: executing program 1 (id=3951): socket$kcm(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x567d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002b40)={'tunl0\x00', &(0x7f0000002a00)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0xffff, 0x3, {{0x16, 0x4, 0x2, 0x15, 0x58, 0x64, 0x0, 0x5, 0x7f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@generic={0x89, 0x2}, @timestamp_addr={0x44, 0xc, 0xe1, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_addr={0x44, 0x34, 0x10, 0x1, 0x6, [{@loopback, 0x6}, {@empty, 0x2}, {@local, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x10001}, {@multicast2, 0x1}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000002fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4054) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 2.659845986s ago: executing program 0 (id=3952): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfa, 0x400000}, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49be, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0xfffffffe, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x1, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0xb}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 2.658692816s ago: executing program 4 (id=3953): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 2.583753932s ago: executing program 2 (id=3954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000000040), &(0x7f0000000a00)=""/4096, 0x7, 0x0, 0x0, 0x600, &(0x7f0000001a00), &(0x7f0000002a00)="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", 0x4, 0x0, 0x2}, 0x4c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100000000, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbd000000}}, 0xe4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000008180)={0x2020}, 0x2020) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x48a1c3, 0x0) 2.191212604s ago: executing program 4 (id=3955): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 911.734997ms ago: executing program 0 (id=3956): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1) 699.347434ms ago: executing program 0 (id=3957): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x215b, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) lseek(0xffffffffffffffff, 0x851, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0x7, 0x6, 0x802, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40804}, 0x400c801) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000003c0)={0x7, 0x3, &(0x7f0000000500)=[0xffff, 0x5, 0x2], &(0x7f0000000240), &(0x7f0000000400)=[0x4, 0x6], 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 694.473844ms ago: executing program 2 (id=3958): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x9dc6, 0x2000e66, 0x3, 0x8, 0x4086, 0x0, 0xfffffffc]}) 0s ago: executing program 2 (id=3959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) kernel console output (not intermixed with test programs): 35][T15736] fuse: Bad value for 'fd' [ 1114.538820][T15569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1114.583491][T15569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1114.625810][T15569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1115.720535][T15569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.847439][T15569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.876130][T11097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.883540][T11097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.923638][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.930951][T11097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.614932][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.620387][T15569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1117.633138][T15569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1117.643816][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.162839][T15777] fuse: Unknown parameter 'user_i00000000000000000000' [ 1118.203847][T15569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.333957][T15569] veth0_vlan: entered promiscuous mode [ 1118.374784][T15569] veth1_vlan: entered promiscuous mode [ 1118.468399][T15569] veth0_macvtap: entered promiscuous mode [ 1118.494441][T15569] veth1_macvtap: entered promiscuous mode [ 1118.581805][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.605484][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.625753][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.641373][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.669847][T15569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.705312][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1118.722892][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.740461][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1118.753204][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.818018][T15569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.348001][T15569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.392753][T15569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.411842][T15569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.431942][T15569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.717176][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.761853][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.920438][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.932607][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.312035][T15805] fuse: Unknown parameter 'user_id00000000000000000000' [ 1130.533287][T15818] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2532'. [ 1130.660499][T15818] batadv1: entered allmulticast mode [ 1135.124938][T15855] fuse: Unknown parameter 'user_id00000000000000000000' [ 1135.333468][T15860] usb usb7: usbfs: process 15860 (syz.2.2547) did not claim interface 0 before use [ 1135.378426][T15860] syz.2.2547: attempt to access beyond end of device [ 1135.378426][T15860] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1135.411899][T15860] qnx6: unable to read the first superblock [ 1135.419417][T15860] syz.2.2547: attempt to access beyond end of device [ 1135.419417][T15860] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1135.436440][T15860] qnx6: unable to read the first superblock [ 1135.446729][T15860] qnx6: unable to read the first superblock [ 1136.322889][T15879] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2550'. [ 1136.373486][T15879] batadv1: entered allmulticast mode [ 1136.956784][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1137.030189][T15889] fuse: Unknown parameter 'user_id00000000000000000000' [ 1137.196959][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1137.213734][ T9] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1137.227154][ T9] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1137.255145][ T9] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1137.275632][ T9] usb 1-1: config 250 has no interface number 0 [ 1137.285115][T15885] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1137.301978][ T9] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1137.335862][ T9] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1137.384684][ T9] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 513 [ 1137.419564][ T9] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1137.447174][ T9] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1137.462500][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1137.473176][ T9] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1137.501205][ T9] usb 1-1: Product: syz [ 1137.526147][ T9] usb 1-1: SerialNumber: syz [ 1137.545138][ T9] hub 1-1:250.228: bad descriptor, ignoring hub [ 1137.572341][ T9] hub: probe of 1-1:250.228 failed with error -5 [ 1137.752240][ T9] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1138.435126][T15884] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 1138.873398][ C0] usblp0: nonzero read bulk status received: -71 [ 1138.960102][T15902] usb usb7: usbfs: process 15902 (syz.3.2560) did not claim interface 0 before use [ 1138.981286][T15902] syz.3.2560: attempt to access beyond end of device [ 1138.981286][T15902] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1139.000748][T15902] qnx6: unable to read the first superblock [ 1139.021629][T15902] syz.3.2560: attempt to access beyond end of device [ 1139.021629][T15902] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1139.071473][T15902] qnx6: unable to read the first superblock [ 1139.136871][T15902] qnx6: unable to read the first superblock [ 1139.178710][T14283] usb 1-1: USB disconnect, device number 4 [ 1139.196232][T14283] usblp0: removed [ 1139.231369][T14734] Bluetooth: hci1: command 0x0406 tx timeout [ 1140.004757][T15919] fuse: Bad value for 'fd' [ 1140.417640][T15923] 9pnet_fd: p9_fd_create_tcp (15923): problem connecting socket to 127.0.0.1 [ 1140.754611][T15939] usb usb7: usbfs: process 15939 (syz.2.2572) did not claim interface 0 before use [ 1140.771121][T15939] syz.2.2572: attempt to access beyond end of device [ 1140.771121][T15939] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1140.786828][T15939] qnx6: unable to read the first superblock [ 1140.793315][T15939] syz.2.2572: attempt to access beyond end of device [ 1140.793315][T15939] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1140.806945][T15939] qnx6: unable to read the first superblock [ 1140.813042][T15939] qnx6: unable to read the first superblock [ 1141.349972][T15949] fuse: Bad value for 'fd' [ 1142.162844][T15970] fuse: Bad value for 'fd' [ 1142.282000][T15965] 9pnet_fd: p9_fd_create_tcp (15965): problem connecting socket to 127.0.0.1 [ 1142.738706][T15978] veth0_to_bridge: entered promiscuous mode [ 1143.502292][T15976] veth0_to_bridge: left promiscuous mode [ 1143.519325][T15986] usb usb7: usbfs: process 15986 (syz.0.2588) did not claim interface 0 before use [ 1143.650012][T15986] syz.0.2588: attempt to access beyond end of device [ 1143.650012][T15986] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1143.718546][T15986] qnx6: unable to read the first superblock [ 1143.764752][T15986] syz.0.2588: attempt to access beyond end of device [ 1143.764752][T15986] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1143.833120][T15986] qnx6: unable to read the first superblock [ 1143.860599][T15986] qnx6: unable to read the first superblock [ 1144.596020][T16002] fuse: Unknown parameter '0x0000000000000003' [ 1144.975253][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1145.149902][T16016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1145.858245][T16030] usb usb7: usbfs: process 16030 (syz.0.2602) did not claim interface 0 before use [ 1145.954546][T16030] syz.0.2602: attempt to access beyond end of device [ 1145.954546][T16030] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1145.972782][T16030] qnx6: unable to read the first superblock [ 1145.981941][T16030] syz.0.2602: attempt to access beyond end of device [ 1145.981941][T16030] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1146.030472][T16030] qnx6: unable to read the first superblock [ 1146.087503][T16030] qnx6: unable to read the first superblock [ 1146.163852][T16037] fuse: Unknown parameter '0x0000000000000003' [ 1147.004378][T16051] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2609'. [ 1147.900215][T16064] fuse: Unknown parameter '0x0000000000000003' [ 1148.188760][T16068] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2615'. [ 1148.228889][T16070] usb usb7: usbfs: process 16070 (syz.2.2617) did not claim interface 0 before use [ 1148.237340][T16068] batadv1: entered allmulticast mode [ 1148.266369][T16070] syz.2.2617: attempt to access beyond end of device [ 1148.266369][T16070] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1148.285682][T16070] qnx6: unable to read the first superblock [ 1148.292613][T16070] syz.2.2617: attempt to access beyond end of device [ 1148.292613][T16070] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1148.311683][T16070] qnx6: unable to read the first superblock [ 1148.318431][T16070] qnx6: unable to read the first superblock [ 1149.571361][T16093] fuse: Unknown parameter '0x0000000000000003' [ 1150.290669][T16105] usb usb7: usbfs: process 16105 (syz.2.2630) did not claim interface 0 before use [ 1150.434389][T16105] syz.2.2630: attempt to access beyond end of device [ 1150.434389][T16105] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1150.457094][T16105] qnx6: unable to read the first superblock [ 1150.476212][T16105] syz.2.2630: attempt to access beyond end of device [ 1150.476212][T16105] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1150.572086][T16105] qnx6: unable to read the first superblock [ 1150.669149][T16105] qnx6: unable to read the first superblock [ 1152.075760][T16124] fuse: Unknown parameter '0x0000000000000003' [ 1152.999330][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 1153.120264][T16145] usb usb7: usbfs: process 16145 (syz.2.2641) did not claim interface 0 before use [ 1153.199492][T16143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1153.295524][T16145] syz.2.2641: attempt to access beyond end of device [ 1153.295524][T16145] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1153.308991][T16145] qnx6: unable to read the first superblock [ 1153.317321][T16145] syz.2.2641: attempt to access beyond end of device [ 1153.317321][T16145] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1153.336821][T16145] qnx6: unable to read the first superblock [ 1153.354422][T16145] qnx6: unable to read the first superblock [ 1154.089011][T16157] fuse: Unknown parameter '0x0000000000000003' [ 1156.208542][T16182] fuse: Unknown parameter 'fd0x0000000000000003' [ 1156.665255][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1156.950682][T16190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1157.191239][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 1157.304749][T16192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1157.558022][T16199] capability: warning: `syz.1.2657' uses 32-bit capabilities (legacy support in use) [ 1159.052495][T16219] fuse: Unknown parameter 'fd0x0000000000000003' [ 1159.725545][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1160.101940][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 1161.131944][T16244] fuse: Unknown parameter 'fd0x0000000000000003' [ 1161.238260][T16237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1161.680388][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 1161.736036][T16256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1165.072436][T16281] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2684'. [ 1165.241476][T16281] batadv1: entered allmulticast mode [ 1165.265509][T16284] input: syz1 as /devices/virtual/input/input12 [ 1167.174678][T11097] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1167.376188][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1167.422277][T16294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1169.950340][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 