last executing test programs: 8.251490358s ago: executing program 1 (id=504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4000000) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000440)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000780)}], 0x1, &(0x7f0000000600)=""/34, 0x22}, 0x1000}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/207, 0xcf}, {&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000900)=""/202, 0xca}, {&(0x7f0000000a00)=""/207, 0xcf}, {&(0x7f0000000ec0)=""/213, 0xd5}, {&(0x7f0000000cc0)=""/134, 0x86}, {&(0x7f00000011c0)=""/228, 0xe4}, {&(0x7f00000012c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000001480)=""/4096, 0x1000}], 0xa, &(0x7f00000005c0)=""/64, 0x40}, 0x4008}, {{&(0x7f0000002540)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000025c0)=""/69, 0x45}, {&(0x7f0000002640)=""/248, 0xf8}, {&(0x7f0000002740)=""/153, 0x99}, {&(0x7f0000002800)=""/143, 0x8f}, {&(0x7f0000000c40)=""/74, 0x4a}], 0x5}, 0x3ff}, {{&(0x7f0000000b00), 0x80, &(0x7f0000004080)=[{&(0x7f0000000b80)=""/39, 0x27}, {&(0x7f0000000bc0)=""/73, 0x49}, {&(0x7f0000000fc0)=""/197, 0xc5}, {&(0x7f00000010c0)=""/23, 0x17}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/234, 0xea}], 0x6, &(0x7f00000040c0)=""/57, 0x39}, 0x5}, {{&(0x7f0000004100)=@phonet, 0x80, &(0x7f0000004680)=[{&(0x7f0000004180)=""/218, 0xda}, {&(0x7f0000004280)=""/197, 0xc5}, {&(0x7f0000004380)=""/29, 0x1d}, {&(0x7f00000043c0)=""/156, 0x9c}, {&(0x7f0000004480)=""/197, 0xc5}, {&(0x7f0000004580)=""/200, 0xc8}], 0x6, &(0x7f00000046c0)=""/99, 0x63}, 0x3}, {{&(0x7f0000004740)=@sco, 0x80, &(0x7f0000004800)=[{&(0x7f00000047c0)=""/10, 0xa}], 0x1, &(0x7f0000004840)=""/31, 0x1f}, 0x9c}], 0x6, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0000006800010000000000000000000a00000000000000000400009c5ebfb4ee4d9bb667c085a5351fb9907d6fecb7d0549b88313a255808066f3bd1f90c6bb36b6b644dcf7bce17209d23cda4caa96671a5aa491c55a88b8928ce089dfcdd3868d47d281d1ef47267e7d9271ddddbf9edcddee3bd26e32fff417099f87d1bddac4f8fcb44b05c790fc8b578cc1491490b1ea73e974e947b2cd4e927f084b1e96c6f8a3aa7ae3d165a2fc5378fc0108795ac6e9577dc8b9156234d21b7bac26402a584ee537cd00977fb9f7c2fd6cec6c1fc0847ef64c841c3b6321e8292d864ddaad9f4c5d49933423153cd8158bb66bfa518eefcdb3111c96f1ad94d00"/270], 0x1c}, 0x1, 0x0, 0x0, 0x2004c885}, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r4) r5 = socket(0x10, 0xa, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x4e24, 0x8, @mcast2, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="030000000a004e230000000cff01000000000000b8dbc961688854c44113e2c4a021e98200001320ab0e0000000000000000000000000000ff01000000000000338037accb2164968549ea61acc40d3eebb9e7caf457011eb8af82c1a465d89f56b5dce5a112d9766dfbb8abfd4e7bac74a5a3240bf945d6ea895adb8d33fef536ee297dc7a3376cd975c3a73b13dbdf283eae8e8971f35fde22f40d7aa22436d0b43b9cfcb0db3301d2fbe2dcc396e52c597d47c1a14dc3"], 0x210) syz_usb_connect(0x3, 0x41e, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0xfffffffffffffffe) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x2840a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8804) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101402, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 7.579267046s ago: executing program 1 (id=511): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000500000008000b400000000054000480500001800800010066776400440002800800014000000011080001400000000b0800014000000010080001400000001308000340000000020800014020000017080002400000001008000340000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x420101, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64=0x3], 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) 7.404323209s ago: executing program 1 (id=513): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a0a0162290200000000f8ffffffffffffff"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/206, 0xce, 0x4) setitimer(0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002500)='/dev/comedi1\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'amplc_pc236\x00', [0x83fb, 0x5, 0x29, 0x2, 0x1, 0x8000cc9, 0x200, 0x8d, 0x800, 0x0, 0x82, 0xa, 0x1, 0x1, 0x9, 0x82, 0x6, 0x1a449, 0x8000009, 0x6, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3d, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003d00010325007000fcffffff23000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r6 = socket$pppoe(0x18, 0x1, 0x0) syncfs(r6) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000001340)=0x1) 5.691282769s ago: executing program 1 (id=522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x9, 0xa9d0000, 0xffff, {0xa, 0x9}, 0x9, 0x10001}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) 5.677770797s ago: executing program 1 (id=523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000300000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300"], 0x34c}}, 0x0) 5.611305158s ago: executing program 3 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r1, 0xfffffffffffffffe, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000068b0a69aa6638b0d3069e9f5db0845113500090300000000000000000a00030000020000000004000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000000)=""/138, &(0x7f00000000c0)=0x8a) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r7, 0x2004, 0x0) fdatasync(0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 5.611123576s ago: executing program 1 (id=526): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x101600, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf587000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000300)={{0x2, 0x3, 0x101, 0x9, '\x00', 0x1}, 0x3, 0x100, 0x8, r0, 0x0, 0x3b6, 'syz0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ab8000/0x1000)=nil, 0x1000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x0, 0x27fc, 0x0, 0x0, 0x4e, 0x1, 0x3}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 4.541919551s ago: executing program 3 (id=530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x40, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefe, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7ffb, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0xfffffffc, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x8000, 0x10, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0x102, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x8, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0x0, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb53, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x400004, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x5, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0xffffffff, 0xf, 0xe68, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x5, 0x3, 0x6, 0xaaeb, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xffffff80, 0x5, 0x938, 0x6, 0xa, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0x7fff, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0xc, 0x1, 0x6, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0x2f, 0xfffff000, 0xffff, 0x3, 0x7f, 0x7, 0x9606, 0x7, 0xfffffffe, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x2000001, 0x6c1b, 0x80000002, 0x4, 0xb0b2747, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x40800) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) close(r1) 4.169711168s ago: executing program 2 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="cf042c9d7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000500c200820000000800a400030000"], 0xa0}, 0x1, 0x0, 0xfffff000, 0x24008091}, 0x0) 4.049286669s ago: executing program 2 (id=532): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 3.181934808s ago: executing program 2 (id=534): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) statx(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f0000006180)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="842a356285f573b6fd6ae668819f3062f33a8ca9f7", 0x15}], 0x1, &(0x7f0000002640)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r0, r4, r6}}}, @cred={{0x18, 0x1, 0x2, {r0, r7, r8}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r0, r9, r10}}}], 0x68, 0x80}}], 0x1, 0x8854) ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000006200)={&(0x7f0000000040)='\x00', &(0x7f00000061c0)='!{\x00', 0x1546}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r11 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x105a, 0x20200) ioctl$FE_SET_FRONTEND(r11, 0x40246f4c, &(0x7f0000006240)={0x4, 0x2, @ofdm={0x3, 0xf, 0x7, 0x13, 0x5, 0x0, 0x2}}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2710, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) 1.956472676s ago: executing program 3 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r1, 0xfffffffffffffffe, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000068b0a69aa6638b0d3069e9f5db0845113500090300000000000000000a00030000020000000004000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) syz_emit_ethernet(0x157, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/138, &(0x7f00000000c0)=0x8a) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) fdatasync(0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 1.72089914s ago: executing program 2 (id=538): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94f07134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) 1.412892526s ago: executing program 2 (id=539): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.412534529s ago: executing program 3 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000003cfdcb00000080ed00827600000000003f00", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xa888}], 0x2}, 0x5) 1.396329238s ago: executing program 0 (id=541): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000880)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x5, @empty}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000500000008000b400000000054000480500001800800010066776400440002800800014000000011080001400000000b0800014000000010080001400000001308000340000000020800014020000017080002400000001008000340000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x420101, 0x0) shutdown(r6, 0x1) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64=0x3], 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 969.063342ms ago: executing program 3 (id=542): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 200.777231ms ago: executing program 0 (id=543): r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0x113081, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f00000002c0)={0x51, 0x0, 0x3, 0x7, &(0x7f0000000040)="e4748fa48fee3e", 0xf, 0x0, 0xe, 0x8, 0x60, &(0x7f0000000080), 0x0, 0x54, 0x0, 0x7c, &(0x7f0000000100)="933594957ebf03ad606923be145aab7476a07d51a921c2d8dbfaac707332bad3a427edd479101abd1f02340fe6e8a72b00f2c53b160c46a607d6237ff9dd53cd611878b949e17e35c99c2f44e221dc6af1f49a09", &(0x7f0000000180)=""/124, 0x8001, 0x10, &(0x7f0000000200)="f2bea80e3bc472aece37b1316e87b5c07ef673ca2745cc5436aada41a5a66bfd3b7e99c3b9f804d7c27708647bd6c2330715cb0babd6e1a618c0e1cd5e7a21404bf4fe398198717d30d3a19a1e6dffd3f5ea73af9edd68d022e354472e9511febd578fbb342cbf77f8504c09343c754a15e15be9659926a8c4aadc169d8219329e6d769fa4edc6", 0x7}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = landlock_create_ruleset(&(0x7f0000000380)={0x680, 