last executing test programs: 25m32.630262247s ago: executing program 4 (id=589): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1800000016005f02c17721f8070066000e00000000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c0001000000000000000000140003"], 0x114}], 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 25m32.33858979s ago: executing program 4 (id=591): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000019300)={0x2020}, 0x2020) sendfile(r2, r3, 0x0, 0x80006) 25m32.052714671s ago: executing program 4 (id=593): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0xfe}, 'port1\x00', 0x0, 0x400, 0xfffffffc, 0x3, 0x6c54, 0x3d, 0x2, 0x0, 0x0, 0x9}) close(r2) 25m31.708489339s ago: executing program 4 (id=594): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x8, 0x18e}, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000"], 0xf0}}, 0x40000) r1 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x7) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xd5, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 25m29.798377535s ago: executing program 4 (id=598): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 25m27.817100045s ago: executing program 4 (id=601): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1800000016005f02c17721f8070066000e00000000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c0001000000000000000000140003"], 0x114}], 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 25m12.572419014s ago: executing program 32 (id=601): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1800000016005f02c17721f8070066000e00000000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c0001000000000000000000140003"], 0x114}], 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 22m15.977725355s ago: executing program 2 (id=991): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x240000c0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) umount2(0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRESDEC], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 22m14.001497108s ago: executing program 2 (id=995): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) 22m12.800350771s ago: executing program 2 (id=997): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a86", 0xd}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) fstat(r1, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x202, 0xd, 0x1, r4}, &(0x7f0000000040)=0x10) 22m10.823880171s ago: executing program 2 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x64, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 22m8.760596331s ago: executing program 2 (id=1007): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) 22m6.823569619s ago: executing program 2 (id=1011): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x80002, 0x90) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$FUSE(r5, &(0x7f0000003640)={0x2020}, 0x2020) epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x0) 21m51.235717778s ago: executing program 33 (id=1011): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x80002, 0x90) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$FUSE(r5, &(0x7f0000003640)={0x2020}, 0x2020) epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x0) 17m50.714822333s ago: executing program 0 (id=1527): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17m49.642857451s ago: executing program 0 (id=1529): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x10}}, 0x0) 17m49.424914947s ago: executing program 0 (id=1532): socket$kcm(0xa, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff0001000000000000000000000000ffffe0000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d66c0000000a01010100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250000000000000300000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000002350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000960f000000000000000000000000000000000c00"/240], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) close_range(r5, 0xffffffffffffffff, 0x0) 17m47.564210435s ago: executing program 0 (id=1536): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x10fea7, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x2, 0x100, 0x4, 0x9, 0xb33}}}}, 0x17) 17m44.556894636s ago: executing program 0 (id=1542): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x10}}, 0x0) 17m43.514347647s ago: executing program 0 (id=1545): syz_emit_ethernet(0x70, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x3a, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x3a, 0x0, @opaque="02aadf0062dfafe40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062a872bc17357e2f456d36281ef64e"}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000237c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000023ac0)=[{{0x0, 0x0, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x4044001}}, {{&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001cc0)="86c8ade16747c9929753a1ac5f9b2be26e9cf39550b5ede69aa2a1ffd068f60ab2b7c36df3bd482b6d0d81375cbe50d66012663480b2a6952b919fce0babf51261e44a30d03158e3fa4cf98ee919f30c2b28558411df223430ecb5728e820444750488b97a32980951fa889dfb0e9eb8ea9123f48aca4d0ec746d7", 0x7b}, {&(0x7f0000001480)}, {&(0x7f0000001d40)="4e2003ca3650044c603adb8c180df513134ef5517bf301b75787bf88e8b9c37540b2919b808999faa8f455fa103deac71026e91ec9fadad75846ce5b464f3b05bd24c0d028fee76de10e2b2deb7cadcabf1fc286b7a81d25882766bec37b43ca8c951ac48916f621667491dd51fee1aa40725002f4d0bbeb3985b0d4a65ccb03713c529174df970ed2ae1a4903a9df1dfcdd43586671f96e8184aa05785a0ed46671ee6f73722404a8a677f41f0d64d1796a1ff460195887fe866af7b27f284d3f2cee88a959c66959fed549cba4cc71921b8f", 0xd3}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f000001e5c0), 0x0, &(0x7f0000000c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x48, 0x540c0}}, {{&(0x7f000001e980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001eac0)=[{0x0}], 0x1, 0x0, 0x0, 0x800}}, {{&(0x7f0000022f00)=@abs={0x1, 0x0, 0x4e1c}, 0x6e, &(0x7f00000236c0)=[{0x0}, {&(0x7f00000230c0)}, {&(0x7f0000023140)="34caf58c454e619e849e1a365d2cd99ef1a8c9e585248a06076a5cb13590295c19adaf1d2f204a13af47a7056f9a48d230926839e2e80d67104de77da9ef8e58ae53da47fed0e3ef4f515ed1d62ccb0e88d3a3d65c44d6bdad98433d4ff4290c8491401d2e2b85a0d06b0c125d9e3fdc5190a76c614608615583326abba485cb31cb855d350b1eddad0c07c5ae0658bf70507f10e32fa8ecae75915b79baeb084061c1de0007e96141c520db1955d46c30b9619e50b893e2926175beba0972f3400ac5441c473abab946d2117a8016832f6d13a7a891baa08bca88", 0xdb}, {&(0x7f0000023240)="5565d36661dc88d497e0cf17635acb2b736e89483e8a56a83ac46aef4b92a4d40a662e5f6e26f2bcd0591a2d076fa967742d587088e03899d6165d08d287ae4fcde199f33536a7eef773e95d64ac860c300120160d4db1d223f46df3956747e5f1872b452059dee192a5b120b8147ee5892916d76dd7422a7a9bc2fe0ca00413967c3ded93772b7a0f66d1b55916b27aff5e", 0x92}, {&(0x7f0000023400)="6f03198c6ac7f225289d9d83a84a44adbca46c807e647646d2c4120e6847ef07b96b91695bfa0e", 0x27}, {&(0x7f0000023440)="dd393bb74321fdc853b21d7f78e1ccec8be1009e814e8ffbdc1df2b2a2100dc16fcb842220487c3be82be2bb7a44e698dd80bbacd5b84d493685aacdd745dd372632e80d5ff850acb8d0b37419cf63d7e1b5ba7e128ec98aacb3fd4fd2ce060d418a94abde9406488ec76ca82ce356fc6bf963714f1fd550589382c5547900eda5f9d3dbeeb4fbd8a9c2e46c3845f63174a5bfff3e675e20cb8707abbea4af7e82528dd82b4fa0395c0d6992f0f4fdf7cac1bab6b82ec155e1c763532c004979909a9c032b311ba53d94f805a2e1ebbeaccffa9f9735942a3c0a8661215ff1", 0xdf}, {&(0x7f0000023540)="093790b9def132a42f8dcae42aeb8376d4e5281bb5f8c22baed985fec342f475d8b74dea32b08386ca0453c01ecdc56662518eb0f840f2ce4ee07d8582d000225e3e8b14c5bb76ec84c367fb27c03b6e2aa5c20ae09b5da663ab4d4fe54f167d394596fb03830d11dd61416f24468fee26b7ac5675d6ff29c1c19d2ffe0001c18870cad01af25352d27c1c750fa60cc4da711a061f93eb6ef120e7585f91aeb679988d2d9ab6765a38fc1d2d6a27b7d5abc024d5bdc5335e6b6350ff427d430709d7366d9a5832121974efece53229ccef5cbe98c412d1990993864f103fc7597e791649cd4b65b3dad28ed489fb12b1cf092b", 0xf3}, {&(0x7f0000023640)="73269dcfe92cad00c30a829775e78780b86c2bbc79113bee9d47b7f7fc4141547bf57dc131f6837736b0e5c41c27534297ab68639059ba5277c9419aacff6bf54f6efba5816904799a0c8e100580542caff6e7db4a4577a7", 0x58}], 0x8, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x40}}], 0x6, 0x24000080) 17m28.260499647s ago: executing program 34 (id=1545): syz_emit_ethernet(0x70, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x3a, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x3a, 0x0, @opaque="02aadf0062dfafe40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062a872bc17357e2f456d36281ef64e"}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000237c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000023ac0)=[{{0x0, 0x0, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x4044001}}, {{&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001cc0)="86c8ade16747c9929753a1ac5f9b2be26e9cf39550b5ede69aa2a1ffd068f60ab2b7c36df3bd482b6d0d81375cbe50d66012663480b2a6952b919fce0babf51261e44a30d03158e3fa4cf98ee919f30c2b28558411df223430ecb5728e820444750488b97a32980951fa889dfb0e9eb8ea9123f48aca4d0ec746d7", 0x7b}, {&(0x7f0000001480)}, {&(0x7f0000001d40)="4e2003ca3650044c603adb8c180df513134ef5517bf301b75787bf88e8b9c37540b2919b808999faa8f455fa103deac71026e91ec9fadad75846ce5b464f3b05bd24c0d028fee76de10e2b2deb7cadcabf1fc286b7a81d25882766bec37b43ca8c951ac48916f621667491dd51fee1aa40725002f4d0bbeb3985b0d4a65ccb03713c529174df970ed2ae1a4903a9df1dfcdd43586671f96e8184aa05785a0ed46671ee6f73722404a8a677f41f0d64d1796a1ff460195887fe866af7b27f284d3f2cee88a959c66959fed549cba4cc71921b8f", 0xd3}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f000001e5c0), 0x0, &(0x7f0000000c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x48, 0x540c0}}, {{&(0x7f000001e980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001eac0)=[{0x0}], 0x1, 0x0, 0x0, 0x800}}, {{&(0x7f0000022f00)=@abs={0x1, 0x0, 0x4e1c}, 0x6e, &(0x7f00000236c0)=[{0x0}, {&(0x7f00000230c0)}, {&(0x7f0000023140)="34caf58c454e619e849e1a365d2cd99ef1a8c9e585248a06076a5cb13590295c19adaf1d2f204a13af47a7056f9a48d230926839e2e80d67104de77da9ef8e58ae53da47fed0e3ef4f515ed1d62ccb0e88d3a3d65c44d6bdad98433d4ff4290c8491401d2e2b85a0d06b0c125d9e3fdc5190a76c614608615583326abba485cb31cb855d350b1eddad0c07c5ae0658bf70507f10e32fa8ecae75915b79baeb084061c1de0007e96141c520db1955d46c30b9619e50b893e2926175beba0972f3400ac5441c473abab946d2117a8016832f6d13a7a891baa08bca88", 0xdb}, {&(0x7f0000023240)="5565d36661dc88d497e0cf17635acb2b736e89483e8a56a83ac46aef4b92a4d40a662e5f6e26f2bcd0591a2d076fa967742d587088e03899d6165d08d287ae4fcde199f33536a7eef773e95d64ac860c300120160d4db1d223f46df3956747e5f1872b452059dee192a5b120b8147ee5892916d76dd7422a7a9bc2fe0ca00413967c3ded93772b7a0f66d1b55916b27aff5e", 0x92}, {&(0x7f0000023400)="6f03198c6ac7f225289d9d83a84a44adbca46c807e647646d2c4120e6847ef07b96b91695bfa0e", 0x27}, {&(0x7f0000023440)="dd393bb74321fdc853b21d7f78e1ccec8be1009e814e8ffbdc1df2b2a2100dc16fcb842220487c3be82be2bb7a44e698dd80bbacd5b84d493685aacdd745dd372632e80d5ff850acb8d0b37419cf63d7e1b5ba7e128ec98aacb3fd4fd2ce060d418a94abde9406488ec76ca82ce356fc6bf963714f1fd550589382c5547900eda5f9d3dbeeb4fbd8a9c2e46c3845f63174a5bfff3e675e20cb8707abbea4af7e82528dd82b4fa0395c0d6992f0f4fdf7cac1bab6b82ec155e1c763532c004979909a9c032b311ba53d94f805a2e1ebbeaccffa9f9735942a3c0a8661215ff1", 0xdf}, {&(0x7f0000023540)="093790b9def132a42f8dcae42aeb8376d4e5281bb5f8c22baed985fec342f475d8b74dea32b08386ca0453c01ecdc56662518eb0f840f2ce4ee07d8582d000225e3e8b14c5bb76ec84c367fb27c03b6e2aa5c20ae09b5da663ab4d4fe54f167d394596fb03830d11dd61416f24468fee26b7ac5675d6ff29c1c19d2ffe0001c18870cad01af25352d27c1c750fa60cc4da711a061f93eb6ef120e7585f91aeb679988d2d9ab6765a38fc1d2d6a27b7d5abc024d5bdc5335e6b6350ff427d430709d7366d9a5832121974efece53229ccef5cbe98c412d1990993864f103fc7597e791649cd4b65b3dad28ed489fb12b1cf092b", 0xf3}, {&(0x7f0000023640)="73269dcfe92cad00c30a829775e78780b86c2bbc79113bee9d47b7f7fc4141547bf57dc131f6837736b0e5c41c27534297ab68639059ba5277c9419aacff6bf54f6efba5816904799a0c8e100580542caff6e7db4a4577a7", 0x58}], 0x8, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x40}}], 0x6, 0x24000080) 8m58.852895796s ago: executing program 3 (id=2535): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 8m55.375386623s ago: executing program 3 (id=2542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() dup(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 8m52.709698205s ago: executing program 3 (id=2546): socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 8m48.302266693s ago: executing program 3 (id=2550): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x80) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x50, r4, 0x1, 0x0, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}}, 0x20000010) connect$inet6(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280), 0x0) close(r2) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 8m46.540232062s ago: executing program 3 (id=2555): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7}}, 0x30) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x1000000, 0x0, 0x0, 0x0) 8m43.003923973s ago: executing program 3 (id=2561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000240), 0x5, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 8m27.898449069s ago: executing program 35 (id=2561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000240), 0x5, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 2m21.242284787s ago: executing program 6 (id=3202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000000)={'nicvf0\x00', 0x2}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 2m18.946636209s ago: executing program 6 (id=3204): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a86", 0xd}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) fstat(r2, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x202, 0xd, 0x1, r3}, &(0x7f0000000040)=0x10) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x8715}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYRESOCT]) r7 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r7, &(0x7f0000019140)=""/102356, 0x18fd4, 0xc2a) socket$inet6_udp(0xa, 0x2, 0x0) 2m18.072881097s ago: executing program 6 (id=3208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0, 0x442}}, 0x2, 0xcbd, 0x9, 0x2, 0x2, 0x1c0000, 0x7a}, &(0x7f0000000040)=0x9c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10008020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102376, 0x18fe8) listen(r3, 0xfffffffd) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000040)) io_setup(0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg$unix(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x7f}) syz_clone(0x800000, &(0x7f0000000080)="b4a473c6a1229281ceeb36ce1e93c80d39631ff203bc8906314a18ccb72f66dc", 0x20, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="6c0fe7d006ac5eb0854ef6de534fcd80a228cc1e200f2b09c266abd964d2a4e0037d9ec8e901e7f5e2b6116effd93321b26c082594c7b1f24fe5536985aaa1714cc7db06786d8e62442a5dcc2d7b1d67ad167e70eee821861121f6544cbd3c96088fcf5d8002fbbc6fcf0e2cd6b437887de422a578dc0d0afcf682b49e15f35f7f3dcd9afad2779843fa85eeb4de75f69c9cb26d001c52da1a") 2m15.569773525s ago: executing program 7 (id=3212): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 2m13.734204527s ago: executing program 6 (id=3216): uname(&(0x7f0000000000)=""/73) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x448000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`', @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="0400460005003400fe000000080026008a090000300051802800"], 0x60}}, 0x40080) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d3, &(0x7f00000002c0)) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x1008000, &(0x7f00000003c0)=ANY=[@ANYRES16=r8]) 2m10.650442224s ago: executing program 7 (id=3221): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="fd", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r0, r1}) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000001040)="a6aa", 0x2}], 0x1, 0x8, 0x5, 0x4) pipe2(&(0x7f0000000100), 0x0) 2m10.507319112s ago: executing program 6 (id=3222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000440)=0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000006c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/63, @ANYRES8=r0, @ANYBLOB="fe8000000000000000000000000000bb00000000"], 0xf8}}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) accept$inet(0xffffffffffffffff, &(0x7f0000001500)={0x2, 0x0, @initdev}, &(0x7f0000001540)=0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 2m8.018157346s ago: executing program 7 (id=3227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m6.872525023s ago: executing program 6 (id=3230): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r2, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) 2m4.46239434s ago: executing program 7 (id=3233): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') getdents64(r5, &(0x7f0000001180)=""/4089, 0xff9) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x50000000, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x181902, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000480)={0x7, 0xffab, 0xf, 0x3, 0x8, "cd080aaacb6956f2"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 1m59.762667254s ago: executing program 7 (id=3238): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 1m58.676046735s ago: executing program 7 (id=3240): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) 1m50.984551338s ago: executing program 36 (id=3230): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r2, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) 1m43.525095646s ago: executing program 37 (id=3240): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) 11.693284489s ago: executing program 5 (id=3405): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, 0x0) mount(0x0, 0x0, 0x0, 0x40078, 0x0) 10.970304237s ago: executing program 5 (id=3407): socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_smc(0x2b, 0x1, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 10.402507487s ago: executing program 1 (id=3409): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 8.777982276s ago: executing program 1 (id=3410): r0 = socket$inet(0x2, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$ax25(0x3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000780)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x58, {0x2, 0x4e23, @empty}, 'wg1\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000340)=""/240, 0xf0}], 0x1, 0x2, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="e4d79b3b828024b59aa49c257addff4e", 0x20) 7.250245743s ago: executing program 8 (id=3413): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) 7.126004194s ago: executing program 1 (id=3414): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) munmap(&(0x7f0000853000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000f40)) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x10, 0x400000000080803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x8001, 0x4) 7.001662774s ago: executing program 5 (id=3415): r0 = gettid() r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/ipc\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0xf1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x933, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x28000010) r6 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r6, 0x1, 0x9) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0xfffe, 0x0}) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) 