1170.037662][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1170.216846][T16315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1174.401024][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 1174.648688][T16338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1174.736099][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'. [ 1174.861229][T16340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1178.177296][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.723118][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.324717][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2709'. [ 1180.523419][T16378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1180.937116][T16385] usb usb7: usbfs: process 16385 (syz.2.2712) did not claim interface 0 before use [ 1182.067066][T16385] syz.2.2712: attempt to access beyond end of device [ 1182.067066][T16385] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1182.095477][T16385] qnx6: unable to read the first superblock [ 1182.123128][T16385] syz.2.2712: attempt to access beyond end of device [ 1182.123128][T16385] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1182.157502][T16385] qnx6: unable to read the first superblock [ 1182.174565][T16385] qnx6: unable to read the first superblock [ 1182.631870][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 1182.713512][T16402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1184.629325][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 1184.705364][T16425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1186.064040][T16434] usb usb7: usbfs: process 16434 (syz.0.2725) did not claim interface 0 before use [ 1186.091160][T16434] syz.0.2725: attempt to access beyond end of device [ 1186.091160][T16434] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1186.113582][T16434] qnx6: unable to read the first superblock [ 1186.120637][T16434] syz.0.2725: attempt to access beyond end of device [ 1186.120637][T16434] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1186.188958][T16434] qnx6: unable to read the first superblock [ 1186.195401][T16434] qnx6: unable to read the first superblock [ 1186.989696][T16445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2728'. [ 1188.344005][T13228] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1188.509565][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 1188.549673][T13228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.586049][T13228] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1188.783842][T13228] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1188.905114][T13228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.043941][T13228] usb 4-1: config 0 descriptor?? [ 1189.136494][T13228] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1189.148639][T16466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.167454][T13228] dvb-usb: bulk message failed: -22 (3/0) [ 1189.192285][T13228] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1189.236360][T13228] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1189.283607][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'. [ 1189.325469][T13228] usb 4-1: media controller created [ 1189.398709][T16451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.450648][T13228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1189.649882][T13228] dvb-usb: bulk message failed: -22 (6/0) [ 1189.718039][T13228] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1189.743839][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'. [ 1189.780620][T13228] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 1189.842278][T13228] dvb-usb: schedule remote query interval to 150 msecs. [ 1189.903257][T13228] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1190.047223][T13228] usb 4-1: USB disconnect, device number 3 [ 1190.380294][T16471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1190.532012][T13228] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1191.188816][T16484] usb usb7: usbfs: process 16484 (syz.2.2738) did not claim interface 0 before use [ 1191.222934][T16484] syz.2.2738: attempt to access beyond end of device [ 1191.222934][T16484] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1191.244624][T16484] qnx6: unable to read the first superblock [ 1191.254209][T16484] syz.2.2738: attempt to access beyond end of device [ 1191.254209][T16484] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1191.329915][T16484] qnx6: unable to read the first superblock [ 1191.336066][T16484] qnx6: unable to read the first superblock [ 1192.181937][T16490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1192.928041][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 1192.964349][T16506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1193.517479][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 1193.570451][T16514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1193.671832][T16509] 9pnet_fd: p9_fd_create_tcp (16509): problem connecting socket to 127.0.0.1 [ 1194.762948][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 1194.989908][T16522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1195.550421][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 1195.767002][T16532] usb usb7: usbfs: process 16532 (syz.1.2749) did not claim interface 0 before use [ 1195.847403][T16532] qnx6: unable to set blocksize [ 1195.941156][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2750'. [ 1200.351182][T16550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2753'. [ 1200.541053][T16555] netlink: 'syz.3.2754': attribute type 10 has an invalid length. [ 1200.553943][T16555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2754'. [ 1200.566729][T14283] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1200.570673][T16555] dummy0: entered promiscuous mode [ 1200.600903][T16554] 9pnet_fd: p9_fd_create_tcp (16554): problem connecting socket to 127.0.0.1 [ 1200.615475][T16559] Bluetooth: MGMT ver 1.22 [ 1200.629243][T16559] random: crng reseeded on system resumption [ 1200.642687][T16555] bridge0: port 3(dummy0) entered blocking state [ 1200.687885][T16555] bridge0: port 3(dummy0) entered disabled state [ 1200.711513][T16555] dummy0: entered allmulticast mode [ 1200.765115][T14283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.787288][T14283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1200.797765][T14283] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1200.809922][T14283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.823833][T16555] bridge0: port 3(dummy0) entered blocking state [ 1200.831551][T16555] bridge0: port 3(dummy0) entered forwarding state [ 1200.839775][T14283] usb 1-1: config 0 descriptor?? [ 1200.850532][T14283] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1200.857415][T14283] dvb-usb: bulk message failed: -22 (3/0) [ 1200.880772][T14283] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1200.908998][T14283] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1200.922625][T14283] usb 1-1: media controller created [ 1200.939756][T14283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1201.100137][T14283] dvb-usb: bulk message failed: -22 (6/0) [ 1201.106510][T14283] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1201.120115][T14283] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 1201.137800][T14283] dvb-usb: schedule remote query interval to 150 msecs. [ 1201.145776][T14283] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1201.158158][T14283] usb 1-1: USB disconnect, device number 5 [ 1201.188653][T14283] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1201.501362][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 1201.584490][T16564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1201.711260][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 1202.079210][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2758'. [ 1202.207381][T16577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1202.841124][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1203.052715][T16583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1203.462479][T16586] qnx6: unable to set blocksize [ 1206.385992][T16605] 9pnet_fd: p9_fd_create_tcp (16605): problem connecting socket to 127.0.0.1 [ 1206.449770][T16607] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2766'. [ 1207.237501][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 1207.517791][T16626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1208.170923][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 1208.249820][T16634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1208.490406][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 1208.681206][T16639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1212.300350][T16660] 9pnet_fd: p9_fd_create_tcp (16660): problem connecting socket to 127.0.0.1 [ 1212.938674][T16670] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 1212.987741][T16670] (null): rxe_set_mtu: Set mtu to 1024 [ 1213.933929][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 1213.984676][T16687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1214.115824][T16670] infiniband syz0: set down [ 1214.171207][T16670] infiniband syz0: added ipvlan1 [ 1214.237553][T16670] syz0: rxe_create_cq: returned err = -12 [ 1214.374995][T16670] infiniband syz0: Couldn't create ib_mad CQ [ 1214.404972][T16670] infiniband syz0: Couldn't open port 1 [ 1214.613263][T16670] RDS/IB: syz0: added [ 1214.650141][T16670] smc: adding ib device syz0 with port count 1 [ 1214.681406][T16670] smc: ib device syz0 port 1 has pnetid [ 1214.975193][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1214.975211][ T27] audit: type=1326 audit(1756332359.322:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.057278][ T27] audit: type=1326 audit(1756332359.362:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.117145][ T27] audit: type=1326 audit(1756332359.362:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.130333][T16693] pim6reg: entered allmulticast mode [ 1215.192645][ T27] audit: type=1326 audit(1756332359.362:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.297163][ T27] audit: type=1326 audit(1756332359.372:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.396404][ T27] audit: type=1326 audit(1756332359.392:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e9298d550 code=0x7ffc0000 [ 1215.491463][ T27] audit: type=1326 audit(1756332359.392:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.540221][ T27] audit: type=1326 audit(1756332359.392:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.609983][ T27] audit: type=1326 audit(1756332359.392:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.696812][ T27] audit: type=1326 audit(1756332359.392:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16676 comm="syz.1.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4e9298ebe9 code=0x7ffc0000 [ 1215.891717][T16676] pim6reg: left allmulticast mode [ 1216.312539][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 1216.433280][T16699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1216.609742][T16705] 9pnet_fd: p9_fd_create_tcp (16705): problem connecting socket to 127.0.0.1 [ 1217.140398][T16710] random: crng reseeded on system resumption [ 1221.387485][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 1223.914489][T16754] 9pnet_fd: p9_fd_create_tcp (16754): problem connecting socket to 127.0.0.1 [ 1223.990409][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 1224.013059][T16762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1227.939627][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'. [ 1230.234551][T16796] C: renamed from team_slave_0 [ 1230.254279][T16796] netlink: 'syz.3.2813': attribute type 3 has an invalid length. [ 1230.272445][T16796] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1230.286988][T16796] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1231.750885][T16810] 9pnet_fd: p9_fd_create_tcp (16810): problem connecting socket to 127.0.0.1 [ 1236.126325][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1236.188210][T16837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1239.524135][T16864] 9pnet_fd: p9_fd_create_tcp (16864): problem connecting socket to 127.0.0.1 [ 1239.552317][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.561784][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.812065][T16875] random: crng reseeded on system resumption [ 1242.589478][T16876] netlink: 320 bytes leftover after parsing attributes in process `syz.3.2834'. [ 1246.218793][T16916] 9pnet_fd: p9_fd_create_tcp (16916): problem connecting socket to 127.0.0.1 [ 1246.539671][T16926] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2846'. [ 1248.759350][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 1248.769110][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 1248.779467][T16928] netlink: 'syz.2.2847': attribute type 12 has an invalid length. [ 1248.932242][T16932] fuse: Bad value for 'fd' [ 1253.909730][T16965] fuse: Bad value for 'fd' [ 1254.065076][T16961] 9pnet_fd: p9_fd_create_tcp (16961): problem connecting socket to 127.0.0.1 [ 1255.109327][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 1255.303456][T16974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1256.640319][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1256.653311][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1256.665771][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1256.702047][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1256.702067][ T27] audit: type=1800 audit(1756332401.052:117): pid=16998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2866" name="bus" dev="overlay" ino=542 res=0 errno=0 [ 1256.799567][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.807815][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1256.815597][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1258.905856][T17000] lo speed is unknown, defaulting to 1000 [ 1258.917012][T14734] Bluetooth: hci1: command tx timeout [ 1258.988858][T17016] fuse: Bad value for 'fd' [ 1259.389948][T17021] 9pnet_fd: p9_fd_create_tcp (17021): problem connecting socket to 127.0.0.1 [ 1259.975110][T17023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1260.004994][T17023] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1260.023538][ T3493] hsr_slave_0: left promiscuous mode [ 1260.079699][ T3493] hsr_slave_1: left promiscuous mode [ 1260.099376][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.129131][T17023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1260.136388][T17023] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1260.150208][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.183131][T17023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1260.191202][ T3493] dummy0: left allmulticast mode [ 1260.196330][ T3493] dummy0: left promiscuous mode [ 1260.227170][T17023] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1260.235263][ T3493] bridge0: port 3(dummy0) entered disabled state [ 1260.262649][T17023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1260.275063][ T3493] bridge_slave_1: left allmulticast mode [ 