last executing test programs: 37m37.730885633s ago: executing program 1 (id=360): syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000f00)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x0, 0x9, 0x0, 0x5, 0x10, 0x9}, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300), 0x0, &(0x7f00000000c0)) io_uring_enter(r0, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb02000000000000005f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000009b80)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff0b, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00\n'], 0x64}}, 0x4800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x11, 0x0, 0x12) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getgroups(0x1, &(0x7f0000000580)=[0xffffffffffffffff]) getrlimit(0xe, &(0x7f0000001080)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fstatfs(r4, &(0x7f0000000080)=""/4096) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24000, 0x40) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa040, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r6, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x22406e, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x8000000000000001}}, 0x18) 37m36.490401584s ago: executing program 1 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00), 0x0) 37m35.776164593s ago: executing program 1 (id=368): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) getrlimit(0xb, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2, 0x2000000, 0x300}, 0x38) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) prctl$PR_CAPBSET_DROP(0x18, 0x20000009) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 37m34.185092054s ago: executing program 1 (id=370): r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, 0x0}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) fcntl$lock(r6, 0x26, &(0x7f0000000080)) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) writev(r7, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}, {&(0x7f0000019480)="cb08", 0x2}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000001500)=""/4080, 0xff0) 37m33.013296823s ago: executing program 1 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 37m32.473794357s ago: executing program 1 (id=377): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffff98) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) 37m17.294748772s ago: executing program 32 (id=377): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffff98) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) 36m0.833528393s ago: executing program 2 (id=642): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x6}, 0x8) 36m0.624027329s ago: executing program 2 (id=643): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, 0x0, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x41041) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c880}, 0x9840) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x40000a7, 0x2000819c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1027) 36m0.416085464s ago: executing program 2 (id=646): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 35m59.319493852s ago: executing program 2 (id=650): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 35m58.721524487s ago: executing program 2 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 35m58.572026042s ago: executing program 0 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3ff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) 35m57.941619067s ago: executing program 0 (id=657): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = io_uring_setup(0x7, 0x0) io_uring_enter(r1, 0x2217, 0x7721, 0x16, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) 35m57.344029893s ago: executing program 2 (id=658): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 35m56.880630594s ago: executing program 0 (id=659): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50e, &(0x7f0000000200)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x46000a}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) 35m56.438237056s ago: executing program 33 (id=658): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 35m56.334209978s ago: executing program 0 (id=662): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 35m55.639601366s ago: executing program 0 (id=666): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9", 0x3b}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b3", 0x8a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3e", 0x70}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739", 0x9d}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e339dbd36b34c6a2b15fd03bc0e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e08", 0x7e}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b", 0x1e}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x309) 35m53.976170778s ago: executing program 0 (id=674): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 35m53.566305048s ago: executing program 34 (id=674): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.836618678s ago: executing program 5 (id=5057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, &(0x7f0000000240)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_ethernet(0x56, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 18.034424668s ago: executing program 3 (id=5058): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x28}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0xc8, 0x53, 0x29, 0x20, 0xcf3, 0x9271, 0x169b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xe2, 0xd8, 0x0, 0x6b, 0xff, 0x5d, 0x8}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x1d, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.742593372s ago: executing program 5 (id=5062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 14.193322806s ago: executing program 5 (id=5063): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xffffffff, {{}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) 14.035524701s ago: executing program 6 (id=5064): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x10000) close(r4) write(r3, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 12.176896758s ago: executing program 6 (id=5065): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xffffffff, {{}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1, 0x1000000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='&--\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000140)={0xfffffffffffffbf7, 0xd, 0x2, 0x0, 0x4, 0x87fff, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x29, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f00000000c0)=ANY=[], 0x0) 10.860078812s ago: executing program 5 (id=5066): socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0x53b, 0x4}, 0x14}}, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) 8.812460124s ago: executing program 6 (id=5068): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x141081) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$bind(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200), 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r4 = io_uring_setup(0x34cf, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x1, 0x0, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$llc_int(r5, 0x10c, 0xd, &(0x7f00000000c0), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000008240)=@newchain={0x2240, 0x64, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff3}, {0x0, 0x5}, {0xffe0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x1fffc00}, @filter_kind_options=@f_basic={{0xa}, {0x21b0, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0x9, 0xc, 0xd, 0x0, 0x6, 0x80, 0x7, 0x0, 0x7, 0x3, 0xe, 0x3, 0x7, 0x7, 0x1ff, 0x8, 0x5, 0x5, 0x800, 0xb, 0x4, 0x556b6c6f, 0x1000, 0x78, 0x0, 0x0, 0x6, 0x200, 0xff9, 0x3bbe, 0xc, 0x3, 0x7, 0x8001, 0x80000000, 0x9, 0x120c, 0x80000001, 0x1, 0x0, 0x7, 0x9, 0x7, 0x10001, 0x9, 0x8, 0x1, 0xffffffff, 0x9, 0x3, 0x7725, 0x7, 0x8001, 0x7, 0x2, 0x3, 0x80000001, 0x7, 0x8, 0xfffffffa, 0x400, 0x1, 0x8, 0x0, 0x100, 0x1, 0x7, 0x2, 0x1ff, 0x8, 0xe, 0x1, 0x9, 0xf3dc, 0x3, 0x5, 0x8, 0xd7cd, 0x10001, 0x9, 0x3, 0x9, 0x0, 0x1ff, 0xd98b, 0xf, 0x6, 0x6, 0x2, 0x1, 0xfffffff7, 0xb00, 0x0, 0x80000000, 0x4, 0x8, 0xfffffff4, 0x252b420c, 0x2, 0x0, 0x10000, 0x2, 0x7f, 0x0, 0xecb, 0x31ce, 0x4, 0xa5, 0x1, 0xba, 0x80000001, 0xfff, 0xca2c, 0xfffffff7, 0x3, 0x5, 0x800, 0x2, 0xf, 0x5, 0x7, 0x7f, 0x6, 0x2, 0x8, 0x10001, 0x4, 0x9, 0x7, 0x3, 0x662, 0x9, 0x5, 0x3, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6, 0x7d11, 0x4, 0x9d90, 0x7, 0x2, 0x7, 0xafe, 0x8, 0x7, 0xffffffff, 0xffffffff, 0x80000000, 0x8, 0x8, 0x7, 0x1ff, 0x15b, 0x6, 0x9, 0x3, 0xa4, 0xfffffc00, 0x80000000, 0x4, 0x38f0, 0x2, 0x7fff, 0x1, 0x611, 0x3, 0x0, 0x5, 0x0, 0x4, 0x4, 0x6, 0x1000, 0x0, 0x5, 0x2, 0x8, 0x0, 0xe, 0x5, 0xee36, 0x40, 0xfffffffd, 0x80000001, 0x8, 0x3, 0x400, 0x0, 0x3, 0x80000001, 0x8, 0x47a, 0x6, 0x6, 0x200, 0xa, 0x6, 0x10, 0xfffffffc, 0xfffffffe, 0x10001, 0xa, 0x9769, 0x7, 0x401, 0x7, 0x3, 0x5058a8a4, 0x2, 0x3, 0x0, 0xfffffff8, 0x6, 0x2, 0x5, 0x1ff, 0x2, 0xe05, 0x0, 0xfffffffa, 0x400, 0x80000001, 0xe30c, 0x0, 0x9, 0xe4f, 0x385a7cae, 0x0, 0x4, 0x6, 0xfffffff8, 0x401, 0x5, 0xffffff80, 0x7fffffff, 0xf, 0x7f, 0x2, 0x81, 0x37, 0x9, 0x5, 0x94, 0x9, 0x7, 0x6, 0x2, 0x7, 0x3, 0x5]}]}, @TCA_BASIC_EMATCHES={0x108, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x7}, {{0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x4000, 0x9, 0xffff}}}, @TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x401, 0x4, 0x7}}}, @TCF_EM_META={0x50, 0x3, 0x0, 0x0, {{0x13e3, 0x4, 0x401}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="2150c6a3e61c", @TCF_META_TYPE_VAR="7bc63b8816", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f3da", @TCF_META_TYPE_VAR="44e2f3"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="34560f344e1e5ce1d5", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="96771923", @TCF_META_TYPE_VAR="21e83158f929f43f", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x101}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x54, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x44}, "8d993345a93d0d80fae5c560c872900a6711449069be5f1a018045f9fbf83eb65a8de2052424fad80618ecf6ce4eb045ee243ab3d45243653692c9d65a5ec4e9ae83cc93970084"}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x9}}, @TCA_BASIC_ACT={0x4}, @TCA_BASIC_ACT={0x1c90, 0x3, [@m_ct={0xd8, 0x10, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xccd}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "45e819a6d41ca58f6f32934c547089f0"}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "90136a33348c4c3445bdde156e33db6f"}, @TCA_CT_PARMS={0x18, 0x1, {0x842, 0xfffffffe, 0x10000000, 0x80000001, 0xfffffffe}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffd, 0x7, 0x1, 0xffffffff, 0x1}}]}, {0x21, 0x6, "ea2907b0931ed02fde96ef0cdd5d299d5566c1089c8de84b7c159427fe"}, {0xc, 0x7, {0xd53c473646f689cc}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xfc, 0x1b, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10001, 0x0, 0x7, 0xfff, 0x5901}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x98, 0x6, "83840519cd67ad07164b7ed80407870ef8f4e3a54e29ef3a8bca7761ef55b5750859d3081f02ae088edfaf1dcba2272ce146e7b5420a34119d0b0d55928c172eb13a941e9bcd6a721279a2851327f55befff4f29271c912652a1a8f93f70ee30a87d52b256d640c660c5b1f153a96bd7cd22e31e0912cae4733045fa1403fffff407116831525b2fb3f546d6750c2db423430074"}, {0xc, 0x7, {0x1, 0x2f4cb9551af2392a}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x7c, 0xb, 0x0, 0x0, {{0xf}, {0x4}, {0x4b, 0x6, "85a1fdb43a8f2e6ec106b6fa90699035074c05ee51a71be07cb48b0031bc2684d994639c691a702d659c4729f33b57a1aba83d9941536abc07c92f95f66dec0ac59b64c0bb21dd"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x4d0, 0x14, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb90, 0x85b2ce3c50a9c6d0, 0x87, 0x3, 0x9, {0x81, 0x1, 0x3, 0x8, 0x0, 0x2}, {0x0, 0x2, 0x3, 0xf21, 0x8, 0x8000}, 0xd, 0x1, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x28e1, 0x9, 0x59, 0x7fff, 0x1, 0x5, 0x7, 0x953, 0x7fffffff, 0x4, 0x0, 0x4, 0x8, 0x3, 0xfffff801, 0x3, 0x0, 0x5, 0x4, 0xfffffffb, 0xd, 0x4, 0x9, 0x3ff, 0x7fff, 0x7f, 0x0, 0x8, 0x3, 0xb, 0x5, 0x4, 0x9, 0x7, 0x80000000, 0x6, 0x3ff, 0x2, 0x200, 0x5, 0x2, 0x9, 0x8, 0x9, 0x1, 0x2, 0x3ff, 0x2, 0x2, 0x7, 0x80000000, 0x9, 0x3, 0x7, 0x489fc404, 0x7, 0x80000000, 0x2, 0xfffffff9, 0x0, 0x4c, 0x8, 0x9, 0xca87, 0x2, 0x101, 0xb, 0xffffbb6d, 0xc, 0x9c400000, 0x3, 0x3, 0x8, 0x4, 0x6a, 0x10000, 0x80000000, 0x40, 0x2, 0x74f, 0x1, 0x6e, 0x1, 0x8, 0x6, 0x10001, 0x1, 0xa, 0x613d, 0x5, 0x1, 0xe2, 0x7fff, 0xffff, 0x38000000, 0x1, 0x7, 0x10001, 0x1, 0x9, 0x7ff, 0x3ff, 0xffffff38, 0xfffffff6, 0x8000, 0x5, 0x7f, 0x4b842083, 0x4, 0x7, 0x5, 0x4a, 0x3, 0x4, 0x9, 0x100, 0xffffffff, 0x6, 0xe, 0x3, 0x401, 0x9, 0x80, 0x1, 0xecf, 0x4, 0x5ac, 0x2, 0x5, 0xc1800000, 0x2, 0x9a35, 0x81, 0x2, 0x73e, 0x6, 0x2, 0x5, 0x8, 0x81, 0xfffff2af, 0x1, 0x0, 0x3, 0x3, 0x4, 0x1, 0x89, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x8, 0x400, 0x10, 0x5, 0x40, 0x4591eec2, 0xe, 0x2, 0x80000001, 0x5, 0x32f4, 0x2, 0x2, 0xfffffffe, 0x5, 0x4, 0x80000000, 0xffff, 0x9, 0xa, 0x9, 0x2, 0x1, 0x0, 0x5, 0x6, 0x400, 0x10001, 0xfffffffe, 0x7, 0x7, 0x2, 0x8001, 0x68e, 0xffffffff, 0x8, 0x3f3, 0x2, 0x3, 0x81, 0x3, 0x1, 0x8, 0xfff, 0x8, 0x69, 0x3, 0x2, 0x8, 0x7, 0xff, 0xfffffffc, 0x9, 0x9d, 0x2, 0x8, 0x3ff, 0x7fff, 0x2, 0x8, 0x8, 0x1, 0x2, 0x1, 0xfffffffa, 0x2, 0x7, 0x3, 0x7, 0x5, 0x0, 0x3, 0x0, 0x9c2, 0x1, 0x4, 0x80000000, 0x5, 0xffffffbc, 0x4, 0x2, 0xb43, 0x7, 0x9, 0x7, 0x6, 0x6537b2dc, 0xa, 0xffffffff, 0x4, 0x3, 0x8000, 0x200, 0x40, 0x8000, 0x68, 0x2, 0x3ff, 0x7, 0x200, 0x1, 0x9]}]]}, {0x63, 0x6, "f3c0603f6975ea7afde1af14fb907c4f055d07d52aa4d704e0265923106784812e59515d6986ef02418662057b68c20795f2c6d5a446a53c6a0f2a552b95f2a7a7e4a47f56a91fabfba3f06b1f67c880848f748a911e90a2a2a598fc352242"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x38, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x448, 0x4, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x7f, 0x8, 0x7, 0x9, 0x3, 0x0, 0x441, 0x2, 0x749a86c1, 0xd, 0x40, 0x7, 0xe, 0xfffff63b, 0x0, 0x6, 0x7, 0x3, 0x1, 0x0, 0x0, 0x4, 0x6, 0x6dc, 0x1, 0x7, 0x0, 0x6, 0x8001, 0x9, 0x1, 0x1, 0xaa, 0x1000, 0x6, 0x7f, 0x5, 0x10000, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0xfffffffc, 0x1, 0x9719, 0x3, 0xfffffffe, 0xc, 0x1, 0x1, 0x0, 0x61, 0x0, 0xa3, 0x5, 0x3, 0x9, 0x80000000, 0x4, 0x8001, 0x80000001, 0xffff7cec, 0x7ff, 0x9, 0x2, 0x9, 0x1000, 0x6bf, 0x3, 0x4000000, 0x69b, 0xd7, 0x8, 0x4, 0x80000000, 0x1, 0x6, 0x7, 0x6, 0x0, 0x0, 0x9, 0xe320, 0x5, 0x8, 0x379, 0x1, 0xfffffffd, 0x5, 0x1, 0x41, 0x401, 0x3c4, 0x52, 0x62, 0x5, 0x3ad2, 0x8, 0x4, 0x9, 0x4, 0x1, 0x7, 0xfcb1, 0x2, 0x5, 0xf, 0x9, 0x96cb, 0x800, 0x2db3, 0x0, 0x6, 0x80, 0xffff, 0x7fffffff, 0x1800, 0x2, 0xfffffff9, 0xc, 0x81, 0x4, 0x1, 0x7, 0x0, 0xccb3, 0x3, 0x8, 0xd, 0x0, 0x2, 0x3, 0x0, 0xee50, 0x8, 0xc3, 0x8, 0x9, 0x7, 0x30ff, 0xfffffffe, 0x6, 0x9, 0x6, 0xcb9, 0x9, 0x0, 0x6, 0x1f, 0x5, 0x80000001, 0x317, 0x800, 0x81, 0x8000, 0x5, 0x1ff, 0x4d0e, 0x0, 0x5, 0x1, 0x1, 0x7, 0x3, 0x2, 0x1, 0xd1c, 0x9, 0x9, 0x4, 0x3, 0x4, 0x100, 0x1, 0x1, 0x4, 0x1, 0x9, 0x7, 0x9, 0x1, 0x7fffffff, 0xffff, 0x4, 0x1, 0xfffffff7, 0x8, 0x6, 0x2, 0x9a, 0x9, 0x50, 0x5, 0x5, 0x62, 0x8001, 0x7, 0x7fff, 0x80000001, 0x5, 0x5, 0x0, 0x0, 0x4, 0x1, 0x3, 0x81, 0x4, 0x0, 0x4, 0xffffffff, 0x5, 0x6, 0xff, 0x6, 0xaee, 0x1000, 0x3, 0x7, 0xfffffffd, 0x2, 0x7, 0x10001, 0x7fffffff, 0x100, 0x1, 0x7, 0x8, 0x401, 0x0, 0x3, 0x5, 0x2, 0x1000, 0x7, 0x4, 0x8, 0x2, 0x10, 0x3, 0x2, 0x9, 0x800, 0x0, 0x7, 0x4, 0xf, 0x17, 0x8, 0x895a, 0x7fff, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], []]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x114, 0x1f, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe11}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10001, 0x7fff, 0x6, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8000}]}, {0xc0, 0x6, "7b6291f1e397f8e49be4cca8eb9834ebc82eacbcada111884b8ad1b72d91f45659dfddb6cdafd9ef2ae10342d4190092f049f1a45c8b017ada8bc8c2aab0c0c22a7c7cb9e82065289ade24f651faabd5d8980fb2336b53bfd423b723151d0464b3615f3d597ec0b1780a347e523f1fb49cd53db348ff07ad684703bc35a01e1dc3268ba5533ebb8cc977e0de3b229a1c999be4961bb4068a563fa70ef7df97f8ec0a068532d7c70fea0c6472ac70f6934a5e4ee8f1988270b0f95a3d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xfd8, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0xfa4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x10}, @TCA_CHAIN={0x8, 0xb, 0x725f}]}, 0x2240}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) 6.422586935s ago: executing program 4 (id=5069): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x67, 0x1, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @void, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x7, 0xad, 0x9}}, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x2000000, 0x0, 0x2000c844}, 0x20000114) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000004c0)={r6, 0xbc, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x4, @private0, 0x5e0c1541}, @in6={0xa, 0x4e20, 0x40, @private2, 0x3e2}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x800}, @in6={0xa, 0x4e23, 0x7, @local, 0x4}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x401, @local, 0x37692297}]}, &(0x7f0000000500)=0x10) read$FUSE(r11, &(0x7f0000002980)={0x2020}, 0x15be) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r10, 0x202}, 0x8) 6.330676348s ago: executing program 4 (id=5070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, &(0x7f0000000240)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_ethernet(0x56, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 6.289846829s ago: executing program 3 (id=5071): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 5.947521257s ago: executing program 4 (id=5072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.859889199s ago: executing program 3 (id=5073): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x10000) close(r4) write(r3, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 4.552466783s ago: executing program 4 (id=5074): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xffffffff, {{}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) 4.466634105s ago: executing program 3 (id=5075): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x48, 0x0, 0x41000000}], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x1) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0xfffffffc, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000100"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) 4.27415591s ago: executing program 5 (id=5076): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xffffffff, {{}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1, 0x1000000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='&--\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000140)={0xfffffffffffffbf7, 0xd, 0x2, 0x0, 0x4, 0x87fff, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x29, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f00000000c0)=ANY=[], 0x0) 3.352039583s ago: executing program 3 (id=5077): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000002040)=0x72f7, 0x4) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x8d0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r7 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000004e40)={0xb, 0x18, 0xeffe, 0xf, "4d512c91002a4950000000694e3d1a078c745073f20000010000000000fbf29c"}) 1.618213358s ago: executing program 6 (id=5078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.505626021s ago: executing program 5 (id=5079): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xffffffff, {{}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1, 0x1000000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='&--\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000140)={0xfffffffffffffbf7, 0xd, 0x2, 0x0, 0x4, 0x87fff, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x29, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f00000000c0)=ANY=[], 0x0) 467.937617ms ago: executing program 6 (id=5080): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6ade, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x275a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0001f1ff07000800ffd000000000cde1d36283c9c4fb74dab28618ff503e0d102bad18820402e9abffba95c8b150a61e68165079a4650b3e3f286936cd36a18fdecba5b399febcf1cdafbb88adbdfbd4ea6194aeb140f6f246d6994e7f6c43600c7595d4e180002592e83d1ab7bf5e81dc8270f3cfa8485c5d65782285e92e8095c79f650fc5ad96b12246066ba9b40d1a8974397843548a7580030b647cd513830cceb64293ebb9d5a7bfe185cb145bc5dad1db495084b3fac53a4e0cc14d180fe70f2eecd961dfbf0e10c2454cf3df33000000000000"], 0xde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 284.064282ms ago: executing program 4 (id=5081): r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x440, 0x53) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 187.595675ms ago: executing program 3 (id=5082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x2000000000000002) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 128.625176ms ago: executing program 6 (id=5083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010300000000000000000500000014000780080008000000004008000640000000060900020073797a32000000000500040000000000050005000a000000050001000700000011000300686173683a6970"], 0x60}}, 0x4000) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0xfdfdffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r5, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080002e22698001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703010093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000040)={{0x37, 0x8}, 'port1\x00', 0x40, 0x0, 0x6, 0x4, 0xfffffffb, 0x2, 0x1, 0x0, 0x4, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2040400) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, 0x0) 0s ago: executing program 4 (id=5084): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400", 0x32}], 0x1) sendmsg$SOCK_DESTROY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001500000307000000fcdbdf2501e85b0001009f98c4828b11597334c8ea883c7b4d07f96cd37c46488c47cac3e744afd680f1c88473ea644d06e511d91081781ffb19a94a54dec7e40589b83da0cb05c9be43ffb977453c071c8aee8505bead8e097faf450df76ce0dd000000e09b28f7e0fa7aa657bf67e4566488b018ea1dd6c7602a60403d133e0ecf21688a"], 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400301, 0xc) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x7, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) kernel console output (not intermixed with test programs): Reported pmtu 68 too low, using default minimum of 512 [ 1729.016104][T20216] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1729.028798][T20216] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1729.043423][T20216] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1729.132105][T20216] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1729.145173][T20216] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1729.158233][T20216] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1730.592561][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.613480][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.013575][ T28] audit: type=1326 audit(1788292355.720:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.3.4033" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eb99e159 code=0x0 [ 1733.978331][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1734.308515][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1734.334975][ T9] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1734.412260][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.469681][ T9] usb 5-1: config 0 has no interface number 0 [ 1734.513851][ T9] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1734.550209][T20250] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4038'. [ 1734.559662][T20250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1734.617034][ T9] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1734.690968][ T9] usb 5-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1734.712942][ T9] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1734.924961][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1734.931349][ T9] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1734.976977][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.012689][ T9] usb 5-1: config 0 descriptor?? [ 1735.048180][ T9] usb 5-1: can't set config #0, error -71 [ 1735.064531][ T9] usb 5-1: USB disconnect, device number 23 [ 1735.747362][ T28] audit: type=1326 audit(1788292360.620:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20266 comm="syz.6.4044" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5df99e159 code=0x0 [ 1736.779641][T12510] Bluetooth: hci2: unexpected event for opcode 0x0c13 [ 1737.202612][ T6753] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1737.503221][ T6753] usb 6-1: Using ep0 maxpacket: 16 [ 1737.547561][ T6753] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.559292][ T6753] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1737.574431][ T6753] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1737.595901][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.621454][ T6753] usb 6-1: config 0 descriptor?? [ 1737.631561][ T6753] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1740.044072][ T6753] usb 6-1: USB disconnect, device number 52 [ 1740.150308][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1740.468347][T20285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1742.615401][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1742.812985][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1742.914836][ T9] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1742.958184][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.077054][ T9] usb 7-1: config 0 has no interface number 0 [ 1743.175391][ T9] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1743.355508][ T9] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1743.539094][ T9] usb 7-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1743.616966][ T9] usb 7-1: config 0 interface 239 has no altsetting 0 [ 1743.739241][ T9] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1743.788600][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.841799][ T9] usb 7-1: Product: syz [ 1743.862656][ T9] usb 7-1: Manufacturer: syz [ 1743.880047][ T9] usb 7-1: SerialNumber: syz [ 1743.921089][ T9] usb 7-1: config 0 descriptor?? [ 1743.928219][T12510] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1743.949362][ T9] usb 7-1: can't set config #0, error -71 [ 1744.505082][ T9] usb 7-1: USB disconnect, device number 53 [ 1744.530623][ T28] audit: type=1326 audit(1788292369.390:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20310 comm="syz.3.4056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eb99e159 code=0x0 [ 1750.640922][T12510] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1755.409699][ T5764] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1755.743022][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 1756.111612][ T5764] usb 4-1: device descriptor read/all, error -71 [ 1756.683147][T20278] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1758.183354][T20278] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 1758.192491][T20278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.213271][T20278] usb 5-1: Product: syz [ 1758.217529][T20278] usb 5-1: Manufacturer: syz [ 1758.222170][T20278] usb 5-1: SerialNumber: syz [ 1758.394481][T20278] digi_acceleport 5-1:1.0: Digi 2 port USB adapter converter detected [ 1758.450608][T20278] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 1758.533605][T20278] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 1758.564740][T20278] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 1758.633309][T20278] usb 5-1: USB disconnect, device number 24 [ 1758.681587][T20278] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 1758.762051][T20278] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 1758.804477][T20278] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 1758.829463][T20278] digi_acceleport 5-1:1.0: device disconnected [ 1762.527577][T18063] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1762.646521][ T5764] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1762.986435][T18063] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1763.003828][T18063] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.022291][T18063] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1763.039657][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4079'. [ 1763.054899][T18063] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1763.064072][T20413] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4079'. [ 1763.100140][T18063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.123342][T18063] usb 5-1: Product: syz [ 1763.132904][T18063] usb 5-1: Manufacturer: syz [ 1763.137587][T18063] usb 5-1: SerialNumber: syz [ 1763.152937][ T5764] usb 6-1: Using ep0 maxpacket: 32 [ 1763.176762][ T5764] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1763.181654][T18063] usb 5-1: selecting invalid altsetting 1 [ 1763.203735][T18063] usb 5-1: unit 6 not found! [ 1763.221227][ T5764] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.238388][ T5764] usb 6-1: config 0 has no interface number 0 [ 1763.245478][ T5764] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1763.269487][ T5764] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1763.281140][ T5764] usb 6-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1763.301918][ T5764] usb 6-1: config 0 interface 239 has no altsetting 0 [ 1763.325264][ T5764] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1763.356895][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.389538][T18063] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1763.420867][ T5764] usb 6-1: Product: syz [ 1763.465177][ T5764] usb 6-1: Manufacturer: syz [ 1763.507496][ T5764] usb 6-1: SerialNumber: syz [ 1763.671067][ T5764] usb 6-1: config 0 descriptor?? [ 1763.721838][T20403] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1764.223165][ T8] usb 6-1: USB disconnect, device number 53 [ 1764.395947][T18063] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1764.443632][T18063] usb 5-1: USB disconnect, device number 25 [ 1764.470814][T20421] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4090'. [ 1764.480630][T20421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1764.549594][T16855] udevd[16855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.363472][T20443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1766.419348][T20443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1768.348444][T20450] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4100'. [ 1768.359652][T20450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1768.888135][T20457] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1769.283648][ T8] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1769.515375][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1769.540525][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1769.594213][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1769.630756][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.763511][T12510] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1771.774947][ T8] usb 5-1: usb_control_msg returned -32 [ 1771.780636][ T8] usbtmc 5-1:16.0: can't read capabilities [ 1771.818233][ T8] usb 5-1: USB disconnect, device number 26 [ 1771.963042][T20278] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1772.163068][T20278] usb 7-1: Using ep0 maxpacket: 32 [ 1772.206868][T20278] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1772.218898][T20278] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.234748][T20278] usb 7-1: config 0 has no interface number 0 [ 1772.242056][T20278] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1772.256802][T20278] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1772.271121][T20278] usb 7-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1772.289424][T20278] usb 7-1: config 0 interface 239 has no altsetting 0 [ 1772.306938][T20278] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1772.317612][T20278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.330334][T20278] usb 7-1: Product: syz [ 1772.366303][T20278] usb 7-1: Manufacturer: syz [ 1772.394438][T20278] usb 7-1: SerialNumber: syz [ 1772.475891][T20278] usb 7-1: config 0 descriptor?? [ 1772.487870][T20466] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1772.709343][ T8] usb 7-1: USB disconnect, device number 54 [ 1775.030528][T20492] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4112'. [ 1775.043310][T20492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1776.557949][T20500] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1776.913079][T15413] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1777.169386][T15413] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1777.209917][T15413] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1777.267216][T15413] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1777.304685][T15413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.525988][T20509] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4110'. [ 