0x1, 0x2}, 0x18, 0x2) landlock_restrict_self(r1, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f00000003c0), 0xaca00) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000400)) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000580)={&(0x7f0000000480)=[{0x0, 0x1, 0x0, {0x0, 0x3, 0x1}}, {0xf, 0x0, 0x0, {0xd}}, {0x6, 0x1, 0x0, {0xffff, 0x6, 0x1}}, {0xfffffffffffffffa, 0x0, 0x0, {0x8000000000000000, 0x1}}, {0x5, 0x2, 0x0, {0x6, 0x10, 0x2}}, {0xffffffffffff4d6f, 0x1, 0x0, {0x5, 0xffffffff, 0x2}}, {0x80, 0x2, 0x0, {0x3, 0x5, 0x2}}], 0x7, 0x20, 0xcc5, 0x92}) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000600)=""/12, &(0x7f0000000640)=""/166, &(0x7f0000000700)=""/96, 0x40000}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000007c0)={"8c7b6b98fafadc242a694015ffa28440472297757910b968e7ab97f8d94714ac", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000a40)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000a80)={0x6, 'veth1_vlan\x00', {0x8}, 0x2}) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000ac0)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r6 = openat$btrfs_control(0xffffff9c, &(0x7f0000000b00), 0x341000, 0x0) bind$alg(r6, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-ce\x00'}, 0x58) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c00), r6) r8 = openat(r6, &(0x7f0000000c40)='./file0\x00', 0x0, 0x1) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x74, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r6) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x404, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x400c586e, &(0x7f0000000ec0)={0x98, 0x7}) connect$inet(r6, &(0x7f0000000f00)={0x2, 0x4e22, @loopback}, 0x10) read$FUSE(r8, &(0x7f0000000f40)={0x2020, 0x0, 0x0}, 0x2020) r11 = gettid() write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002f80)={0x28, 0x0, r10, {{0x3f0, 0x8, 0x0, r11}}}, 0x28) 141.090222ms ago: executing program 0 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="0c009900010001803400000004007d80"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48002) 111.600169ms ago: executing program 0 (id=545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0215f9f407000904ff80000000fe00ec00000200000800040001000100", 0x24) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) splice(r3, 0x0, r1, 0x0, 0x40010003, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 64.264619ms ago: executing program 2 (id=546): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x4, 0x2}]}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) 63.812643ms ago: executing program 3 (id=547): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.748961ms ago: executing program 0 (id=548): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) (async) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) r1 = socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) (async) r3 = getpgid(0x0) sendmmsg$unix(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x18, 0x1, 0x2, {r3}}}], 0x18, 0x14}}], 0x2, 0x400c041) (async) sendmmsg$unix(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x18, 0x1, 0x2, {r3}}}], 0x18, 0x14}}], 0x2, 0x400c041) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)={0x29c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x898, 0x39}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x118, 0x7f, [@fast_bss_trans={0x37, 0x69, {0x0, 0x3, "6cd5ccfcd63eb27cf0e50c60327613f6", "185e74be2e1ba42516696f4cd50a5f1064102bcffacff92f5b0602450a0a30a2", "22d08025b6cb75c3e93337e976d68fd1192892858178c41396269e1e3014a2a1", [{0x1, 0x6, "827ee29b1e3b"}, {0x3, 0x6, "4291d09752cc"}, {0x4, 0x5, "9d51f09f2b"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @dsss={0x3, 0x1, 0xac}, @random_vendor={0xdd, 0x8a, "f18fbd86ca942914c425e641b6488efc8d44aa9e7a36b4bd81665654dc81e7b52d7a5c052701728a619540db5968eabad7a1bacab421063123a47dd70a971049c40c018f1e2a0b3d86b4ecc619edc80e8473d7f1e098bcdaa419bd5a86c9a6caa108606d0844f502bcc3722724414f45338ae0d9e0da0b9409c6295d7a6c6772094d6f4a0dc272ab8ba8"}, @rann={0x7e, 0x15, {{0x1, 0x78}, 0x55, 0x5, @device_a, 0x5, 0x0, 0xfffffffd}}]}, @NL80211_ATTR_IE={0x30, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x0, 0x0, {0x8, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x4, 0x6}}, @cf={0x4, 0x6, {0x1, 0xb, 0x1, 0xfffb}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x12, 0x7f, [@gcr_ga={0xbd, 0x6}, @supported_rates={0x1, 0x4, [{0x3}, {0x16, 0x1}, {0x30}, {0x9, 0x1}]}]}, @NL80211_ATTR_BEACON_TAIL={0x11e, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x9, @device_b, 0xe, @value, 0x5, 0x1, @device_a, 0x6}}, @mesh_chsw={0x76, 0x6, {0x1, 0x8, 0x41, 0x8}}, @fast_bss_trans={0x37, 0xd9, {0x1, 0x6, "78b0a323d89a354f6aa88db915ec75c4", "1e79e90c444b76c84b9d0fff29438d37df4fe295e74b59208ba0a2e3fcb494be", "f40bbbdcf99a5ffa96035983c4740a264a8fa5adcd56670061ab65e920056ea9", [{0x1, 0xb, "fcd7b12b99374fb9bdd9f4"}, {0x4, 0x11, "8b34ab1fbf4aad1482c1ee77c8bd46115d"}, {0x1, 0x17, "4f44d29534477bd8cfb24525756ef323925827525bc1c5"}, {0x4, 0x1f, "5eec7f846be20591f4f2730a005bb3cb82f63dd171d1090c0c23c9124c42b3"}, {0x4, 0x12, "60b2b1c6a87e4ac24c708d174efa728bc5cf"}, {0x4, 0x17, "eb6b37c9e285f9d9b66c79a6b7a8a227cb8bebd40fb2ad"}]}}, @sec_chan_ofs={0x3e, 0x1}, @ibss={0x6, 0x2, 0xd}, @peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000200001304"], 0x0, 0x4a}, 0x28) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) 0s ago: executing program 0 (id=549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1a}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000300)="a1", 0x1}], 0x1}}], 0x1, 0x200400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000ec7b6cfc635d0b0ad7017c9d184f843485ad6b0c66e46b4f2b2b3338ded465cc7a55d2a736fbe5caf56af30d84e957c1aff67f265538b2c9243391e98bd0d49249e784ec5865bec706d0ffcc9ee36f168460645fc9b9cbc6444f578ed1a652063ccaf386202986098ad022d4f06ff51960d8c526db848130817a8f2ad3580e6e80bada6adb489c66ee82b00b9777dbaab08233e404107ab405d1056190224cb200"/178, @ANYRES16=r2, @ANYBLOB="0d030000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000070000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:28450' (ED25519) to the list of known hosts. [ 59.053493][ T5712] cgroup: Unknown subsys name 'net' [ 59.206196][ T5712] cgroup: Unknown subsys name 'cpuset' [ 59.213006][ T5712] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.560244][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.271765][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.278587][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.283036][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.286794][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.293631][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.297143][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.302495][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.306728][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.307823][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.310903][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.314288][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.318486][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.321417][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.323353][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.328136][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.331124][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.335571][ T5761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.342628][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.345282][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.353845][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.217026][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.223978][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.227379][ T5747] bridge_slave_0: entered allmulticast mode [ 67.231230][ T5747] bridge_slave_0: entered promiscuous mode [ 67.255261][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.258478][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.261738][ T5747] bridge_slave_1: entered allmulticast mode [ 67.265739][ T5747] bridge_slave_1: entered promiscuous mode [ 67.280666][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.283848][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.287008][ T5744] bridge_slave_0: entered allmulticast mode [ 67.291138][ T5744] bridge_slave_0: entered promiscuous mode [ 67.350337][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.354262][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.357519][ T5744] bridge_slave_1: entered allmulticast mode [ 67.361575][ T5744] bridge_slave_1: entered promiscuous mode [ 67.399371][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.422182][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.425483][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.428775][ T5755] bridge_slave_0: entered allmulticast mode [ 67.432868][ T5755] bridge_slave_0: entered promiscuous mode [ 67.437489][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.440704][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.443801][ T5755] bridge_slave_1: entered allmulticast mode [ 67.447674][ T5755] bridge_slave_1: entered promiscuous mode [ 67.453471][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.469774][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.473847][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.477882][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.481514][ T5751] bridge_slave_0: entered allmulticast mode [ 67.485752][ T5751] bridge_slave_0: entered promiscuous mode [ 67.512474][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.516592][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.520255][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.523643][ T5751] bridge_slave_1: entered allmulticast mode [ 67.527767][ T5751] bridge_slave_1: entered promiscuous mode [ 67.533351][ T5747] team0: Port device team_slave_0 added [ 67.539129][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.545699][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.582753][ T5744] team0: Port device team_slave_0 added [ 67.587029][ T5747] team0: Port device team_slave_1 added [ 67.620776][ T5744] team0: Port device team_slave_1 added [ 67.639504][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.642006][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.651091][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.657379][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.672725][ T5755] team0: Port device team_slave_0 added [ 67.675643][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.678333][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.688772][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.695720][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.712752][ T5755] team0: Port device team_slave_1 added [ 67.729783][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.732882][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.744141][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.777793][ T5751] team0: Port device team_slave_0 added [ 