1260.287008][T17023] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1260.297176][ T3493] bridge_slave_1: left promiscuous mode [ 1260.309949][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.333499][T17023] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1260.343779][ T3493] bridge_slave_0: left allmulticast mode [ 1260.360555][ T3493] bridge_slave_0: left promiscuous mode [ 1260.371887][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.579065][T14734] Bluetooth: hci4: command 0x0406 tx timeout [ 1261.698650][T15519] smc: removing ib device syz0 [ 1262.320739][T14734] Bluetooth: hci0: command 0x0406 tx timeout [ 1262.332265][T14734] Bluetooth: hci2: command 0x0406 tx timeout [ 1262.340217][T14734] Bluetooth: hci1: command 0x040f tx timeout [ 1263.833667][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 1264.543789][ T5789] Bluetooth: hci1: command 0x040f tx timeout [ 1264.554728][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 1264.564200][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 1266.097801][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 1266.168968][ T3493] team0 (unregistering): Port device C removed [ 1266.577717][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.592145][T14734] Bluetooth: hci1: command 0x040f tx timeout [ 1266.730649][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.039816][T17070] fuse: Bad value for 'fd' [ 1268.082494][ T3493] bond0 (unregistering): Released all slaves [ 1268.667300][T14734] Bluetooth: hci1: command 0x040f tx timeout [ 1269.231074][T17084] usb usb7: usbfs: process 17084 (syz.2.2881) did not claim interface 0 before use [ 1269.360513][T17084] syz.2.2881: attempt to access beyond end of device [ 1269.360513][T17084] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1269.383868][T17084] qnx6: unable to read the first superblock [ 1269.384077][T17084] syz.2.2881: attempt to access beyond end of device [ 1269.384077][T17084] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1269.384098][T17084] qnx6: unable to read the first superblock [ 1269.384104][T17084] qnx6: unable to read the first superblock [ 1269.437976][T17000] chnl_net:caif_netlink_parms(): no params data found [ 1269.656429][T17091] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1269.983033][T17000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.993442][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.017800][T17000] bridge_slave_0: entered allmulticast mode [ 1270.025653][T17000] bridge_slave_0: entered promiscuous mode [ 1270.073002][T17000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.095726][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.109886][T17000] bridge_slave_1: entered allmulticast mode [ 1270.140985][T17000] bridge_slave_1: entered promiscuous mode [ 1270.154343][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 1270.184368][T17107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2885'. [ 1270.256425][T17109] fuse: Bad value for 'fd' [ 1270.337869][T17000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.360585][T17000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.481106][T17000] team0: Port device team_slave_0 added [ 1270.518845][T17000] team0: Port device team_slave_1 added [ 1270.790133][T14734] Bluetooth: hci1: command 0x040f tx timeout [ 1274.197603][T17000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.207174][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.268976][T17000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.283327][T17000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.302503][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.377033][T17000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.828531][T17000] hsr_slave_0: entered promiscuous mode [ 1274.871035][T17000] hsr_slave_1: entered promiscuous mode [ 1274.988507][T17000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.996528][T17000] Cannot create hsr debugfs directory [ 1275.943386][T17158] usb usb7: usbfs: process 17158 (syz.2.2895) did not claim interface 0 before use [ 1276.028327][T17160] syz.2.2895: attempt to access beyond end of device [ 1276.028327][T17160] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1276.112651][T17160] qnx6: unable to read the first superblock [ 1276.160226][T17160] syz.2.2895: attempt to access beyond end of device [ 1276.160226][T17160] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1276.174444][T17160] qnx6: unable to read the first superblock [ 1276.178576][T17000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1276.184053][T17160] qnx6: unable to read the first superblock [ 1276.238825][T17000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1276.307606][T17000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1276.346295][T17000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1276.687708][T17000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.776225][T17000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.832750][T11097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.840422][T11097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.904575][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.911986][T11097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.898837][T17000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.157234][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'. [ 1278.198781][T17203] netlink: 'syz.2.2900': attribute type 5 has an invalid length. [ 1278.208504][T17203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2900'. [ 1278.426101][T17203] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1278.439023][T17203] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1278.448829][T17203] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1278.458391][T17203] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1278.503357][T17203] geneve2: entered promiscuous mode [ 1278.509967][T17203] geneve2: entered allmulticast mode [ 1279.245589][T17000] veth0_vlan: entered promiscuous mode [ 1279.300794][T17000] veth1_vlan: entered promiscuous mode [ 1279.392093][T17000] veth0_macvtap: entered promiscuous mode [ 1279.424717][T17000] veth1_macvtap: entered promiscuous mode [ 1279.509466][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.551490][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.581985][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.616741][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.654749][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.691438][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.735751][T17000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.789810][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.822615][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.870149][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.896675][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.917453][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.948680][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.970742][T17000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.010044][T17000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.033520][T17000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.228772][T17000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.277322][T17000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.632088][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.672881][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.743748][T11322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.776550][T11322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.517699][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'. [ 1282.572965][T17240] veth3: entered promiscuous mode [ 1282.647301][T17245] usb usb7: usbfs: process 17245 (syz.1.2907) did not claim interface 0 before use [ 1282.737809][T17245] qnx6: unable to set blocksize [ 1283.651718][T17274] 9pnet_fd: p9_fd_create_tcp (17274): problem connecting socket to 127.0.0.1 [ 1283.951105][T17280] comedi comedi3: comedi_test: 20263 microvolt, 2 microsecond waveform attached [ 1284.661175][T17280] comedi comedi3: Buffer allocation failed [ 1285.420350][T17298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2917'. [ 1285.720248][T17305] 9pnet_virtio: no channels available for device syz [ 1287.464537][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'. [ 1287.734606][T17321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1288.973722][T17333] 9pnet_fd: p9_fd_create_tcp (17333): problem connecting socket to 127.0.0.1 [ 1289.108126][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1289.197203][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1289.452009][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 1289.542838][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 1290.795634][T17370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2929'. [ 1291.564365][T17370] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1291.721614][T17370] block (null): Could not allocate knbd recv work queue. [ 1291.832847][T17370] nbd: failed to add new device [ 1293.076995][T17387] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1293.083940][T17387] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1293.117190][T17387] vhci_hcd vhci_hcd.0: Device attached [ 1293.155831][T17389] vhci_hcd: connection closed [ 1293.165851][ T48] vhci_hcd: stop threads [ 1293.203239][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 1293.221017][ T48] vhci_hcd: release socket [ 1293.236480][ T48] vhci_hcd: disconnect device [ 1293.242423][T17394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 1293.309137][T17397] fuse: Bad value for 'rootmode' [ 1294.182372][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1295.118124][T17421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1295.702950][T17437] fuse: Bad value for 'rootmode' [ 1296.394631][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 1296.915453][T17447] 9pnet_virtio: no channels available for device syz [ 1298.903982][T17479] fuse: Bad value for 'rootmode' [ 1299.349979][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2958'. [ 1300.183542][T17490] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1300.322232][T17490] block (null): Could not allocate knbd recv work queue. [ 1300.403738][T17490] nbd: failed to add new device [ 1300.645425][T17499] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2960'. [ 1300.711848][T17499] batadv1: entered allmulticast mode [ 1300.992387][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.627843][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.739437][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2962'. [ 1302.102415][T17517] 9pnet_virtio: no channels available for device syz [ 1303.063013][T17535] fuse: Unknown parameter 'use00000000000000000000' [ 1303.298702][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1303.316883][T17539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1305.577896][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1305.693501][T17566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1307.343282][T17580] fuse: Unknown parameter 'use00000000000000000000' [ 1307.778093][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1307.882397][T17590] random: crng reseeded on system resumption [ 1308.622145][T17591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2977'. [ 1309.041506][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 1309.149552][T17587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2979'. [ 1310.839789][T17613] 9pnet_fd: p9_fd_create_tcp (17613): problem connecting socket to 127.0.0.1 [ 1313.425583][T17655] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2991'. [ 1313.490434][T17655] batadv1: entered allmulticast mode [ 1317.198281][T17681] 9pnet_fd: p9_fd_create_tcp (17681): problem connecting socket to 127.0.0.1 [ 1317.594992][T17690] fuse: Unknown parameter 'user_i00000000000000000000' [ 1317.623751][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2996'. [ 1317.809278][T17694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1317.915745][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1317.943807][T17701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1320.593240][T17736] 9pnet_fd: p9_fd_create_tcp (17736): problem connecting socket to 127.0.0.1 [ 1321.908833][T17748] fuse: Unknown parameter 'user_i00000000000000000000' [ 1325.764251][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 1326.066483][T17785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1326.229586][T17790] 9pnet_fd: p9_fd_create_tcp (17790): problem connecting socket to 127.0.0.1 [ 1327.320537][T17811] fuse: Unknown parameter 'user_i00000000000000000000' [ 1329.260879][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1329.349296][T17831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1329.871446][T17848] 9pnet_fd: p9_fd_create_tcp (17848): problem connecting socket to 127.0.0.1 [ 1330.063073][T17849] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3031'. [ 1330.077134][T17849] batadv1: entered allmulticast mode [ 1330.678095][T17856] fuse: Unknown parameter 'user_id00000000000000000000' [ 1333.584309][T17902] fuse: Unknown parameter 'user_id00000000000000000000' [ 1333.873303][T17904] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3043'. [ 1333.886489][T17904] batadv1: entered allmulticast mode [ 1334.050927][T17912] 9pnet_fd: p9_fd_create_tcp (17912): problem connecting socket to 127.0.0.1 [ 1336.774967][T17946] fuse: Unknown parameter 'user_id00000000000000000000' [ 1337.325630][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1337.364799][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1337.412298][T17950] netlink: 'syz.4.3053': attribute type 12 has an invalid length. [ 1338.323151][T17966] 9pnet_fd: p9_fd_create_tcp (17966): problem connecting socket to 127.0.0.1 [ 1338.348592][T17968] fuse: Bad value for 'fd' [ 1338.644375][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3064'. [ 1338.668761][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3064'. [ 1338.683669][T17975] netlink: 'syz.0.3064': attribute type 12 has an invalid length. [ 1340.287383][T17994] fuse: Bad value for 'fd' [ 1340.745477][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 1340.771780][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3075'. [ 1340.782102][T18004] netlink: 'syz.4.3075': attribute type 12 has an invalid length. [ 1340.955421][T18009] 9pnet_fd: p9_fd_create_tcp (18009): problem connecting socket to 127.0.0.1 [ 1343.734956][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1344.009036][T18037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.249538][T18065] 9pnet_fd: p9_fd_create_tcp (18065): problem connecting socket to 127.0.0.1 [ 1347.293949][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 1347.305405][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 1348.076007][T18083] usb usb7: usbfs: process 18083 (syz.2.3095) did not claim interface 0 before use [ 1348.134434][T18083] syz.2.3095: attempt to access beyond end of device [ 