1777.535093][T20509] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4110'. [ 1777.839650][T15413] usb 4-1: usb_control_msg returned -71 [ 1777.846582][T15413] usbtmc 4-1:16.0: can't read capabilities [ 1777.863711][T15413] usb 4-1: USB disconnect, device number 52 [ 1779.563241][ T6753] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1779.854470][ T6753] usb 5-1: Using ep0 maxpacket: 32 [ 1779.868844][ T6753] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1779.878587][ T6753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.023121][ T6753] usb 5-1: config 0 has no interface number 0 [ 1780.067580][ T6753] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1780.078054][ T6753] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1780.089538][ T6753] usb 5-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1780.108341][ T6753] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1780.122601][ T6753] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1780.209380][ T6753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.219110][ T6753] usb 5-1: Product: syz [ 1780.223522][ T6753] usb 5-1: Manufacturer: syz [ 1780.228174][ T6753] usb 5-1: SerialNumber: syz [ 1780.244847][ T6753] usb 5-1: config 0 descriptor?? [ 1780.250700][T20511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1780.494178][T18406] usb 5-1: USB disconnect, device number 27 [ 1781.963944][T20529] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4122'. [ 1781.973668][T20529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1784.543743][T20547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4127'. [ 1784.566138][T20547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4127'. [ 1784.760655][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4123'. [ 1784.790601][T20549] bond1: option mode: unable to set because the bond device has slaves [ 1784.853949][T20551] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1785.182979][T18063] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1785.648271][T18063] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1785.694474][T18063] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.754385][T18063] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1785.764135][T18063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.192517][T18063] usb 4-1: usb_control_msg returned -32 [ 1786.198310][T18063] usbtmc 4-1:16.0: can't read capabilities [ 1786.213951][T18063] usb 4-1: USB disconnect, device number 53 [ 1787.568370][T18406] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1791.445331][T18406] usb 6-1: device not accepting address 54, error -71 [ 1791.985313][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.013663][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.953416][T20597] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1793.299160][T20602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4136'. [ 1793.312945][T15413] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1793.331020][T20602] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4136'. [ 1793.515256][T15413] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1793.535699][T15413] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1793.580070][T15413] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1793.616050][T15413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.936685][T15413] usb 6-1: usb_control_msg returned -32 [ 1793.944259][T15413] usbtmc 6-1:16.0: can't read capabilities [ 1794.105903][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1794.126946][T20612] bond1: option mode: unable to set because the bond device has slaves [ 1795.952237][T10254] usb 6-1: USB disconnect, device number 56 [ 1795.963195][ T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1796.175431][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1796.697219][T10254] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1796.954000][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.966713][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1796.985282][ T8] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1797.003034][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.022905][ T8] usb 4-1: Product: syz [ 1797.027164][ T8] usb 4-1: Manufacturer: syz [ 1797.035081][ T8] usb 4-1: SerialNumber: syz [ 1798.126199][ T8] usb 4-1: selecting invalid altsetting 1 [ 1798.132702][ T8] usb 4-1: unit 6 not found! [ 1798.153300][ T8] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1798.234594][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1798.254250][ T8] usb 4-1: USB disconnect, device number 54 [ 1798.261748][T10254] usb 6-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 1798.286500][T10254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.306823][T16855] udevd[16855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1798.310204][T10254] usb 6-1: Product: syz [ 1799.934207][T10254] usb 6-1: Manufacturer: syz [ 1799.946901][T10254] usb 6-1: SerialNumber: syz [ 1800.039759][T10254] usb 6-1: can't set config #1, error -71 [ 1800.070841][T10254] usb 6-1: USB disconnect, device number 57 [ 1800.188332][ T5764] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1800.587528][ T5764] usb 5-1: Using ep0 maxpacket: 32 [ 1800.732942][T20636] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4149'. [ 1800.752904][T20636] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4149'. [ 1800.774136][ T5764] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1800.782596][ T5764] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.794126][ T5764] usb 5-1: config 0 has no interface number 0 [ 1800.800919][ T5764] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1800.811405][ T5764] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1800.822983][ T5764] usb 5-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1800.836600][ T5764] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1800.859968][ T5764] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1800.878078][ T5764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.886623][ T5764] usb 5-1: Product: syz [ 1800.890892][ T5764] usb 5-1: Manufacturer: syz [ 1800.895814][ T5764] usb 5-1: SerialNumber: syz [ 1800.913048][ T5764] usb 5-1: config 0 descriptor?? [ 1800.919068][T20631] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1801.070056][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1801.144907][T15413] usb 5-1: USB disconnect, device number 28 [ 1801.256941][T20641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1802.303858][T20649] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1804.473971][ T5764] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1804.780755][ T5764] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1804.823051][ T5764] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1804.874704][ T5764] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1804.912071][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.123843][ T6753] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1805.166497][ T5764] usb 4-1: usb_control_msg returned -32 [ 1805.172172][ T5764] usbtmc 4-1:16.0: can't read capabilities [ 1805.305352][ T6753] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1805.324865][ T6753] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.184333][ T6753] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1806.197455][ T6753] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1806.207249][ T6753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.215537][ T6753] usb 7-1: Product: syz [ 1806.219956][ T6753] usb 7-1: Manufacturer: syz [ 1806.224833][ T6753] usb 7-1: SerialNumber: syz [ 1806.242648][ T6753] usb 7-1: selecting invalid altsetting 1 [ 1806.251001][ T6753] usb 7-1: unit 6 not found! [ 1806.435396][T20674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1806.451689][T20674] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1806.461818][ T6753] usb 7-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1806.537903][ T6753] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1806.661318][ T6753] usb 7-1: USB disconnect, device number 55 [ 1807.133135][T16855] udevd[16855]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1807.136668][ T6753] usb 4-1: USB disconnect, device number 55 [ 1811.674171][T10254] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1811.883108][T10254] usb 7-1: Using ep0 maxpacket: 32 [ 1811.988116][T10254] usb 7-1: device descriptor read/all, error -71 [ 1813.479990][T20711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4169'. [ 1813.503467][T20711] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4169'. [ 1813.782655][T20717] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1814.378639][ T5764] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1817.824004][T12510] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1817.862873][ T5764] usb 7-1: device not accepting address 58, error -71 [ 1823.863606][T20772] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4185'. [ 1823.889314][T20772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1824.351380][T20776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4179'. [ 1824.367125][T20776] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4179'. [ 1832.535747][T12510] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1833.397579][T20826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4197'. [ 1833.423900][T20826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4197'. [ 1838.633504][T20855] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4205'. [ 1838.659794][T20855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1839.017167][ T28] audit: type=1326 audit(1788292463.890:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1839.092993][ T28] audit: type=1326 audit(1788292463.920:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1839.142962][ T28] audit: type=1326 audit(1788292463.920:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1839.201638][ T28] audit: type=1326 audit(1788292463.920:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1839.270033][ T28] audit: type=1326 audit(1788292463.930:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1839.349262][ T28] audit: type=1326 audit(1788292463.930:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1840.236717][ T28] audit: type=1326 audit(1788292463.930:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1840.261359][T12510] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1840.268355][ T28] audit: type=1326 audit(1788292463.930:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1840.294230][ T28] audit: type=1326 audit(1788292463.930:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.5.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f376659e159 code=0x7ffc0000 [ 1847.300761][T20901] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1847.300821][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.321755][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.334049][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.346393][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.369178][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.382458][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.396402][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.409030][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.422140][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1847.434772][T20901] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1853.403565][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.409981][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.943019][ T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1855.172235][ T23] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 1855.200138][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.218344][ T23] usb 4-1: Product: syz [ 1855.233409][ T23] usb 4-1: Manufacturer: syz [ 1855.252151][ T23] usb 4-1: SerialNumber: syz [ 1855.270548][ T23] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected [ 1855.320773][ T23] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 1855.368632][ T23] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 1855.406438][ T23] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 1855.509325][ T23] usb 4-1: USB disconnect, device number 56 [ 1855.607844][ T23] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 1855.680881][ T23] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 1855.738799][ T23] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 1855.778394][ T23] digi_acceleport 4-1:1.0: device disconnected [ 1856.960214][T20955] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1856.960237][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1856.979515][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1856.991244][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1857.003023][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1857.018884][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1857.030787][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1857.042681][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1857.055233][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1857.068266][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1857.080483][T20955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1861.806866][T12510] Bluetooth: hci2: unexpected event for opcode 0x0c13 [ 1864.832082][T20985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1864.911854][T20985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1867.312962][T10254] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1867.533655][T10254] usb 4-1: Using ep0 maxpacket: 16 [ 1867.549360][T10254] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.961303][T10254] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1868.149358][T10254] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1868.159130][T10254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.178350][T10254] usb 4-1: Product: syz [ 1868.185373][T10254] usb 4-1: Manufacturer: syz [ 1868.190065][T10254] usb 4-1: SerialNumber: syz [ 1868.224553][T10254] usb 4-1: config 0 descriptor?? [ 1868.374820][T21000] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1868.392531][T21000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1869.425332][T20991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.481314][T20991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.540079][T20991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.571979][T20991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.632471][ T5822] usb 4-1: USB disconnect, device number 57 [ 1876.578614][T21029] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1876.578674][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.598596][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.611405][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.628230][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.654398][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.667122][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.680476][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.694764][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.708279][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1876.721714][T21029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1877.236580][T21026] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4245'. [ 1877.312973][T21026] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4245'. [ 1881.082591][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4249'. [ 1889.118252][T21065] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4255'. [ 1889.154794][T21065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1891.677339][T21080] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4257'. [ 1891.732174][T21080] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4257'. [ 1894.897590][T21112] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4266'. [ 1894.914501][T21112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1900.577202][T21143] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4275'. [ 1900.589953][T21143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1901.680689][T21152] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1901.691904][T21152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1902.476178][T12510] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1909.680764][T21189] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4287'. [ 