67.780967][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.783948][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.794924][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.800424][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.803189][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.812836][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.827056][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.830133][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.840880][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.846807][ T5751] team0: Port device team_slave_1 added [ 67.895438][ T5747] hsr_slave_0: entered promiscuous mode [ 67.898659][ T5747] hsr_slave_1: entered promiscuous mode [ 67.932165][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.934637][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.943632][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.963113][ T5744] hsr_slave_0: entered promiscuous mode [ 67.966452][ T5744] hsr_slave_1: entered promiscuous mode [ 67.969669][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 67.972744][ T5744] Cannot create hsr debugfs directory [ 67.985156][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.987612][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.997254][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.029167][ T5755] hsr_slave_0: entered promiscuous mode [ 68.032542][ T5755] hsr_slave_1: entered promiscuous mode [ 68.035539][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 68.038000][ T5755] Cannot create hsr debugfs directory [ 68.136514][ T5751] hsr_slave_0: entered promiscuous mode [ 68.138932][ T5751] hsr_slave_1: entered promiscuous mode [ 68.141054][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 68.143074][ T5751] Cannot create hsr debugfs directory [ 68.359728][ T5100] Bluetooth: hci2: command tx timeout [ 68.359735][ T5761] Bluetooth: hci0: command tx timeout [ 68.362452][ T5746] Bluetooth: hci1: command tx timeout [ 68.409535][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.419390][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.422972][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.430388][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.437319][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.445076][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.448393][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.451433][ T5761] Bluetooth: hci3: command tx timeout [ 68.457917][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.520173][ T5755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.525228][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.528423][ T5755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.537183][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.542719][ T5755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.548920][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.567761][ T5755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.574143][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.633301][ T5751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.642516][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.646934][ T5751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.653394][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.657240][ T5751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.662945][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.666668][ T5751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.673470][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.750443][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.755793][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.763307][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.768692][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.775983][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.782607][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.787316][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.791918][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.811134][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.845045][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.853925][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.870659][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.874132][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.896684][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.899936][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.913308][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.941463][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.944589][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.964844][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.967843][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.987340][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.046542][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.065454][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.068660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.084982][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.097334][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.100184][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.114387][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.124609][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.127620][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.137729][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.140807][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.433216][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.439339][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.506711][ T5747] veth0_vlan: entered promiscuous mode [ 69.516519][ T5755] veth0_vlan: entered promiscuous mode [ 69.521987][ T5747] veth1_vlan: entered promiscuous mode [ 69.533358][ T5755] veth1_vlan: entered promiscuous mode [ 69.542633][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.555927][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.582093][ T5747] veth0_macvtap: entered promiscuous mode [ 69.595864][ T5747] veth1_macvtap: entered promiscuous mode [ 69.626236][ T5755] veth0_macvtap: entered promiscuous mode [ 69.641408][ T5755] veth1_macvtap: entered promiscuous mode [ 69.650258][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.671128][ T5744] veth0_vlan: entered promiscuous mode [ 69.674484][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.694640][ T5744] veth1_vlan: entered promiscuous mode [ 69.697653][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.701697][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.706709][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.722823][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.727212][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.734438][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.739826][ T5751] veth0_vlan: entered promiscuous mode [ 69.762055][ T5751] veth1_vlan: entered promiscuous mode [ 69.766929][ T102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.772212][ T102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.790389][ T102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.794249][ T102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.857598][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.864888][ T5744] veth0_macvtap: entered promiscuous mode [ 69.864945][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.889452][ T5744] veth1_macvtap: entered promiscuous mode [ 69.896246][ T5751] veth0_macvtap: entered promiscuous mode [ 69.913532][ T5751] veth1_macvtap: entered promiscuous mode [ 69.920426][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.923208][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.943682][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.950498][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.955285][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.970023][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.980956][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.996822][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.007041][ T1179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.010779][ T1179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.016142][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.027669][ T1179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.031784][ T1179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.046045][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.049790][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.054826][ T102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.059374][ T102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.069506][ T102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x95000) [ 70.093738][ T102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.121464][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 70.130180][ T1128] ata1: failed to read log page 10h (errno=-5) [ 70.147624][ T1128] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 70.159032][ T1128] ata1.00: irq_stat 0x41000008 [ 70.164634][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 70.170707][ T1128] ata1.00: cmd 60/a8:70:ae:84:03/04:00:00:00:00/40 tag 14 ncq dma 610304 in [ 70.170707][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 70.180557][ T1128] ata1.00: status: { DRDY } [ 70.182485][ T1128] ata1.00: error: { ABRT } [ 70.187017][ T1128] ata1.00: configured for UDMA/100 [ 70.192113][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.204339][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 70.214575][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 70.218003][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 84 ae 00 04 a8 00 [ 70.221255][ T1128] I/O error, dev sda, sector 230574 op 0x0:(READ) flags 0x80700 phys_seg 136 prio class 2 [ 70.225644][ T1128] ata1: EH complete [ 70.280656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.289915][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.339711][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.353290][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.383698][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.387123][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.403409][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.411479][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.444755][ T5761] Bluetooth: hci0: command tx timeout [ 70.448009][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.448979][ T5100] Bluetooth: hci2: command tx timeout [ 70.453895][ T5100] Bluetooth: hci1: command tx timeout [ 70.457110][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.461782][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.528943][ T5100] Bluetooth: hci3: command tx timeout [ 70.731911][ T5905] pimreg: entered allmulticast mode [ 70.751826][ T5904] pimreg: left allmulticast mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc5000) [ 71.251363][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 71.258154][ T1128] ata1: failed to read log page 10h (errno=-5) [ 71.268657][ T1128] ata1.00: NCQ disabled due to excessive errors [ 71.275063][ T1128] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 71.280966][ T1128] ata1.00: irq_stat 0x41000000 [ 