1348.134434][T18083] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1348.153568][T18083] qnx6: unable to read the first superblock [ 1348.165277][T18083] syz.2.3095: attempt to access beyond end of device [ 1348.165277][T18083] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1348.266779][T18083] qnx6: unable to read the first superblock [ 1348.274486][T18083] qnx6: unable to read the first superblock [ 1348.625142][T18093] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3096'. [ 1348.674075][T18093] batadv1: entered allmulticast mode [ 1350.815472][T18117] 9pnet_fd: p9_fd_create_tcp (18117): problem connecting socket to 127.0.0.1 [ 1351.586743][T18131] usb usb7: usbfs: process 18131 (syz.2.3108) did not claim interface 0 before use [ 1351.739104][T18131] syz.2.3108: attempt to access beyond end of device [ 1351.739104][T18131] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1351.753178][T18131] qnx6: unable to read the first superblock [ 1351.764883][T18131] syz.2.3108: attempt to access beyond end of device [ 1351.764883][T18131] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1351.779900][T18131] qnx6: unable to read the first superblock [ 1351.786113][T18131] qnx6: unable to read the first superblock [ 1353.764495][T18151] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1353.796044][T18151] batadv1: entered allmulticast mode [ 1355.339004][T18170] 9pnet_fd: p9_fd_create_tcp (18170): problem connecting socket to 127.0.0.1 [ 1356.997158][T18186] usb usb7: usbfs: process 18186 (syz.4.3120) did not claim interface 0 before use [ 1357.015449][T18186] syz.4.3120: attempt to access beyond end of device [ 1357.015449][T18186] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1357.015491][T18186] qnx6: unable to read the first superblock [ 1357.015748][T18186] syz.4.3120: attempt to access beyond end of device [ 1357.015748][T18186] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1357.015774][T18186] qnx6: unable to read the first superblock [ 1357.015783][T18186] qnx6: unable to read the first superblock [ 1359.763743][T18215] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3126'. [ 1359.933270][T18215] batadv1: entered allmulticast mode [ 1361.513551][T18234] usb usb7: usbfs: process 18234 (syz.2.3133) did not claim interface 0 before use [ 1361.564510][T18234] syz.2.3133: attempt to access beyond end of device [ 1361.564510][T18234] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1361.603303][T18234] qnx6: unable to read the first superblock [ 1361.638421][T18234] syz.2.3133: attempt to access beyond end of device [ 1361.638421][T18234] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1361.737247][T18234] qnx6: unable to read the first superblock [ 1361.754466][T18234] qnx6: unable to read the first superblock [ 1362.444807][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.451517][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.354727][T18274] usb usb7: usbfs: process 18274 (syz.1.3146) did not claim interface 0 before use [ 1365.386916][T18274] qnx6: unable to set blocksize [ 1366.561806][T18291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1367.111924][T18307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3153'. [ 1367.879295][T18307] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1367.913531][T18307] block (null): Could not allocate knbd recv work queue. [ 1367.965478][T18307] nbd: failed to add new device [ 1370.059357][T18317] syz.4.3156: attempt to access beyond end of device [ 1370.059357][T18317] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1370.154626][T18317] qnx6: unable to read the first superblock [ 1370.207055][T18317] syz.4.3156: attempt to access beyond end of device [ 1370.207055][T18317] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1370.499009][T18325] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3157'. [ 1370.514885][T18325] batadv1: entered allmulticast mode [ 1371.063435][ T11] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1371.083857][T18317] qnx6: unable to read the first superblock [ 1371.094368][T18317] qnx6: unable to read the first superblock [ 1372.888669][T18335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3159'. [ 1378.220106][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1378.291459][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1378.351019][T18369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1378.454515][T18380] qnx6: unable to set blocksize [ 1378.501396][T18382] 9pnet_virtio: no channels available for device syz [ 1379.618015][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1379.638432][T18390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1384.167173][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 1384.183503][T18416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1384.310607][T18422] usb usb7: usbfs: process 18422 (syz.0.3183) did not claim interface 0 before use [ 1384.347846][T18422] syz.0.3183: attempt to access beyond end of device [ 1384.347846][T18422] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1384.369140][T18422] qnx6: unable to read the first superblock [ 1384.382588][T18422] syz.0.3183: attempt to access beyond end of device [ 1384.382588][T18422] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1384.413127][T18422] qnx6: unable to read the first superblock [ 1384.438802][T18422] qnx6: unable to read the first superblock [ 1386.846220][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3187'. [ 1386.861799][T18439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1388.407542][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3192'. [ 1388.423683][T18458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1388.655974][T18468] usb usb7: usbfs: process 18468 (syz.2.3196) did not claim interface 0 before use [ 1388.712915][T18468] syz.2.3196: attempt to access beyond end of device [ 1388.712915][T18468] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1388.758887][T18468] qnx6: unable to read the first superblock [ 1388.805317][T18468] syz.2.3196: attempt to access beyond end of device [ 1388.805317][T18468] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1388.830070][T18468] qnx6: unable to read the first superblock [ 1388.844187][T18468] qnx6: unable to read the first superblock [ 1392.220851][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 1392.238393][T18496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1392.312383][T18494] 9pnet_fd: p9_fd_create_tcp (18494): problem connecting socket to 127.0.0.1 [ 1393.550932][T18511] usb usb7: usbfs: process 18511 (syz.1.3210) did not claim interface 0 before use [ 1393.567217][T18511] qnx6: unable to set blocksize [ 1396.029632][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1398.321668][T18515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.329675][T18515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.034311][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1399.195578][T18551] 9pnet_virtio: no channels available for device syz [ 1399.376021][T18515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.539773][T18515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.159237][T18515] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.168509][T18515] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.178034][T18515] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.187767][T18515] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.860501][T18567] 9pnet_fd: p9_fd_create_tcp (18567): problem connecting socket to 127.0.0.1 [ 1401.206428][T18570] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3219'. [ 1402.215213][T18583] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1402.407325][T18583] batadv1: entered allmulticast mode [ 1402.914651][T18594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'. [ 1403.427572][T18592] 9pnet_virtio: no channels available for device syz [ 1403.583286][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1403.611233][T18599] netlink: set zone limit has 8 unknown bytes [ 1404.478884][T18604] 9pnet_fd: p9_fd_create_tcp (18604): problem connecting socket to 127.0.0.1 [ 1404.491877][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 1404.507374][T18605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1404.554065][T18610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3230'. [ 1404.676964][T18612] usb usb7: usbfs: process 18612 (syz.2.3231) did not claim interface 0 before use [ 1404.695624][T18612] syz.2.3231: attempt to access beyond end of device [ 1404.695624][T18612] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1404.709719][T18612] qnx6: unable to read the first superblock [ 1404.716175][T18612] syz.2.3231: attempt to access beyond end of device [ 1404.716175][T18612] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1404.741362][T18612] qnx6: unable to read the first superblock [ 1404.759199][T18612] qnx6: unable to read the first superblock [ 1406.529450][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3237'. [ 1407.254194][T18641] 9pnet_virtio: no channels available for device syz [ 1407.862765][T18647] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3238'. [ 1407.965514][T18647] batadv1: entered allmulticast mode [ 1408.241906][T18651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1409.144949][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'. [ 1409.168966][T18654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.877446][T18656] ALSA: mixer_oss: invalid OSS volume '' [ 1411.445686][T18670] usb usb7: usbfs: process 18670 (syz.1.3245) did not claim interface 0 before use [ 1411.468068][T18670] qnx6: unable to set blocksize [ 1412.485935][T18686] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1412.668044][T18690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3250'. [ 1413.070853][T18689] 9pnet_virtio: no channels available for device syz [ 1414.165381][T13228] IPVS: starting estimator thread 0... [ 1414.817411][T18704] IPVS: using max 15 ests per chain, 36000 per kthread [ 1414.945701][T18706] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3254'. [ 1415.171455][T18706] batadv1: entered allmulticast mode [ 1416.238131][T18714] usb usb7: usbfs: process 18714 (syz.2.3257) did not claim interface 0 before use [ 1416.439441][T18714] syz.2.3257: attempt to access beyond end of device [ 1416.439441][T18714] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1416.531188][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 1416.562311][T18714] qnx6: unable to read the first superblock [ 1416.582890][T18714] syz.2.3257: attempt to access beyond end of device [ 1416.582890][T18714] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1416.620635][T18715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1416.667167][T18714] qnx6: unable to read the first superblock [ 1416.690913][T18714] qnx6: unable to read the first superblock [ 1417.287905][T18727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1418.510444][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 1419.081098][T18746] 9pnet_virtio: no channels available for device syz [ 1421.086337][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1421.347365][T18762] usb usb7: usbfs: process 18762 (syz.0.3269) did not claim interface 0 before use [ 1421.364882][T18762] syz.0.3269: attempt to access beyond end of device [ 1421.364882][T18762] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1421.379003][T18762] qnx6: unable to read the first superblock [ 1421.385308][T18757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1421.387840][T18762] syz.0.3269: attempt to access beyond end of device [ 1421.387840][T18762] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1421.465930][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1421.507843][T18762] qnx6: unable to read the first superblock [ 1421.513913][T18762] qnx6: unable to read the first superblock [ 1421.724756][T18760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.777760][T18760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.862039][T18760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1421.893648][T18769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1424.537749][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.544261][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.463891][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3275'. [ 1425.544484][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'. [ 1425.583510][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3279'. [ 1425.772192][T18802] 9pnet_virtio: no channels available for device syz [ 1426.797449][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'. [ 1426.975539][T18810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1427.138106][T18814] usb usb7: usbfs: process 18814 (syz.2.3282) did not claim interface 0 before use [ 1427.185180][T18814] syz.2.3282: attempt to access beyond end of device [ 1427.185180][T18814] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1427.245247][T18814] qnx6: unable to read the first superblock [ 1427.297806][T18814] syz.2.3282: attempt to access beyond end of device [ 1427.297806][T18814] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1427.312493][T18814] qnx6: unable to read the first superblock [ 1427.319407][T18814] qnx6: unable to read the first superblock [ 1429.489210][T18826] fuse: Bad value for 'fd' [ 1429.719591][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 1429.729285][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'. [ 1429.744079][T18835] Bluetooth: MGMT ver 1.22 [ 1431.700013][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3292'. [ 1434.878944][T18874] usb usb7: usbfs: process 18874 (syz.2.3297) did not claim interface 0 before use [ 1434.934626][T18874] syz.2.3297: attempt to access beyond end of device [ 1434.934626][T18874] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1435.043194][T18874] qnx6: unable to read the first superblock [ 1435.087318][T18874] syz.2.3297: attempt to access beyond end of device [ 1435.087318][T18874] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1435.212012][T18874] qnx6: unable to read the first superblock [ 1435.241967][T18874] qnx6: unable to read the first superblock [ 1436.473754][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1436.496709][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1443.708084][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3311'. [ 1443.738613][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 1444.546449][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1444.687889][T18935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1452.091102][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1452.117384][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1452.568923][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'. [ 1452.609880][T18977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1452.695593][T18980] tipc: Started in network mode [ 1452.705370][T18980] tipc: Node identity fee0d5bdfdc1, cluster identity 4711 [ 1452.718553][T18980] tipc: Enabled bearer , priority 0 [ 1452.745587][T18980] syzkaller0: entered promiscuous mode [ 1452.764828][T18980] syzkaller0: entered allmulticast mode [ 1452.829813][T18980] tipc: Resetting bearer [ 1452.855981][T18978] tipc: Resetting bearer [ 1452.890948][T18978] tipc: Disabling bearer [ 1454.149911][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 1454.247175][T18997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1454.331570][T18996] 9pnet_fd: p9_fd_create_tcp (18996): problem connecting socket to 127.0.0.1 [ 1457.365100][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3333'. [ 1457.920113][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1457.946761][T19012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1459.700446][T19022] netlink: 'syz.4.3338': attribute type 1 has an invalid length. [ 1459.927221][T19022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.970056][T19027] vlan2: entered allmulticast mode [ 1459.997149][T19027] batadv0: entered allmulticast mode [ 1460.018336][T19027] bond1: (slave vlan2): Opening slave failed [ 1460.054652][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 1460.084331][T19028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1460.862466][T19035] 9pnet_fd: p9_fd_create_tcp (19035): problem connecting socket to 127.0.0.1 [ 1464.849040][T19066] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3348'. [ 1465.298118][T19066] batadv1: entered allmulticast mode [ 1465.570076][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'. [ 1465.832412][T19065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1465.848781][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 1465.914075][T19069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1466.562905][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 1466.646823][T19080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1468.380760][T19090] 9pnet_fd: p9_fd_create_tcp (19090): problem connecting socket to 127.0.0.1 [ 1469.039488][T19105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3359'. [ 1470.262903][T19115] udevd[19115]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1470.497874][T19108] udevd[19108]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1470.723091][T19124] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3363'. [ 1471.314979][T19124] batadv1: entered allmulticast mode [ 1471.818313][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1473.004919][T19128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1476.132263][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3369'. [ 1476.461621][T19154] usb usb7: usbfs: process 19154 (syz.4.3370) did not claim interface 0 before use [ 1476.528514][T19152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1476.545335][T19154] syz.4.3370: attempt to access beyond end of device [ 1476.545335][T19154] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1476.676444][T19154] qnx6: unable to read the first superblock [ 1476.703968][T19154] syz.4.3370: attempt to access beyond end of device [ 1476.703968][T19154] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1477.108599][T19154] qnx6: unable to read the first superblock [ 1477.114761][T19154] qnx6: unable to read the first superblock [ 1478.067172][T19174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1478.284873][T19180] udevd[19180]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1478.349905][T19178] udevd[19178]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1478.564121][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'. [ 1478.749501][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'. [ 1478.773310][T19184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1478.931414][T19190] 9pnet_virtio: no channels available for device syz [ 1479.990577][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3382'. [ 1481.034681][T19198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1481.793595][T19210] usb usb7: usbfs: process 19210 (syz.2.3385) did not claim interface 0 before use [ 1481.844591][T19210] syz.2.3385: attempt to access beyond end of device [ 1481.844591][T19210] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1481.864698][T19210] qnx6: unable to read the first superblock [ 1481.873523][T19210] syz.2.3385: attempt to access beyond end of device [ 1481.873523][T19210] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1481.913969][T19210] qnx6: unable to read the first superblock [ 1481.927809][T19210] qnx6: unable to read the first superblock [ 1482.947408][T19218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3387'. [ 1483.385176][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1483.455880][T19223] udevd[19223]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1483.474824][T19232] 9pnet_virtio: no channels available for device syz [ 1483.672548][T19222] udevd[19222]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1483.699609][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'. [ 1483.883111][T19230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1485.310487][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.317148][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.736182][T19250] usb usb7: usbfs: process 19250 (syz.0.3396) did not claim interface 0 before use [ 1485.768319][T19250] syz.0.3396: attempt to access beyond end of device [ 1485.768319][T19250] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1485.782050][T19250] qnx6: unable to read the first superblock [ 1485.789265][T19250] syz.0.3396: attempt to access beyond end of device [ 1485.789265][T19250] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1486.287572][T19250] qnx6: unable to read the first superblock [ 1486.293783][T19250] qnx6: unable to read the first superblock [ 1486.338036][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3395'. [ 1486.438986][T19247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1487.419289][T19261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1487.613492][ T27] audit: type=1326 audit(1756332631.962:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.4.3400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c558ebe9 code=0x0 [ 1487.654130][T19269] udevd[19269]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1487.768748][T19267] udevd[19267]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1489.554162][T19304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3405'. [ 1489.568335][T19304] 9pnet_virtio: no channels available for device syz [ 1490.334986][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 1490.425857][T19309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1490.545274][T19311] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3406'. [ 1490.665812][T19313] usb usb7: usbfs: process 19313 (syz.1.3407) did not claim interface 0 before use [ 1490.682091][T19313] qnx6: unable to set blocksize [ 1491.125372][T19311] batadv1: entered allmulticast mode [ 1494.909633][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'. [ 1494.922005][T19343] 9pnet_virtio: no channels available for device syz [ 1496.017705][T19356] usb usb7: usbfs: process 19356 (syz.2.3419) did not claim interface 0 before use [ 1496.044384][T19356] syz.2.3419: attempt to access beyond end of device [ 1496.044384][T19356] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1496.077125][T19356] qnx6: unable to read the first superblock [ 1496.083563][T19356] syz.2.3419: attempt to access beyond end of device [ 1496.083563][T19356] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1496.117066][T19356] qnx6: unable to read the first superblock [ 1496.139856][T19356] qnx6: unable to read the first superblock [ 1496.761589][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1496.803391][T19365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.414964][T19374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3423'. [ 1498.525167][T19376] udevd[19376]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1498.564018][T19337] udevd[19337]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1499.840132][T19393] usb usb7: usbfs: process 19393 (syz.1.3429) did not claim interface 0 before use [ 1499.854458][T19393] qnx6: unable to set blocksize [ 1501.387242][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 1501.424674][T19402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.613058][T19405] 9pnet_fd: p9_fd_create_tcp (19405): problem connecting socket to 127.0.0.1 [ 1505.855006][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1506.013692][T19438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.127335][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1506.151218][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1506.578121][T19447] syz.2.3443: attempt to access beyond end of device [ 1506.578121][T19447] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1506.646756][T19447] qnx6: unable to read the first superblock [ 1506.654243][T19447] syz.2.3443: attempt to access beyond end of device [ 1506.654243][T19447] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1506.719484][T19447] qnx6: unable to read the first superblock [ 1506.767596][T19447] qnx6: unable to read the first superblock [ 1508.143251][T19453] 9pnet_fd: p9_fd_create_tcp (19453): problem connecting socket to 127.0.0.1 [ 1511.235555][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1511.593183][T19474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1511.657138][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1511.851855][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1513.569972][T19490] usb usb7: usbfs: process 19490 (syz.4.3455) did not claim interface 0 before use [ 1513.607160][T19490] syz.4.3455: attempt to access beyond end of device [ 1513.607160][T19490] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1513.622139][T19490] qnx6: unable to read the first superblock [ 1513.632610][T19490] syz.4.3455: attempt to access beyond end of device [ 1513.632610][T19490] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1513.660900][T19490] qnx6: unable to read the first superblock [ 1513.668754][T19490] qnx6: unable to read the first superblock [ 1513.942692][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1514.000654][T19498] 9pnet_fd: p9_fd_create_tcp (19498): problem connecting socket to 127.0.0.1 [ 1514.035306][T19501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1514.934708][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3460'. [ 1514.950628][T19510] 9pnet_virtio: no channels available for device syz [ 1515.630722][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1515.708582][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1517.381253][T19534] usb usb7: usbfs: process 19534 (syz.0.3469) did not claim interface 0 before use [ 1517.882961][T19537] syz.0.3469: attempt to access beyond end of device [ 1517.882961][T19537] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1517.896237][T19537] qnx6: unable to read the first superblock [ 1517.941055][T19537] syz.0.3469: attempt to access beyond end of device [ 1517.941055][T19537] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1517.974389][T19537] qnx6: unable to read the first superblock [ 1517.992430][T19537] qnx6: unable to read the first superblock [ 1518.656402][T19548] 9pnet_fd: p9_fd_create_tcp (19548): problem connecting socket to 127.0.0.1 [ 1518.966208][T19551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3472'. [ 1521.221616][T19572] usb usb7: usbfs: process 19572 (syz.0.3479) did not claim interface 0 before use [ 1521.294093][T19572] syz.0.3479: attempt to access beyond end of device [ 1521.294093][T19572] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1521.336971][T19572] qnx6: unable to read the first superblock [ 1521.371853][T19572] syz.0.3479: attempt to access beyond end of device [ 1521.371853][T19572] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1522.211398][T19572] qnx6: unable to read the first superblock [ 1522.219254][T19572] qnx6: unable to read the first superblock [ 1522.464974][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'. [ 1522.540845][T19580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1523.051477][T19588] 9pnet_fd: p9_fd_create_tcp (19588): problem connecting socket to 127.0.0.1 [ 1523.959348][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1523.993358][T19594] netlink: 'syz.4.3481': attribute type 5 has an invalid length. [ 1524.011969][T19594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1524.286237][T19594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1524.295855][T19594] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1524.305115][T19594] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1524.314606][T19594] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1524.324148][T19594] geneve2: entered promiscuous mode [ 1524.332463][T19594] geneve2: entered allmulticast mode [ 1524.343361][T19597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1525.549669][T19611] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3486'. [ 1525.675164][T19611] batadv1: entered allmulticast mode [ 1528.634348][T19623] usb usb7: usbfs: process 19623 (syz.4.3491) did not claim interface 0 before use [ 1528.650625][T19623] syz.4.3491: attempt to access beyond end of device [ 1528.650625][T19623] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1528.664163][T19623] qnx6: unable to read the first superblock [ 1528.734617][T19623] syz.4.3491: attempt to access beyond end of device [ 1528.734617][T19623] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1528.761817][T19623] qnx6: unable to read the first superblock [ 1528.768403][T19623] qnx6: unable to read the first superblock [ 1529.558731][T19637] 9pnet_fd: p9_fd_create_tcp (19637): problem connecting socket to 127.0.0.1 [ 1529.675629][T19641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3495'. [ 1530.450977][T19641] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1530.594994][T19641] block (null): Could not allocate knbd recv work queue. [ 1530.707512][T19641] nbd: failed to add new device [ 1533.067153][T19668] usb usb7: usbfs: process 19668 (syz.4.3503) did not claim interface 0 before use [ 1533.112149][T19668] syz.4.3503: attempt to access beyond end of device [ 1533.112149][T19668] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1533.133035][T19668] qnx6: unable to read the first superblock [ 1533.140568][T19668] syz.4.3503: attempt to access beyond end of device [ 1533.140568][T19668] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1533.158623][T19668] qnx6: unable to read the first superblock [ 1533.164704][T19668] qnx6: unable to read the first superblock [ 1533.376019][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1533.388420][T19677] netlink: 'syz.1.3501': attribute type 5 has an invalid length. [ 1533.397078][T19677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1533.413681][T19677] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1533.423448][T19677] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1533.432878][T19677] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1533.442083][T19677] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1533.451492][T19677] geneve2: entered promiscuous mode [ 1533.483492][T19677] geneve2: entered allmulticast mode [ 1534.730904][T19683] 9pnet_fd: p9_fd_create_tcp (19683): problem connecting socket to 127.0.0.1 [ 1535.086436][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1536.484631][T19675] udevd[19675]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1536.555492][ T27] audit: type=1326 audit(1756332680.902:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c558ebe9 code=0x0 [ 1536.725584][T19716] usb usb7: usbfs: process 19716 (syz.1.3514) did not claim interface 0 before use [ 1536.739980][T19716] qnx6: unable to set blocksize [ 1537.709052][T19728] 9pnet_fd: p9_fd_create_tcp (19728): problem connecting socket to 127.0.0.1 [ 1540.007906][T19747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3522'. [ 1541.347075][T19757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3523'. [ 1541.427414][T19757] batadv1: entered allmulticast mode [ 1541.592360][T19675] udevd[19675]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1542.000165][ T27] audit: type=1326 audit(1756332686.332:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19762 comm="syz.1.3526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e9298ebe9 code=0x0 [ 1542.692850][T19767] usb usb7: usbfs: process 19767 (syz.2.3527) did not claim interface 0 before use [ 1542.748758][T19767] syz.2.3527: attempt to access beyond end of device [ 1542.748758][T19767] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1542.794271][T19767] qnx6: unable to read the first superblock [ 1542.804150][T19767] syz.2.3527: attempt to access beyond end of device [ 1542.804150][T19767] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1542.848634][T19767] qnx6: unable to read the first superblock [ 1542.854814][T19767] qnx6: unable to read the first superblock [ 1543.001661][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1543.034091][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1543.400308][T19780] 9pnet_fd: p9_fd_create_tcp (19780): problem connecting socket to 127.0.0.1 [ 1543.503103][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3532'. [ 1543.833881][T19788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3533'. [ 1543.849975][T19788] 9pnet_virtio: no channels available for device syz [ 1545.264681][T19799] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1545.332986][T19799] batadv1: entered allmulticast mode [ 1545.663294][ T27] audit: type=1326 audit(1756332690.012:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a11f8ebe9 code=0x0 [ 1546.922190][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.934377][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.975895][T19819] usb usb7: usbfs: process 19819 (syz.2.3542) did not claim interface 0 before use [ 1547.146014][T19819] syz.2.3542: attempt to access beyond end of device [ 1547.146014][T19819] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1547.168795][T19819] qnx6: unable to read the first superblock [ 1547.192476][T19819] syz.2.3542: attempt to access beyond end of device [ 1547.192476][T19819] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1547.219736][T19819] qnx6: unable to read the first superblock [ 1547.261187][T19819] qnx6: unable to read the first superblock [ 1549.181680][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3545'. [ 1549.195191][T19831] 9pnet_virtio: no channels available for device syz [ 1550.397251][T19833] 9pnet_fd: p9_fd_create_tcp (19833): problem connecting socket to 127.0.0.1 [ 1551.035062][T19859] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3552'. [ 1551.081117][T19859] batadv1: entered allmulticast mode [ 1551.465016][T19865] usb usb7: usbfs: process 19865 (syz.1.3555) did not claim interface 0 before use [ 1551.517075][T19865] qnx6: unable to set blocksize [ 1554.759599][T19888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1554.790960][T19888] 9pnet_virtio: no channels available for device syz [ 1556.815771][T19908] usb usb7: usbfs: process 19908 (syz.1.3567) did not claim interface 0 before use [ 1556.949245][T19908] qnx6: unable to set blocksize [ 1560.964058][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1560.978238][T19934] 9pnet_virtio: no channels available for device syz [ 1563.316328][T19952] syz.2.3577: attempt to access beyond end of device [ 1563.316328][T19952] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1563.362801][T19954] Bluetooth: MGMT ver 1.22 [ 1564.630300][T19960] usb usb7: usbfs: process 19960 (syz.4.3580) did not claim interface 0 before use [ 1564.673729][T19954] syzkaller1: entered promiscuous mode [ 1564.700803][T19954] syzkaller1: entered allmulticast mode [ 1564.726124][T19960] syz.4.3580: attempt to access beyond end of device [ 1564.726124][T19960] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1564.780553][T19960] qnx6: unable to read the first superblock [ 1564.818124][T19960] syz.4.3580: attempt to access beyond end of device [ 1564.818124][T19960] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1564.861253][T19960] qnx6: unable to read the first superblock [ 1564.927056][T19960] qnx6: unable to read the first superblock [ 1565.388152][T14734] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1565.467247][T14734] Bluetooth: hci2: command 0x0406 tx timeout [ 1568.922772][T20005] usb usb7: usbfs: process 20005 (syz.2.3593) did not claim interface 0 before use [ 1569.057579][T20005] syz.2.3593: attempt to access beyond end of device [ 1569.057579][T20005] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1569.147292][T20005] qnx6: unable to read the first superblock [ 1569.153564][T20005] syz.2.3593: attempt to access beyond end of device [ 1569.153564][T20005] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1569.244644][T20005] qnx6: unable to read the first superblock [ 1569.254501][T20005] qnx6: unable to read the first superblock [ 1576.555435][T20058] usb usb7: usbfs: process 20058 (syz.2.3606) did not claim interface 0 before use [ 1576.591849][T20058] syz.2.3606: attempt to access beyond end of device [ 1576.591849][T20058] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1576.675614][T20058] qnx6: unable to read the first superblock [ 1576.690964][T20058] syz.2.3606: attempt to access beyond end of device [ 1576.690964][T20058] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1576.731927][T20058] qnx6: unable to read the first superblock [ 1576.751579][T20058] qnx6: unable to read the first superblock [ 1581.992461][T20088] 9pnet_virtio: no channels available for device syz [ 1582.099929][T20090] usb usb7: usbfs: process 20090 (syz.2.3616) did not claim interface 0 before use [ 1582.243923][T20090] syz.2.3616: attempt to access beyond end of device [ 1582.243923][T20090] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1582.287038][T20090] qnx6: unable to read the first superblock [ 1582.303726][T20090] syz.2.3616: attempt to access beyond end of device [ 1582.303726][T20090] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1582.810928][T20090] qnx6: unable to read the first superblock [ 1582.857394][T20090] qnx6: unable to read the first superblock [ 1584.826362][T20025] Set syz1 is full, maxelem 65536 reached [ 1587.213920][T20131] usb usb7: usbfs: process 20131 (syz.0.3628) did not claim interface 0 before use [ 1587.262281][T20131] syz.0.3628: attempt to access beyond end of device [ 1587.262281][T20131] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1587.365183][T20131] qnx6: unable to read the first superblock [ 1587.446078][T20131] syz.0.3628: attempt to access beyond end of device [ 1587.446078][T20131] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1587.489681][T20131] qnx6: unable to read the first superblock [ 1587.557097][T20131] qnx6: unable to read the first superblock [ 1594.399150][T20178] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3636'. [ 1594.423954][T20178] batadv1: entered allmulticast mode [ 1596.367367][T20200] binder: 20196:20200 unknown command 0 [ 1596.373307][T20200] binder: 20196:20200 ioctl c0306201 200000000080 returned -22 [ 1596.393158][T20200] binder: 20196:20200 ioctl 7af 200000000300 returned -22 [ 1599.928757][T20224] usb usb7: usbfs: process 20224 (syz.4.3652) did not claim interface 0 before use [ 1599.999202][T20224] syz.4.3652: attempt to access beyond end of device [ 1599.999202][T20224] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1600.050648][T20224] qnx6: unable to read the first superblock [ 1600.067120][T20224] syz.4.3652: attempt to access beyond end of device [ 1600.067120][T20224] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1600.115927][T20224] qnx6: unable to read the first superblock [ 1600.142313][T20224] qnx6: unable to read the first superblock [ 1600.512035][T20231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1600.632485][T20234] autofs4:pid:20234:autofs_fill_super: called with bogus options [ 1602.430104][ T27] audit: type=1800 audit(1756332746.562:122): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3653" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1602.450239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.627160][T20247] binder: 20246:20247 unknown command 0 [ 1602.633032][T20247] binder: 20246:20247 ioctl c0306201 200000000080 returned -22 [ 1602.648152][T20247] binder: 20246:20247 ioctl 7af 200000000300 returned -22 [ 1605.058864][T20262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1605.502188][T20268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1607.407291][T20278] usb usb7: usbfs: process 20278 (syz.4.3667) did not claim interface 0 before use [ 1607.488607][T20278] syz.4.3667: attempt to access beyond end of device [ 1607.488607][T20278] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1607.526980][T20278] qnx6: unable to read the first superblock [ 1607.534025][T20278] syz.4.3667: attempt to access beyond end of device [ 1607.534025][T20278] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1607.563920][T20278] qnx6: unable to read the first superblock [ 1607.582948][T20278] qnx6: unable to read the first superblock [ 1608.695880][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.702641][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.383104][T20296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3673'. [ 1611.166280][T20310] tipc: Started in network mode [ 1611.171600][T20310] tipc: Node identity 080211000001, cluster identity 4711 [ 1611.180256][T20310] tipc: Enabled bearer , priority 0 [ 1611.189769][T20310] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 1611.326868][T20310] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 1612.320853][T18565] tipc: Node number set to 134418688 [ 1612.628292][T20312] tipc: Resetting bearer [ 1613.498410][T20326] syz.0.3681: attempt to access beyond end of device [ 1613.498410][T20326] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1613.536952][T20326] qnx6: unable to read the first superblock [ 1613.563210][T20326] syz.0.3681: attempt to access beyond end of device [ 1613.563210][T20326] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1613.608639][T20326] qnx6: unable to read the first superblock [ 1613.617873][T20326] qnx6: unable to read the first superblock [ 1616.430535][T20352] tipc: Enabled bearer , priority 0 [ 1617.546903][T11988] tipc: Node number set to 52549053 [ 1618.495946][T20352] syzkaller0: entered promiscuous mode [ 1618.554241][T20352] syzkaller0: entered allmulticast mode [ 1621.055966][T20363] tipc: Resetting bearer [ 1621.171659][T20363] tipc: Disabling bearer [ 1622.557393][T20377] usb usb7: usbfs: process 20377 (syz.1.3692) did not claim interface 0 before use [ 1622.632254][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 1622.647502][T20379] 9pnet_virtio: no channels available for device syz [ 1622.672778][T20377] qnx6: unable to set blocksize [ 1622.702538][T20381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3691'. [ 1626.912829][T20412] tipc: Started in network mode [ 1626.918763][T20412] tipc: Node identity 080211000001, cluster identity 4711 [ 1626.926199][T20412] tipc: Enabled bearer , priority 0 [ 1627.095168][T20412] tipc: Resetting bearer [ 1628.456340][T14283] tipc: Node number set to 134418688 [ 1628.762600][T20439] usb usb7: usbfs: process 20439 (syz.4.3706) did not claim interface 0 before use [ 1628.779157][T20439] syz.4.3706: attempt to access beyond end of device [ 1628.779157][T20439] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1628.817002][T20439] qnx6: unable to read the first superblock [ 1628.823289][T20439] syz.4.3706: attempt to access beyond end of device [ 1628.823289][T20439] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1628.837076][T13228] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1628.916608][T20439] qnx6: unable to read the first superblock [ 1628.935508][T20439] qnx6: unable to read the first superblock [ 1629.038873][T13228] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1629.087045][T13228] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1629.144948][T13228] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1629.158849][T13228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.171741][T20431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1629.218562][T13228] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1629.717091][T20428] 9pnet_fd: Insufficient options for proto=fd [ 1629.780605][T14283] usb 1-1: USB disconnect, device number 6 [ 1630.509167][T20471] 9pnet_fd: p9_fd_create_tcp (20471): problem connecting socket to 127.0.0.1 [ 1630.831981][T20487] usb usb7: usbfs: process 20487 (syz.4.3715) did not claim interface 0 before use [ 1630.855408][T20487] syz.4.3715: attempt to access beyond end of device [ 1630.855408][T20487] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1630.887610][T20487] qnx6: unable to read the first superblock [ 1630.894441][T20487] syz.4.3715: attempt to access beyond end of device [ 1630.894441][T20487] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1630.909432][T20487] qnx6: unable to read the first superblock [ 1630.972327][T20491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1630.986766][T20491] 9pnet_virtio: no channels available for device syz [ 1631.160667][T20487] qnx6: unable to read the first superblock [ 1631.212578][T20492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3714'. [ 1634.119102][T20533] tipc: Enabling of bearer rejected, already enabled [ 1637.484125][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1637.617692][T20582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1640.399298][ T27] audit: type=1326 audit(1756332784.752:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20595 comm="syz.4.3741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c558ebe9 code=0x0 [ 1640.758835][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3747'. [ 1641.115610][T14283] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1641.464523][T14283] usb 2-1: Using ep0 maxpacket: 16 [ 