1910.122950][ T5822] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1910.328255][ T5822] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 1910.347613][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.386230][ T5822] usb 4-1: Product: syz [ 1910.413784][ T5822] usb 4-1: Manufacturer: syz [ 1910.431736][ T5822] usb 4-1: SerialNumber: syz [ 1910.468477][ T5822] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected [ 1910.533158][ T5822] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 1910.568985][ T5822] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 1910.594094][ T5822] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 1910.724422][ T8] usb 4-1: USB disconnect, device number 58 [ 1910.746234][T12510] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1910.881896][ T8] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 1911.019435][ T8] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 1911.163969][ T8] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 1911.286858][ T8] digi_acceleport 4-1:1.0: device disconnected [ 1914.933037][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.939420][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.603968][T21241] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4300'. [ 1925.784981][T21287] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4313'. [ 1930.668747][T21318] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1930.697951][T21318] CIFS: Attempting to mount //127.0.0.1/share [ 1930.751555][T21318] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1930.759800][T21318] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1933.979378][T12510] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1934.559461][T21335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1935.188765][T21340] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1939.201917][T21369] CIFS: Attempting to mount //127.0.0.1/share [ 1939.218457][T21369] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1939.226691][T21369] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1940.172670][T21375] netlink: 'syz.4.4334': attribute type 1 has an invalid length. [ 1940.461376][T21375] bond2: entered promiscuous mode [ 1940.467976][T21375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1943.633165][T21386] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1948.152142][T21417] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1949.423760][T21431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4346'. [ 1949.516680][T21432] CIFS: Attempting to mount //127.0.0.1/share [ 1949.535620][T21432] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1949.543408][T21432] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1949.692304][T21431] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4346'. [ 1951.243870][T21437] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1951.243893][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.263279][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.275931][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.288277][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.310127][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.322633][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.334814][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.347428][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.360140][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1951.372653][T21437] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.123385][T12510] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1956.190991][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4358'. [ 1961.728661][T21511] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1961.747220][T21511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1963.930789][T21510] CIFS: Attempting to mount //127.0.0.1/share [ 1963.938847][T21510] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1963.946420][T21510] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1965.851564][T21475] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1965.861702][T21475] CPU: 0 PID: 21475 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1965.869396][T21475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1965.878231][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4371'. [ 1965.879488][T21475] Workqueue: hci2 hci_rx_work [ 1965.893102][T21475] Call Trace: [ 1965.896505][T21475] [ 1965.899583][T21475] dump_stack_lvl+0x18c/0x250 [ 1965.904419][T21475] ? show_regs_print_info+0x20/0x20 [ 1965.909738][T21475] ? load_image+0x420/0x420 [ 1965.914310][T21475] sysfs_create_dir_ns+0x26e/0x2a0 [ 1965.919549][T21475] ? __lock_acquire+0x7d80/0x7d80 [ 1965.924647][T21475] ? sysfs_warn_dup+0xa0/0xa0 [ 1965.929375][T21475] ? do_raw_spin_unlock+0x121/0x230 [ 1965.934622][T21475] kobject_add_internal+0x617/0xc90 [ 1965.939869][T21475] kobject_add+0x164/0x240 [ 1965.944795][T21475] ? kobject_init+0x1d0/0x1d0 [ 1965.949550][T21475] ? get_device_parent+0x366/0x390 [ 1965.954717][T21475] device_add+0x3fa/0xc40 [ 1965.959092][T21475] hci_conn_add_sysfs+0xd5/0x1e0 [ 1965.964072][T21475] le_conn_complete_evt+0xe9f/0x1480 [ 1965.969405][T21475] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1965.975696][T21475] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1965.981379][T21475] ? mutex_unlock+0x10/0x10 [ 1965.985953][T21475] ? skb_pull_data+0xf0/0x1f0 [ 1965.990761][T21475] hci_le_conn_complete_evt+0x187/0x440 [ 1965.996358][T21475] ? hci_remote_host_features_evt+0x150/0x150 [ 1966.002494][T21475] hci_event_packet+0x7b4/0x1280 [ 1966.007494][T21475] ? __lock_acquire+0x7d80/0x7d80 [ 1966.012574][T21475] ? lock_chain_count+0x20/0x20 [ 1966.017483][T21475] ? bis_list+0x290/0x290 [ 1966.021880][T21475] ? kcov_remote_start+0x513/0x810 [ 1966.027479][T21475] ? lockdep_hardirqs_on+0x98/0x150 [ 1966.032740][T21475] ? hci_send_to_monitor+0xd7/0x4f0 [ 1966.037989][T21475] hci_rx_work+0x43a/0xd60 [ 1966.042463][T21475] ? process_scheduled_works+0x975/0x1600 [ 1966.048405][T21475] process_scheduled_works+0xa60/0x1600 [ 1966.054015][T21475] ? worker_attach_to_pool+0x370/0x370 [ 1966.059524][T21475] ? assign_work+0x3cc/0x5d0 [ 1966.064248][T21475] worker_thread+0xa5e/0xfe0 [ 1966.068900][T21475] ? _raw_spin_unlock+0x40/0x40 [ 1966.073785][T21475] ? __kthread_parkme+0x71/0x1c0 [ 1966.078770][T21475] kthread+0x2fa/0x390 [ 1966.082887][T21475] ? pr_cont_work+0x550/0x550 [ 1966.087609][T21475] ? kthread_blkcg+0xd0/0xd0 [ 1966.092233][T21475] ret_from_fork+0x48/0x80 [ 1966.096692][T21475] ? kthread_blkcg+0xd0/0xd0 [ 1966.101320][T21475] ret_from_fork_asm+0x11/0x20 [ 1966.106170][T21475] [ 1966.110157][T21475] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1966.124362][T21475] Bluetooth: hci2: failed to register connection device [ 1966.715230][T21531] hsr_slave_1 (unregistering): left promiscuous mode [ 1970.290670][T21558] CIFS: Attempting to mount //127.0.0.1/share [ 1970.309712][T21558] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1970.317617][T21558] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1972.615579][T21560] loop8: detected capacity change from 0 to 7 [ 1972.631517][T21560] Dev loop8: unable to read RDB block 7 [ 1972.637630][T21560] loop8: unable to read partition table [ 1972.644153][T21560] loop8: partition table beyond EOD, truncated [ 1972.650504][T21560] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1974.055772][T21573] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1974.413241][ T8] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1974.423752][T21475] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1974.431560][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4384'. [ 1974.434216][T21475] CPU: 0 PID: 21475 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1974.434282][T21475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1974.434300][T21475] Workqueue: hci1 hci_rx_work [ 1974.434333][T21475] Call Trace: [ 1974.434343][T21475] [ 1974.434354][T21475] dump_stack_lvl+0x18c/0x250 [ 1974.434391][T21475] ? show_regs_print_info+0x20/0x20 [ 1974.434418][T21475] ? load_image+0x420/0x420 [ 1974.434485][T21475] sysfs_create_dir_ns+0x26e/0x2a0 [ 1974.491652][T21475] ? __lock_acquire+0x7d80/0x7d80 [ 1974.496766][T21475] ? sysfs_warn_dup+0xa0/0xa0 [ 1974.501535][T21475] ? do_raw_spin_unlock+0x121/0x230 [ 1974.506809][T21475] kobject_add_internal+0x617/0xc90 [ 1974.512082][T21475] kobject_add+0x164/0x240 [ 1974.516571][T21475] ? kobject_init+0x1d0/0x1d0 [ 1974.521331][T21475] ? get_device_parent+0x366/0x390 [ 1974.526514][T21475] device_add+0x3fa/0xc40 [ 1974.530911][T21475] hci_conn_add_sysfs+0xd5/0x1e0 [ 1974.535928][T21475] le_conn_complete_evt+0xe9f/0x1480 [ 1974.541294][T21475] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1974.547616][T21475] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1974.553327][T21475] ? mutex_unlock+0x10/0x10 [ 1974.558247][T21475] ? skb_pull_data+0xf0/0x1f0 [ 1974.563185][T21475] hci_le_conn_complete_evt+0x187/0x440 [ 1974.568896][T21475] ? hci_remote_host_features_evt+0x150/0x150 [ 1974.575048][T21475] hci_event_packet+0x7b4/0x1280 [ 1974.580069][T21475] ? __lock_acquire+0x7d80/0x7d80 [ 1974.585173][T21475] ? lock_chain_count+0x20/0x20 [ 1974.590130][T21475] ? bis_list+0x290/0x290 [ 1974.594539][T21475] ? kcov_remote_start+0x513/0x810 [ 1974.599719][T21475] ? lockdep_hardirqs_on+0x98/0x150 [ 1974.604997][T21475] ? hci_send_to_monitor+0xd7/0x4f0 [ 1974.610273][T21475] hci_rx_work+0x43a/0xd60 [ 1974.614805][T21475] ? process_scheduled_works+0x975/0x1600 [ 1974.620604][T21475] process_scheduled_works+0xa60/0x1600 [ 1974.626268][T21475] ? worker_attach_to_pool+0x370/0x370 [ 1974.631821][T21475] ? assign_work+0x3cc/0x5d0 [ 1974.636527][T21475] worker_thread+0xa5e/0xfe0 [ 1974.641278][T21475] ? _raw_spin_unlock+0x40/0x40 [ 1974.646216][T21475] ? __kthread_parkme+0x71/0x1c0 [ 1974.651232][T21475] kthread+0x2fa/0x390 [ 1974.655361][T21475] ? pr_cont_work+0x550/0x550 [ 1974.660118][T21475] ? kthread_blkcg+0xd0/0xd0 [ 1974.664787][T21475] ret_from_fork+0x48/0x80 [ 1974.669309][T21475] ? kthread_blkcg+0xd0/0xd0 [ 1974.673973][T21475] ret_from_fork_asm+0x11/0x20 [ 1974.678837][T21475] [ 1974.684432][T19299] Bluetooth: hci2: command 0x0406 tx timeout [ 1974.688474][T21475] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1974.717777][T21475] Bluetooth: hci1: failed to register connection device [ 1974.915318][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1974.929153][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1974.942421][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1974.957728][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.992952][T21577] hsr_slave_1 (unregistering): left promiscuous mode [ 1975.228227][ T8] usb 6-1: usb_control_msg returned -32 [ 1975.234030][ T8] usbtmc 6-1:16.0: can't read capabilities [ 1975.456117][T21586] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1975.474645][T21586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1976.701139][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.829217][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.315086][T18063] usb 6-1: USB disconnect, device number 58 [ 1981.504321][T12510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1981.533397][T21475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1981.563061][T21475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1981.584382][T21475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1981.594408][T21475] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1981.601901][T21475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1981.622827][T21580] Bluetooth: hci1: command 0x0406 tx timeout [ 1982.060317][T21580] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1982.312234][ T6559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.359682][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1982.531998][ T6559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.700417][ T6559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.569074][ T6559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.778184][T21475] Bluetooth: hci0: command tx timeout [ 1983.842694][T21638] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4397'. [ 1983.857173][T21638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1985.935295][T21475] Bluetooth: hci0: command tx timeout [ 1986.258197][T21652] netlink: 'syz.4.4401': attribute type 1 has an invalid length. [ 1986.444772][T21652] bond3: entered promiscuous mode [ 1986.451928][T21652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1987.063640][ T6559] tipc: Left network mode [ 1988.012935][T21475] Bluetooth: hci0: command tx timeout [ 1988.628589][T21658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4403'. [ 1989.148259][T21616] chnl_net:caif_netlink_parms(): no params data found [ 1989.585394][T21475] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1990.925975][T21580] Bluetooth: hci0: command tx timeout [ 1991.441141][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4404'. [ 1991.649172][T21616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1991.661488][T21616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1991.669224][T21616] bridge_slave_0: entered allmulticast mode [ 1991.687559][T21616] bridge_slave_0: entered promiscuous mode [ 1991.723783][T18063] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1992.073579][T18063] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1992.179362][T18063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.208661][T21681] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1992.219225][T21681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1992.304158][T18063] usb 5-1: Product: syz [ 1992.381460][T18063] usb 5-1: Manufacturer: syz [ 1992.432521][T18063] usb 5-1: SerialNumber: syz [ 1992.782052][T21616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.931242][T21616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.103980][T21616] bridge_slave_1: entered allmulticast mode [ 1993.326716][T21616] bridge_slave_1: entered promiscuous mode [ 1993.578232][T18063] snd-usb-6fire 5-1:1.0: unable to receive device firmware state. [ 1993.620913][T18063] snd-usb-6fire: probe of 5-1:1.0 failed with error -71 [ 1993.703034][T18063] usb 5-1: USB disconnect, device number 29 [ 1993.927216][T21616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1993.991539][T21616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.952653][T21616] team0: Port device team_slave_0 added [ 1995.054197][T21616] team0: Port device team_slave_1 added [ 1995.067885][T21700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4413'. [ 1995.206300][T21616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.230416][T21616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.264335][ T23] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1995.277715][T21616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.316604][ T6559] hsr_slave_0: left promiscuous mode [ 1995.325464][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1995.338323][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1995.349428][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1995.366230][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1995.384692][ T6559] bridge_slave_1: left allmulticast mode [ 1995.392416][T21580] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1995.402459][ T6559] bridge_slave_1: left promiscuous mode [ 1995.432274][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.455450][ T6559] bridge_slave_0: left allmulticast mode [ 1995.475833][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1995.481923][ T6559] bridge_slave_0: left promiscuous mode [ 1995.495779][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1995.518608][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.526738][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1995.546643][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.572819][ T23] usb 5-1: Product: syz [ 1995.579127][ T23] usb 5-1: Manufacturer: syz [ 1995.588479][ T23] usb 5-1: SerialNumber: syz [ 1995.694017][ T6559] veth1_macvtap: left promiscuous mode [ 1995.703909][ T6559] veth0_macvtap: left promiscuous mode [ 1995.710031][ T6559] veth1_vlan: left promiscuous mode [ 1995.717307][ T6559] veth0_vlan: left promiscuous mode [ 1995.870845][ T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1995.883967][T21719] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1996.182557][ T5764] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1996.271407][ T6559] bond2 (unregistering): Released all slaves [ 1996.400357][ T5764] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1996.410457][ T5764] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1996.426233][ T5764] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1996.440219][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.482107][ T23] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1996.539852][ T23] usb 5-1: USB disconnect, device number 30 [ 1996.650132][T21216] udevd[21216]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1996.688158][ T5764] usb 6-1: usb_control_msg returned -32 [ 1996.697902][ T5764] usbtmc 6-1:16.0: can't read capabilities [ 1996.711144][ T6559] bond1 (unregistering): Released all slaves [ 1997.287393][T18063] usb 6-1: USB disconnect, device number 59 [ 2001.011251][ T6559] team0 (unregistering): Port device team_slave_1 removed [ 2001.554970][ T6559] team0 (unregistering): Port device team_slave_0 removed [ 2002.031137][ T6559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.269155][ T6559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2002.832337][ T6559] bond0 (unregistering): Released all slaves [ 2002.974444][T21616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2002.981464][T21616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2003.007700][T21616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2003.022184][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4414'. [ 2003.156794][T21723] netlink: 'syz.4.4416': attribute type 1 has an invalid length. [ 2003.189901][T21723] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2003.223013][T21726] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4417'. [ 2003.326515][T21726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2003.638547][T21740] MTRR 1 not used [ 2003.745606][ T6559] IPVS: stop unused estimator thread 0... [ 2003.794341][T21616] hsr_slave_0: entered promiscuous mode [ 2003.994336][T21616] hsr_slave_1: entered promiscuous mode [ 2004.548985][T21751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4421'. [ 2004.603216][T21751] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4421'. [ 2005.658425][T21475] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2005.690998][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4425'. [ 2005.843275][ T6753] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 2006.147623][ T6753] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2006.332122][ T6753] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2006.401396][T21773] netlink: 'syz.4.4426': attribute type 1 has an invalid length. [ 2006.542162][T21773] bond4: entered promiscuous mode [ 2006.548518][T21773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2006.558430][ T6753] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2006.706021][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.281543][ T6753] usb 6-1: usb_control_msg returned -32 [ 2007.363796][ T6753] usbtmc 6-1:16.0: can't read capabilities [ 2009.547187][ T6753] usb 6-1: USB disconnect, device number 60 [ 2009.799748][T21786] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4428'. [ 2009.815981][T21786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2013.170396][T21616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2013.196655][T21616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2013.254317][T21616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2013.274276][T21803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4431'. [ 2013.320548][T21807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4433'. [ 2013.330103][T21803] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4431'. [ 2013.352867][T21616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2013.985835][T21814] sctp_transport_update_pmtu: 48 callbacks suppressed [ 2013.985856][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.006290][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.020157][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.033302][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.051435][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.063686][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.075976][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.087866][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.099866][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.114681][T21814] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2014.466477][T21616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2014.679403][T21616] 8021q: adding VLAN 0 to HW filter on device team0 [ 2014.706093][T21673] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.713488][T21673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2014.744340][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.751535][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2014.940762][T21821] netlink: 'syz.5.4436': attribute type 1 has an invalid length. [ 2015.031305][T21821] bond2: entered promiscuous mode [ 2015.053601][T21821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2015.254544][T10254] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 2016.384859][T10254] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2016.413189][T10254] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2016.449438][T10254] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2016.482775][T10254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.529383][T21616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2016.655009][T21847] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4439'. [ 2016.671922][T21847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2016.858400][T10254] usb 5-1: usb_control_msg returned -32 [ 2016.951556][T10254] usbtmc 5-1:16.0: can't read capabilities [ 2017.925588][T21616] veth0_vlan: entered promiscuous mode [ 2018.021728][T21616] veth1_vlan: entered promiscuous mode [ 2018.127093][T21616] veth0_macvtap: entered promiscuous mode [ 2018.166349][T21616] veth1_macvtap: entered promiscuous mode [ 2018.199891][T21862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4443'. [ 2018.226785][T21862] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4443'. [ 2018.264997][T21616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.292771][T21616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.311919][T21616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.336034][T21616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.349258][T21616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.363678][T21616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.379143][T21616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2018.393574][T21616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2018.411033][T21616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.447004][T21616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2018.471017][T21616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.492893][T21616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2018.515008][T21616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.534873][T21616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2018.556995][T21616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.571811][T21616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.594217][T21616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.616749][T21616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.638093][T10254] usb 5-1: USB disconnect, device number 31 [ 2020.552206][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2020.592439][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2020.692820][ T6551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2020.723101][ T6551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2020.862307][T21881] sctp_transport_update_pmtu: 47 callbacks suppressed [ 2020.862323][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.879947][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.890511][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.901520][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.914124][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.924781][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.935483][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.946264][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.956909][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2020.967591][T21881] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2021.003083][ T5822] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 2021.315978][ T5822] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2021.333605][T21887] CIFS: Attempting to mount //127.0.0.1/share [ 2021.347733][T21887] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2021.355618][T21887] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2023.352829][ T5822] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2023.372835][ T5822] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2023.381963][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.640829][ T5822] usb 7-1: usb_control_msg returned -71 [ 2023.672818][ T5822] usbtmc 7-1:16.0: can't read capabilities [ 2023.729199][ T5822] usb 7-1: USB disconnect, device number 60 [ 2024.628129][ T6753] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2024.813702][ T6753] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2024.874257][ T6753] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2024.970470][ T6753] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2025.022802][ T6753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.066450][ T6753] usb 4-1: Product: syz [ 2025.070710][ T6753] usb 4-1: Manufacturer: syz [ 2025.142958][ T6753] usb 4-1: SerialNumber: syz [ 2026.370688][ T6753] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2027.144510][ T6753] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 2027.238724][ T6753] usb 4-1: USB disconnect, device number 59 [ 2027.464931][T21731] udevd[21731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2029.226928][T21936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4456'. [ 2029.406083][T21932] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4453'. [ 2029.555487][T21932] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4453'. [ 2030.036983][T21943] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2030.110985][T21947] netlink: 'syz.5.4454': attribute type 1 has an invalid length. [ 2030.211909][T21947] bond3: entered promiscuous mode [ 2030.218641][T21947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2030.364124][T12480] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2031.048019][T12480] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2031.099066][T12480] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2031.197118][T12480] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2031.262624][T12480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.322999][T12480] usb 5-1: usb_control_msg returned -32 [ 2032.328726][T12480] usbtmc 5-1:16.0: can't read capabilities [ 2033.663009][T10254] usb 5-1: USB disconnect, device number 32 [ 2034.282427][T21986] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4469'. [ 2034.291950][T21986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2034.325398][T21989] CIFS: Attempting to mount //127.0.0.1/share [ 2034.335223][T21989] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2034.345421][T21989] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2034.376622][T21990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4468'. [ 2034.425650][T21990] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4468'. [ 2037.205295][T22005] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2037.773497][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.779936][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.563557][ T5764] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 2039.789017][ T5764] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2039.824360][ T5764] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2039.886279][ T5764] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2039.895775][ T5764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.179403][ T5764] usb 7-1: usb_control_msg returned -32 [ 2040.201644][ T5764] usbtmc 7-1:16.0: can't read capabilities [ 2041.277366][T22024] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4479'. [ 2041.291007][T22024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2041.343105][ T23] usb 7-1: USB disconnect, device number 61 [ 2041.661850][T22029] sctp_transport_update_pmtu: 47 callbacks suppressed [ 2041.661866][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.682560][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.693810][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.704643][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.717078][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.727851][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.738742][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.751056][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.761882][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.772866][T22029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2041.933820][T22032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4482'. [ 2041.943659][T22032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2043.494549][T22044] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4484'. [ 2043.526704][T22044] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4484'. [ 2043.776439][T22047] CIFS: Attempting to mount //127.0.0.1/share [ 2043.794771][T22047] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2043.802542][T22047] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2045.945021][T22061] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4489'. [ 2045.954539][T22061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2049.833726][T22078] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4494'. [ 2049.918614][T22078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2050.063279][T22085] netlink: 'syz.5.4485': attribute type 1 has an invalid length. [ 2050.236110][T22085] bond4: entered promiscuous mode [ 2050.242465][T22085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2052.734999][T22093] CIFS: Attempting to mount //127.0.0.1/share [ 2052.750708][T22093] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2052.758672][T22093] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2053.008999][T22094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4497'. [ 2054.982889][T22094] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4497'. [ 2058.224621][T22114] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4502'. [ 2058.234298][T22114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2058.626381][T22120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4504'. [ 2059.258336][T12480] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2059.464539][T12480] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2059.511849][T12480] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2059.561849][T12480] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2059.612262][T12480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.666230][T22127] CIFS: Attempting to mount //127.0.0.1/share [ 2059.680583][T22127] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2059.688331][T22127] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2060.669494][T12480] usb 4-1: can't set config #16, error -71 [ 2060.832134][T12480] usb 4-1: USB disconnect, device number 60 [ 2061.210293][T22135] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4511'. [ 2061.221133][T22135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2061.925468][T22139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4508'. [ 2062.003045][T22139] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4508'. [ 2062.284186][T22145] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4513'. [ 2062.295258][T22145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2064.472956][T22159] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4515'. [ 2064.711845][ T6753] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 2066.600806][ T6753] usb 7-1: device descriptor read/all, error -71 [ 2067.914270][T22177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4522'. [ 2067.975764][T22177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4522'. [ 