6.989840296s ago: executing program 8 (id=3416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xa0}}, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000300)="15cdab2d88c8804e8b88ae5e735f6e3607a356dcbc623a6049e86b5e940f778c4c772a88b63135df1627bce008680c44cc57ef84e9ae118df8b1fac44e8fb2d1f5768e1bc5af78aff65a34d9112c0ba94a8516c8dfbb31c5c3c3d5e933a0cc55b7cd5fc791b87822fbb98373b10ad79c19d88bcf8e08560098a905a9fd19d28038cd6a9550c1f84b3220b11774a3bbfba61a9ff2c7cf589a247c1de5a9c3d9f119436830f916a64d05845a320f42928c6b35cc990ae521a9c38071d007c78c52d986095e195dce625739b4942f8d90f7dc74e5c5c481", 0xd6, 0xfffffffffffffffe) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r5 = dup(r4) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f046}) 5.833620852s ago: executing program 8 (id=3417): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, 0x0) mount(0x0, 0x0, 0x0, 0x40078, 0x0) 5.80552459s ago: executing program 1 (id=3418): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x57, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x80, 0x0, "33896c01f22b9d9eeed175806bff112b92654a2f0054f8a5fb7b1e08101f34de4f511bd6ce1aa1bac742996b967762a558aff6db9c7b20be2b8f8bc24b75"}}}}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 5.264842514s ago: executing program 5 (id=3419): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.074641527s ago: executing program 8 (id=3420): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="fd", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000001040)="a6aa", 0x2}], 0x1, 0x8, 0x5, 0x4) pipe2(&(0x7f0000000100), 0x0) 3.658615925s ago: executing program 1 (id=3421): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x89) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000000)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="01030000ff00000000000b00002108000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x46, 0x0, 0x0) 3.411968015s ago: executing program 8 (id=3422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800000001000000fc00000900000000060015000200000014951aa34d0016801000640800000080060001000001000000000000000000"], 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 3.326489148s ago: executing program 5 (id=3423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc6a91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) 149.652371ms ago: executing program 1 (id=3424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x93cea4bee562f1e5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc, 0xa9, &(0x7f00000002c0)=""/169, 0x41100, 0x4c, '\x00', r6, @fallback=0x1d, r1, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x9, 0xf}, 0x10, r7, r1, 0x7, 0x0, &(0x7f0000000400)=[{0x3, 0x2, 0x10, 0x6}, {0x4, 0x3, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xa}, {0x4, 0x1, 0x3, 0x1}, {0x0, 0x4, 0xa, 0xc}, {0x5, 0x3, 0x9, 0xc}, {0x5, 0x1, 0xd, 0x7}], 0x10, 0x5}, 0x94) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r16, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) 39.64038ms ago: executing program 5 (id=3425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0, 0x442}}, 0x2, 0xcbd, 0x9, 0x2, 0x2, 0x1c0000, 0x7a}, &(0x7f0000000040)=0x9c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES8=r5, @ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10008020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102376, 0x18fe8) listen(r3, 0xfffffffd) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000040)) io_setup(0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg$unix(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x7f}) syz_clone(0x800000, &(0x7f0000000080)="b4a473c6a1229281ceeb36ce1e93c80d39631ff203bc8906314a18ccb72f66dc", 0x20, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="6c0fe7d006ac5eb0854ef6de534fcd80a228cc1e200f2b09c266abd964d2a4e0037d9ec8e901e7f5e2b6116effd93321b26c082594c7b1f24fe5536985aaa1714cc7db06786d8e62442a5dcc2d7b1d67ad167e70eee821861121f6544cbd3c96088fcf5d8002fbbc6fcf0e2cd6b437887de422a578dc0d0afcf682b49e15f35f7f3dcd9afad2779843fa85eeb4de75f69c9cb26d001c52da1a") 0s ago: executing program 8 (id=3426): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000040)=""/73, 0x0, 0xeeee8000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lli, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10005}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000140)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0xd}, 0x94) unshare(0x2040400) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000380)=[0x0, 0x1, 0x6, 0x3ff], 0x0, &(0x7f0000000400)}) mount(&(0x7f0000000180)=@sr0, 0x0, 0x0, 0xa10000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="980000000002010400000000000000000200ffff04000180440003800c00028005000100000000002c00018014000300fc00000000000000000000000900000016000400fe8000000000000000000000000000bb02000340000200003c0002800c00028005000100000000002c0001"], 0x98}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x1, &(0x7f0000000100)=0x100000001, 0x2}, {0x6, &(0x7f0000000180)=0x6, 0x2}], 0x2, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): ace 0 before use [ 970.902244][ T5912] usb 2-1: USB disconnect, device number 5 [ 971.136031][ T9499] Bluetooth: hci2: command tx timeout [ 971.289216][T13555] chnl_net:caif_netlink_parms(): no params data found [ 971.740648][T13601] hfsplus: unable to find HFS+ superblock [ 972.199797][T13605] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 972.282328][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.313643][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.343575][T13555] bridge_slave_0: entered allmulticast mode [ 972.370799][T13555] bridge_slave_0: entered promiscuous mode [ 972.399282][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.424323][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.506116][T13555] bridge_slave_1: entered allmulticast mode [ 972.514683][T13555] bridge_slave_1: entered promiscuous mode [ 972.992228][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.008257][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.177262][ T6888] bridge_slave_1: left allmulticast mode [ 973.185429][ T6888] bridge_slave_1: left promiscuous mode [ 973.191434][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.200972][ T6888] bridge_slave_0: left allmulticast mode [ 973.214820][ T9499] Bluetooth: hci2: command tx timeout [ 973.230989][ T6888] bridge_slave_0: left promiscuous mode [ 973.243405][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.278086][T13624] usb usb8: usbfs: process 13624 (syz.5.1796) did not claim interface 0 before use [ 975.294574][ T9499] Bluetooth: hci2: command tx timeout [ 975.685529][ T6888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.936188][ T6888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.155994][ T6888] bond0 (unregistering): Released all slaves [ 976.530384][T13640] program syz.5.1800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.600416][T13642] program syz.5.1800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.666227][T13555] team0: Port device team_slave_0 added [ 976.680136][T13555] team0: Port device team_slave_1 added [ 976.697014][T13642] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 976.930395][ T6888] hsr_slave_0: left promiscuous mode [ 976.951714][ T6888] hsr_slave_1: left promiscuous mode [ 976.972695][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.159948][T13647] hfsplus: unable to find HFS+ superblock [ 977.201681][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.374933][ T9499] Bluetooth: hci2: command tx timeout [ 978.256207][T13646] schedule_timeout: wrong timeout value fffffffffffffffe [ 978.534557][T13646] CPU: 1 UID: 0 PID: 13646 Comm: vivid-003-vid-o Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 978.534586][T13646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 978.534605][T13646] Call Trace: [ 978.534613][T13646] [ 978.534621][T13646] dump_stack_lvl+0x189/0x250 [ 978.534656][T13646] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.534688][T13646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 978.534726][T13646] schedule_timeout+0x1e1/0x270 [ 978.534747][T13646] ? __pfx_schedule_timeout+0x10/0x10 [ 978.534777][T13646] ? prepare_to_wait_event+0x437/0x480 [ 978.534812][T13646] vivid_thread_vid_out+0x139f/0x1c90 [ 978.534874][T13646] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 978.534909][T13646] ? __pfx_autoremove_wake_function+0x10/0x10 [ 978.534934][T13646] ? __kthread_parkme+0x7b/0x200 [ 978.534955][T13646] ? __kthread_parkme+0x1a1/0x200 [ 978.534981][T13646] kthread+0x70e/0x8a0 [ 978.535008][T13646] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 978.535030][T13646] ? __pfx_kthread+0x10/0x10 [ 978.535055][T13646] ? _raw_spin_unlock_irq+0x23/0x50 [ 978.535077][T13646] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.535099][T13646] ? __pfx_kthread+0x10/0x10 [ 978.535123][T13646] ret_from_fork+0x3fc/0x770 [ 978.535145][T13646] ? __pfx_ret_from_fork+0x10/0x10 [ 978.535170][T13646] ? __switch_to_asm+0x39/0x70 [ 978.535193][T13646] ? __switch_to_asm+0x33/0x70 [ 978.535214][T13646] ? __pfx_kthread+0x10/0x10 [ 978.535239][T13646] ret_from_fork_asm+0x1a/0x30 [ 978.535278][T13646] [ 979.142442][ T6888] team0 (unregistering): Port device team_slave_1 removed [ 979.217199][ T6888] team0 (unregistering): Port device team_slave_0 removed [ 980.006483][T13673] usb usb8: usbfs: process 13673 (syz.3.1804) did not claim interface 0 before use [ 980.113173][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.130657][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.168079][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.196597][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.203624][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.314499][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.421382][T13679] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 981.584045][T13555] hsr_slave_0: entered promiscuous mode [ 981.709384][T13555] hsr_slave_1: entered promiscuous mode [ 981.716797][T13555] debugfs: 'hsr0' already exists in 'hsr' [ 981.733661][T13555] Cannot create hsr debugfs directory [ 982.631415][T13703] ip6erspan0: left allmulticast mode [ 982.902983][ T5920] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 983.606343][ T5920] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 983.714042][ T5920] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 983.748994][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 983.774627][ T5920] usb 6-1: config 1 has no interface number 0 [ 983.792755][ T5920] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 983.847669][ T5920] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 983.874435][ T5920] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 983.883501][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.956883][ T5920] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 984.711246][ T5920] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 984.720764][T13726] ip6erspan0: left allmulticast mode [ 985.018807][ T5967] usb 6-1: USB disconnect, device number 3 [ 985.056930][ T5967] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 985.159240][T13555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 985.200220][T13555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 985.230664][T13555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 985.255253][T13555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 985.420392][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.461578][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.501600][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.508812][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.538082][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.545251][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.216907][T13753] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1815'. [ 987.574077][T13777] usb usb8: usbfs: process 13777 (syz.3.1819) did not claim interface 0 before use [ 987.925306][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.503977][T13807] lo speed is unknown, defaulting to 1000 [ 990.512926][T13807] lo speed is unknown, defaulting to 1000 [ 990.615608][T13807] lo speed is unknown, defaulting to 1000 [ 990.886146][T13807] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 991.755239][T13807] lo speed is unknown, defaulting to 1000 [ 991.769270][T13807] lo speed is unknown, defaulting to 1000 [ 991.777000][T13807] lo speed is unknown, defaulting to 1000 [ 991.795518][T13807] lo speed is unknown, defaulting to 1000 [ 991.815984][T13807] lo speed is unknown, defaulting to 1000 [ 992.041071][T13555] veth0_vlan: entered promiscuous mode [ 992.371724][T13555] veth1_vlan: entered promiscuous mode [ 992.902022][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.902132][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.299659][T13555] veth0_macvtap: entered promiscuous mode [ 993.409144][T13555] veth1_macvtap: entered promiscuous mode [ 993.507448][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.558288][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.735884][ T6575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.758404][ T6575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.775380][ T6575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.806447][ T6575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.671593][ T5912] lo speed is unknown, defaulting to 1000 [ 995.798555][ T9005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.854304][ T9005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.068174][ T6575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.086320][ T6575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.334148][T13875] usb usb8: usbfs: process 13875 (syz.1.1836) did not claim interface 0 before use [ 999.645427][T13883] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 999.864056][T13887] ubi: mtd0 is already attached to ubi31 [ 1005.279068][T13914] hfsplus: unable to find HFS+ superblock [ 1007.174819][T13930] usb usb8: usbfs: process 13930 (syz.3.1848) did not claim interface 0 before use [ 1007.252771][T13939] usb usb8: usbfs: process 13939 (syz.6.1850) did not claim interface 0 before use [ 1007.950638][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 1008.592345][T13930] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1008.773168][T13947] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1015.545692][T14010] usb usb8: usbfs: process 14010 (syz.5.1864) did not claim interface 0 before use [ 1016.719100][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1864'. [ 1016.826463][T14010] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1018.173617][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1869'. [ 1026.356539][T14102] program syz.6.1884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1026.442457][T14103] program syz.6.1884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1026.455452][T14103] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1029.816031][T14122] siw: device registration error -23 [ 1030.731878][T14133] option changes via remount are deprecated (pid=14125 comm=syz.5.1889) [ 1033.353426][T14151] ip6erspan0: entered allmulticast mode [ 1039.827658][T14210] syz_tun: entered allmulticast mode [ 1039.839869][T14209] syz_tun: left allmulticast mode [ 1042.797163][ T5920] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1043.394765][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 1043.407914][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.485162][ T5920] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1043.494158][ T5920] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1043.548141][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.716220][T14254] hfsplus: unable to find HFS+ superblock [ 1044.109980][ T5920] usb 6-1: config 0 descriptor?? [ 1044.924953][ T5920] usb 6-1: can't set config #0, error -71 [ 1045.082964][ T5920] usb 6-1: USB disconnect, device number 4 [ 1045.161257][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1916'. [ 1047.587617][T14296] fuse: Bad value for 'fd' [ 1054.362338][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.368939][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.892260][T14405] siw: device registration error -23 [ 1058.316364][T14410] program syz.1.1943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.422908][T14414] program syz.1.1943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.663995][T14414] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1062.403758][T14451] usb usb8: usbfs: process 14451 (syz.1.1952) did not claim interface 0 before use [ 1062.854681][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 1063.222751][T14459] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1063.430475][T14457] bridge0: port 3(netdevsim0) entered blocking state [ 1063.470272][T14457] bridge0: port 3(netdevsim0) entered disabled state [ 1063.504708][T14457] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1063.601336][T14467] siw: device registration error -23 [ 1063.745396][T14457] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1064.030093][T14457] bridge0: port 3(netdevsim0) entered blocking state [ 1064.037133][T14457] bridge0: port 3(netdevsim0) entered forwarding state [ 1065.225640][T14476] usb usb8: usbfs: process 14476 (syz.3.1958) did not claim interface 0 before use [ 1065.504550][ T5897] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1066.278376][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.400456][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.473023][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1066.524096][ T5897] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1066.540210][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.754593][ T5897] usb 7-1: config 0 descriptor?? [ 1067.456040][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1962'. [ 1067.865130][ T5897] usbhid 7-1:0.0: can't add hid device: -71 [ 1067.914842][ T5897] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1067.974462][ T5897] usb 7-1: USB disconnect, device number 3 [ 1069.016505][T14502] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1069.665496][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'. [ 1071.428485][T14531] siw: device registration error -23 [ 1074.286248][T14552] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1976'. [ 1074.304940][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 1074.883489][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 1078.004777][T14586] usb usb8: usbfs: process 14586 (syz.7.1986) did not claim interface 0 before use [ 1078.848180][T14590] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1084.984604][T14635] option changes via remount are deprecated (pid=14627 comm=syz.3.1996) [ 1088.403813][T14660] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2004'. [ 1091.981911][T14695] 9pnet_fd: Insufficient options for proto=fd [ 1092.458927][ T5933] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1092.668870][ T9499] Bluetooth: hci2: command 0x0406 tx timeout [ 1092.731850][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 1092.757121][ T5933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.737813][ T5933] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1093.747781][ T5933] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1093.757684][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.767782][ T5933] usb 6-1: config 0 descriptor?? [ 1094.141741][T14707] usb usb8: usbfs: process 14707 (syz.6.2015) did not claim interface 0 before use [ 1095.094421][ T5933] usb 6-1: USB disconnect, device number 5 [ 1095.338232][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2015'. [ 1095.510059][T14717] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1100.158349][T14764] usb usb8: usbfs: process 14764 (syz.5.2029) did not claim interface 0 before use [ 1101.065871][T14770] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1102.155371][T14783] hfsplus: unable to find HFS+ superblock [ 1102.685970][T14785] hfsplus: unable to find HFS+ superblock [ 1104.929040][T14797] bridge0: port 3(dummy0) entered disabled state [ 1105.272200][T14797] dummy0 (unregistering): left allmulticast mode [ 1105.280404][T14797] bridge0: port 3(dummy0) entered disabled state [ 1107.776070][T14819] usb usb8: usbfs: process 14819 (syz.5.2044) did not claim interface 0 before use [ 1108.917367][T14825] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1109.615829][T14835] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1110.999272][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2050'. [ 1111.339044][T14833] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2046'. [ 1114.469583][T14872] hfsplus: unable to find HFS+ superblock [ 1115.838755][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.850253][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.239274][T14890] hfsplus: unable to find HFS+ superblock [ 1117.204781][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2063'. [ 1117.890351][T14904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1119.029276][T14914] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1119.122889][T14916] siw: device registration error -23 [ 1124.469752][T14964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2080'. [ 1125.898523][T14979] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1127.791024][T14995] bridge0: port 3(netdevsim0) entered blocking state [ 1127.797993][T14995] bridge0: port 3(netdevsim0) entered disabled state [ 1127.805233][T14995] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1127.816612][T14995] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1127.836790][T14995] bridge0: port 3(netdevsim0) entered blocking state [ 1127.843578][T14995] bridge0: port 3(netdevsim0) entered forwarding state [ 1128.394539][T14997] program syz.1.2087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.478469][T14998] program syz.1.2087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.549442][T14998] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1130.266359][T15008] sd 0:0:1:0: PR command failed: 1026 [ 1130.272003][T15008] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1130.279141][T15008] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1133.459079][T15037] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1136.833822][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1137.027495][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.081786][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.111721][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1137.240460][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1137.250191][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.265629][ T5920] usb 4-1: config 0 descriptor?? [ 1138.548376][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 1138.627666][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1138.708189][ T5920] usb 4-1: USB disconnect, device number 7 [ 1138.824673][T15077] 9pnet_fd: Insufficient options for proto=fd [ 1139.077561][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1139.322012][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.380513][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.394428][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.408016][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.662529][T15085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2110'. [ 1140.067109][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.099878][ T10] usb 6-1: config 0 descriptor?? [ 1141.462291][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1141.468382][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1141.769400][ T10] usb 6-1: USB disconnect, device number 6 [ 1142.593725][T15116] syz.1.2116: attempt to access beyond end of device [ 1142.593725][T15116] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1142.607136][T15116] FAT-fs (loop3): unable to read boot sector [ 1143.107515][T15105] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1144.520608][T15130] 9pnet_fd: Insufficient options for proto=fd [ 1147.394491][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1147.678638][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.700571][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.721398][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1147.769234][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1147.918517][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.930854][ T10] usb 6-1: config 0 descriptor?? [ 1148.578379][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1148.588119][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1148.687333][ T10] usb 6-1: USB disconnect, device number 7 [ 1149.621530][T15170] usb usb8: usbfs: process 15170 (syz.7.2133) did not claim interface 0 before use [ 1151.330552][T15180] 9pnet_fd: Insufficient options for proto=fd [ 1154.874413][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1155.356352][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.374750][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.421385][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1155.464407][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1155.500884][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.692273][ T10] usb 2-1: config 0 descriptor?? [ 1156.880559][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1157.134608][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 1157.180122][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.540405][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1157.626759][ T5897] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1157.719355][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1157.807869][ T5897] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1157.967370][ T10] usb 2-1: USB disconnect, device number 6 [ 1157.974460][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.016796][ T5897] usb 7-1: config 0 descriptor?? [ 1159.534165][ T5950] usb 7-1: USB disconnect, device number 4 [ 1160.127096][T15258] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1160.203124][T15262] siw: device registration error -23 [ 1162.317420][T15276] program syz.6.2161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1162.379622][T15277] program syz.6.2161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1162.392104][T15277] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1162.994651][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1163.255545][T15285] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1164.199199][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.211329][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.231460][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1164.326119][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2167'. [ 1164.697227][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1164.722134][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.927303][T15297] hfsplus: unable to find HFS+ superblock [ 1166.107312][ T10] usb 6-1: config 0 descriptor?? [ 1166.112616][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1166.142979][ T10] usb 6-1: can't set config #0, error -32 [ 1166.457503][ T10] usb 6-1: USB disconnect, device number 8 [ 1166.838853][T15317] siw: device registration error -23 [ 1167.293453][T15320] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1169.280092][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 1170.126186][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 1171.974396][T15350] program syz.3.2183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1172.845110][T15354] program syz.3.2183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1172.855551][T15354] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1172.871285][ T5897] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1173.087471][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.144935][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.171762][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1173.201275][ T5897] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1173.217225][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.331998][ T5897] usb 2-1: config 0 descriptor?? [ 1173.539904][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1173.805313][T15363] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1173.964427][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1173.977072][ T10] usb 8-1: config 0 has no interfaces? [ 1173.985137][ T10] usb 8-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=11.66 [ 1173.994206][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.005179][ T10] usb 8-1: Product: syz [ 1174.009347][ T10] usb 8-1: Manufacturer: syz [ 1174.013921][ T10] usb 8-1: SerialNumber: syz [ 1174.102459][ T10] usb 8-1: config 0 descriptor?? [ 1174.236585][ T5897] usbhid 2-1:0.0: can't add hid device: -71 [ 1174.242576][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1174.306430][ T5897] usb 2-1: USB disconnect, device number 7 [ 1174.857673][ T5950] usb 8-1: USB disconnect, device number 2 [ 1177.236170][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.243499][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.571955][T15391] usb usb8: usbfs: process 15391 (syz.1.2194) did not claim interface 0 before use [ 1178.330092][ T5933] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1178.475608][T15403] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1178.731868][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.761396][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.771657][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1178.787485][ T5933] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1178.841728][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.879784][ T5933] usb 6-1: config 0 descriptor?? [ 1180.248316][T15417] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1181.209817][ T5933] usbhid 6-1:0.0: can't add hid device: -71 [ 1181.346069][ T5933] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1181.376113][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1181.649541][ T5933] usb 6-1: USB disconnect, device number 9 [ 1181.786453][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.829143][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.227660][T15435] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2202'. [ 1182.249388][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1182.277194][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1182.286631][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.298228][ T10] usb 4-1: config 0 descriptor?? [ 1183.040318][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1183.046593][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1183.057177][ T10] usb 4-1: USB disconnect, device number 8 [ 1183.791135][T15446] usb usb8: usbfs: process 15446 (syz.1.2208) did not claim interface 0 before use [ 1184.641449][T15453] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1188.092727][T15464] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1190.933554][ T5967] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1191.124359][ T5967] usb 7-1: Using ep0 maxpacket: 8 [ 1191.142443][ T5967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.162755][ T5967] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1191.197522][ T5967] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1191.224590][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.241643][T15504] usb usb8: usbfs: process 15504 (syz.5.2222) did not claim interface 0 before use [ 1191.252588][ T5912] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1191.267028][ T5967] usb 7-1: config 0 descriptor?? [ 1191.533944][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.109402][T15509] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1192.695639][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.746388][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1192.764556][ T5912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1192.773725][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.786409][ T5845] usb 7-1: USB disconnect, device number 5 [ 1192.850824][ T5912] usb 2-1: config 0 descriptor?? [ 1193.609549][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 1194.351741][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1194.362674][ T5912] usb 2-1: USB disconnect, device number 8 [ 1196.025619][T15537] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1196.419179][T15540] bridge0: port 3(dummy0) entered disabled state [ 1197.936838][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1198.396171][T15540] dummy0 (unregistering): left allmulticast mode [ 1198.403097][T15540] bridge0: port 3(dummy0) entered disabled state [ 1199.039623][T15559] usb usb8: usbfs: process 15559 (syz.3.2235) did not claim interface 0 before use [ 1199.914461][T15565] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1202.352740][T15592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.295172][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 1203.749164][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2245'. [ 1203.855022][ T5845] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1204.322558][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.419095][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.524768][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1205.564484][ T5845] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1205.573540][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.627765][ T5845] usb 6-1: config 0 descriptor?? [ 1205.645140][ T5845] usb 6-1: can't set config #0, error -71 [ 1205.670539][ T5845] usb 6-1: USB disconnect, device number 10 [ 1205.729919][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2251'. [ 1207.664536][ T5912] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1208.307876][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 1208.385800][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.399508][ T5912] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1208.408869][ T5912] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1208.422299][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.540324][ T5912] usb 6-1: config 0 descriptor?? [ 1209.331410][ T5933] usb 6-1: USB disconnect, device number 11 [ 1212.824888][ T5967] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1213.991567][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.222722][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.232857][ T5967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1214.246212][ T5967] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1214.256208][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.300271][T15688] usb usb8: usbfs: process 15688 (syz.3.2267) did not claim interface 0 before use [ 1214.363803][ T5967] usb 6-1: config 0 descriptor?? [ 1215.542571][T15693] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1216.092814][ T5967] usb 6-1: can't set config #0, error -71 [ 1216.123469][ T5967] usb 6-1: USB disconnect, device number 12 [ 1217.216674][T15705] hfsplus: unable to find HFS+ superblock [ 1217.615242][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2273'. [ 1219.511809][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.097750][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.114599][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.474521][ T5967] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1220.705053][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.712865][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.727986][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.737610][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.749078][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.779192][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.803755][T15722] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 1220.830755][T15736] usb usb8: usbfs: process 15736 (syz.1.2281) did not claim interface 0 before use [ 1220.974455][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 1221.706964][T15740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1221.843754][ T5967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.853902][ T5967] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1221.862903][ T5967] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1221.871977][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.058903][ T5967] usb 4-1: config 0 descriptor?? [ 1223.734842][ T8856] usb 4-1: USB disconnect, device number 9 [ 1228.621491][T15792] usb usb8: usbfs: process 15792 (syz.3.2294) did not claim interface 0 before use [ 1230.043196][T15804] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1234.722130][T15848] usb usb8: usbfs: process 15848 (syz.1.2309) did not claim interface 0 before use [ 1236.583925][T15859] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1238.663325][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.672881][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.743929][T15880] hfsplus: unable to find HFS+ superblock [ 1240.498925][T15895] validate_nla: 42 callbacks suppressed [ 1240.498938][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.557300][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.565177][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.594198][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.602307][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.653414][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.790313][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.799269][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.809069][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1240.817575][T15895] netlink: 'syz.5.2321': attribute type 3 has an invalid length. [ 1241.787592][T15908] hfsplus: unable to find HFS+ superblock [ 1242.964008][T15922] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2325'. [ 1243.204704][ T5912] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1244.039406][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.120818][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.131048][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1244.155847][ T5912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1244.200996][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.341558][ T5912] usb 2-1: config 0 descriptor?? [ 1246.032029][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 1246.038018][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1246.088484][ T5912] usb 2-1: USB disconnect, device number 9 [ 1247.790056][T15971] usb usb8: usbfs: process 15971 (syz.1.2341) did not claim interface 0 before use [ 1248.582217][T15975] hfsplus: unable to