1641.487852][T14283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.505268][T14283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.525659][T14283] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1641.556316][T14283] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1641.586122][T14283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.621054][T14283] usb 2-1: config 0 descriptor?? [ 1642.050004][T14283] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 1642.061339][T14283] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 1642.079287][T14283] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 1642.098275][T14283] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 1642.128063][T14283] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 1642.194633][T14283] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 1642.262602][T20609] netlink: 'syz.1.3747': attribute type 2 has an invalid length. [ 1642.313405][T20609] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3747'. [ 1642.370698][T20621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1642.438443][T14283] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 1642.483500][T14283] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1642.646886][ T5876] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1642.649560][T20612] udevd[20612]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1642.720793][T20625] udevd[20625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1642.726550][T14283] usb 2-1: USB disconnect, device number 3 [ 1642.748082][ T5876] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1642.846239][ T5876] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1642.922176][ T5876] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1644.303833][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1644.322925][T20642] 9pnet_virtio: no channels available for device syz [ 1645.085703][T20649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3754'. [ 1647.098639][T20659] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1647.770102][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1647.857766][ T27] audit: type=1326 audit(1756332792.212:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20675 comm="syz.2.3760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a11f8ebe9 code=0x0 [ 1649.893988][T20694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1649.908418][T20694] 9pnet_virtio: no channels available for device syz [ 1650.108570][T20680] udevd[20680]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1650.215446][T20680] udevd[20680]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1650.270750][T20697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1652.810944][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 1652.849567][ T27] audit: type=1326 audit(1756332797.202:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20721 comm="syz.1.3773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e9298ebe9 code=0x0 [ 1654.146745][T20733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3776'. [ 1654.159771][T20733] 9pnet_virtio: no channels available for device syz [ 1657.362045][ T27] audit: type=1326 audit(1756332801.712:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.0.3783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ac398ebe9 code=0x0 [ 1657.452098][T20763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1659.242112][T20767] udevd[20767]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1659.303539][T20767] udevd[20767]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1660.548306][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1660.567400][T20786] 9pnet_virtio: no channels available for device syz [ 1663.639569][ T27] audit: type=1326 audit(1756332807.992:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20811 comm="syz.4.3795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c558ebe9 code=0x0 [ 1663.798913][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3798'. [ 1663.817951][T20819] 9pnet_virtio: no channels available for device syz [ 1666.744084][T20846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1666.755132][T20846] 9pnet_virtio: no channels available for device syz [ 1667.123878][T20850] tipc: Enabled bearer , priority 0 [ 1667.127865][ T27] audit: type=1326 audit(1756332811.472:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.2.3812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a11f8ebe9 code=0x0 [ 1667.143626][T20850] syzkaller0: entered promiscuous mode [ 1667.194630][T20850] syzkaller0: entered allmulticast mode [ 1667.239897][T20850] tipc: Resetting bearer [ 1667.268371][T20849] tipc: Resetting bearer [ 1667.331308][T20849] tipc: Disabling bearer [ 1667.338694][T11988] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1667.577781][T11988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.621930][T11988] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1667.680911][T11988] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1667.725332][T11988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.819287][T11988] usb 1-1: config 0 descriptor?? [ 1667.864852][T11988] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1667.873393][T11988] dvb-usb: bulk message failed: -22 (3/0) [ 1668.012025][T11988] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1668.027750][T11988] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1668.037618][T11988] usb 1-1: media controller created [ 1668.064210][T11988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1668.118522][T11988] dvb-usb: bulk message failed: -22 (6/0) [ 1668.124625][T11988] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1668.138932][T11988] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 1668.153620][T11988] dvb-usb: schedule remote query interval to 150 msecs. [ 1668.161585][T11988] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1668.189702][T11988] usb 1-1: USB disconnect, device number 7 [ 1668.880092][T11988] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1670.025357][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.032353][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.300970][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1670.367735][T20880] 9pnet_virtio: no channels available for device syz [ 1670.767220][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3829'. [ 1671.847388][T20895] tipc: Started in network mode [ 1671.852336][T20895] tipc: Node identity 080211000001, cluster identity 4711 [ 1671.872857][T20892] 9pnet_virtio: no channels available for device syz [ 1671.886797][T20895] tipc: Enabled bearer , priority 0 [ 1671.907651][T20895] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 1671.915208][T20895] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 1671.965166][T20895] tipc: Resetting bearer [ 1673.046796][ T27] audit: type=1326 audit(1756332817.352:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.1.3823" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e9298ebe9 code=0x0 [ 1673.052945][ T5876] tipc: Node number set to 134418688 [ 1673.069235][ C1] vkms_vblank_simulate: vblank timer overrun [ 1673.093814][T20886] syz.2.3817 (20886): drop_caches: 2 [ 1673.135098][T20886] syz.2.3817 (20886): drop_caches: 2 [ 1674.235737][T11988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1676.438587][T11988] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1676.452015][T11988] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1676.486989][T11988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1676.523609][T11988] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1676.592587][T11988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.667230][T11988] usb 5-1: config 0 descriptor?? [ 1676.687515][T20906] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1676.733104][T11988] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1676.922905][ T5859] usb 5-1: USB disconnect, device number 2 [ 1677.340385][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3833'. [ 1677.351772][T20926] 9pnet_virtio: no channels available for device syz [ 1677.889805][ T27] audit: type=1326 audit(1756332822.232:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.4.3835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c558ebe9 code=0x0 [ 1680.478922][T20957] bad cache= option: none : yes [ 1680.478922][T20957] blocksize : 1 [ 1680.478922][T20957] min keysize : 16 [ 1680.478922][T20957] max keysize : 16 [ 1680.478922][T20957] ivsize : 16 [ 1680.478922][T20957] chunksize : 16 [ 1680.478922][T20957] walksize : 16 [ 1680.478922][T20957] [ 1680.478922][T20957] name : ctr(des3_ede) [ 1680.478922][T20957] driver : ctr(des3_ede-asm) [ 1680.478922][T20957] module : kernel [ 1680.478922][T20957] priority : 200 [ 1680.478922][T20957] refcnt : 1 [ 1680.478922][T20957] selftest : passed [ 1680.478922][T20957] internal : no [ 1680.478922][T20957] type : skcipher [ 1680.478922][T20957] async : no [ 1680.478922][T20957] blocksize : 1 [ 1680.478922][T20957] min keysize : 24 [ 1680.478922][T20957] max keysize : 24 [ 1680.478922][T20957] ivsize : 8 [ 1680.478922][T20957] chunksize : 8 [ 1680.478922][T20957] walksize : 8 [ 1680.478922][T20957] [ 1680.478922][T20957] name : cbc(des) [ 1680.478922][T20957] driver : cbc(des-generic) [ 1680.478922][T20957] module : kernel [ 1680.478922][T20957] priority : 100 [ 1680.478922][T20957] refcnt : 1 [ 1680.478922][T20957] selftest : passed [ 1680.478922][T20957] internal : no [ 1680.478922][T20957] type : skcipher [ 1680.478922][T20957] async : no [ 1680.478922][T20957] blocksize : 8 [ 1680.478922][T20957] min keysize : 8 [ 1680.478922][T20957] max keysize : 8 [ 1680.478922][T20957] ivsize : 8 [ 1680.478922][T20957] chunksize : 8 [ 1680.478922][T20957] walksize : 8 [ 1680.478922][T20957] [ 1680.478922][T20957] name : rfc3686(ctr(aes)) [ 1680.478922][T20957] driver : rfc3686(ctr-aes-aesni) [ 1680.478922][T20957] module : kernel [ 1680.478922][T20957] priority : 400 [ 1680.478922][T20957] refcnt : 1 [ 1680.478922][T20957] selftest : passed [ 1680.478922][T20957] internal : no [ 1680.478922][T20957] type : skcipher [ 1680.479409][T20957] CIFS: VFS: bad cache= option: none : yes [ 1680.479409][T20957] blocksize : 1 [ 1680.479409][T20957] min keysize : 16 [ 1680.479409][T20957] max keysize : 16 [ 1680.479409][T20957] ivsize : 16 [ 1680.479409][T20957] chunksize : 16 [ 1680.479409][T20957] walksize : 16 [ 1680.479409][T20957] [ 1680.479409][T20957] name : ctr(des3_ede) [ 1680.479409][T20957] driver : ctr(des3_ede-asm) [ 1680.479409][T20957] module : kernel [ 1680.479409][T20957] priority : 200 [ 1680.479409][T20957] refcnt : 1 [ 1680.479409][T20957] selftest : passed [ 1680.479409][T20957] internal : no [ 1680.479409][T20957] type : skcipher [ 1680.479409][T20957] async : no [ 1680.479409][T20957] blocksize : 1 [ 1680.479409][T20957] min keysize : 24 [ 1680.479409][T20957] max keysize : 24 [ 1680.479409][T20957] ivsize : 8 [ 1680.479409][T20957] chunksize : 8 [ 1680.479409][T20957] walksize : 8 [ 1680.479409][T20957] [ 1680.479409][T20957] name : cbc(des) [ 1680.479409][T20957] driver : cbc(des-generic) [ 1680.479409][T20957] module : kernel [ 1680.479409][T20957] priority : 100 [ 1680.479409][T20957] refcnt : 1 [ 1680.479409][T20957] selftest : passed [ 1680.479409][T20957] internal : no [ 1680.479409][T20957] type : skcipher [ 1680.479409][T20957] async : no [ 1680.479409][T20957] blocksize : 8 [ 1680.479409][T20957] min keysize : 8 [ 1680.479409][T20957] max keysize : 8 [ 1680.479409][T20957] ivsize : 8 [ 1680.479409][T20957] chunksize : 8 [ 1680.479409][T20957] walksize : 8 [ 1680.479409][T20957] [ 1680.479409][T20957] name : rfc3686(ctr(aes)) [ 1680.479409][T20957] driver : rfc3686(ctr-aes-aesni) [ 1680.479409][T20957] module : kernel [ 1680.479409][T20957] priority : 400 [ 1680.479409][T20957] refcnt : 1 [ 1680.479409][T20957] selftest : passed [ 1680.479409][T20957] internal : no [ 1680.666985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1680.852681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1681.694332][ T27] audit: type=1326 audit(1756332826.032:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20967 comm="syz.0.3846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ac398ebe9 code=0x0 [ 1682.641418][T20976] 9pnet_fd: p9_fd_create_tcp (20976): problem connecting socket to 127.0.0.1 [ 1686.945899][ T27] audit: type=1326 audit(1756332831.292:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21011 comm="syz.2.3857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a11f8ebe9 code=0x0 [ 1689.291651][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 1691.539578][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3870'. [ 1691.764892][T21058] udevd[21058]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1691.813484][T21058] udevd[21058]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1694.796925][T21076] 9pnet_fd: p9_fd_create_tcp (21076): problem connecting socket to 127.0.0.1 [ 1696.390716][T21094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3883'. [ 1696.476006][T21095] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1696.597288][T21095] batadv1: entered allmulticast mode [ 1697.104566][T21099] udevd[21099]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1697.213495][T21098] udevd[21098]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1697.496884][T21105] ubi: mtd0 is already attached to ubi31 [ 1699.468148][T21124] 9pnet_fd: p9_fd_create_tcp (21124): problem connecting socket to 127.0.0.1 [ 1699.653733][T21129] bad cache= option: none : yes [ 1699.653733][T21129] blocksize : 1 [ 1699.653733][T21129] min keysize : 16 [ 1699.653733][T21129] max keysize : 16 [ 1699.653733][T21129] ivsize : 16 [ 1699.653733][T21129] chunksize : 16 [ 1699.653733][T21129] walksize : 16 [ 1699.653733][T21129] [ 1699.653733][T21129] name : ctr(des3_ede) [ 1699.653733][T21129] driver : ctr(des3_ede-asm) [ 1699.653733][T21129] module : kernel [ 1699.653733][T21129] priority : 200 [ 1699.653733][T21129] refcnt : 1 [ 1699.653733][T21129] selftest : passed [ 1699.653733][T21129] internal : no [ 1699.653733][T21129] type : skcipher [ 1699.653733][T21129] async : no [ 1699.653733][T21129] blocksize : 1 [ 1699.653733][T21129] min keysize : 24 [ 1699.653733][T21129] max keysize : 24 [ 1699.653733][T21129] ivsize : 8 [ 1699.653733][T21129] chunksize : 8 [ 1699.653733][T21129] walksize : 8 [ 1699.653733][T21129] [ 1699.653733][T21129] name : cbc(des) [ 1699.653733][T21129] driver : cbc(des-generic) [ 1699.653733][T21129] module : kernel [ 1699.653733][T21129] priority : 100 [ 1699.653733][T21129] refcnt : 1 [ 1699.653733][T21129] selftest : passed [ 1699.653733][T21129] internal : no [ 1699.653733][T21129] type : skcipher [ 1699.653733][T21129] async : no [ 1699.653733][T21129] blocksize : 8 [ 1699.653733][T21129] min keysize : 8 [ 1699.653733][T21129] max keysize : 8 [ 1699.653733][T21129] ivsize : 8 [ 1699.653733][T21129] chunksize : 8 [ 1699.653733][T21129] walksize : 8 [ 1699.653733][T21129] [ 1699.653733][T21129] name : rfc3686(ctr(aes)) [ 1699.653733][T21129] driver : rfc3686(ctr-aes-aesni) [ 