71.288188][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 71.293124][ T1128] ata1.00: cmd 61/28:70:36:01:08/06:00:00:00:00/40 tag 14 ncq dma 806912 out [ 71.293124][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 71.322215][ T1128] ata1.00: status: { DRDY } [ 71.324297][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 71.332815][ T1128] ata1.00: cmd 61/40:78:5e:07:08/03:00:00:00:00/40 tag 15 ncq dma 425984 out [ 71.332815][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 71.349788][ T1128] ata1.00: status: { DRDY } [ 71.352690][ T1128] ata1.00: configured for UDMA/100 [ 71.356994][ T1128] ata1: EH complete [ 71.369314][ T3261] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.715172][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 71.742229][ T3261] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.814189][ T3261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.865173][ T3261] usb 8-1: Product: syz [ 71.889887][ T3261] usb 8-1: Manufacturer: syz [ 71.948378][ T3261] usb 8-1: SerialNumber: syz [ 72.331585][ T3261] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.650875][ T5100] Bluetooth: hci0: command tx timeout [ 72.655016][ T5100] Bluetooth: hci1: command tx timeout [ 72.666035][ T5100] Bluetooth: hci2: command tx timeout [ 72.668695][ T5100] Bluetooth: hci3: command tx timeout [ 72.793583][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.359768][ T5939] vlan2: entered allmulticast mode [ 73.368178][ T5939] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 74.360112][ T9] usb 8-1: Service connection timeout for: 256 [ 74.364352][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 74.437886][ T9] ath9k_htc: Failed to initialize the device [ 74.482402][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 74.628252][ T3261] usb 8-1: USB disconnect, device number 2 [ 74.689035][ T5746] Bluetooth: hci3: command tx timeout [ 74.689117][ T5100] Bluetooth: hci2: command tx timeout [ 74.691321][ T5746] Bluetooth: hci1: command tx timeout [ 74.691348][ T5746] Bluetooth: hci0: command tx timeout [ 75.027055][ T5972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'. [ 75.048439][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 75.086311][ T5972] process 'syz.2.19' launched './file0' with NULL argv: empty string added [ 75.116734][ T5974] netlink: 'syz.3.20': attribute type 12 has an invalid length. [ 75.392655][ T5981] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure [ 76.443340][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.447414][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 80.277663][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 80.788732][ T40] audit: type=1326 audit(1778607240.675:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.801035][ T40] audit: type=1326 audit(1778607240.685:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.810581][ T40] audit: type=1326 audit(1778607240.695:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.823469][ T40] audit: type=1326 audit(1778607240.695:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.837339][ T40] audit: type=1326 audit(1778607240.695:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.852390][ T40] audit: type=1326 audit(1778607240.745:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.862728][ T40] audit: type=1326 audit(1778607240.745:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.872138][ T40] audit: type=1326 audit(1778607240.745:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.881244][ T40] audit: type=1326 audit(1778607240.745:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 80.894443][ T40] audit: type=1326 audit(1778607240.745:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 81.116650][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.122120][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.150991][ T6004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.154522][ T6004] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.170168][ T6004] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.176150][ T6004] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.179797][ T6004] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.185512][ T6004] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.230897][ T6004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.234666][ T6004] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.244460][ T6004] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.291505][ T6004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.294324][ T6004] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.296950][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.306266][ T6004] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.307310][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.591212][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.595141][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.601022][ T1179] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.606075][ T1179] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.642253][ T1179] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.651878][ T1179] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.682889][ T6028] syzkaller0: entered promiscuous mode [ 81.685687][ T6028] syzkaller0: entered allmulticast mode [ 81.696487][ T6038] tipc: Started in network mode [ 81.697152][ T6028] 0: reclassify loop, rule prio 0, protocol 800 [ 81.698872][ T6038] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 81.699508][ T6038] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 81.710399][ T6038] tipc: Enabled bearer , priority 10 [ 81.801562][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 81.939316][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 81.943666][ T6053] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 81.951369][ T6053] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 81.953533][ T6050] vlan2: entered allmulticast mode [ 81.956879][ T6050] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 81.980694][ T29] IPVS: starting estimator thread 0... [ 82.079372][ T6054] IPVS: using max 27 ests per chain, 64800 per kthread [ 82.099327][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 82.120521][ T6060] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 82.343058][ T53] usb 8-1: device descriptor read/64, error -71 [ 82.441270][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.718901][ T3261] tipc: Node number set to 1 [ 83.249057][ T5100] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.251112][ T5761] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.318992][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.438975][ T53] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.568928][ T53] usb 8-1: device descriptor read/64, error -71 [ 83.681172][ T53] usb usb8-port1: attempt power cycle [ 84.018995][ T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 84.041230][ T53] usb 8-1: device descriptor read/8, error -71 [ 84.084338][ T6071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.44'. [ 84.278905][ T53] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.299905][ T53] usb 8-1: device descriptor read/8, error -71 [ 84.411227][ T53] usb usb8-port1: unable to enumerate USB device [ 84.530011][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.704776][ T6080] blktrace: Concurrent blktraces are not allowed on loop1 [ 84.710804][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 84.714764][ T6080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.46'. [ 84.999000][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 85.150294][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 85.154575][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.158582][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.163352][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.167665][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.171557][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.176146][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.181271][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.185675][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.190474][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.194959][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.199143][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.203752][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.208182][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.212443][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.216684][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.221164][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.225131][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.230611][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.234897][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.240997][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.248549][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.254387][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.258655][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.265499][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.270841][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 85.275247][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 85.280336][ T24] usb 7-1: Product: syz [ 85.282288][ T24] usb 7-1: Manufacturer: syz [ 85.284318][ T24] usb 7-1: SerialNumber: syz [ 85.297318][ T24] usb 7-1: config 0 descriptor?? [ 85.318991][ T5761] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.319022][ T5100] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.329863][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 85.399493][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.599134][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.295971][ T6093] fuse: Bad value for 'fd' [ 87.311996][ T5761] block nbd0: Receive control failed (result -32) [ 87.399158][ T5100] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.401660][ T5761] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.480630][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.556595][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 87.582329][ T34] usb 7-1: USB disconnect, device number 2 [ 87.596018][ T34] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 87.616941][ T6097] nbd: nbd0 already in use [ 87.623522][ T6097] block nbd0: NBD_DISCONNECT [ 87.629639][ T6097] block nbd0: Send disconnect failed -32 [ 87.636235][ T6097] block nbd0: shutting down sockets [ 87.686392][ T6103] netlink: 10184 bytes leftover after parsing attributes in process `syz.2.53'. [ 87.690924][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.53'. [ 87.696688][ T6103] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.53'. [ 87.706361][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'. [ 88.442919][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 88.459683][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 89.395288][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 91.873010][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 92.377580][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 92.745947][ T1036] cfg80211: failed to load regulatory.db [ 