find HFS+ superblock [ 1248.616193][T15973] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1249.482696][T15981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2343'. [ 1253.326193][T16014] hfsplus: unable to find HFS+ superblock [ 1254.133036][ T9499] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1255.690186][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 1255.721942][T16034] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2358'. [ 1257.011842][T16044] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1259.100265][T16070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.213418][ T9499] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1263.137666][T16098] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1264.854722][T16114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.880548][T16147] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1273.955555][T16170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1275.844449][ T5912] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1276.024395][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 1276.758492][ T5912] usb 6-1: config 0 has no interfaces? [ 1276.830142][ T5912] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=11.66 [ 1276.881266][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.915264][ T5912] usb 6-1: Product: syz [ 1276.919542][ T5912] usb 6-1: Manufacturer: syz [ 1276.924512][ T5912] usb 6-1: SerialNumber: syz [ 1276.974247][ T5912] usb 6-1: config 0 descriptor?? [ 1277.244397][ T5920] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1277.332229][ T5912] usb 6-1: USB disconnect, device number 13 [ 1277.427760][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.459050][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.492668][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1277.523736][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1277.550326][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.579797][ T5920] usb 4-1: config 0 descriptor?? [ 1278.739663][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 1278.761291][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1278.842958][ T5920] usb 4-1: USB disconnect, device number 10 [ 1280.689920][T16224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1281.574749][ T9499] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1287.272678][T16263] siw: device registration error -23 [ 1288.950822][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1289.240026][T16282] validate_nla: 42 callbacks suppressed [ 1289.240040][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.288496][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.317135][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.327409][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.336749][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.346899][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.356367][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.365490][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.375659][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1289.384154][T16282] netlink: 'syz.5.2421': attribute type 3 has an invalid length. [ 1292.182435][ T9499] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1292.885563][T16309] syz_tun: entered allmulticast mode [ 1293.605712][T16306] syz_tun: left allmulticast mode [ 1294.203655][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2428'. [ 1294.685920][T16319] usb usb8: usbfs: process 16319 (syz.3.2430) did not claim interface 0 before use [ 1295.257164][T16326] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2429'. [ 1295.857548][T16331] validate_nla: 42 callbacks suppressed [ 1295.857561][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.877428][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.886390][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.897501][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.906330][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.925817][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.935075][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.944520][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.954228][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1295.966847][T16331] netlink: 'syz.5.2432': attribute type 3 has an invalid length. [ 1297.498883][T16345] program syz.1.2434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.359263][T16349] program syz.1.2434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.383409][T16349] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1298.614557][ T5912] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1298.774491][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 1299.670217][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.681577][ T5912] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1299.778480][ T5912] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1299.898634][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.075877][ T5912] usb 4-1: config 0 descriptor?? [ 1302.749345][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.762851][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.810161][ T5912] usb 4-1: can't set config #0, error -71 [ 1303.874583][ T5912] usb 4-1: USB disconnect, device number 11 [ 1304.132983][T16370] validate_nla: 42 callbacks suppressed [ 1304.132996][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1304.722210][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1304.849382][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1304.875884][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1304.883632][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1304.963350][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1304.997686][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1305.023858][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1305.073973][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1305.105246][T16370] netlink: 'syz.6.2444': attribute type 3 has an invalid length. [ 1308.590835][T16421] usb usb8: usbfs: process 16421 (syz.7.2455) did not claim interface 0 before use [ 1308.601163][T16422] syzkaller0: create flow: hash 1179170392 index 1 [ 1309.290631][ T5967] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1309.510918][T16426] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.633944][T16416] syzkaller0: entered promiscuous mode [ 1309.684008][T16416] syzkaller0: entered allmulticast mode [ 1309.744384][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 1309.767581][ T5967] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.779426][ T5967] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1309.802866][ T5967] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1309.816134][T16414] syzkaller0: delete flow: hash 1179170392 index 1 [ 1309.823433][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.846456][ T5967] usb 6-1: config 0 descriptor?? [ 1314.151141][ T10] usb 6-1: USB disconnect, device number 14 [ 1314.705862][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2463'. [ 1314.755727][T16469] usb usb8: usbfs: process 16469 (syz.6.2466) did not claim interface 0 before use [ 1315.647286][T16473] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1317.779600][T16493] usb usb8: usbfs: process 16493 (syz.6.2472) did not claim interface 0 before use [ 1317.807011][T16487] syzkaller0: entered promiscuous mode [ 1317.812712][T16487] syzkaller0: entered allmulticast mode [ 1317.920932][T12203] syzkaller0: tun_net_xmit 48 [ 1317.994866][T16487] syzkaller0: create flow: hash 1179170392 index 1 [ 1319.381998][T16486] syzkaller0: delete flow: hash 1179170392 index 1 [ 1321.302097][T16514] usb usb8: usbfs: process 16514 (syz.7.2477) did not claim interface 0 before use [ 1322.337293][T16514] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1329.265815][T16577] program syz.5.2488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.368001][T16578] program syz.5.2488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.474401][T16578] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1330.900498][T16537] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2480'. [ 1331.159491][T16586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2492'. [ 1332.668800][T16587] program syz.5.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1332.734827][T16589] program syz.5.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1333.364348][ T5965] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1333.623674][T16589] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1333.976649][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 1334.001906][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.013339][ T5965] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1334.028437][ T5965] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1334.038133][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.065973][ T5965] usb 4-1: config 0 descriptor?? [ 1336.193766][T15828] usb 4-1: USB disconnect, device number 12 [ 1336.394646][T16614] validate_nla: 42 callbacks suppressed [ 1336.394658][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1336.465214][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1336.474149][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1336.898691][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1337.317214][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1337.331638][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1337.340476][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1337.348954][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1337.357431][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1337.365830][T16614] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 1337.513124][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1339.358821][T16641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2503'. [ 1341.502743][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2508'. [ 1341.741306][T16661] validate_nla: 42 callbacks suppressed [ 1341.741320][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1342.464478][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1342.515315][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1342.528694][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1343.221271][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1343.242852][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1343.250976][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1343.259019][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1343.266958][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1343.276793][T16661] netlink: 'syz.5.2511': attribute type 3 has an invalid length. [ 1346.393309][T16704] usb usb8: usbfs: process 16704 (syz.3.2521) did not claim interface 0 before use [ 1346.604069][T16705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2520'. [ 1347.214704][T16708] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1351.696771][T16731] program syz.7.2527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.760031][T16734] program syz.7.2527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.898447][T16734] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1356.256919][T16777] 9pnet_fd: Insufficient options for proto=fd [ 1356.265797][T16778] validate_nla: 95 callbacks suppressed [ 1356.265809][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1356.294501][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1356.328031][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1356.495189][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1356.518684][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1356.527449][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1356.540696][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1357.833530][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1357.934424][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1358.045052][T16778] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 1361.650876][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.673517][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.284440][T16812] sd 0:0:1:0: PR command failed: 1026 [ 1365.289843][T16812] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1365.344406][T16812] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1366.743083][T16828] validate_nla: 43 callbacks suppressed [ 1366.743096][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.757795][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.825375][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.836928][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.857305][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.871226][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.880177][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.888859][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.897742][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1366.906010][T16828] netlink: 'syz.7.2552': attribute type 3 has an invalid length. [ 1371.510864][T16886] usb usb8: usbfs: process 16886 (syz.6.2563) did not claim interface 0 before use [ 1371.569598][T16878] syzkaller0: entered promiscuous mode [ 1372.534017][T16878] syzkaller0: entered allmulticast mode [ 1372.879447][T16890] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1376.926674][T16917] siw: device registration error -23 [ 1380.328160][T16941] sd 0:0:1:0: PR command failed: 1026 [ 1380.333716][T16941] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1380.340607][T16941] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1383.874095][T16960] program syz.7.2581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1383.936409][T16961] program syz.7.2581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1383.999028][T16961] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1390.140431][T16995] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1390.149703][T16995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1390.157873][T16995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1390.166860][T16995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1390.232742][T16995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1390.580952][T17004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.957010][T16993] lo speed is unknown, defaulting to 1000 [ 1392.572101][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.594311][T12506] Bluetooth: hci5: command tx timeout [ 1393.972460][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.088835][T17030] hfsplus: unable to find HFS+ superblock [ 1394.664349][T16995] Bluetooth: hci5: command tx timeout [ 1395.303924][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.460210][ T36] bridge0: port 3(netdevsim0) entered disabled state [ 1395.933699][T17047] usb usb8: usbfs: process 17047 (syz.7.2603) did not claim interface 0 before use [ 1396.112685][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1396.131860][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1396.141764][ T36] bridge0: port 3(netdevsim0) entered disabled state [ 1396.747618][T16995] Bluetooth: hci5: command tx timeout [ 1396.769933][T17049] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1396.893770][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.814616][T12506] Bluetooth: hci5: command tx timeout [ 1398.890834][T16993] chnl_net:caif_netlink_parms(): no params data found [ 1401.355641][T17083] usb usb8: usbfs: process 17083 (syz.1.2611) did not claim interface 0 before use [ 1401.370361][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.934856][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.320697][T16993] bridge_slave_0: entered allmulticast mode [ 1402.339693][T16993] bridge_slave_0: entered promiscuous mode [ 1402.799411][T17091] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1402.910531][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.939478][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.976384][T16993] bridge_slave_1: entered allmulticast mode [ 1403.007296][T16993] bridge_slave_1: entered promiscuous mode [ 1403.603157][T17097] usb usb8: usbfs: process 17097 (syz.5.2613) did not claim interface 0 before use [ 1404.659052][T17101] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1404.786552][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.906435][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.120370][ T36] bridge_slave_1: left allmulticast mode [ 1406.133693][T17117] usb usb8: usbfs: process 17117 (syz.1.2619) did not claim interface 0 before use [ 1406.143622][ T36] bridge_slave_1: left promiscuous mode [ 1406.152699][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.300410][ T36] bridge_slave_0: left allmulticast mode [ 1406.306205][ T36] bridge_slave_0: left promiscuous mode [ 1406.313143][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.370305][T17130] usb usb8: usbfs: process 17130 (syz.1.2622) did not claim interface 0 before use [ 1409.236217][T17134] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1410.751108][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.763100][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.774998][ T36] bond0 (unregistering): Released all slaves [ 1410.810869][T17115] validate_nla: 43 callbacks suppressed [ 1410.810883][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1410.828994][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.489733][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.553599][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.604769][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.623451][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.651362][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.657729][T17150] usb usb8: usbfs: process 17150 (syz.5.2626) did not claim interface 0 before use [ 1411.668624][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.796084][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.803836][T17115] netlink: 'syz.6.2618': attribute type 3 has an invalid length. [ 1411.846044][T16993] team0: Port device team_slave_0 added [ 1412.492790][T16993] team0: Port device team_slave_1 added [ 1412.508323][T17152] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1413.307392][T17160] option changes via remount are deprecated (pid=17154 comm=syz.6.2628) [ 1413.731389][T17165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2629'. [ 1413.782219][T17165] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2629'. [ 1414.095329][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.102304][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.154413][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.182409][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.222022][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.353520][T17172] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2630'. [ 1414.512435][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.751464][T17183] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1419.241296][T16993] hsr_slave_0: entered promiscuous mode [ 1419.358998][T16993] hsr_slave_1: entered promiscuous mode [ 1419.438968][T16993] debugfs: 'hsr0' already exists in 'hsr' [ 1419.485192][T16993] Cannot create hsr debugfs directory [ 1419.936805][T17194] sd 0:0:1:0: PR command failed: 1026 [ 