1699.653733][T21129] module : kernel [ 1699.653733][T21129] priority : 400 [ 1699.653733][T21129] refcnt : 1 [ 1699.653733][T21129] selftest : passed [ 1699.653733][T21129] internal : no [ 1699.653733][T21129] type : skcipher [ 1699.653919][T21129] CIFS: VFS: bad cache= option: none : yes [ 1699.653919][T21129] blocksize : 1 [ 1699.653919][T21129] min keysize : 16 [ 1699.653919][T21129] max keysize : 16 [ 1699.653919][T21129] ivsize : 16 [ 1699.653919][T21129] chunksize : 16 [ 1699.653919][T21129] walksize : 16 [ 1699.653919][T21129] [ 1699.653919][T21129] name : ctr(des3_ede) [ 1699.653919][T21129] driver : ctr(des3_ede-asm) [ 1699.653919][T21129] module : kernel [ 1699.653919][T21129] priority : 200 [ 1699.653919][T21129] refcnt : 1 [ 1699.653919][T21129] selftest : passed [ 1699.653919][T21129] internal : no [ 1699.653919][T21129] type : skcipher [ 1699.653919][T21129] async : no [ 1699.653919][T21129] blocksize : 1 [ 1699.653919][T21129] min keysize : 24 [ 1699.653919][T21129] max keysize : 24 [ 1699.653919][T21129] ivsize : 8 [ 1699.653919][T21129] chunksize : 8 [ 1699.653919][T21129] walksize : 8 [ 1699.653919][T21129] [ 1699.653919][T21129] name : cbc(des) [ 1699.653919][T21129] driver : cbc(des-generic) [ 1699.653919][T21129] module : kernel [ 1699.653919][T21129] priority : 100 [ 1699.653919][T21129] refcnt : 1 [ 1699.653919][T21129] selftest : passed [ 1699.653919][T21129] internal : no [ 1699.653919][T21129] type : skcipher [ 1699.653919][T21129] async : no [ 1699.653919][T21129] blocksize : 8 [ 1699.653919][T21129] min keysize : 8 [ 1699.653919][T21129] max keysize : 8 [ 1699.653919][T21129] ivsize : 8 [ 1699.653919][T21129] chunksize : 8 [ 1699.653919][T21129] walksize : 8 [ 1699.653919][T21129] [ 1699.653919][T21129] name : rfc3686(ctr(aes)) [ 1699.653919][T21129] driver : rfc3686(ctr-aes-aesni) [ 1699.653919][T21129] module : kernel [ 1699.653919][T21129] priority : 400 [ 1699.653919][T21129] refcnt : 1 [ 1699.653919][T21129] selftest : passed [ 1699.653919][T21129] internal : no [ 1702.856952][T11988] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1703.043109][ C1] vkms_vblank_simulate: vblank timer overrun [ 1703.218218][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1703.557704][T21159] 9pnet_virtio: no channels available for device syz [ 1704.119973][T11988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.136982][T11988] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1704.168299][T11988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.187734][T11988] usb 5-1: config 0 descriptor?? [ 1704.417339][T11988] usbhid 5-1:0.0: can't add hid device: -71 [ 1704.423702][T11988] usbhid: probe of 5-1:0.0 failed with error -71 [ 1704.490533][T11988] usb 5-1: USB disconnect, device number 3 [ 1704.666246][T21176] 9pnet_fd: p9_fd_create_tcp (21176): problem connecting socket to 127.0.0.1 [ 1704.701561][T21179] lo speed is unknown, defaulting to 1000 [ 1705.087413][T11988] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1705.297266][T11988] usb 5-1: Using ep0 maxpacket: 32 [ 1705.304980][T11988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.317829][T11988] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1705.346179][T11988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.380134][T11988] usb 5-1: config 0 descriptor?? [ 1705.418216][T11988] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1705.439072][T11988] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1705.866791][ T5859] usb 5-1: USB disconnect, device number 4 [ 1706.029196][ T5859] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1706.846992][T21205] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3911'. [ 1706.936981][T21205] batadv1: entered allmulticast mode [ 1710.623263][T21221] 9pnet_fd: p9_fd_create_tcp (21221): problem connecting socket to 127.0.0.1 [ 1714.653218][T21255] gretap0: entered promiscuous mode [ 1714.660009][T21255] macsec1: entered promiscuous mode [ 1714.665396][T21255] macsec1: entered allmulticast mode [ 1714.670944][T21255] gretap0: entered allmulticast mode [ 1716.007748][T21257] 9pnet_fd: p9_fd_create_tcp (21257): problem connecting socket to 127.0.0.1 [ 1716.337289][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3930'. [ 1716.350705][T21263] 9pnet_virtio: no channels available for device syz [ 1718.217571][T21289] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 1718.245875][T21289] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 1718.443405][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1718.456204][T21296] 9pnet_virtio: no channels available for device syz [ 1719.176909][T21302] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3942'. [ 1719.224904][T21302] batadv1: entered allmulticast mode [ 1722.167733][T21323] pim6reg: entered allmulticast mode [ 1722.491770][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'. [ 1722.505270][T21332] 9pnet_virtio: no channels available for device syz [ 1725.481757][ C0] ------------[ cut here ]------------ [ 1725.487820][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 1725.498703][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 1725.508752][ C0] Modules linked in: [ 1725.512798][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.102-syzkaller #0 [ 1725.520850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1725.531619][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 1725.538871][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 40 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 3b c8 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 1725.559028][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 1725.565324][ C0] RAX: 73f5c8eb9f3cc400 RBX: 000000000000000c RCX: ffffffff8ca93380 [ 1725.573828][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1725.582337][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 1725.590963][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 1725.599566][ C0] R13: dffffc0000000000 R14: ffff888056e4b358 R15: ffff888023afab68 [ 1725.607835][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1725.617731][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1725.624359][ C0] CR2: 000000110c2f2bc8 CR3: 0000000076ca8000 CR4: 00000000003506f0 [ 1725.632435][ C0] Call Trace: [ 1725.635762][ C0] [ 1725.638701][ C0] rate_control_send_low+0x194/0x790 [ 1725.644047][ C0] rate_control_get_rate+0x20b/0x5c0 [ 1725.649458][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 1725.655407][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 1725.661597][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1725.667210][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1725.672180][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 1725.678046][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 1725.683412][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1725.689078][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1725.695023][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 1725.700648][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1725.706316][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1725.711929][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1725.718968][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1725.724807][ C0] __iterate_interfaces+0x243/0x500 [ 1725.730268][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1725.736896][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1725.744399][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1725.750875][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1725.758525][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1725.763845][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1725.769097][ C0] ? hw_scan_work+0xf40/0xf40 [ 1725.773983][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1725.779344][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1725.785473][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1725.790656][ C0] handle_softirqs+0x280/0x820 [ 1725.795455][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1725.800292][ C0] ? do_softirq+0x180/0x180 [ 1725.805026][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1725.810362][ C0] __irq_exit_rcu+0xc7/0x190 [ 1725.815052][ C0] ? irq_exit_rcu+0x20/0x20 [ 1725.819795][ C0] irq_exit_rcu+0x9/0x20 [ 1725.825708][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1725.831407][ C0] [ 1725.834624][ C0] [ 1725.837654][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1725.844013][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1725.849971][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1725.869898][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 1725.876490][ C0] RAX: 73f5c8eb9f3cc400 RBX: ffffffff8161914b RCX: 73f5c8eb9f3cc400 [ 1725.884758][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 1725.892879][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 1725.901330][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8828 [ 1725.909441][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 1725.917473][ C0] ? do_idle+0x1eb/0x510 [ 1725.921736][ C0] default_idle+0x13/0x20 [ 1725.926164][ C0] default_idle_call+0x6c/0xa0 [ 1725.931053][ C0] do_idle+0x1eb/0x510 [ 1725.935242][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1725.940644][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1725.946470][ C0] cpu_startup_entry+0x43/0x60 [ 1725.951540][ C0] rest_init+0x2e2/0x300 [ 1725.956067][ C0] ? time_init+0x40/0x40 [ 1725.960477][ C0] arch_call_rest_init+0xe/0x10 [ 1725.965631][ C0] start_kernel+0x459/0x4e0 [ 1725.970283][ C0] x86_64_start_reservations+0x2a/0x30 [ 1725.975864][ C0] x86_64_start_kernel+0x60/0x60 [ 1725.980873][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1725.987088][ C0] [ 1725.990201][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1725.997575][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.102-syzkaller #0 [ 1726.005386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1726.015549][ C0] Call Trace: [ 1726.019031][ C0] [ 1726.021880][ C0] dump_stack_lvl+0x16c/0x230 [ 1726.026606][ C0] ? show_regs_print_info+0x20/0x20 [ 1726.031858][ C0] ? load_image+0x3b0/0x3b0 [ 1726.036503][ C0] panic+0x2c0/0x710 [ 1726.040450][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1726.045163][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 1726.051429][ C0] __warn+0x2e0/0x470 [ 1726.055418][ C0] ? __rate_control_send_low+0x635/0x880 [ 1726.061418][ C0] ? __rate_control_send_low+0x635/0x880 [ 1726.067064][ C0] report_bug+0x2be/0x4f0 [ 1726.071668][ C0] ? __rate_control_send_low+0x635/0x880 [ 1726.077768][ C0] ? __rate_control_send_low+0x635/0x880 [ 1726.083445][ C0] ? __rate_control_send_low+0x637/0x880 [ 1726.089520][ C0] handle_bug+0xcf/0x120 [ 1726.093879][ C0] exc_invalid_op+0x1a/0x50 [ 1726.098584][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1726.103896][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 1726.110344][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 40 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 3b c8 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 1726.130227][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 1726.136502][ C0] RAX: 73f5c8eb9f3cc400 RBX: 000000000000000c RCX: ffffffff8ca93380 [ 1726.144767][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1726.152850][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 1726.161128][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 1726.169185][ C0] R13: dffffc0000000000 R14: ffff888056e4b358 R15: ffff888023afab68 [ 1726.177212][ C0] rate_control_send_low+0x194/0x790 [ 1726.182634][ C0] rate_control_get_rate+0x20b/0x5c0 [ 1726.187949][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 1726.193885][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 1726.200051][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1726.205614][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1726.210603][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 1726.216454][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 1726.221704][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1726.227103][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1726.232758][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 1726.238423][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1726.244289][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1726.249855][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1726.256744][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1726.262326][ C0] __iterate_interfaces+0x243/0x500 [ 1726.267539][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1726.274309][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1726.281804][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1726.288080][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1726.295410][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1726.300801][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1726.306005][ C0] ? hw_scan_work+0xf40/0xf40 [ 1726.311170][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1726.316374][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1726.322903][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1726.328284][ C0] handle_softirqs+0x280/0x820 [ 1726.333246][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1726.338213][ C0] ? do_softirq+0x180/0x180 [ 1726.342750][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1726.348340][ C0] __irq_exit_rcu+0xc7/0x190 [ 1726.353188][ C0] ? irq_exit_rcu+0x20/0x20 [ 1726.357804][ C0] irq_exit_rcu+0x9/0x20 [ 1726.362168][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1726.368365][ C0] [ 1726.371414][ C0] [ 1726.374383][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1726.380739][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1726.386708][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1726.407241][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 1726.413495][ C0] RAX: 73f5c8eb9f3cc400 RBX: ffffffff8161914b RCX: 73f5c8eb9f3cc400 [ 1726.421652][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 1726.430089][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 1726.438347][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8828 [ 1726.446726][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 1726.455095][ C0] ? do_idle+0x1eb/0x510 [ 1726.459456][ C0] default_idle+0x13/0x20 [ 1726.463886][ C0] default_idle_call+0x6c/0xa0 [ 1726.468771][ C0] do_idle+0x1eb/0x510 [ 1726.473024][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1726.478324][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1726.484258][ C0] cpu_startup_entry+0x43/0x60 [ 1726.489029][ C0] rest_init+0x2e2/0x300 [ 1726.493273][ C0] ? time_init+0x40/0x40 [ 1726.497693][ C0] arch_call_rest_init+0xe/0x10 [ 1726.502989][ C0] start_kernel+0x459/0x4e0 [ 1726.507630][ C0] x86_64_start_reservations+0x2a/0x30 [ 1726.513375][ C0] x86_64_start_kernel+0x60/0x60 [ 1726.518327][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1726.524589][ C0] [ 1726.527930][ C0] Kernel Offset: disabled [ 1726.532541][ C0] Rebooting in 86400 seconds..