92.866919][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 92.891952][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 93.116489][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 94.570133][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 95.114062][ T6185] blktrace: Concurrent blktraces are not allowed on loop1 [ 95.117927][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 95.121731][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.74'. [ 95.904542][ T6196] qnx6: unable to read the first superblock [ 96.676028][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 96.681495][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 97.071902][ T6202] Zero length message leads to an empty skb [ 98.403431][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.408067][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.454330][ T40] kauditd_printk_skb: 208 callbacks suppressed [ 98.454347][ T40] audit: type=1804 audit(1778607258.345:220): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.82" name="bus" dev="ramfs" ino=10654 res=1 errno=0 [ 98.486891][ T40] audit: type=1804 audit(1778607258.355:221): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.82" name="bus" dev="ramfs" ino=10654 res=1 errno=0 [ 98.503176][ T6223] ======================================================= [ 98.503176][ T6223] WARNING: The mand mount option has been deprecated and [ 98.503176][ T6223] and is ignored by this kernel. Remove the mand [ 98.503176][ T6223] option from the mount to silence this warning. [ 98.503176][ T6223] ======================================================= [ 98.524790][ T6223] binder: Unknown parameter 'stats>global' [ 99.219879][ T6231] blktrace: Concurrent blktraces are not allowed on loop1 [ 99.226097][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 99.230663][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.86'. [ 100.174314][ T6248] netlink: 'syz.0.92': attribute type 10 has an invalid length. [ 100.181037][ T6248] netlink: 228 bytes leftover after parsing attributes in process `syz.0.92'. [ 100.245748][ T6249] loop5: detected capacity change from 0 to 7 [ 100.262751][ T6249] Dev loop5: unable to read RDB block 7 [ 100.268337][ T6249] loop5: AHDI p1 [ 100.275130][ T6249] loop5: partition table partially beyond EOD, truncated [ 101.144518][ T6274] ntfs3(sr0): Primary boot signature is not NTFS. [ 101.148332][ T6274] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 101.366457][ T6289] lo speed is unknown, defaulting to 1000 [ 101.369906][ T6289] lo speed is unknown, defaulting to 1000 [ 101.397823][ T6289] lo speed is unknown, defaulting to 1000 [ 101.458479][ T6289] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 101.466898][ T6289] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 101.476488][ T6289] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 101.499362][ T6289] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.543797][ T6289] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.684970][ T6289] lo speed is unknown, defaulting to 1000 [ 101.712280][ T6289] lo speed is unknown, defaulting to 1000 [ 101.734015][ T6289] lo speed is unknown, defaulting to 1000 [ 101.766769][ T6289] lo speed is unknown, defaulting to 1000 [ 102.477416][ T6306] lo speed is unknown, defaulting to 1000 [ 102.503542][ T6309] tipc: Enabling of bearer rejected, failed to enable media [ 102.649956][ T6323] tipc: Started in network mode [ 102.653381][ T6323] tipc: Node identity b694ae36b669, cluster identity 4711 [ 102.657357][ T6323] tipc: Enabled bearer , priority 0 [ 102.684275][ T6323] tipc: Resetting bearer [ 102.690753][ T6323] syz.0.109 uses obsolete (PF_INET,SOCK_PACKET) [ 102.700423][ T6322] tipc: Disabling bearer [ 102.879047][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.955927][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 103.029915][ T58] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 103.034776][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.039113][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.044356][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.048731][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.055119][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.061335][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.065690][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.071177][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.077417][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.082450][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.086948][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.092007][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.096703][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.101526][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.106610][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.111017][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.115221][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.120832][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.126130][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.131155][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.136079][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.147425][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.152971][ T58] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.165172][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.181115][ T58] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.181145][ T58] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.181162][ T58] usb 6-1: Product: syz [ 103.181176][ T58] usb 6-1: Manufacturer: syz [ 103.181189][ T58] usb 6-1: SerialNumber: syz [ 103.183782][ T58] usb 6-1: config 0 descriptor?? [ 103.193203][ T58] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 103.867218][ T6364] netlink: 'syz.2.119': attribute type 3 has an invalid length. [ 104.503151][ T6374] syzkaller0: entered promiscuous mode [ 104.505970][ T6374] syzkaller0: entered allmulticast mode [ 104.515197][ T6374] 0: reclassify loop, rule prio 0, protocol 800 [ 105.000956][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 105.386078][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 105.489155][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 105.496748][ T34] usb 6-1: USB disconnect, device number 2 [ 105.508959][ T34] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 105.637070][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 105.641426][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 105.767749][ T6401] random: crng reseeded on system resumption [ 107.012597][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 107.076860][ T10] kernel write not supported for file /asound/card0/oss_mixer (pid: 10 comm: kworker/0:1) [ 107.166553][ T6442] pimreg: entered allmulticast mode [ 107.223925][ T6441] pimreg: left allmulticast mode [ 107.419029][ T5761] block nbd0: Receive control failed (result -32) [ 107.492502][ T6455] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.568339][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 107.820772][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 107.824947][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.156'. [ 108.049800][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 108.097761][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.158437][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.193778][ T6500] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 108.337770][ T6501] siw: device registration error -23 [ 108.346785][ T6498] ip6tnl0: entered promiscuous mode [ 108.362845][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 108.465760][ T6509] warning: `syz.0.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.077339][ T6527] netlink: 'syz.1.171': attribute type 12 has an invalid length. [ 109.188446][ T6533] kAFS: unable to lookup cell '/,c¾ûL' [ 109.530835][ T6542] syzkaller0: entered promiscuous mode [ 109.533287][ T6542] syzkaller0: entered allmulticast mode [ 110.118257][ T6565] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 110.121503][ T6565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.141971][ T6565] vhci_hcd vhci_hcd.0: Device attached [ 110.201695][ T6572] vlan2: entered allmulticast mode [ 110.204101][ T6572] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 110.417037][ T6569] vhci_hcd: connection closed [ 110.421867][ T1179] vhci_hcd vhci_hcd.2: stop threads [ 110.429569][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 110.432628][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 110.446785][ T1179] vhci_hcd vhci_hcd.2: release socket [ 110.454951][ T1179] vhci_hcd vhci_hcd.2: disconnect device [ 111.133697][ T6577] __nla_validate_parse: 4 callbacks suppressed [ 111.133783][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 111.429952][ T6581] binder: 6580:6581 ioctl c05c5340 80000000 returned -22 [ 111.433955][ T6581] binder: 6580:6581 ioctl 4018620d 0 returned -22 [ 112.253317][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 112.306519][ T6600] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 112.539005][ T58] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 112.569511][ T6603] can: request_module (can-proto-0) failed. [ 112.738485][ T6606] netlink: 'syz.2.198': attribute type 21 has an invalid length. [ 112.743852][ T6606] netlink: 'syz.2.198': attribute type 20 has an invalid length. [ 112.798967][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 112.806228][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.812763][ T58] usb 8-1: config 0 has no interfaces? [ 112.817586][ T58] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.822372][ T58] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.826178][ T58] usb 8-1: Product: syz [ 112.828974][ T58] usb 8-1: Manufacturer: syz [ 112.831210][ T58] usb 8-1: SerialNumber: syz [ 112.853023][ T58] usb 8-1: config 0 descriptor?? [ 112.905798][ T6609] bridge_slave_0: left allmulticast mode [ 112.909767][ T6609] bridge_slave_0: left promiscuous mode [ 112.914624][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.983197][ T6609] bridge_slave_1: left allmulticast mode [ 112.986990][ T6609] bridge_slave_1: left promiscuous mode [ 112.991757][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.064249][ T10] usb 8-1: USB disconnect, device number 7 [ 113.116272][ T6609] bond0: (slave bond_slave_0): Releasing backup interface [ 113.183871][ T6609] bond0: (slave bond_slave_1): Releasing backup interface [ 113.206665][ T6609] team0: Port device team_slave_0 removed [ 113.222320][ T6609] team0: Port device team_slave_1 removed [ 113.228091][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.236264][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.245243][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.249631][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.255873][ T6609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.516772][ T6618] random: crng reseeded on system resumption [ 113.694070][ T5892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 113.869219][ T5892] usb 7-1: device descriptor read/64, error -71 [ 114.119118][ T5892] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 