1419.942589][T17194] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1419.949583][T17194] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1421.592441][T17209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1421.708084][T17207] usb usb8: usbfs: process 17207 (syz.1.2637) did not claim interface 0 before use [ 1422.513822][T17214] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1423.030636][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.048089][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.145992][T17228] option changes via remount are deprecated (pid=17218 comm=syz.1.2641) [ 1427.671079][ T36] hsr_slave_0: left promiscuous mode [ 1427.717796][ T36] hsr_slave_1: left promiscuous mode [ 1427.737478][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.769003][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.826278][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.866521][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.902321][T17276] usb usb8: usbfs: process 17276 (syz.7.2650) did not claim interface 0 before use [ 1427.923943][ T36] veth1_macvtap: left promiscuous mode [ 1427.955531][ T36] veth0_macvtap: left promiscuous mode [ 1427.971427][ T36] veth1_vlan: left promiscuous mode [ 1427.981488][ T36] veth0_vlan: left promiscuous mode [ 1430.434588][ T5845] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1430.770626][T17299] option changes via remount are deprecated (pid=17294 comm=syz.6.2654) [ 1431.082654][ T5845] usb 8-1: Using ep0 maxpacket: 8 [ 1431.106720][ T5845] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.771334][T17304] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1432.138486][ T5845] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1432.147838][ T5845] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1432.157251][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.169900][ T5845] usb 8-1: config 0 descriptor?? [ 1433.167009][T17312] hfsplus: unable to find HFS+ superblock [ 1433.721320][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1433.927358][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1435.693462][T16993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1435.719223][T16993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1435.730411][T16993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1435.749254][T16993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1435.825662][T15828] usb 8-1: USB disconnect, device number 3 [ 1436.133241][T17326] : entered promiscuous mode [ 1436.298110][T17349] hfsplus: unable to find HFS+ superblock [ 1437.155068][T17351] sd 0:0:1:0: PR command failed: 1026 [ 1437.160585][T17351] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1437.167520][T17351] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1437.508250][T16993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.791091][T16993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.517103][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.524300][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.759668][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.766867][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.384614][T17370] program syz.5.2666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1439.384624][T17374] program syz.5.2666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1439.390047][T16993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1439.413535][T17374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1441.665220][T17396] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1443.132356][T16993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.113517][T17435] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2675'. [ 1446.057653][T17449] option changes via remount are deprecated (pid=17441 comm=syz.1.2679) [ 1449.453554][T17487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1450.366247][T16995] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1451.098783][T16995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1451.157353][T16995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1451.198942][T16995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1451.221835][T16995] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1451.692086][T17511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1452.248447][T17509] validate_nla: 43 callbacks suppressed [ 1452.248480][T17509] netlink: 'syz.1.2690': attribute type 10 has an invalid length. [ 1452.262225][T17509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2690'. [ 1452.933279][T17493] lo speed is unknown, defaulting to 1000 [ 1453.020267][T17515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.524609][T12506] Bluetooth: hci1: command tx timeout [ 1455.628637][T12506] Bluetooth: hci1: command tx timeout [ 1457.248677][T17553] usb usb8: usbfs: process 17553 (syz.7.2700) did not claim interface 0 before use [ 1458.395703][T12506] Bluetooth: hci1: command tx timeout [ 1459.300878][T17561] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1459.487570][ T1143] bridge_slave_1: left allmulticast mode [ 1459.536255][ T1143] bridge_slave_1: left promiscuous mode [ 1459.542091][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.584996][ T1143] bridge_slave_0: left allmulticast mode [ 1459.597659][ T1143] bridge_slave_0: left promiscuous mode [ 1459.610468][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.464255][T12506] Bluetooth: hci1: command tx timeout [ 1463.590244][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.625132][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.640106][ T1143] bond0 (unregistering): Released all slaves [ 1463.658785][T17493] chnl_net:caif_netlink_parms(): no params data found [ 1464.343846][T17603] usb usb8: usbfs: process 17603 (syz.6.2711) did not claim interface 0 before use [ 1464.544654][ T1143] hsr_slave_0: left promiscuous mode [ 1464.567230][ T1143] hsr_slave_1: left promiscuous mode [ 1464.590232][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.217610][T17606] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1465.292756][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.215031][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1467.323944][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1468.531304][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.543562][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.560765][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.582914][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.599375][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.609739][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.620364][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.629869][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.642669][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1468.651848][T17634] netlink: 'syz.7.2715': attribute type 3 has an invalid length. [ 1469.015891][T17493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.032212][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.041027][T17493] bridge_slave_0: entered allmulticast mode [ 1469.063899][T17493] bridge_slave_0: entered promiscuous mode [ 1469.218319][T17650] : entered promiscuous mode [ 1469.965845][T17493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.027387][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.042700][T17493] bridge_slave_1: entered allmulticast mode [ 1470.058427][T17493] bridge_slave_1: entered promiscuous mode [ 1470.297146][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.588594][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.530093][T17493] team0: Port device team_slave_0 added [ 1471.560993][T17493] team0: Port device team_slave_1 added [ 1471.851741][T17674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1472.317824][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.333016][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.453004][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.484162][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.491173][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.518993][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.868993][T17680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.576203][T17493] hsr_slave_0: entered promiscuous mode [ 1473.703449][T17493] hsr_slave_1: entered promiscuous mode [ 1474.024830][T17686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.370873][T17703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1478.489748][T17726] syz_tun: entered allmulticast mode [ 1478.729547][T17730] syz_tun: left allmulticast mode [ 1478.860093][T17731] option changes via remount are deprecated (pid=17721 comm=syz.5.2733) [ 1480.596848][T17493] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1480.629862][T17493] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1480.700597][T17493] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1481.100011][T17754] sd 0:0:1:0: PR command failed: 1026 [ 1481.106072][T17754] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1481.113741][T17754] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1481.355380][T17753] siw: device registration error -23 [ 1481.479850][T17493] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1483.453572][T17493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.586857][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2742'. [ 1483.640405][T17781] validate_nla: 43 callbacks suppressed [ 1483.640441][T17781] netlink: 'syz.1.2742': attribute type 10 has an invalid length. [ 1483.653905][T17781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2742'. [ 1483.725345][T17493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.987385][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.994524][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.066944][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.074130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.861247][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.868030][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.065490][T17798] option changes via remount are deprecated (pid=17790 comm=syz.7.2745) [ 1486.995131][T17807] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1488.642816][T17815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1490.321752][T17493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.763583][T17857] sd 0:0:1:0: PR command failed: 1026 [ 1491.771203][T17857] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1491.779967][T17857] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1493.366358][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1493.389486][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1493.517549][T17879] program syz.1.2757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.577562][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1493.594414][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1493.616278][T17883] program syz.1.2757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.634270][T17883] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1493.904859][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1493.931316][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1493.953255][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1493.986367][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1494.014360][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1494.024330][T17877] netlink: 'syz.6.2758': attribute type 3 has an invalid length. [ 1494.240242][T17493] veth0_vlan: entered promiscuous mode [ 1494.286336][T17493] veth1_vlan: entered promiscuous mode [ 1494.932321][T17896] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1495.068571][T17493] veth0_macvtap: entered promiscuous mode [ 1495.379303][T17493] veth1_macvtap: entered promiscuous mode [ 1495.503274][T17493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.537947][T17493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.000236][ T8049] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.036370][ T8049] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.097017][ T8049] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.142299][T12203] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.404319][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.517071][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.917906][T17906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2762'. [ 1497.140712][ T6888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.269343][ T6888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.715719][T17941] 9pnet_fd: Insufficient options for proto=fd [ 1498.805436][T17929] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2764'. [ 1499.951187][T17943] program syz.8.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1500.012941][T17948] program syz.8.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1500.027842][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2769'. [ 1500.228122][T17948] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1501.326933][T17962] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1505.451953][T16995] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1505.461309][T16995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1505.481961][T16995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1505.535874][ T9499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1505.656083][ T9499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1505.766920][T17998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1507.185234][ T5851] syz_tun (unregistering): left allmulticast mode [ 1507.325579][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2780'. [ 1507.703266][T18007] siw: device registration error -23 [ 1507.779445][T12506] Bluetooth: hci5: command tx timeout [ 1508.221761][T17989] lo speed is unknown, defaulting to 1000 [ 1508.944635][ T8856] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1509.284303][ T8856] usb 7-1: Using ep0 maxpacket: 8 [ 1509.306797][ T8856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.333044][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.515318][ T8856] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1509.524383][ T8856] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1509.534371][ T8856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.545998][ T8856] usb 7-1: config 0 descriptor?? [ 1509.705904][T18023] JFS: discard option not supported on device [ 1509.717640][T18023] Mount JFS Failure: -22 [ 1509.721951][T18023] jfs_mount failed w/return code = -22 [ 1509.868057][T12506] Bluetooth: hci5: command tx timeout [ 1510.263285][T15828] usb 7-1: USB disconnect, device number 6 [ 1511.053539][T18037] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1511.498559][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2785'. [ 1511.557824][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.084287][T12506] Bluetooth: hci5: command tx timeout [ 1514.094344][T12506] Bluetooth: hci5: command tx timeout [ 1514.706524][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1515.874632][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.666949][T18081] syz.5.2793 (18081): drop_caches: 2 [ 1520.700112][T18081] syz.5.2793 (18081): drop_caches: 2 [ 1521.037331][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.399815][T17989] chnl_net:caif_netlink_parms(): no params data found [ 1524.847181][T18116] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1525.387403][T18107] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1525.463229][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.608528][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.615984][T17989] bridge_slave_0: entered allmulticast mode [ 1525.623807][T17989] bridge_slave_0: entered promiscuous mode [ 1525.632400][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.652325][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.678874][T17989] bridge_slave_1: entered allmulticast mode [ 1525.694715][T17989] bridge_slave_1: entered promiscuous mode [ 1525.756601][T18124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1527.795694][T18134] hfsplus: unable to find HFS+ superblock [ 1527.842201][ T36] bridge_slave_1: left allmulticast mode [ 1527.877017][ T36] bridge_slave_1: left promiscuous mode [ 1527.984660][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.029506][ T36] bridge_slave_0: left allmulticast mode [ 1528.048297][ T36] bridge_slave_0: left promiscuous mode [ 1528.184447][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.066158][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2810'. [ 1535.423164][T18183] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1535.834304][T18185] hfsplus: unable to find HFS+ superblock [ 1536.285442][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.324985][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.350552][ T36] bond0 (unregistering): Released all slaves [ 1536.577459][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.701358][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.428093][ T36] : left promiscuous mode [ 1538.089662][T18203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1538.157868][T18204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1540.048308][T17989] team0: Port device team_slave_0 added [ 1540.580913][T18228] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1541.108651][T18233] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2827'. [ 1541.121286][T18233] validate_nla: 42 callbacks suppressed [ 1541.121302][T18233] netlink: 'syz.8.2827': attribute type 10 has an invalid length. [ 1541.135222][T18233] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2827'. [ 1541.535991][T17989] team0: Port device team_slave_1 added [ 1541.657994][T18233] dummy0: entered promiscuous mode [ 1541.678377][T18233] bridge0: port 3(dummy0) entered blocking state [ 1541.695272][T18233] bridge0: port 3(dummy0) entered disabled state [ 1541.728496][T18233] dummy0: entered allmulticast mode [ 1541.877701][T18233] bridge0: port 3(dummy0) entered blocking state [ 1541.884236][T18233] bridge0: port 3(dummy0) entered forwarding state [ 1542.947493][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.964600][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.063290][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.081159][T18248] siw: device registration error -23 [ 1543.117368][T18246] 9pnet_fd: Insufficient options for proto=fd [ 1543.961416][T18238] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1543.978376][T18242] : entered promiscuous mode [ 1544.186282][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.193398][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.397432][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.478967][T18259] hfsplus: unable to find HFS+ superblock [ 1545.883302][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.898831][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.037911][ T36] hsr_slave_0: left promiscuous mode [ 1546.103702][ T36] hsr_slave_1: left promiscuous mode [ 1546.863710][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.910526][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.608533][T18288] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1548.208330][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.224493][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.274826][ T36] veth1_macvtap: left promiscuous mode [ 1548.288929][ T36] veth0_macvtap: left promiscuous mode [ 1548.304017][ T36] veth1_vlan: left promiscuous mode [ 1548.311396][ T36] veth0_vlan: left promiscuous mode [ 1548.593442][T18299] JFS: discard option not supported on device [ 1548.601111][T18299] Mount JFS Failure: -22 [ 1548.605452][T18299] jfs_mount failed w/return code = -22 [ 1550.297649][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1550.350112][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1551.109794][T18320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1551.618982][T17989] hsr_slave_0: entered promiscuous mode [ 1551.625741][T17989] hsr_slave_1: entered promiscuous mode [ 1551.636321][T17989] debugfs: 'hsr0' already exists in 'hsr' [ 1551.642158][T17989] Cannot create hsr debugfs directory [ 1552.811728][T18310] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2840'. [ 1552.924726][T18331] program syz.8.2844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1553.015207][T18334] program syz.8.2844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1553.059885][T18334] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1557.523364][T18359] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1558.326867][T18370] JFS: discard option not supported on device [ 1558.335418][T18370] Mount JFS Failure: -22 [ 1558.339706][T18370] jfs_mount failed w/return code = -22 [ 1558.919489][T18371] syz.7.2853 (18371): drop_caches: 2 [ 1558.983951][T18371] syz.7.2853 (18371): drop_caches: 2 [ 1559.502135][T18378] Driver unsupported XDP return value 0 on prog (id 385) dev N/A, expect packet loss! [ 1561.520008][T18382] : entered promiscuous mode [ 1562.194448][T18414] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2857'. [ 1562.284801][ T9499] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1562.349500][ T9499] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1562.357934][ T9499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1562.368235][ T9499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1562.376642][ T9499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1563.716800][T18443] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1564.195302][T18422] lo speed is unknown, defaulting to 1000 [ 1564.415368][T12506] Bluetooth: hci3: command tx timeout [ 1566.094984][T18460] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1566.494546][T12506] Bluetooth: hci3: command tx timeout [ 1566.875142][T18468] 9pnet_fd: Insufficient options for proto=fd [ 1566.978874][T18463] : entered promiscuous mode [ 1567.074016][ T49] bridge_slave_1: left allmulticast mode [ 1567.101610][ T49] bridge_slave_1: left promiscuous mode [ 1567.111929][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.555207][ T49] bridge_slave_0: left allmulticast mode [ 1567.744541][ T49] bridge_slave_0: left promiscuous mode [ 1568.074479][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.587431][T12506] Bluetooth: hci3: command tx timeout [ 1569.492831][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1569.599891][T18500] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2871'. [ 1569.805944][T18500] netlink: 'syz.6.2871': attribute type 10 has an invalid length. [ 1569.814108][T18500] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2871'. [ 1570.043178][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.303163][ T49] bond0 (unregistering): Released all slaves [ 1570.629239][T18422] chnl_net:caif_netlink_parms(): no params data found [ 1570.694278][T12506] Bluetooth: hci3: command tx timeout [ 1571.939439][T18516] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1573.541979][T12506] Bluetooth: hci1: command 0x0406 tx timeout [ 1574.490747][T18422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.606043][T18422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.613372][T18422] bridge_slave_0: entered allmulticast mode [ 1574.621512][T18422] bridge_slave_0: entered promiscuous mode [ 1574.739467][ T49] hsr_slave_0: left promiscuous mode [ 1575.816984][ T49] hsr_slave_1: left promiscuous mode [ 1575.856115][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.911327][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.681085][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1576.710765][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1576.944701][T18422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.952316][T18422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.964700][T18422] bridge_slave_1: entered allmulticast mode [ 1576.972453][T18422] bridge_slave_1: entered promiscuous mode [ 1578.017329][T18422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.229920][T18422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.805078][T18595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1580.286607][T18598] syz_tun: entered allmulticast mode [ 1580.293406][T18601] syz_tun: left allmulticast mode [ 1580.809907][T18610] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1581.082143][T18422] team0: Port device team_slave_0 added [ 1581.479069][T18422] team0: Port device team_slave_1 added [ 1581.910261][T18422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.917603][T18422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.345719][T18422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.689757][T18422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.787258][T18422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.880202][T18422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.539145][T18655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1585.029397][T18422] hsr_slave_0: entered promiscuous mode [ 1585.137568][T18422] hsr_slave_1: entered promiscuous mode [ 1585.266914][T18422] debugfs: 'hsr0' already exists in 'hsr' [ 1585.338330][T18422] Cannot create hsr debugfs directory [ 1586.804030][T18666] JFS: discard option not supported on device [ 1586.812069][T18666] Mount JFS Failure: -22 [ 1586.816586][T18666] jfs_mount failed w/return code = -22 [ 1589.202587][T18676] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1589.641753][T18681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1591.120943][T18698] siw: device registration error -23 [ 1592.393207][T18422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1592.563634][T18422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1593.346440][T18422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1593.608671][T18422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1594.846392][T18422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1594.879041][T18422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.902966][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.910443][ T9005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.962837][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.970181][ T9005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.020012][T18738] syz.6.2914 (18738): drop_caches: 2 [ 1595.027682][T18738] syz.6.2914 (18738): drop_caches: 2 [ 1596.014202][T18756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1596.962777][T18761] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1598.734679][T18781] syz.6.2921: attempt to access beyond end of device [ 1598.734679][T18781] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1598.748424][T18781] FAT-fs (loop13): unable to read boot sector [ 1599.457459][T18774] program syz.8.2920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1600.667167][T18772] program syz.8.2920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1600.676583][T18772] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1601.513053][T18422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.858324][T18422] veth0_vlan: entered promiscuous mode [ 1601.877675][T18422] veth1_vlan: entered promiscuous mode [ 1602.037301][T18422] veth0_macvtap: entered promiscuous mode [ 1602.083775][T18817] siw: device registration error -23 [ 1602.272454][T18818] program syz.6.2929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1602.339536][T18819] program syz.6.2929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1602.475194][T18422] veth1_macvtap: entered promiscuous mode [ 1602.583321][T18819] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1603.051961][T18422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.283739][T18422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.315581][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.330513][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.410255][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.463254][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.054331][T18830] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1605.528207][T18835] syz.7.2932: attempt to access beyond end of device [ 1605.528207][T18835] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1605.541610][T18835] FAT-fs (loop15): unable to read boot sector [ 1606.995301][T18841] siw: device registration error -23 [ 1607.023484][T12203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.394489][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.408370][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.674422][T12203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.843567][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.084082][T18865] program syz.6.2936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1608.314950][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.594335][T18868] program syz.6.2936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1608.621637][T18868] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1608.878357][T18879] syz_tun: entered allmulticast mode [ 1609.549337][T18871] syz_tun: left allmulticast mode [ 1613.255015][T18907] sd 0:0:1:0: PR command failed: 1026 [ 1613.359170][T18907] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1613.404303][T18907] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1613.487438][T18914] program syz.5.2946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1613.540650][T18916] program syz.5.2946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1614.084348][T18916] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1618.706481][T18955] sd 0:0:1:0: PR command failed: 1026 [ 1618.712415][T18955] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1618.719768][T18955] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1619.228377][T18966] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1619.286054][T18966] hfsplus: unable to find HFS+ superblock [ 1620.877084][T18973] sp0: Synchronizing with TNC [ 1621.123032][T18967] [U] è [ 1624.902144][T18999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1626.124458][ T5965] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1626.704219][ T5965] usb 9-1: Using ep0 maxpacket: 32 [ 1627.421183][ T5965] usb 9-1: config 0 has no interfaces? [ 1627.429201][ T5965] usb 9-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=11.66 [ 1627.440031][ T5965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.448235][ T5965] usb 9-1: Product: syz [ 1627.452372][ T5965] usb 9-1: Manufacturer: syz [ 1627.457381][ T5965] usb 9-1: SerialNumber: syz [ 1627.549357][ T5965] usb 9-1: config 0 descriptor?? [ 1628.323875][ T10] usb 9-1: USB disconnect, device number 2 [ 1630.787003][T19046] 9pnet_fd: Insufficient options for proto=fd [ 1632.589434][T19080] syz.7.2982: attempt to access beyond end of device [ 1632.589434][T19080] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1632.602687][T19080] FAT-fs (loop15): unable to read boot sector [ 1635.426838][T19107] syz_tun: entered allmulticast mode [ 1635.592982][T19103] syz_tun: left allmulticast mode [ 1636.080760][T19114] syz_tun: entered allmulticast mode [ 1636.818123][T19111] syz_tun: left allmulticast mode [ 1637.136875][T19102] sd 0:0:1:0: PR command failed: 1026 [ 1637.142295][T19102] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1637.149028][T19102] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1637.485962][T19123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1638.028229][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2992'. [ 1638.799203][T19128] 9pnet_fd: Insufficient options for proto=fd [ 1639.031255][T19138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1640.136192][T19146] siw: device registration error -23 [ 1641.355600][T19152] IPv6: addrconf: prefix option has invalid lifetime [ 1643.069007][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3005'. [ 1644.465544][T19174] syz.7.3010 (19174): drop_caches: 2 [ 1644.473310][T19174] syz.7.3010 (19174): drop_caches: 2 [ 1648.491623][T19186] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1649.750231][T19203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1651.589514][T19215] syz.5.3019 (19215): drop_caches: 2 [ 1651.668619][T19218] syz_tun: entered allmulticast mode [ 1652.286542][T19215] syz.5.3019 (19215): drop_caches: 2 [ 1653.496161][T19213] syz_tun: left allmulticast mode [ 1654.372028][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3021'. [ 1655.655755][T19240] ip6erspan0: entered allmulticast mode [ 1656.065444][T19236] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1658.111060][T19262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1659.058811][T15828] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1659.218658][T15828] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1659.579209][T19273] JFS: discard option not supported on device [ 1659.587281][T19273] Mount JFS Failure: -22 [ 1659.591669][T19273] jfs_mount failed w/return code = -22 [ 1660.248107][T15828] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.269852][T15828] usb 9-1: Product: syz [ 1660.274041][T15828] usb 9-1: Manufacturer: syz [ 1660.278680][T15828] usb 9-1: SerialNumber: syz [ 1660.286107][T15828] usb 9-1: config 0 descriptor?? [ 1660.291830][T15828] usb 9-1: can't set config #0, error -71 [ 1660.403460][T15828] usb 9-1: USB disconnect, device number 3 [ 1660.534234][ T5920] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1660.579597][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3037'. [ 1661.081202][ T5920] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1661.756944][T19285] syz.6.3038 (19285): drop_caches: 2 [ 1661.768675][T19285] syz.6.3038 (19285): drop_caches: 2 [ 1662.573871][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.810219][ T5920] usb 2-1: Product: syz [ 1662.815154][ T5920] usb 2-1: Manufacturer: syz [ 1662.819759][ T5920] usb 2-1: SerialNumber: syz [ 1662.852753][ T5920] usb 2-1: config 0 descriptor?? [ 1662.863813][ T5920] usb 2-1: can't set config #0, error -71 [ 1662.878911][ T5920] usb 2-1: USB disconnect, device number 10 [ 1666.198963][T19291] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1667.520227][T19307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1668.197641][T19304] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3045'. [ 1668.240984][T19319] loop5: detected capacity change from 0 to 64 [ 1668.670723][T19326] sp0: Synchronizing with TNC [ 1668.740829][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.747296][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.000548][T19321] [U] è [ 1674.589516][T19348] 9p: Unknown Cache mode or invalid value fsca [ 1675.740670][T19368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1675.920429][T19370] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1676.527543][T19375] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1677.988393][T19385] syz.7.3064 (19385): drop_caches: 2 [ 1677.995764][T19385] syz.7.3064 (19385): drop_caches: 2 [ 1680.989504][T19395] loop7: detected capacity change from 0 to 64 [ 1682.110967][T19403] syz.8.3068 (19403): drop_caches: 2 [ 1682.123176][T19403] syz.8.3068 (19403): drop_caches: 2 [ 1684.849456][T19418] hfsplus: unable to find HFS+ superblock [ 1685.460617][T19427] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3075'. [ 1686.670244][ T9499] Bluetooth: hci3: command 0x0406 tx timeout [ 1688.235485][T19449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1688.926406][T19451] program syz.6.3081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1689.058714][T19456] program syz.6.3081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1689.074275][T19456] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1689.433518][T19458] loop1: detected capacity change from 0 to 64 [ 1689.514668][T19460] fuse: Bad value for 'fd' [ 1689.774613][T19454] JFS: discard option not supported on device [ 1689.780861][T19454] Mount JFS Failure: -22 [ 1689.785109][T19454] jfs_mount failed w/return code = -22 [ 1691.366150][T19470] loop8: detected capacity change from 0 to 64 [ 1692.535328][T19475] program syz.6.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1692.609850][T19476] program syz.6.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1692.670522][T19476] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1692.944264][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1693.695771][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1693.722136][ T5920] usb 2-1: config 0 has no interfaces? [ 1693.750027][ T5920] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=11.66 [ 1693.783524][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.831470][ T5920] usb 2-1: Product: syz [ 1693.846649][ T5920] usb 2-1: Manufacturer: syz [ 1693.865312][ T5920] usb 2-1: SerialNumber: syz [ 1693.951785][ T5920] usb 2-1: config 0 descriptor?? [ 1694.137361][T19494] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1694.210654][T19495] JFS: discard option not supported on device [ 1694.218285][T19495] Mount JFS Failure: -22 [ 1694.222567][T19495] jfs_mount failed w/return code = -22 [ 1695.009438][T19498] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3094'. [ 1696.840506][ T5912] usb 2-1: USB disconnect, device number 11 [ 1697.916126][T19525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1698.525667][T19524] sp0: Synchronizing with TNC [ 1698.543150][T19526] [U] è [ 1699.223832][T19547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1700.412007][T19558] bridge0: port 3(syz_tun) entered blocking state [ 1700.419256][T19558] bridge0: port 3(syz_tun) entered disabled state [ 1700.427006][T19558] syz_tun: entered allmulticast mode [ 1700.446758][T19558] syz_tun: entered promiscuous mode [ 1700.454759][T19558] bridge0: port 3(syz_tun) entered blocking state [ 1700.461283][T19558] bridge0: port 3(syz_tun) entered forwarding state [ 1701.459012][T19570] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3109'. [ 1702.212042][T19572] JFS: discard option not supported on device [ 1702.278378][T19572] Mount JFS Failure: -22 [ 1702.282682][T19572] jfs_mount failed w/return code = -22 [ 1702.905250][T19574] program syz.5.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1703.025839][T19575] program syz.5.