2068.013975][T22176] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4523'. [ 2068.023505][T22176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2068.279496][T22180] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4524'. [ 2068.289014][T22180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2070.645449][T22194] CIFS: Attempting to mount //127.0.0.1/share [ 2070.654583][T22194] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2070.662226][T22194] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2070.872110][T22201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4526'. [ 2072.162582][ T6753] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2072.665826][ T6753] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2074.230532][ T6753] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2074.357525][ T6753] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2074.389580][ T6753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.635344][ T6753] usb 5-1: usb_control_msg returned -32 [ 2074.641028][ T6753] usbtmc 5-1:16.0: can't read capabilities [ 2076.593875][ T23] usb 5-1: USB disconnect, device number 33 [ 2079.116658][T22243] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4533'. [ 2079.127731][T22243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2082.584019][T22261] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2082.837773][T22263] sctp_transport_update_pmtu: 47 callbacks suppressed [ 2082.837790][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.856378][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.867013][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.877683][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.890014][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.900766][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.911688][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.922438][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.933618][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2082.944389][T22263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2083.053173][ T5764] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 2084.146348][ T5764] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2084.162037][ T5764] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2084.176005][ T5764] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2084.193868][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.203267][T22271] CIFS: Attempting to mount //127.0.0.1/share [ 2084.218545][T22271] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2084.226373][T22271] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2085.013886][ T5764] usb 5-1: usb_control_msg returned -32 [ 2085.019961][ T5764] usbtmc 5-1:16.0: can't read capabilities [ 2085.369424][T22274] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4548'. [ 2085.379060][T22274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2085.659246][ T6753] usb 5-1: USB disconnect, device number 34 [ 2086.906612][T22292] netlink: 'syz.5.4552': attribute type 1 has an invalid length. [ 2087.099847][T22292] bond5: entered promiscuous mode [ 2087.106605][T22292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2092.282851][ T23] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2092.462957][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 2092.475489][ T23] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 2092.503218][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.542498][ T23] usb 4-1: config 0 has no interface number 0 [ 2092.559300][ T23] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 2092.570852][ T23] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2092.597946][ T23] usb 4-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2092.612125][ T23] usb 4-1: config 0 interface 239 has no altsetting 0 [ 2092.623076][ T8] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 2092.668912][ T23] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 2092.758929][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.837665][ T23] usb 4-1: Product: syz [ 2092.961691][ T23] usb 4-1: Manufacturer: syz [ 2093.046420][ T23] usb 4-1: SerialNumber: syz [ 2093.175941][ T23] usb 4-1: config 0 descriptor?? [ 2093.400542][ T23] usb 4-1: can't set config #0, error -71 [ 2093.513108][ T23] usb 4-1: USB disconnect, device number 61 [ 2093.619677][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2093.652857][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2093.692768][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2093.722296][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.978557][ T8] usb 6-1: usb_control_msg returned -32 [ 2093.994393][ T8] usbtmc 6-1:16.0: can't read capabilities [ 2094.031327][T22322] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4557'. [ 2094.040768][T22322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2094.568794][ T8] usb 6-1: USB disconnect, device number 61 [ 2098.524954][T22353] CIFS: Attempting to mount //127.0.0.1/share [ 2098.539561][T22353] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2098.547278][T22353] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2099.138231][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.218720][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.677721][T22361] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4571'. [ 2099.688369][T22361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2104.692850][T10254] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 2105.059210][T22399] CIFS: Attempting to mount //127.0.0.1/share [ 2105.072841][T22399] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2105.080920][T22399] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2106.153766][T22403] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4581'. [ 2106.164519][T22403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2106.872772][T21475] Bluetooth: hci0: command 0x0406 tx timeout [ 2114.739024][T22441] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4590'. [ 2114.749663][T22441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2118.396018][T22466] CIFS: Attempting to mount //127.0.0.1/share [ 2118.435711][T22466] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2118.475636][T22466] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2120.364051][T12480] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 2120.730894][T12480] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2120.806848][T12480] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2120.862857][T12480] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2120.892500][T12480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.074433][T22480] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4600'. [ 2121.085975][T22480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2121.167298][T12480] usb 4-1: usb_control_msg returned -32 [ 2121.186148][T12480] usbtmc 4-1:16.0: can't read capabilities [ 2122.166959][T12480] usb 4-1: USB disconnect, device number 62 [ 2123.005945][T21580] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 2123.016538][T21580] CPU: 1 PID: 21580 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2123.024298][T21580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2123.034415][T21580] Workqueue: hci0 hci_rx_work [ 2123.039189][T21580] Call Trace: [ 2123.042529][T21580] [ 2123.045518][T21580] dump_stack_lvl+0x18c/0x250 [ 2123.050273][T21580] ? show_regs_print_info+0x20/0x20 [ 2123.055553][T21580] ? load_image+0x420/0x420 [ 2123.060197][T21580] sysfs_create_dir_ns+0x26e/0x2a0 [ 2123.065379][T21580] ? __lock_acquire+0x7d80/0x7d80 [ 2123.070474][T21580] ? sysfs_warn_dup+0xa0/0xa0 [ 2123.075219][T21580] ? do_raw_spin_unlock+0x121/0x230 [ 2123.080502][T21580] kobject_add_internal+0x617/0xc90 [ 2123.085791][T21580] kobject_add+0x164/0x240 [ 2123.090294][T21580] ? kobject_init+0x1d0/0x1d0 [ 2123.095137][T21580] ? get_device_parent+0x366/0x390 [ 2123.100331][T21580] device_add+0x3fa/0xc40 [ 2123.104729][T21580] hci_conn_add_sysfs+0xd5/0x1e0 [ 2123.109740][T21580] le_conn_complete_evt+0xe9f/0x1480 [ 2123.115096][T21580] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 2123.121432][T21580] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2123.127152][T21580] ? mutex_unlock+0x10/0x10 [ 2123.131814][T21580] ? skb_pull_data+0xf0/0x1f0 [ 2123.136562][T21580] hci_le_conn_complete_evt+0x187/0x440 [ 2123.142188][T21580] ? hci_remote_host_features_evt+0x150/0x150 [ 2123.148337][T21580] hci_event_packet+0x7b4/0x1280 [ 2123.153348][T21580] ? __lock_acquire+0x7d80/0x7d80 [ 2123.158432][T21580] ? lock_chain_count+0x20/0x20 [ 2123.163352][T21580] ? bis_list+0x290/0x290 [ 2123.167836][T21580] ? kcov_remote_start+0x513/0x810 [ 2123.173016][T21580] ? lockdep_hardirqs_on+0x98/0x150 [ 2123.178282][T21580] ? hci_send_to_monitor+0xd7/0x4f0 [ 2123.183555][T21580] hci_rx_work+0x43a/0xd60 [ 2123.188044][T21580] ? process_scheduled_works+0x975/0x1600 [ 2123.193832][T21580] process_scheduled_works+0xa60/0x1600 [ 2123.199477][T21580] ? worker_attach_to_pool+0x370/0x370 [ 2123.205013][T21580] ? assign_work+0x3cc/0x5d0 [ 2123.209692][T21580] worker_thread+0xa5e/0xfe0 [ 2123.214364][T21580] ? _raw_spin_unlock+0x40/0x40 [ 2123.219306][T21580] ? __kthread_parkme+0x71/0x1c0 [ 2123.224324][T21580] kthread+0x2fa/0x390 [ 2123.228592][T21580] ? pr_cont_work+0x550/0x550 [ 2123.233341][T21580] ? kthread_blkcg+0xd0/0xd0 [ 2123.238075][T21580] ret_from_fork+0x48/0x80 [ 2123.242565][T21580] ? kthread_blkcg+0xd0/0xd0 [ 2123.247230][T21580] ret_from_fork_asm+0x11/0x20 [ 2123.252084][T21580] [ 2123.265691][T21580] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2123.281888][T21580] Bluetooth: hci0: failed to register connection device [ 2123.561690][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4602'. [ 2125.485144][T22491] hsr_slave_1 (unregistering): left promiscuous mode [ 2131.692810][T21475] Bluetooth: hci0: command 0x0406 tx timeout [ 2133.816433][T21580] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2133.918943][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4615'. [ 2140.955388][T22584] CIFS: Attempting to mount //127.0.0.1/share [ 2140.968928][T22584] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2140.976747][T22584] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2142.728090][T22590] netlink: 'syz.5.4627': attribute type 1 has an invalid length. [ 2142.911052][T22590] bond6: entered promiscuous mode [ 2142.917531][T22590] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2144.495444][T21475] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 2145.048304][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4628'. [ 2148.929655][T22619] autofs4:pid:22619:autofs_fill_super: called with bogus options [ 2149.020527][T22619] netlink: 'syz.4.4633': attribute type 10 has an invalid length. [ 2149.293955][T22619] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.301764][T22619] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.337763][T22619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.345512][T22619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2149.353970][T22619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.361836][T22619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2149.436219][T22619] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2151.992222][T22640] CIFS: Attempting to mount //127.0.0.1/share [ 2152.008618][T22640] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2152.016496][T22640] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2153.022776][T21580] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2153.208544][T22646] netlink: 'syz.6.4639': attribute type 1 has an invalid length. [ 2153.383962][T22646] bond2: entered promiscuous mode [ 2153.390676][T22646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2153.410299][T22643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4637'. [ 2155.736568][T22654] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4640'. [ 2155.754755][T22654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2155.923274][T22660] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4641'. [ 2159.505416][T21580] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2159.660650][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4650'. [ 2160.981348][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.989088][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.575171][T22708] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4653'. [ 2163.372742][ T23] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 2163.562969][ T23] usb 7-1: device descriptor read/64, error -71 [ 2165.510932][ T23] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 2166.296121][ T23] usb 7-1: device descriptor read/64, error -71 [ 2166.414451][ T23] usb usb7-port1: attempt power cycle [ 2170.305481][T21580] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2170.465468][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4663'. [ 2175.191825][T22775] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4666'. [ 2177.193325][T21580] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2177.276318][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4675'. [ 2178.008787][T22797] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4670'. [ 2178.049088][T22797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2183.496860][T22830] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4682'. [ 2184.102959][T21475] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2184.154293][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4685'. [ 2187.854380][T22864] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4692'. [ 2187.942486][T22867] netlink: 'syz.3.4687': attribute type 1 has an invalid length. [ 2188.064878][T22867] bond1: entered promiscuous mode [ 2188.071202][T22867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2197.804713][T22910] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4702'. [ 2198.058037][T21580] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2198.146107][T22919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 2199.917363][T22939] CIFS: Attempting to mount //127.0.0.1/share [ 2199.933238][T22939] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2199.941097][T22939] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2206.165404][T22968] netlink: 'syz.6.4704': attribute type 1 has an invalid length. [ 2206.331670][T22968] bond3: entered promiscuous mode [ 2206.338514][T22968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2206.791390][T21475] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2208.101539][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4714'. [ 2212.583272][T23005] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4715'. [ 2213.683212][T21580] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2214.400731][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4725'. [ 2218.631726][T23055] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4733'. [ 2221.062803][T21475] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2221.083801][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4736'. [ 2222.018589][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.025358][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.753215][ T23] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2223.017019][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2223.043712][ T23] usb 5-1: not running at top speed; connect to a high speed hub [ 2223.072330][ T23] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 2223.093224][ T23] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 2223.101572][ T23] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.133172][ T23] usb 5-1: config 14 has no interface number 0 [ 2223.139435][ T23] usb 5-1: config 14 has no interface number 1 [ 2223.160386][ T23] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2223.204220][ T23] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 2223.232848][ T23] usb 5-1: config 14 interface 57 has no altsetting 0 [ 2223.251430][ T23] usb 5-1: config 14 interface 228 has no altsetting 0 [ 2223.281660][ T23] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2223.309284][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.322260][ T23] usb 5-1: Product: syz [ 2223.328446][ T23] usb 5-1: Manufacturer: syz [ 2223.336638][ T23] usb 5-1: SerialNumber: syz [ 2223.566631][T23091] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4746'. [ 2223.790299][ T23] legousbtower 5-1:14.57: interrupt endpoints not found [ 