114.266004][ T5892] usb 7-1: device descriptor read/64, error -71 [ 114.364782][ T5892] usb usb7-port1: attempt power cycle [ 114.939136][ T5892] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 114.985819][ T5892] usb 7-1: device descriptor read/8, error -71 [ 115.477051][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 115.544696][ T5892] usb 7-1: device descriptor read/8, error -71 [ 115.649900][ T5892] usb usb7-port1: unable to enumerate USB device [ 115.688570][ T29] usb 42-1: device descriptor read/8, error -110 [ 115.832474][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.092433][ T29] usb usb42-port1: attempt power cycle [ 116.307523][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 116.649929][ T29] usb usb42-port1: unable to enumerate USB device [ 116.703496][ T6656] smbdirect: ib_dev[syz2] removed [ 117.218502][ T6660] trusted_key: encrypted_key: insufficient parameters specified [ 117.246544][ T6660] trusted_key: encrypted_key: insufficient parameters specified [ 117.446263][ T6663] netlink: 15678 bytes leftover after parsing attributes in process `syz.0.215'. [ 117.522494][ T6670] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.734963][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 117.738994][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 117.947965][ T6695] 9p: Could not find request transport: vfrtio [ 118.095308][ T6686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.224'. [ 118.135833][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 118.330991][ T6718] tipc: Started in network mode [ 118.340660][ T6718] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 118.351998][ T6718] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 118.374101][ T6718] tipc: Enabled bearer , priority 10 [ 118.583071][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 118.645113][ T6737] overlayfs: failed to clone upperpath [ 119.120508][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 119.298938][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 119.303342][ T39] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 119.306920][ T39] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.311998][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.317443][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 41984, setting to 1024 [ 119.324760][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.327642][ T6751] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 119.330964][ T39] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 119.333141][ T6751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.344360][ T6751] vhci_hcd vhci_hcd.0: Device attached [ 119.358525][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.364594][ T24] tipc: Node number set to 1 [ 119.380869][ T39] usb 7-1: config 0 descriptor?? [ 119.409478][ T39] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 119.434634][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 119.439041][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 119.533106][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'. [ 119.609094][ T53] usb 38-1: SetAddress Request (2) to port 0 [ 119.614426][ T53] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 120.034045][ T6752] vhci_hcd: connection reset by peer [ 120.221962][ T13] vhci_hcd vhci_hcd.0: stop threads [ 120.222200][ T13] vhci_hcd vhci_hcd.0: release socket [ 120.223539][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 122.353707][ T5894] usb 7-1: USB disconnect, device number 7 [ 123.048588][ T6811] lo speed is unknown, defaulting to 1000 [ 123.051723][ T6811] lo speed is unknown, defaulting to 1000 [ 123.054793][ T6811] lo speed is unknown, defaulting to 1000 [ 123.058155][ T6811] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 123.065240][ T6811] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 123.073331][ T6811] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 123.091670][ T6811] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.113831][ T6811] lo speed is unknown, defaulting to 1000 [ 123.117892][ T6811] lo speed is unknown, defaulting to 1000 [ 123.122391][ T6811] lo speed is unknown, defaulting to 1000 [ 123.126260][ T6811] lo speed is unknown, defaulting to 1000 [ 123.199229][ T6813] ip6tnl1: entered promiscuous mode [ 123.219520][ T6813] ip6tnl1: entered allmulticast mode [ 123.313967][ T6813] Process accounting resumed [ 123.464916][ T6821] syzkaller0: entered promiscuous mode [ 123.468055][ T6821] syzkaller0: entered allmulticast mode [ 123.506337][ T6823] syzkaller0: entered promiscuous mode [ 123.509204][ T6823] syzkaller0: entered allmulticast mode [ 124.353963][ T6841] __nla_validate_parse: 7 callbacks suppressed [ 124.353983][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 124.681358][ T53] usb 38-1: device descriptor read/8, error -110 [ 125.221562][ T53] usb usb38-port1: attempt power cycle [ 125.514510][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 125.564471][ T6859] syzkaller0: entered promiscuous mode [ 125.567260][ T6859] syzkaller0: entered allmulticast mode [ 125.816901][ T6868] FAULT_INJECTION: forcing a failure. [ 125.816901][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.829899][ T6868] CPU: 3 UID: 0 PID: 6868 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(full) [ 125.829927][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.829938][ T6868] Call Trace: [ 125.829944][ T6868] [ 125.829952][ T6868] dump_stack_lvl+0x100/0x190 [ 125.829979][ T6868] should_fail_ex.cold+0x5/0xa [ 125.830003][ T6868] _copy_from_user+0x2e/0xd0 [ 125.830023][ T6868] get_compat_msghdr+0xb3/0x4b0 [ 125.830045][ T6868] ? __pfx_get_compat_msghdr+0x10/0x10 [ 125.830077][ T6868] ___sys_sendmsg+0x1b6/0x1e0 [ 125.830104][ T6868] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.830151][ T6868] ? find_held_lock+0x2b/0x80 [ 125.830190][ T6868] __sys_sendmsg+0x170/0x220 [ 125.830211][ T6868] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.830228][ T6868] ? __fget_files+0x21f/0x3d0 [ 125.830257][ T6868] ? ksys_write+0x1ac/0x250 [ 125.830278][ T6868] ? rcu_is_watching+0x12/0xc0 [ 125.830303][ T6868] __do_fast_syscall_32+0xe7/0x950 [ 125.830330][ T6868] ? lockdep_hardirqs_on+0x78/0x100 [ 125.830357][ T6868] do_fast_syscall_32+0x32/0x70 [ 125.830384][ T6868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.830406][ T6868] RIP: 0023:0xf700efcc [ 125.830420][ T6868] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 125.830437][ T6868] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 125.830455][ T6868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 125.830466][ T6868] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.830476][ T6868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.830485][ T6868] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.830495][ T6868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.830518][ T6868] [ 125.893844][ T6861] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 125.900728][ T53] usb usb38-port1: unable to enumerate USB device [ 126.089863][ T6871] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 126.093622][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 126.304827][ T6878] Bluetooth: MGMT ver 1.23 [ 126.651373][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 126.779171][ T6887] binder: Binderfs stats mode cannot be changed during a remount [ 126.842417][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 126.846457][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 128.208600][ T6912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.225389][ T6912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.259830][ T6914] ip6tnl0: entered promiscuous mode [ 128.265129][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 128.275165][ T6914] siw: device registration error -23 [ 128.358986][ T5100] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.361001][ T5761] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 128.841460][ T39] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 128.853282][ T6924] ceph: No mds server is up or the cluster is laggy [ 129.548911][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.674215][ T6945] ptrace attach of "/syz-executor exec"[6946] was attempted by "/syz-executor exec"[6945] [ 129.729202][ T5761] block nbd1: Receive control failed (result -32) [ 129.741913][ T6950] netem: change failed [ 129.747996][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.314'. [ 129.819968][ T29] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 129.824726][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.829920][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.838953][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.843158][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.849547][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.853384][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.857175][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.864190][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.868892][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.872990][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.877008][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.881922][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.886785][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.892167][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.898281][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.944117][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.948735][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.006912][ T6965] blktrace: Concurrent blktraces are not allowed on loop1 [ 130.013884][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 130.017771][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 130.169442][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 130.222847][ T6966] loop9: detected capacity change from 0 to 7 [ 130.252615][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.264108][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.582445][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.590839][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.595584][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.607824][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.613162][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.618097][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.627450][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.631586][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.642066][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.645671][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.650340][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.654410][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.661680][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.667890][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.672111][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.716351][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.720645][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.800946][ T6966] ldm_validate_partition_table(): Disk read failed. [ 