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1703.054469][T19575] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1703.316718][T19577] loop7: detected capacity change from 0 to 64 [ 1705.270632][T19595] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3117'. [ 1705.284330][T19595] netlink: 'syz.7.3117': attribute type 10 has an invalid length. [ 1705.292401][T19595] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3117'. [ 1709.189084][T19618] syz.6.3123 (19618): drop_caches: 2 [ 1709.194720][T19618] syz.6.3123 (19618): drop_caches: 2 [ 1709.868077][T19625] sd 0:0:1:0: PR command failed: 1026 [ 1709.951640][T19634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1710.496712][T19625] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1710.651085][T19625] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1710.800003][T19638] syz.6.3128 (19638): drop_caches: 2 [ 1710.810201][T19638] syz.6.3128 (19638): drop_caches: 2 [ 1712.468321][T19646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1718.064856][T19684] loop6: detected capacity change from 0 to 64 [ 1718.103654][T19685] syz.1.3140 (19685): drop_caches: 2 [ 1718.111855][T19685] syz.1.3140 (19685): drop_caches: 2 [ 1719.106186][T19690] program syz.8.3142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1719.310961][T19692] program syz.8.3142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1719.342637][T19692] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1722.694282][T19723] syz.7.3152: attempt to access beyond end of device [ 1722.694282][T19723] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1722.707502][T19723] FAT-fs (loop15): unable to read boot sector [ 1724.655175][T19732] syz.7.3155 (19732): drop_caches: 2 [ 1724.675014][T19732] syz.7.3155 (19732): drop_caches: 2 [ 1725.611192][T19738] IPv6: addrconf: prefix option has invalid lifetime [ 1728.017585][T19747] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1728.901581][T19753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3160'. [ 1729.076992][T19753] netlink: 'syz.6.3160': attribute type 10 has an invalid length. [ 1729.085301][T19753] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3160'. [ 1729.516440][T19761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1730.485046][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.491372][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.915071][T19770] bridge0: port 3(netdevsim0) entered blocking state [ 1730.923270][T19770] bridge0: port 3(netdevsim0) entered disabled state [ 1730.931304][T19770] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1730.951085][T19770] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1730.961559][T19770] bridge0: port 3(netdevsim0) entered blocking state [ 1730.968386][T19770] bridge0: port 3(netdevsim0) entered forwarding state [ 1733.152259][T19794] syz.1.3169 (19794): drop_caches: 2 [ 1733.159430][T19794] syz.1.3169 (19794): drop_caches: 2 [ 1734.075305][T19797] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3168'. [ 1735.733062][T19806] loop1: detected capacity change from 0 to 64 [ 1735.913364][T19807] siw: device registration error -23 [ 1737.292509][T19813] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1738.302523][T19823] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3177'. [ 1739.070591][T19841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1740.974993][T19853] sd 0:0:1:0: PR command failed: 1026 [ 1740.980911][T19853] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1740.987905][T19853] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1742.054371][T15828] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1742.371804][T15828] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1742.441451][T15828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.617819][T15828] usb 8-1: Product: syz [ 1742.622009][T15828] usb 8-1: Manufacturer: syz [ 1743.022563][T19863] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3185'. [ 1743.240688][T15828] usb 8-1: SerialNumber: syz [ 1743.256914][T15828] usb 8-1: config 0 descriptor?? [ 1743.276491][T15828] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1744.036585][T19864] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1744.241763][T15828] usb 8-1: setting power ON [ 1744.254783][T15828] dvb-usb: bulk message failed: -22 (2/0) [ 1744.278735][T15828] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1744.307135][T15828] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1744.395175][T15828] dvb_usb_cxusb 8-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1744.526361][T15828] usb 8-1: USB disconnect, device number 4 [ 1748.515851][T19893] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1748.528265][T19892] IPv6: addrconf: prefix option has invalid lifetime [ 1748.951082][T19900] fuse: Bad value for 'fd' [ 1749.150037][T19903] bridge0: port 3(syz_tun) entered blocking state [ 1749.157170][T19903] bridge0: port 3(syz_tun) entered disabled state [ 1749.164689][T19903] syz_tun: entered allmulticast mode [ 1749.182195][T19903] syz_tun: entered promiscuous mode [ 1749.189982][T19903] bridge0: port 3(syz_tun) entered blocking state [ 1749.196510][T19903] bridge0: port 3(syz_tun) entered forwarding state [ 1750.102609][T19901] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1750.693321][T19912] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1753.814194][ T5845] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1754.564131][ T5845] usb 8-1: Using ep0 maxpacket: 32 [ 1754.694309][ T5845] usb 8-1: config 0 has no interfaces? [ 1755.328048][ T5845] usb 8-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=11.66 [ 1755.369783][T19937] loop8: detected capacity change from 0 to 64 [ 1755.372164][T19935] : entered promiscuous mode [ 1755.381039][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.444424][ T5845] usb 8-1: Product: syz [ 1755.448627][ T5845] usb 8-1: Manufacturer: syz [ 1755.516056][ T5845] usb 8-1: SerialNumber: syz [ 1755.568147][ T5845] usb 8-1: config 0 descriptor?? [ 1758.014352][T18110] usb 8-1: USB disconnect, device number 5 [ 1758.111228][T19954] loop7: detected capacity change from 0 to 64 [ 1759.003525][T19963] JFS: discard option not supported on device [ 1759.013969][T19963] Mount JFS Failure: -22 [ 1759.018308][T19963] jfs_mount failed w/return code = -22 [ 1759.944764][T19968] loop5: detected capacity change from 0 to 64 [ 1760.265479][T19977] syz.1.3217: attempt to access beyond end of device [ 1760.265479][T19977] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1760.278630][T19977] FAT-fs (loop3): unable to read boot sector [ 1761.627013][T19986] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1764.875987][T20010] siw: device registration error -23 [ 1767.229524][T20027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3228'. [ 1769.567915][T20038] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1770.154696][T20043] syz_tun: entered allmulticast mode [ 1770.766421][T20033] syz_tun: left allmulticast mode [ 1774.999031][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1775.259396][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1775.267690][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1775.276190][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1775.294728][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1775.957459][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1776.001883][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1776.022342][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1776.038259][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1776.108991][T20065] netlink: 'syz.7.3240': attribute type 3 has an invalid length. [ 1777.810943][T20082] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1777.830753][T20082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1777.943518][T20089] syz_tun: entered allmulticast mode [ 1778.700053][T20085] syz_tun: left allmulticast mode [ 1784.526199][T20124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1784.614326][T20126] syz.8.3255: attempt to access beyond end of device [ 1784.614326][T20126] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1784.627579][T20126] FAT-fs (loop17): unable to read boot sector [ 1785.185932][T12506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1785.284810][T12506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1785.312346][T12506] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1785.341654][T12506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1785.350246][T12506] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1785.991130][T20127] lo speed is unknown, defaulting to 1000 [ 1786.472163][T20127] chnl_net:caif_netlink_parms(): no params data found [ 1786.624491][T20142] siw: device registration error -23 [ 1787.707841][T12506] Bluetooth: hci5: command tx timeout [ 1788.050443][T20152] syz.8.3261 (20152): drop_caches: 2 [ 1788.066841][T20152] syz.8.3261 (20152): drop_caches: 2 [ 1789.784212][T12506] Bluetooth: hci5: command tx timeout [ 1790.112317][T20023] bridge0: port 3(syz_tun) entered disabled state [ 1790.255770][T20023] syz_tun (unregistering): left allmulticast mode [ 1790.316280][T20023] syz_tun (unregistering): left promiscuous mode [ 1790.322674][T20023] bridge0: port 3(syz_tun) entered disabled state [ 1790.584787][T20159] loop8: detected capacity change from 0 to 64 [ 1791.262420][ T1027] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.326457][T20161] program syz.5.3265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.337131][T20161] program syz.5.3265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.346514][T20161] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1791.355604][ T9499] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1791.364845][ T9499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1791.372599][ T9499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1791.381309][ T9499] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1791.394862][ T9499] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1791.763156][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.765191][T20127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.769524][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.801338][T20127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.846410][T20127] bridge_slave_0: entered allmulticast mode [ 1791.904237][ T9499] Bluetooth: hci5: command tx timeout [ 1792.050628][T20127] bridge_slave_0: entered promiscuous mode [ 1792.056249][T20157] loop1: detected capacity change from 0 to 32768 [ 1792.085921][ T1027] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.220342][T20157] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 1792.220342][T20157] [ 1792.279326][T20157] ERROR: (device loop1): remounting filesystem as read-only [ 1792.297623][T20127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.327061][T20127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.342635][T20127] bridge_slave_1: entered allmulticast mode [ 1792.350944][T20127] bridge_slave_1: entered promiscuous mode [ 1792.606416][ T1027] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.058019][ T1027] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.109191][T20163] lo speed is unknown, defaulting to 1000 [ 1793.117982][T20127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1793.189103][T20127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.464495][ T9499] Bluetooth: hci0: command tx timeout [ 1794.057901][ T9499] Bluetooth: hci5: command tx timeout [ 1794.282307][T20127] team0: Port device team_slave_0 added [ 1794.476891][T20197] option changes via remount are deprecated (pid=20191 comm=syz.8.3273) [ 1794.827866][T20127] team0: Port device team_slave_1 added [ 1795.664515][ T9499] Bluetooth: hci0: command tx timeout [ 1795.794369][T20206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'. [ 1796.054985][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3276'. [ 1796.114534][T20210] validate_nla: 43 callbacks suppressed [ 1796.114573][T20210] netlink: 'syz.8.3276': attribute type 10 has an invalid length. [ 1796.128331][T20210] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3276'. [ 1796.310176][T20127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.440275][T20127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.514843][T20127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.665709][T20127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.823533][T20127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.863729][T20127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1797.188763][ T5965] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1797.644224][ T5965] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1797.653298][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.674891][ T5965] usb 2-1: Product: syz [ 1797.679085][ T5965] usb 2-1: Manufacturer: syz [ 1797.689231][ T5965] usb 2-1: SerialNumber: syz [ 1797.694593][ T9499] Bluetooth: hci0: command tx timeout [ 1797.715561][ T5965] usb 2-1: config 0 descriptor?? [ 1797.728175][ T5965] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1797.737180][ T5965] usb 2-1: setting power ON [ 1797.741696][ T5965] dvb-usb: bulk message failed: -22 (2/0) [ 1797.768723][ T5965] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1797.780270][T20127] hsr_slave_0: entered promiscuous mode [ 1797.787933][T20127] hsr_slave_1: entered promiscuous mode [ 1797.796338][ T5965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1797.805913][T20127] debugfs: 'hsr0' already exists in 'hsr' [ 1797.814232][T20127] Cannot create hsr debugfs directory [ 1797.822262][ T5965] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1798.741705][ T1027] bridge_slave_1: left allmulticast mode [ 1798.748094][ T1027] bridge_slave_1: left promiscuous mode [ 1798.753783][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.781301][ T1027] bridge_slave_0: left allmulticast mode [ 1798.787553][ T1027] bridge_slave_0: left promiscuous mode [ 1798.793228][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.774682][ T9499] Bluetooth: hci0: command tx timeout [ 1800.081817][ T5920] usb 2-1: USB disconnect, device number 12 [ 1800.521971][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.546052][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.561116][ T1027] bond0 (unregistering): Released all slaves [ 1800.783387][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1800.962894][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1801.557620][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1801.590867][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1801.752060][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1803.390712][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1803.463243][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1803.967894][T20270] option changes via remount are deprecated (pid=20264 comm=syz.8.3285) [ 1804.061272][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1804.148041][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1804.168241][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1804.190551][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1804.222670][T20246] netlink: 'syz.5.3281': attribute type 3 has an invalid length. [ 1804.467609][ T1027] : left promiscuous mode [ 1804.989486][T20163] chnl_net:caif_netlink_parms(): no params data found [ 1809.232549][T20328] option changes via remount are deprecated (pid=20318 comm=syz.5.3296) [ 1809.390181][ T1027] hsr_slave_0: left promiscuous mode [ 1809.425812][ T1027] hsr_slave_1: left promiscuous mode [ 1809.599141][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.620601][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.653656][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.674338][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.798764][ T1027] veth1_macvtap: left promiscuous mode [ 1809.807876][ T1027] veth0_macvtap: left promiscuous mode [ 1809.896205][ T1027] veth1_vlan: left promiscuous mode [ 1809.905360][ T1027] veth0_vlan: left promiscuous mode [ 1811.031668][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 1811.069175][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 1811.443167][T20163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.463581][T20163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.471334][T20163] bridge_slave_0: entered allmulticast mode [ 1811.480430][T20163] bridge_slave_0: entered promiscuous mode [ 1811.490068][T20163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.503045][T20163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.517659][T20163] bridge_slave_1: entered allmulticast mode [ 1811.531528][T20163] bridge_slave_1: entered promiscuous mode [ 1811.642877][ T5965] lo speed is unknown, defaulting to 1000 [ 1811.642927][T20344] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3297'. [ 1811.660212][ T5965] infiniband syz2: ib_query_port failed (-19) [ 1813.201551][T20127] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1813.328887][T20163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1813.577544][T20163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1815.944739][T20163] team0: Port device team_slave_0 added [ 1816.003258][T20163] team0: Port device team_slave_1 added [ 1816.079304][T20377] syz.1.3303 (20377): drop_caches: 2 [ 1816.119253][T20127] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1816.345627][T20377] syz.1.3303 (20377): drop_caches: 2 [ 1817.700879][T20127] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1817.717374][T20127] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1817.816869][T20163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.975510][T20163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.274283][T20163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.351591][T20163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.413525][T20163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.514330][T20163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.707809][ T1027] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.939295][T20415] syz.1.3308: attempt to access beyond end of device [ 1818.939295][T20415] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1818.952482][T20415] FAT-fs (loop3): unable to read boot sector [ 1820.157584][ T1027] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.269053][T20163] hsr_slave_0: entered promiscuous mode [ 1820.289300][T20163] hsr_slave_1: entered promiscuous mode [ 1820.309619][T20163] debugfs: 'hsr0' already exists in 'hsr' [ 1820.320534][T20163] Cannot create hsr debugfs directory [ 1820.427545][T20423] siw: device registration error -23 [ 1821.673141][ T1027] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.915053][T20426] validate_nla: 40 callbacks suppressed [ 1821.915071][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1821.944151][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.157050][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.192717][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3315'. [ 1822.808658][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.823934][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.832355][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.840728][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.849123][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.857307][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.868574][T20426] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1822.914951][T20127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1823.015234][ T1027] bridge0: port 3(netdevsim0) entered disabled state [ 1823.042470][ T1027] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode [ 1823.123361][ T1027] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 1823.142141][ T1027] bridge0: port 3(netdevsim0) entered disabled state [ 1823.202033][ T1027] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.549940][T20127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.903900][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.911199][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.259134][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.266312][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1825.111816][ T1027] bridge_slave_1: left allmulticast mode [ 1825.131077][ T1027] bridge_slave_1: left promiscuous mode [ 1825.161528][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.183234][ T1027] bridge_slave_0: left allmulticast mode [ 1825.193119][ T1027] bridge_slave_0: left promiscuous mode [ 1825.200636][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.324463][ T5965] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1825.538275][ T5965] usb 9-1: Using ep0 maxpacket: 8 [ 1825.582030][ T5965] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.601727][ T5965] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1825.632875][ T5965] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1825.698195][ T5965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.750375][ T5965] usb 9-1: config 0 descriptor?? [ 1827.029498][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.057079][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.087808][ T1027] bond0 (unregistering): Released all slaves [ 1827.334012][T20475] program syz.5.3321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1827.365523][T20475] program syz.5.3321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1827.375491][T20475] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1827.797208][ T5845] usb 9-1: USB disconnect, device number 4 [ 1827.828832][ T1027] : left promiscuous mode [ 1833.576474][T20524] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3331'. [ 1835.183684][ T1027] hsr_slave_0: left promiscuous mode [ 1835.712393][ T1027] hsr_slave_1: left promiscuous mode [ 1835.712907][T20538] option changes via remount are deprecated (pid=20532 comm=syz.8.3335) [ 1835.718703][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.740955][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.788350][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.936390][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1836.308006][ T1027] veth1_macvtap: left promiscuous mode [ 1836.313720][ T1027] veth0_macvtap: left promiscuous mode [ 1836.321915][ T1027] veth1_vlan: left promiscuous mode [ 1836.327948][ T1027] veth0_vlan: left promiscuous mode [ 1837.161186][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 1837.201360][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 1837.571203][T20127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1838.071868][T20163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1838.451409][T20562] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3341'. [ 1839.036516][T20163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1839.423926][T20163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1839.500006][T20163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1840.153196][T20127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1841.692994][T20163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.068386][T20598] loop8: detected capacity change from 0 to 64 [ 1842.267004][T20163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.320579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.327767][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.415751][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.422909][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1843.160574][T20617] option changes via remount are deprecated (pid=20612 comm=syz.8.3348) [ 1845.553607][T20163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.275657][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3353'. [ 1847.370422][T12506] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1847.382130][T12506] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1847.390321][T12506] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1847.399055][T12506] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1847.408418][T12506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1849.343959][T20163] veth0_vlan: entered promiscuous mode [ 1849.386490][T20163] veth1_vlan: entered promiscuous mode [ 1849.455059][T20651] Bluetooth: hci2: command tx timeout [ 1849.577243][T20677] option changes via remount are deprecated (pid=20670 comm=syz.5.3358) [ 1851.228495][T20693] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1851.377799][T20163] veth0_macvtap: entered promiscuous mode [ 1851.573761][T20651] Bluetooth: hci2: command tx timeout [ 1853.264197][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.270514][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.564443][T20707] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1853.614433][T20651] Bluetooth: hci2: command tx timeout [ 1854.254249][ T5920] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1854.287076][T20716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3364'. [ 1854.420467][T20648] chnl_net:caif_netlink_parms(): no params data found [ 1854.479224][ T5920] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1854.494254][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.513434][ T56] bridge_slave_1: left allmulticast mode [ 1854.524105][ T5920] usb 9-1: Product: syz [ 1854.528278][ T5920] usb 9-1: Manufacturer: syz [ 1854.553226][ T56] bridge_slave_1: left promiscuous mode [ 1854.553270][ T5920] usb 9-1: SerialNumber: syz [ 1854.568599][T12506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1854.578775][T12506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1854.580081][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.587600][T12506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1854.601728][T12506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1854.609448][T12506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1854.644687][ T5920] usb 9-1: config 0 descriptor?? [ 1854.652683][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1854.663769][ T5920] usb 9-1: setting power ON [ 1854.668487][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 1854.684470][ T56] bridge_slave_0: left allmulticast mode [ 1854.715195][ T5920] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1854.758273][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1854.777753][ T5920] dvb_usb_cxusb 9-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1854.784158][ T56] bridge_slave_0: left promiscuous mode [ 1854.807424][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.694170][T20651] Bluetooth: hci2: command tx timeout [ 1856.678859][T20651] Bluetooth: hci0: command tx timeout [ 1858.263743][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1858.294575][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1858.346677][ T56] bond0 (unregistering): Released all slaves [ 1858.470573][ T5845] usb 9-1: USB disconnect, device number 5 [ 1858.734173][T20651] Bluetooth: hci0: command tx timeout [ 1858.858620][ T56] hsr_slave_0: left promiscuous mode [ 1858.866813][T20736] loop5: detected capacity change from 0 to 64 [ 1858.905271][ T56] hsr_slave_1: left promiscuous mode [ 1858.952197][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1859.629467][T20742] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1859.673660][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1860.455007][T20751] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3373'. [ 1860.814396][T20651] Bluetooth: hci0: command tx timeout [ 1861.154221][ T5920] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1861.495310][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 1861.622302][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.667111][ T5920] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1861.676837][ T5920] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1861.697324][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.749167][ T5920] usb 2-1: config 0 descriptor?? [ 1862.118142][T20761] program syz.8.3374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1862.178013][T20761] program syz.8.3374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1862.187922][T20761] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1862.619634][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1862.683678][T20764] 9pnet_fd: Insufficient options for proto=fd [ 1862.691599][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1862.894195][T20651] Bluetooth: hci0: command tx timeout [ 1864.458987][T15828] usb 2-1: USB disconnect, device number 13 [ 1864.700942][T20648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.719596][T20648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.755771][T20648] bridge_slave_0: entered allmulticast mode [ 1864.778216][T20648] bridge_slave_0: entered promiscuous mode [ 1864.846604][T20648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.860431][T20648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.870665][T20648] bridge_slave_1: entered allmulticast mode [ 1864.881696][T20648] bridge_slave_1: entered promiscuous mode [ 1865.174508][T20648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1865.217566][T20648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1865.413684][T20789] hub 8-0:1.0: USB hub found [ 1865.420479][T20789] hub 8-0:1.0: 1 port detected [ 1866.821570][T20648] team0: Port device team_slave_0 added [ 1866.839749][T20648] team0: Port device team_slave_1 added [ 1867.284672][T20648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.316555][T20648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.347185][T20648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1867.356363][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3382'. [ 1867.362195][T20648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1867.387394][T20648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.444343][T20648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1867.710039][T20802] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3383'. [ 1868.161401][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3384'. [ 1869.936872][T20817] process 'syz.8.3385' launched '/dev/fd/3' with NULL argv: empty string added [ 1870.643245][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'. [ 1871.144538][T20648] hsr_slave_0: entered promiscuous mode [ 1871.153660][T20648] hsr_slave_1: entered promiscuous mode [ 1871.172308][T20648] debugfs: 'hsr0' already exists in 'hsr' [ 1871.182235][T20648] Cannot create hsr debugfs directory [ 1871.209421][T20718] chnl_net:caif_netlink_parms(): no params data found [ 1871.270035][T20827] validate_nla: 44 callbacks suppressed [ 1871.270052][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1871.299208][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1871.307878][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1871.481208][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1872.201826][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1872.211438][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1872.220011][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1872.408696][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1872.503249][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1872.524336][T20827] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 1873.736117][T20856] loop1: detected capacity change from 0 to 64 [ 1874.480127][T20718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.506153][T20718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.553635][T20718] bridge_slave_0: entered allmulticast mode [ 1874.599844][T20718] bridge_slave_0: entered promiscuous mode [ 1874.910888][T20718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.063640][T20718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.133510][T20718] bridge_slave_1: entered allmulticast mode [ 1875.145930][T20718] bridge_slave_1: entered promiscuous mode [ 1875.416906][ T56] bridge_slave_1: left allmulticast mode [ 1875.422757][ T56] bridge_slave_1: left promiscuous mode [ 1875.433376][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.443557][ T56] bridge_slave_0: left allmulticast mode [ 1875.458658][ T56] bridge_slave_0: left promiscuous mode [ 1875.465478][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.763651][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.849354][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.913483][ T56] bond0 (unregistering): Released all slaves [ 1877.095136][T20718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.417115][T20718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.645030][ T56] hsr_slave_0: left promiscuous mode [ 1877.670200][ T56] hsr_slave_1: left promiscuous mode [ 1877.678165][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1877.884927][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1878.618892][ T56] veth0_macvtap: left promiscuous mode [ 1878.634312][ T56] veth1_vlan: left promiscuous mode [ 1878.639647][ T56] veth0_vlan: left promiscuous mode [ 1878.815962][T20899] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3400'. [ 1881.646338][T20906] loop5: detected capacity change from 0 to 64 [ 1881.673970][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1881.765483][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1882.051357][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3406'. [ 1882.900978][T20718] team0: Port device team_slave_0 added [ 1883.103208][T20718] team0: Port device team_slave_1 added [ 1884.359506][T20718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1884.367806][T20718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1884.669159][T20718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1884.699226][T20718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1884.824131][T20718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1884.907384][T20718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1885.527656][T20718] hsr_slave_0: entered promiscuous mode [ 1886.193820][T20718] hsr_slave_1: entered promiscuous mode [ 1886.221188][T20718] debugfs: 'hsr0' already exists in 'hsr' [ 1886.243424][T20718] Cannot create hsr debugfs directory [ 1887.235665][T20955] program syz.5.3415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1887.357740][T20957] program syz.5.3415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1887.385714][T20957] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1888.231246][T20648] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1888.284149][T20648] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1889.497853][T20648] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1889.612499][T20648] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1893.078055][T20987] syz.8.3422 (20987): drop_caches: 2 [ 1893.264162][T20987] syz.8.3422 (20987): drop_caches: 2 [ 1894.269892][T21012] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3426'. [ 1894.663580][T21010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1896.340971][T20648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.352917][T20718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1896.378636][T20718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1896.609957][T20718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1896.643374][T20648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1896.673729][T20718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1896.702860][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.710015][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.895817][T21039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1897.245752][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.252949][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.615525][T21054] hub 8-0:1.0: USB hub found [ 1897.623003][T21054] hub 8-0:1.0: 1 port detected [ 1898.649078][T20718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1899.914254][T21060] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3433'. [ 1900.059994][T21064] hub 8-0:1.0: USB hub found [ 1900.293776][T21064] hub 8-0:1.0: 1 port detected [ 1900.379881][T20718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1900.439996][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1900.447162][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1900.506510][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.513633][ T8049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1900.780366][T20648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1901.442652][T20718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1901.847791][T20648] veth0_vlan: entered promiscuous mode [ 1901.900229][T20648] veth1_vlan: entered promiscuous mode [ 1902.005746][T20648] veth0_macvtap: entered promiscuous mode [ 1902.067606][T20648] veth1_macvtap: entered promiscuous mode [ 1902.117678][T20648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1902.290380][T20648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1902.380906][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.419776][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.432142][T20718] veth0_vlan: entered promiscuous mode [ 1902.450445][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.489220][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.502921][T20718] veth1_vlan: entered promiscuous mode [ 1902.644323][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.660839][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.700832][T20718] veth0_macvtap: entered promiscuous mode [ 1902.726408][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.729555][T20718] veth1_macvtap: entered promiscuous mode [ 1902.740256][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.796207][T20718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1902.819205][T20718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1902.884659][ T6888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.893482][ T6888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.937417][ T6888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.967069][ T1143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.053453][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1903.085659][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1903.179051][ T6888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1903.201396][ T6888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1903.434223][T21122] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3253'. [ 1904.058937][T21128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1914.512002][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.530794][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1972.895856][T12506] Bluetooth: hci2: command 0x0406 tx timeout [ 1975.939520][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.946010][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.014347][T12506] Bluetooth: hci0: command 0x0406 tx timeout [ 2037.378221][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.385628][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.819376][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.825930][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.260175][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.268244][ T1303] ieee802154 phy1 wpan1: encryption failed: -22