2224.206903][ T23] legousbtower 5-1:14.228: interrupt endpoints not found [ 2224.803325][T23104] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4748'. [ 2224.972324][T21580] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2225.051307][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4750'. [ 2226.273815][ T5822] usb 5-1: USB disconnect, device number 35 [ 2228.143394][T23143] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4756'. [ 2229.087599][T23150] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4759'. [ 2229.106164][T21475] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2229.171684][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4760'. [ 2231.543609][T23176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4767'. [ 2232.597939][T21475] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2232.653621][T23195] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4772'. [ 2232.705981][T23199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4771'. [ 2235.917269][T23226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4777'. [ 2236.107082][T23227] netlink: 'syz.6.4770': attribute type 1 has an invalid length. [ 2236.217361][T23227] bond4: entered promiscuous mode [ 2236.223749][T23227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2240.561432][T23250] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4784'. [ 2243.826165][T23269] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4789'. [ 2244.763044][T23280] netlink: 'syz.5.4794': attribute type 1 has an invalid length. [ 2244.912087][T23280] bond7: entered promiscuous mode [ 2244.918672][T23280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2249.544040][T23298] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4797'. [ 2250.624024][T23305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4799'. [ 2254.750750][T23331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4807'. [ 2259.997813][T23353] netlink: 'syz.6.4805': attribute type 1 has an invalid length. [ 2260.146750][T23353] bond5: entered promiscuous mode [ 2260.153700][T23353] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2275.293078][T23414] CIFS: Attempting to mount //127.0.0.1/share [ 2275.303064][T23414] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2275.310522][T23414] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2275.686929][T21475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2276.608152][T21475] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2276.624200][T21475] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2276.639599][T21475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2276.653662][T21475] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2276.687252][T21475] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2277.957203][T23422] chnl_net:caif_netlink_parms(): no params data found [ 2278.743102][T21475] Bluetooth: hci3: command tx timeout [ 2280.872663][T21475] Bluetooth: hci3: command tx timeout [ 2282.979638][T21475] Bluetooth: hci3: command tx timeout [ 2283.385017][T23422] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.486461][T23422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.512065][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.530131][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.623115][T23422] bridge_slave_0: entered allmulticast mode [ 2283.747337][T23422] bridge_slave_0: entered promiscuous mode [ 2283.929232][T23422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.982809][T23422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.990268][T23422] bridge_slave_1: entered allmulticast mode [ 2284.000011][T23422] bridge_slave_1: entered promiscuous mode [ 2284.034558][T23422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2284.262293][ T6562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.369462][T23422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2284.833271][ T6562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.053306][T21475] Bluetooth: hci3: command tx timeout [ 2285.406926][ T6562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.452056][T23422] team0: Port device team_slave_0 added [ 2285.485721][T23422] team0: Port device team_slave_1 added [ 2285.570665][ T6562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.681202][T23422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2285.708999][T23422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2285.788469][T23422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2285.811418][T23422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2285.823019][T23422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2285.892881][T23422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2286.004097][T23422] hsr_slave_0: entered promiscuous mode [ 2286.018441][T23422] hsr_slave_1: entered promiscuous mode [ 2286.028243][T23422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2286.038406][T23422] Cannot create hsr debugfs directory [ 2286.104117][T23464] CIFS: Attempting to mount //127.0.0.1/share [ 2286.124342][T23464] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2286.132050][T23464] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2288.691231][ T6562] tipc: Left network mode [ 2291.114532][ T6562] bond1: (slave ip6erspan0): Releasing active interface [ 2293.207575][T23422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2293.821909][T23422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2294.036962][T23422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2294.276268][T23513] CIFS: Attempting to mount //127.0.0.1/share [ 2294.290582][T23513] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2294.298333][T23513] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2294.510420][T23422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2299.877883][ T6562] hsr_slave_0: left promiscuous mode [ 2299.916220][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2299.937747][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2299.958666][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2299.982689][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2300.013904][ T6562] bridge_slave_1: left allmulticast mode [ 2300.030311][ T6562] bridge_slave_1: left promiscuous mode [ 2300.050123][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.088187][ T6562] bridge_slave_0: left allmulticast mode [ 2300.105158][ T6562] bridge_slave_0: left promiscuous mode [ 2300.121470][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.311631][ T6562] veth1_macvtap: left promiscuous mode [ 2300.332678][ T6562] veth0_macvtap: left promiscuous mode [ 2300.338480][ T6562] veth1_vlan: left promiscuous mode [ 2300.365437][ T6562] veth0_vlan: left promiscuous mode [ 2303.489496][ T6562] bond4 (unregistering): Released all slaves [ 2308.696697][ T6562] bond3 (unregistering): Released all slaves [ 2309.336080][T21475] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2309.445341][ T6562] bond2 (unregistering): Released all slaves [ 2309.837966][ T6562] bond1 (unregistering): Released all slaves [ 2310.750998][ T6562] team0 (unregistering): Port device team_slave_1 removed [ 2310.829303][ T6562] team0 (unregistering): Port device team_slave_0 removed [ 2310.908279][ T6562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2310.995389][ T6562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2311.605789][ T6562] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2311.614903][ T6562] bond0 (unregistering): Released all slaves [ 2311.738554][T23584] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4863'. [ 2311.748330][T23585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4864'. [ 2311.881350][T23422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2312.022548][T23422] 8021q: adding VLAN 0 to HW filter on device team0 [ 2312.107086][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 2312.114393][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2312.146767][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 2312.154080][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2315.559859][ T6562] IPVS: stop unused estimator thread 0... [ 2317.269745][T23422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2319.062833][T23643] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4875'. [ 2319.665431][T23422] veth0_vlan: entered promiscuous mode [ 2319.680188][T23422] veth1_vlan: entered promiscuous mode [ 2319.736416][T23422] veth0_macvtap: entered promiscuous mode [ 2319.757631][T23422] veth1_macvtap: entered promiscuous mode [ 2319.791818][T23422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.807199][T23422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.820782][T23422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.836501][T23422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.846626][ T6753] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 2319.864677][T23422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.880454][T23422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.898753][T23422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2319.921355][T23422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.937821][T23422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.952151][T23422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.974649][T23422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.988779][T23422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.999855][T23422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.019010][T23422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2320.031963][T23422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.042007][T23422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.052950][T23422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.062395][ T6753] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2320.072439][T23422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.088803][ T6753] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2320.113151][ T6753] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2320.141994][ T6753] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2320.165892][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.196341][ T6753] usbtmc 6-1:16.0: bulk endpoints not found [ 2320.292839][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2320.328818][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2320.379371][ T6551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2320.391565][ T6551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.462865][ T8] usb 6-1: USB disconnect, device number 63 [ 2324.689825][T23580] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2324.966776][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4877'. [ 2325.600005][T23677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4883'. [ 2325.714890][T23677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2329.120996][T18406] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2329.357140][T18406] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2329.368869][T18406] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2329.429778][T18406] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2329.467259][T18406] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2329.502715][T18406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.560853][T18406] usbtmc 5-1:16.0: bulk endpoints not found [ 2331.184828][T21580] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2331.254586][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4893'. [ 2332.423747][ T8] usb 5-1: USB disconnect, device number 36 [ 2332.553842][T23725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4895'. [ 2332.672353][T23725] bond1: option mode: unable to set because the bond device is up [ 2339.728986][T21580] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2340.557535][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4903'. [ 2342.773191][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4907'. [ 2342.782349][T23768] bond1: option mode: unable to set because the bond device has slaves [ 2345.524371][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.530806][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.170199][T23786] CIFS: Attempting to mount //127.0.0.1/share [ 2347.178330][T23786] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2347.185900][T23786] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2347.901310][T23791] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4915'. [ 2349.761922][T23798] netlink: 'syz.5.4916': attribute type 1 has an invalid length. [ 2349.906184][T23798] bond8: entered promiscuous mode [ 2349.912809][T23798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2356.133389][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4918'. [ 2356.142344][T23825] bond2: option mode: unable to set because the bond device is up [ 2357.333914][ T5764] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 2357.832806][ T5764] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2357.872635][ T5764] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2357.898334][ T5764] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2357.916039][ T5764] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2357.932460][ T5764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.985778][ T5764] usbtmc: probe of 7-1:16.0 failed with error -22 [ 2358.599589][T23840] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4924'. [ 2360.675392][T18406] usb 7-1: USB disconnect, device number 67 [ 2363.384873][T23886] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4938'. [ 2365.982324][T23902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 2366.006217][T23902] bond2: option mode: unable to set because the bond device is up [ 2366.182679][ T8] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2366.404799][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2366.415068][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2366.425522][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2366.439031][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2366.448948][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.471641][ T8] usbtmc: probe of 5-1:16.0 failed with error -22 [ 2366.503931][T23908] CIFS: Attempting to mount //127.0.0.1/share [ 2366.635334][T23908] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2366.648763][T23908] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2368.023181][T23922] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4949'. [ 2368.965292][ T6753] usb 5-1: USB disconnect, device number 37 [ 2370.684939][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4954'. [ 2370.766523][T23937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2371.856298][T23955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4959'. [ 2373.132677][T20278] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 2375.427569][T20278] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2375.535519][T20278] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2375.602842][T20278] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2375.627441][T20278] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2378.096016][T20278] usb 7-1: usb_control_msg returned -71 [ 2378.119355][T20278] usbtmc 7-1:16.0: can't read capabilities [ 2378.178709][T20278] usb 7-1: USB disconnect, device number 68 [ 2378.627398][T23986] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4969'. [ 2382.497300][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4968'. [ 2382.523097][T24007] bond1: option mode: unable to set because the bond device is up [ 2382.563472][T24008] CIFS: Attempting to mount //127.0.0.1/share [ 2382.580619][T24008] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2382.605199][T24008] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2383.033000][T18063] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 2383.238201][T18063] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2383.268316][T18063] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2383.431943][T18063] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2383.561675][T18063] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.243310][T18063] usb 7-1: usb_control_msg returned -32 [ 2384.259694][T18063] usbtmc 7-1:16.0: can't read capabilities [ 2387.684578][ T6753] usb 7-1: USB disconnect, device number 69 [ 2394.235507][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4986'. [ 2394.251113][T24067] bond1: option mode: unable to set because the bond device is up [ 2397.084326][T24087] CIFS: Attempting to mount //127.0.0.1/share [ 2397.184006][T24087] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2397.191487][T24087] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2398.267798][ T5822] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 2399.574687][ T5822] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2399.592801][ T5822] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2399.613739][ T5822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2399.663770][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2399.905006][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5005'. [ 2399.923051][ T5822] usb 4-1: usb_control_msg returned -32 [ 2399.930915][T24106] bond1: option mode: unable to set because the bond device is up [ 2399.953909][ T5822] usbtmc 4-1:16.0: can't read capabilities [ 2401.664002][ T5822] usb 4-1: USB disconnect, device number 63 [ 2403.297394][T23580] Bluetooth: hci3: command 0x0406 tx timeout [ 2405.238684][T24131] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5004'. [ 2406.059171][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5015'. [ 2406.068565][T24135] bond1: option mode: unable to set because the bond device has slaves [ 2406.337654][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.371899][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2409.885119][T18063] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 2411.632307][T18063] usb 6-1: device descriptor read/all, error -71 [ 2412.815556][T24169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5024'. [ 2418.332633][ T5764] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 2418.554713][ T5764] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2418.572652][ T5764] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2418.625807][ T5764] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2418.643218][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.397635][ T5764] usb 5-1: usb_control_msg returned -32 [ 2420.409568][ T5764] usbtmc 5-1:16.0: can't read capabilities [ 2420.967795][ T5764] usb 5-1: USB disconnect, device number 38 [ 2431.862654][ T5764] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 2432.084826][ T5764] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2432.112919][ T5764] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2432.144249][ T5764] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2433.688419][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.802954][ T5764] usb 5-1: can't set config #16, error -71 [ 2433.842843][ T5764] usb 5-1: USB disconnect, device number 39 [ 2439.894730][T24289] FAULT_INJECTION: forcing a failure. [ 2439.894730][T24289] name failslab, interval 1, probability 0, space 0, times 0 [ 2439.962771][T24289] CPU: 1 PID: 24289 Comm: syz.3.5058 Not tainted syzkaller #0 [ 2439.970358][T24289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2439.980494][T24289] Call Trace: [ 2439.984276][T24289] [ 2439.987255][T24289] dump_stack_lvl+0x18c/0x250 [ 2439.992028][T24289] ? show_regs_print_info+0x20/0x20 [ 2439.997294][T24289] ? load_image+0x420/0x420 [ 2440.001951][T24289] ? __might_sleep+0xe0/0xe0 [ 2440.006610][T24289] ? __lock_acquire+0x7d80/0x7d80 [ 2440.011705][T24289] should_fail_ex+0x394/0x4c0 [ 2440.016440][T24289] should_failslab+0x9/0x20 [ 2440.020985][T24289] slab_pre_alloc_hook+0x59/0x300 [ 2440.026059][T24289] ? zone_statistics+0x170/0x170 [ 2440.031082][T24289] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 2440.036756][T24289] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 2440.042432][T24289] __kmem_cache_alloc_node+0x53/0x250 [ 2440.047861][T24289] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 2440.053532][T24289] __kmalloc_node+0xa6/0x240 [ 2440.058176][T24289] ? lock_chain_count+0x20/0x20 [ 2440.063071][T24289] memcg_alloc_slab_cgroups+0x85/0x120 [ 2440.068569][T24289] new_slab+0xc3/0x2d0 [ 2440.072687][T24289] ___slab_alloc+0xc5c/0x12f0 [ 2440.077415][T24289] ? sk_prot_alloc+0x57/0x210 [ 2440.082217][T24289] kmem_cache_alloc+0x109/0x2c0 [ 2440.087122][T24289] ? sk_prot_alloc+0x57/0x210 [ 2440.091851][T24289] sk_prot_alloc+0x57/0x210 [ 2440.096491][T24289] ? sk_alloc+0x24/0x350 [ 2440.100778][T24289] sk_alloc+0x3a/0x350 [ 2440.104890][T24289] inet_create+0x7a9/0xfe0 [ 2440.109381][T24289] ? inet_create+0x9d/0xfe0 [ 2440.113928][T24289] __sock_create+0x49e/0x940 [ 2440.118565][T24289] __sys_socket+0xd7/0x1b0 [ 2440.123031][T24289] __x64_sys_socket+0x7a/0x90 [ 2440.127777][T24289] do_syscall_64+0x55/0xb0 [ 2440.132257][T24289] ? clear_bhb_loop+0x40/0x90 [ 2440.137061][T24289] ? clear_bhb_loop+0x40/0x90 [ 2440.141788][T24289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2440.147728][T24289] RIP: 0033:0x7f2b9e99e159 [ 2440.152190][T24289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2440.171884][T24289] RSP: 002b:00007f2b9f855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2440.180563][T24289] RAX: ffffffffffffffda RBX: 00007f2b9ec25fa0 RCX: 00007f2b9e99e159 [ 2440.188568][T24289] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 2440.196570][T24289] RBP: 00007f2b9ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 2440.204574][T24289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2440.212582][T24289] R13: 00007f2b9ec26038 R14: 00007f2b9ec25fa0 R15: 00007ffec9bff5b8 [ 2440.220604][T24289] [ 2440.608506][ T5764] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2440.675761][T18406] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2442.272935][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 2442.285473][ T5764] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2442.304802][ T5764] usb 4-1: config 14 has an invalid interface number: 226 but max is 0 [ 2442.322929][ T5764] usb 4-1: config 14 has no interface number 0 [ 2442.329733][ T5764] usb 4-1: config 14 interface 226 has no altsetting 0 [ 2442.343937][ T5764] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b [ 2442.363206][T18406] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 2442.381822][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.390064][T18406] usb 7-1: config 0 has no interface number 0 [ 2442.402912][T18406] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2442.413694][ T5764] usb 4-1: Product: syz [ 2442.417921][ T5764] usb 4-1: Manufacturer: syz [ 2442.433359][ T5764] usb 4-1: SerialNumber: syz [ 2442.439367][T18406] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2442.532827][T18406] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2442.543213][T18406] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.552451][T18406] usb 7-1: Product: syz [ 2442.556836][T18406] usb 7-1: Manufacturer: syz [ 2442.561517][T18406] usb 7-1: SerialNumber: syz [ 2442.572710][T18406] usb 7-1: config 0 descriptor?? [ 2442.579009][T24294] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2442.615623][T18406] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2442.649142][T18406] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2443.084646][T18406] usb 7-1: USB disconnect, device number 70 [ 2443.147786][T18406] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2443.160975][T18406] cyberjack 7-1:0.69: device disconnected [ 2448.754384][ T5764] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 2451.437298][T23996] usb 4-1: USB disconnect, device number 64 [ 2456.520144][T23996] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2456.642032][T24360] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5078'. [ 2457.414969][T23996] usb 4-1: Using ep0 maxpacket: 8 [ 2457.471710][T23996] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2457.523235][T24363] CIFS: Attempting to mount //127.0.0.1/share [ 2457.531144][T24363] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2457.539955][T24363] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2457.546865][T23996] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 2457.603392][T23996] usb 4-1: string descriptor 0 read error: -71 [ 2457.609817][T23996] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2457.642481][T23996] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2457.667173][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 2457.687840][T23996] usb 4-1: config 0 descriptor?? [ 2457.712179][T24365] bond1: option mode: unable to set because the bond device is up [ 2457.720897][T23996] usb 4-1: can't set config #0, error -71 [ 2457.734091][T23996] usb 4-1: USB disconnect, device number 65 [ 2457.817831][T24369] ------------[ cut here ]------------ [ 2457.823757][T24369] WARNING: CPU: 0 PID: 24369 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2ee/0x3c0 [ 2457.834013][T24369] Modules linked in: [ 2457.837971][T24369] CPU: 0 PID: 24369 Comm: syz.6.5083 Not tainted syzkaller #0 [ 2457.845802][T24369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2457.856003][T24369] RIP: 0010:nft_socket_init+0x2ee/0x3c0 [ 2457.861618][T24369] Code: 30 84 c0 0f 85 d8 00 00 00 41 88 2c 24 bd 08 00 00 00 e9 b2 fe ff ff 89 f3 e8 5e 9b a8 f8 89 d8 e9 5c ff ff ff e8 52 9b a8 f8 <0f> 0b e9 4b ff ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 2457.881572][T24369] RSP: 0018:ffffc900033471d8 EFLAGS: 00010287 [ 2457.887814][T24369] RAX: ffffffff88ded71e RBX: ffff88805f320020 RCX: 0000000000080000 [ 2457.895946][T24369] RDX: ffffc900189ac000 RSI: 00000000000024e1 RDI: 00000000000024e2 [ 2457.904195][T24369] RBP: 00000000000000ff R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 2457.912227][T24369] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 0000000000000100 [ 2457.920400][T24369] R13: ffff88814c770298 R14: dffffc0000000000 R15: 1ffff1100be64004 [ 2457.928950][T24369] FS: 00007fe5e07be6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2457.938019][T24369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2457.944694][T24369] CR2: 00007fe5df988fc0 CR3: 000000005d076000 CR4: 00000000003506f0 [ 2457.953070][T24369] Call Trace: [ 2457.956413][T24369] [ 2457.959403][T24369] nf_tables_newrule+0x176e/0x2870 [ 2457.964714][T24369] ? nf_tables_delchain+0x1050/0x1050 [ 2457.970179][T24369] ? __lock_acquire+0x7d80/0x7d80 [ 2457.975358][T24369] ? mutex_unlock+0x10/0x10 [ 2457.979939][T24369] ? __nla_parse+0x40/0x50 [ 2457.984458][T24369] nfnetlink_rcv+0x1133/0x2490 [ 2457.989427][T24369] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 2457.995170][T24369] ? __lock_acquire+0x7d80/0x7d80 [ 2458.000271][T24369] ? netlink_deliver_tap+0x2e/0x1b0 [ 2458.005638][T24369] netlink_unicast+0x7b1/0x930 [ 2458.010477][T24369] netlink_sendmsg+0x8d0/0xbf0 [ 2458.015396][T24369] ? netlink_getsockopt+0x590/0x590 [ 2458.020657][T24369] ? apparmor_socket_sendmsg+0x170/0x330 [ 2458.026439][T24369] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2458.031790][T24369] ? security_socket_sendmsg+0x80/0xa0 [ 2458.037363][T24369] ? netlink_getsockopt+0x590/0x590 [ 2458.042647][T24369] ____sys_sendmsg+0x61b/0x980 [ 2458.047806][T24369] ? __asan_memset+0x22/0x40 [ 2458.052465][T24369] ? __sys_sendmsg_sock+0x30/0x30 [ 2458.057776][T24369] ? __import_iovec+0x5f2/0x850 [ 2458.062762][T24369] ? import_iovec+0x73/0xa0 [ 2458.067336][T24369] ___sys_sendmsg+0x2a6/0x360 [ 2458.072072][T24369] ? __sys_sendmsg+0x2b0/0x2b0 [ 2458.077001][T24369] __se_sys_sendmsg+0x1d0/0x2c0 [ 2458.081911][T24369] ? __x64_sys_sendmsg+0x80/0x80 [ 2458.086985][T24369] ? lockdep_hardirqs_on+0x98/0x150 [ 2458.092261][T24369] do_syscall_64+0x55/0xb0 [ 2458.097284][T24369] ? clear_bhb_loop+0x40/0x90 [ 2458.102024][T24369] ? clear_bhb_loop+0x40/0x90 [ 2458.106822][T24369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2458.112802][T24369] RIP: 0033:0x7fe5df99e159 [ 2458.117294][T24369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2458.137147][T24369] RSP: 002b:00007fe5e07be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2458.145667][T24369] RAX: ffffffffffffffda RBX: 00007fe5dfc25fa0 RCX: 00007fe5df99e159 [ 2458.154028][T24369] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 2458.162063][T24369] RBP: 00007fe5dfa35024 R08: 0000000000000000 R09: 0000000000000000 [ 2458.170137][T24369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2458.178395][T24369] R13: 00007fe5dfc26038 R14: 00007fe5dfc25fa0 R15: 00007ffe035ebe18 [ 2458.186489][T24369] [ 2458.189563][T24369] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2458.196906][T24369] CPU: 0 PID: 24369 Comm: syz.6.5083 Not tainted syzkaller #0 [ 2458.204412][T24369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2458.214612][T24369] Call Trace: [ 2458.217940][T24369] [ 2458.220913][T24369] dump_stack_lvl+0x18c/0x250 [ 2458.225656][T24369] ? show_regs_print_info+0x20/0x20 [ 2458.230906][T24369] ? load_image+0x420/0x420 [ 2458.235479][T24369] panic+0x2ca/0x720 [ 2458.239452][T24369] ? bpf_jit_dump+0xd0/0xd0 [ 2458.244033][T24369] __warn+0x2e0/0x470 [ 2458.248067][T24369] ? nft_socket_init+0x2ee/0x3c0 [ 2458.253057][T24369] ? nft_socket_init+0x2ee/0x3c0 [ 2458.258042][T24369] report_bug+0x2be/0x4f0 [ 2458.262426][T24369] ? nft_socket_init+0x2ee/0x3c0 [ 2458.267413][T24369] ? nft_socket_init+0x2ee/0x3c0 [ 2458.272405][T24369] ? nft_socket_init+0x2f0/0x3c0 [ 2458.277395][T24369] handle_bug+0xcf/0x120 [ 2458.281695][T24369] exc_invalid_op+0x1a/0x50 [ 2458.286247][T24369] asm_exc_invalid_op+0x1a/0x20 [ 2458.291183][T24369] RIP: 0010:nft_socket_init+0x2ee/0x3c0 [ 2458.296792][T24369] Code: 30 84 c0 0f 85 d8 00 00 00 41 88 2c 24 bd 08 00 00 00 e9 b2 fe ff ff 89 f3 e8 5e 9b a8 f8 89 d8 e9 5c ff ff ff e8 52 9b a8 f8 <0f> 0b e9 4b ff ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 2458.316452][T24369] RSP: 0018:ffffc900033471d8 EFLAGS: 00010287 [ 2458.322572][T24369] RAX: ffffffff88ded71e RBX: ffff88805f320020 RCX: 0000000000080000 [ 2458.330600][T24369] RDX: ffffc900189ac000 RSI: 00000000000024e1 RDI: 00000000000024e2 [ 2458.338656][T24369] RBP: 00000000000000ff R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 2458.346686][T24369] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 0000000000000100 [ 2458.354712][T24369] R13: ffff88814c770298 R14: dffffc0000000000 R15: 1ffff1100be64004 [ 2458.362843][T24369] ? nft_socket_init+0x2ee/0x3c0 [ 2458.367847][T24369] ? nft_socket_init+0x2ee/0x3c0 [ 2458.372861][T24369] nf_tables_newrule+0x176e/0x2870 [ 2458.378048][T24369] ? nf_tables_delchain+0x1050/0x1050 [ 2458.383486][T24369] ? __lock_acquire+0x7d80/0x7d80 [ 2458.388564][T24369] ? mutex_unlock+0x10/0x10 [ 2458.393155][T24369] ? __nla_parse+0x40/0x50 [ 2458.397668][T24369] nfnetlink_rcv+0x1133/0x2490 [ 2458.402549][T24369] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 2458.408298][T24369] ? __lock_acquire+0x7d80/0x7d80 [ 2458.413398][T24369] ? netlink_deliver_tap+0x2e/0x1b0 [ 2458.418680][T24369] netlink_unicast+0x7b1/0x930 [ 2458.423512][T24369] netlink_sendmsg+0x8d0/0xbf0 [ 2458.428339][T24369] ? netlink_getsockopt+0x590/0x590 [ 2458.433595][T24369] ? apparmor_socket_sendmsg+0x170/0x330 [ 2458.439302][T24369] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2458.444697][T24369] ? security_socket_sendmsg+0x80/0xa0 [ 2458.450254][T24369] ? netlink_getsockopt+0x590/0x590 [ 2458.455529][T24369] ____sys_sendmsg+0x61b/0x980 [ 2458.460452][T24369] ? __asan_memset+0x22/0x40 [ 2458.465110][T24369] ? __sys_sendmsg_sock+0x30/0x30 [ 2458.470198][T24369] ? __import_iovec+0x5f2/0x850 [ 2458.475126][T24369] ? import_iovec+0x73/0xa0 [ 2458.479712][T24369] ___sys_sendmsg+0x2a6/0x360 [ 2458.484474][T24369] ? __sys_sendmsg+0x2b0/0x2b0 [ 2458.489436][T24369] __se_sys_sendmsg+0x1d0/0x2c0 [ 2458.494340][T24369] ? __x64_sys_sendmsg+0x80/0x80 [ 2458.499340][T24369] ? lockdep_hardirqs_on+0x98/0x150 [ 2458.504600][T24369] do_syscall_64+0x55/0xb0 [ 2458.509071][T24369] ? clear_bhb_loop+0x40/0x90 [ 2458.513793][T24369] ? clear_bhb_loop+0x40/0x90 [ 2458.518522][T24369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2458.524458][T24369] RIP: 0033:0x7fe5df99e159 [ 2458.528911][T24369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2458.548563][T24369] RSP: 002b:00007fe5e07be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2458.557036][T24369] RAX: ffffffffffffffda RBX: 00007fe5dfc25fa0 RCX: 00007fe5df99e159 [ 2458.565058][T24369] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 2458.573073][T24369] RBP: 00007fe5dfa35024 R08: 0000000000000000 R09: 0000000000000000 [ 2458.581082][T24369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2458.589101][T24369] R13: 00007fe5dfc26038 R14: 00007fe5dfc25fa0 R15: 00007ffe035ebe18 [ 2458.597134][T24369] [ 2458.600754][T24369] Kernel Offset: disabled [ 2458.605209][T24369] Rebooting in 86400 seconds..