130.808395][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.811880][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.826562][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.831705][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.843745][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.847944][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.853670][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 130.858948][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.862537][ T6966] Dev loop9: unable to read RDB block 0 [ 130.867224][ T6966] loop9: unable to read partition table [ 130.883458][ T6966] loop9: partition table beyond EOD, truncated [ 130.887026][ T6966] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 130.894550][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 130.898317][ T29] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 130.903357][ T29] usb 5-1: Product: syz [ 130.908075][ T29] usb 5-1: Manufacturer: syz [ 130.914097][ T29] usb 5-1: SerialNumber: syz [ 130.924972][ T29] usb 5-1: config 0 descriptor?? [ 130.937946][ T29] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 131.019213][ T6975] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 131.238429][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'. [ 131.251920][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 131.261032][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 131.264254][ C1] usb 5-1: yurex_control_callback - control failed: -32 [ 131.296254][ T5894] usb 5-1: USB disconnect, device number 2 [ 131.316138][ T5894] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 131.628428][ T6981] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 132.485343][ T5149] ldm_validate_partition_table(): Disk read failed. [ 132.488491][ T5149] Dev loop9: unable to read RDB block 0 [ 132.491370][ T5149] loop9: unable to read partition table [ 132.493704][ T5149] loop9: partition table beyond EOD, truncated [ 132.528219][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 132.533501][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 132.874325][ T7003] netlink: 'syz.1.329': attribute type 12 has an invalid length. [ 132.908979][ T7002] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.914911][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 132.920988][ T6997] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.956156][ T7007] sctp: [Deprecated]: syz.0.330 (pid 7007) Use of int in max_burst socket option deprecated. [ 132.956156][ T7007] Use struct sctp_assoc_value instead [ 133.017227][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 133.400210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.476509][ T7040] fuse: fd is not a fuse device [ 133.687232][ T7044] netlink: 'syz.3.342': attribute type 3 has an invalid length. [ 134.265004][ T7066] tipc: Enabling of bearer rejected, already enabled [ 134.541560][ T7081] binder: 7080:7081 ioctl c05c5340 80000000 returned -22 [ 134.634828][ T7083] program syz.2.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.914936][ T7094] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.313533][ T7093] __nla_validate_parse: 37 callbacks suppressed [ 135.313547][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 135.670313][ T7111] syzkaller0: entered promiscuous mode [ 135.672079][ T7111] syzkaller0: entered allmulticast mode [ 135.676923][ T7111] FAULT_INJECTION: forcing a failure. [ 135.676923][ T7111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.683314][ T7111] CPU: 2 UID: 0 PID: 7111 Comm: syz.2.365 Not tainted syzkaller #0 PREEMPT(full) [ 135.683328][ T7111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.683334][ T7111] Call Trace: [ 135.683338][ T7111] [ 135.683343][ T7111] dump_stack_lvl+0x100/0x190 [ 135.683358][ T7111] should_fail_ex.cold+0x5/0xa [ 135.683373][ T7111] _copy_from_user+0x2e/0xd0 [ 135.683386][ T7111] get_compat_msghdr+0xb3/0x4b0 [ 135.683399][ T7111] ? __pfx_get_compat_msghdr+0x10/0x10 [ 135.683414][ T7111] ? __lock_acquire+0x4a5/0x2630 [ 135.683427][ T7111] ___sys_recvmsg+0x193/0x1a0 [ 135.683444][ T7111] ? __pfx____sys_recvmsg+0x10/0x10 [ 135.683471][ T7111] do_recvmmsg+0x563/0x760 [ 135.683489][ T7111] ? __pfx_do_recvmmsg+0x10/0x10 [ 135.683507][ T7111] ? ksys_write+0x190/0x250 [ 135.683519][ T7111] ? ksys_write+0x190/0x250 [ 135.683535][ T7111] ? __fget_files+0x215/0x3d0 [ 135.683548][ T7111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.683568][ T7111] __sys_recvmmsg+0x21f/0x270 [ 135.683581][ T7111] ? __pfx___sys_recvmmsg+0x10/0x10 [ 135.683595][ T7111] ? ksys_write+0x1ac/0x250 [ 135.683608][ T7111] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 135.683623][ T7111] ? __do_fast_syscall_32+0x98/0x950 [ 135.683639][ T7111] ? lockdep_hardirqs_on+0x78/0x100 [ 135.683654][ T7111] __do_fast_syscall_32+0xe7/0x950 [ 135.683670][ T7111] ? lockdep_hardirqs_on+0x78/0x100 [ 135.683687][ T7111] do_fast_syscall_32+0x32/0x70 [ 135.683704][ T7111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.683718][ T7111] RIP: 0023:0xf705efcc [ 135.683727][ T7111] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 135.683737][ T7111] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 135.683748][ T7111] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080005700 [ 135.683754][ T7111] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.683760][ T7111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.683766][ T7111] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.683772][ T7111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.683785][ T7111] [ 135.828908][ T6971] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.998274][ T6971] usb 5-1: Using ep0 maxpacket: 8 [ 136.003560][ T6971] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 136.006133][ T6971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.010022][ T6971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.013971][ T6971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.018199][ T6971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.023775][ T6971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.027819][ T6971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.036662][ T7123] vlan2: entered allmulticast mode [ 136.038610][ T7123] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 136.255547][ T6971] usb 5-1: GET_CAPABILITIES returned 0 [ 136.257782][ T6971] usbtmc 5-1:16.0: can't read capabilities [ 136.304465][ T7128] syzkaller0: entered promiscuous mode [ 136.306396][ T7128] syzkaller0: entered allmulticast mode [ 136.311930][ T7128] 0: reclassify loop, rule prio 0, protocol 800 [ 136.484727][ T7135] netlink: 'syz.3.371': attribute type 10 has an invalid length. [ 136.492498][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.496864][ T7135] team0: Port device netdevsim1 added [ 136.546530][ T39] usb 5-1: USB disconnect, device number 3 [ 136.596308][ T7140] netlink: 'syz.1.372': attribute type 12 has an invalid length. [ 136.798952][ T5894] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 136.959237][ T5894] usb 8-1: Using ep0 maxpacket: 8 [ 136.964114][ T5894] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 136.974688][ T5894] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.996024][ T5894] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.014338][ T5894] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.039758][ T5894] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.051274][ T5894] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.055049][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.267055][ T5894] usb 8-1: usb_control_msg returned -32 [ 137.272205][ T5894] usbtmc 8-1:16.0: can't read capabilities [ 137.622663][ T7148] usbtmc 8-1:16.0: stb usb_control_msg returned -32 [ 137.681428][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.699901][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.880215][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.883081][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.569348][ T7156] No control pipe specified [ 138.673046][ T7138] Bluetooth: MGMT ver 1.23 [ 138.698904][ T7138] lo speed is unknown, defaulting to 1000 [ 138.849786][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 138.902053][ T7179] pimreg: entered allmulticast mode [ 138.904943][ T7179] pimreg: left allmulticast mode [ 139.110357][ T7187] tipc: Started in network mode [ 139.112609][ T7187] tipc: Node identity 4246, cluster identity 4711 [ 139.115348][ T7187] tipc: Node number set to 16966 [ 139.117973][ T7187] tipc: Cannot configure node identity twice [ 139.123709][ T7187] xt_TCPMSS: Only works on TCP SYN packets [ 139.419939][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.423155][ T53] usb 8-1: USB disconnect, device number 8 [ 140.264225][ T7213] syzkaller0: entered promiscuous mode [ 140.266653][ T7213] syzkaller0: entered allmulticast mode [ 140.308889][ T7218] syzkaller0: entered promiscuous mode [ 140.310773][ T7218] syzkaller0: entered allmulticast mode [ 140.996357][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 141.211954][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 141.503154][ T7239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.744169][ T7239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.815061][ T7239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.142652][ T7239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.248655][ T79] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.257177][ T79] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.265459][ T79] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.278214][ T79] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.311454][ T7248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.410'. [ 142.649545][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 142.833516][ T7281] fuse: fd is not a fuse device [ 142.842779][ T7281] pimreg: entered allmulticast mode [ 142.847030][ T7281] pimreg: left allmulticast mode [ 142.889349][ T7283] netlink: 600 bytes leftover after parsing attributes in process `syz.0.420'. [ 144.219899][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 144.273798][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 144.296025][ T40] audit: type=1326 audit(1778607304.185:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.317354][ T40] audit: type=1326 audit(1778607304.185:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.328935][ T40] audit: type=1326 audit(1778607304.195:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.335525][ T40] audit: type=1326 audit(1778607304.205:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.346826][ T40] audit: type=1326 audit(1778607304.205:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.362269][ T40] audit: type=1326 audit(1778607304.205:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.369219][ T40] audit: type=1326 audit(1778607304.205:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.376175][ T40] audit: type=1326 audit(1778607304.205:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.388031][ T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 144.391261][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.394604][ T10] usb 7-1: Product: syz [ 144.395971][ T10] usb 7-1: Manufacturer: syz [ 144.398344][ T10] usb 7-1: SerialNumber: syz [ 144.400286][ T40] audit: type=1326 audit(1778607304.205:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.412092][ T40] audit: type=1326 audit(1778607304.235:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.431" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 144.541327][ T7321] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 144.543892][ T7321] netlink: 228 bytes leftover after parsing attributes in process `syz.3.433'. [ 144.548570][ T7321] loop5: detected capacity change from 0 to 7 [ 144.552313][ T7321] Dev loop5: unable to read RDB block 7 [ 144.554184][ T7321] loop5: AHDI p1 [ 144.555436][ T7321] loop5: partition table partially beyond EOD, truncated [ 144.909099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 145.102255][ T24] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 145.121013][ T24] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 145.137958][ T24] hid-generic 0000:0000:0002.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 145.154911][ T7339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 145.157044][ T7339] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.162685][ T7339] vhci_hcd vhci_hcd.0: Device attached [ 145.208559][ T7339] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 145.225920][ T7337] fido_id[7337]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.414831][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 145.429111][ T5894] usb 38-1: SetAddress Request (6) to port 0 [ 145.431136][ T5894] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 145.678078][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 145.829149][ T10] rtl8150 7-1:1.0: couldn't reset the device [ 145.833197][ T10] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 145.869723][ T7340] vhci_hcd: connection reset by peer [ 145.873944][ T102] vhci_hcd vhci_hcd.0: stop threads [ 145.877326][ T102] vhci_hcd vhci_hcd.0: release socket [ 145.883645][ T102] vhci_hcd vhci_hcd.0: disconnect device [ 146.879705][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.967235][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 146.984220][ T24] usb 7-1: USB disconnect, device number 8 [ 147.040789][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 147.060643][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 147.065032][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.069891][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.073997][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.078651][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.085352][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.090203][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.322247][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 147.356038][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 147.358109][ T9] usbtmc 5-1:16.0: can't read capabilities [ 147.729046][ T24] usb 5-1: USB disconnect, device number 4 [ 147.815258][ T7405] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 147.843798][ T7410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.453'. [ 147.887160][ T7405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.915594][ T7411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.922604][ T7411] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.927917][ T7411] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 148.447795][ T7418] syzkaller0: entered promiscuous mode [ 148.450472][ T7418] syzkaller0: entered allmulticast mode [ 148.842552][ T7428] netlink: 'syz.3.459': attribute type 10 has an invalid length. [ 148.937192][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 148.992174][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 149.044717][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 149.575659][ T7466] netlink: 72 bytes leftover after parsing attributes in process `syz.2.473'. [ 151.120396][ T5894] usb 38-1: device descriptor read/8, error -110 [ 151.540705][ T5894] usb usb38-port1: attempt power cycle [ 152.101609][ T5894] usb usb38-port1: unable to enumerate USB device [ 152.269722][ T7496] lo speed is unknown, defaulting to 1000 [ 152.447399][ T7499] loop5: detected capacity change from 0 to 7 [ 152.454280][ T7499] Dev loop5: unable to read RDB block 7 [ 152.456702][ T7499] loop5: AHDI p1 [ 152.457901][ T7499] loop5: partition table partially beyond EOD, truncated [ 152.622059][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 152.845677][ T7511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.482'. [ 153.105816][ T7512] overlayfs: failed to verify upper (111/file1, ino=608, err=-116) [ 153.113806][ T7512] overlayfs: failed to verify index dir 'upper' xattr [ 153.119867][ T7512] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 154.333378][ T7526] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 154.343238][ T7526] CIFS mount error: No usable UNC path provided in device string! [ 154.343238][ T7526] [ 154.347428][ T7526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 154.698917][ T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 154.868942][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 154.872295][ T53] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 154.875138][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.878470][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.881848][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.885119][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.889634][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.892688][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.972925][ T7514] Process accounting paused [ 155.050329][ T7537] tipc: Enabling of bearer rejected, failed to enable media [ 155.055503][ T7536] tipc: Enabling of bearer rejected, already enabled [ 155.056142][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 155.102141][ T53] usb 7-1: GET_CAPABILITIES returned 0 [ 155.104725][ T53] usbtmc 7-1:16.0: can't read capabilities [ 155.195186][ T7537] xt_bpf: check failed: parse error [ 155.365111][ T1036] usb 7-1: USB disconnect, device number 9 [ 155.432055][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 155.435975][ T7560] bridge_slave_1: left allmulticast mode [ 155.438455][ T7560] bridge_slave_1: left promiscuous mode [ 155.441569][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.445331][ T7560] bridge_slave_0: left allmulticast mode [ 155.447226][ T7560] bridge_slave_0: left promiscuous mode [ 155.449565][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.582889][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 155.744742][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 155.946370][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 156.168396][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.509'. [ 156.224834][ T7584] siw: device registration error -23 [ 156.324874][ T7588] syzkaller0: entered promiscuous mode [ 156.328880][ T7588] syzkaller0: entered allmulticast mode [ 156.336713][ T7588] 0: reclassify loop, rule prio 0, protocol 800 [ 156.477393][ T7595] netlink: 'syz.0.512': attribute type 10 has an invalid length. [ 156.480654][ T7595] netlink: 228 bytes leftover after parsing attributes in process `syz.0.512'. [ 156.486825][ T7595] loop5: detected capacity change from 0 to 7 [ 156.491291][ T7595] Dev loop5: unable to read RDB block 7 [ 156.493759][ T7595] loop5: AHDI p1 [ 156.495534][ T7595] loop5: partition table partially beyond EOD, truncated [ 156.791930][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 156.791985][ T40] audit: type=1326 audit(1778607316.685:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.812270][ T40] audit: type=1326 audit(1778607316.695:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.828992][ T40] audit: type=1326 audit(1778607316.695:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.845372][ T7606] syz.1.513 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 156.852115][ T40] audit: type=1326 audit(1778607316.705:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.863455][ T40] audit: type=1326 audit(1778607316.705:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.877760][ T40] audit: type=1326 audit(1778607316.705:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.889795][ T40] audit: type=1326 audit(1778607316.705:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.905896][ T40] audit: type=1326 audit(1778607316.715:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.919690][ T40] audit: type=1326 audit(1778607316.715:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 156.933417][ T40] audit: type=1326 audit(1778607316.715:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 157.127469][ T7614] lo speed is unknown, defaulting to 1000 [ 157.393841][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.518'. [ 158.263358][ T7628] netlink: 600 bytes leftover after parsing attributes in process `syz.1.523'. [ 158.770021][ T7636] mmap: syz.2.524 (7636) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.855760][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 159.214956][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 162.207380][ T7693] lo speed is unknown, defaulting to 1000 [ 162.309874][ T7693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.538'. [ 162.409559][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 162.552668][ T7699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.578673][ T7698] syzkaller0: entered promiscuous mode [ 162.584188][ T7698] syzkaller0: entered allmulticast mode [ 162.734279][ T7698] 0: reclassify loop, rule prio 0, protocol 800 [ 162.746403][ T7699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.852118][ T7699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.005373][ T7699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.494374][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.538188][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.686329][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.741020][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.963083][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 163.963095][ T40] audit: type=1326 audit(1778607323.855:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.2.546" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x0 [ 163.982062][ T7726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.060368][ T7730] siw: device registration error -23 [ 164.184409][ T7726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.284773][ T7726] team0: Port device netdevsim1 removed [ 164.294742][ T7726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.408352][ T7726] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.524015][ T102] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.536488][ T102] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.546992][ T102] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.557876][ T102] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: hw/ide/core.c:934: ide_dma_cb: Assertion `prep_size >= 0 && prep_size <= n * 512' failed. Read from remote host localhost: Connection reset by peer client_loop: send disconnect: Broken pipe