last executing test programs: 2m28.777853428s ago: executing program 0 (id=771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635765478", 0x49}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb8", 0x91}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc", 0xe5}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m28.627113998s ago: executing program 0 (id=773): openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m28.46116062s ago: executing program 0 (id=775): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r3) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m23.921822795s ago: executing program 0 (id=779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x4}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$cgroup_pid(r1, &(0x7f00000001c0)=0xffffffffffffffff, 0x12) 2m23.84012452s ago: executing program 0 (id=781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635765478", 0x49}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb8", 0x91}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc", 0xe5}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m23.524933312s ago: executing program 0 (id=786): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x254, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1, 0x3}, {0x0, 0xffe1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x224, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x10000}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x10001}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x6f, &(0x7f00000000c0)={0x0, 0x410e, 0x8000, 0x2, 0x2ef}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r6, 0x0, 0x40) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x10000025, {0x0, 0xff}, {0x2, 0x0, 0x1}, 0xff, 0xfffffffffffffffe}, {0x0, 0x0, {}, {0x2, 0x1, 0x4}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x3}, {0x1}, 0x1}, {0x1, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xff, 0x2}, 0xfd, 0x2}], 0x70) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfff1, 0xfff2}, {0xfff1, 0xffe0}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20000050) io_uring_enter(r4, 0x18e6, 0xf90c, 0x4, &(0x7f0000000380)={[0x3]}, 0x8) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a", 0x49}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m7.52987688s ago: executing program 32 (id=786): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x254, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1, 0x3}, {0x0, 0xffe1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x224, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x10000}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x10001}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x6f, &(0x7f00000000c0)={0x0, 0x410e, 0x8000, 0x2, 0x2ef}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r6, 0x0, 0x40) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x10000025, {0x0, 0xff}, {0x2, 0x0, 0x1}, 0xff, 0xfffffffffffffffe}, {0x0, 0x0, {}, {0x2, 0x1, 0x4}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x3}, {0x1}, 0x1}, {0x1, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xff, 0x2}, 0xfd, 0x2}], 0x70) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfff1, 0xfff2}, {0xfff1, 0xffe0}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20000050) io_uring_enter(r4, 0x18e6, 0xf90c, 0x4, &(0x7f0000000380)={[0x3]}, 0x8) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a", 0x49}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 10.906975893s ago: executing program 1 (id=1205): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$inet(r0, &(0x7f00000062c0)="f33199e97a7aeef35558eee84e4831917699c77cf87d7c520e8395020c848ade06b3a40793b3df05434d5c9e94f305ef9474172d3a95537a6d6cad110c94976199031d3c3204a1c89b12bafa7dc06d86606aa40f74b1e85e56355829284ba17b73828ede2c522b9765c1d83f59f66b7cf0eeb849e3c89a6d7fec35d1d5fe4f5ae16803bb29505730cb9f80b93cb7e6c8b59906d1c68c374a30dcc653f7628b452853deafa605526752355a04996bd39c437ac2c7b6da72fcde0a0e1656bed39c01b4ab98b39d2cdc4bc3d5c82d387828861e4e8d93c9083a8da84bd2", 0xfffffffffffffdd3, 0x1000c095, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 8.401903787s ago: executing program 1 (id=1211): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 8.332779162s ago: executing program 1 (id=1214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0x6, 0x7, 0x2, 0x9}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/526, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000f02ffe9ec85fa5769442fddca420151904df28cf570c9571a9c43a52fbd3fd7253938a15b43b4a91dc36cb01dbbd3a5f35f9eaa1bbed44fa23987073aa524c1c2f1aea7d46317f4ed1a28f0abf59d57fad5b474ec47a4af94f482a438eca44cc1d8f32452b97b84fd3c2dfa4bff9a668005fcc6911", @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000"], 0x0) unshare(0x40020000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 8.025813143s ago: executing program 2 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c000280050001d82ee2a8001400018008000100ac1414"], 0x88}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0800006800e978000000b1cd3f98920a0000000d"], 0x1c}}, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x1, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0fff03000029bf81c173f4a8f5f73eb62f"}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0xe7ff, 0x0, 0x34324241, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x40, 0x0, &(0x7f00000005c0)=[@release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @register_looper, @increfs={0x40046304, 0x1}], 0x8e, 0x0, &(0x7f0000000640)="61336d65cb22c5e6ee4d18d833dd74fa4f73ed38b4be57addb5941821e79e08ded323628925bec64d433544bcfcb341fa60688fd2877772865e20289cc01d24470fa42494486ac7b4c8bd7ac354cce57e6ac5678de7cb51f885494886414bd90d80028355fd4753a72d8227aff3ae63dd156d2b68d468607d001f2689369f3d76c49d8dbd2eb58532bd57f1327fe"}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0016030048f4e26e9de196e3341576ec48059e785d2f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.118467664s ago: executing program 1 (id=1218): syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x2000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0xffff0000, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x25}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DSTLEN, @SEG6_ATTR_HMACKEYID={0x3, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x0, 0x3, 0x3}]}, 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.117043924s ago: executing program 2 (id=1219): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003100)=@newtaction={0x194, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0x88, 0x1, [@m_skbedit={0x84, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x8}}]}, {0x4d, 0x6, "a89c8d3290a687e42ac4510ada767e9fb80ad6dff828eb5e6235c0c180479ec7c252323f8806574cdea774aed480d74752401c70bcfa6a70f5f7ffd9584800d99985f8e4095a90bc5a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0xf8, 0x1, [@m_skbmod={0xc8, 0x1d, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x20000000, 0xd04, 0x8}, 0x7}}]}, {0x3e, 0x6, "f81782037c8e1f7fce7d04f75d2d01876efef68b43bf9d7429e02add52bbc63558b0e66dedf8acc979dd8b9447688285bceab64aea3c8eb6e322"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.74535452s ago: executing program 2 (id=1221): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa8a0a63cdec59080600010800060400025419b294a2ceac1414bbd787e84e444189"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.565650172s ago: executing program 2 (id=1224): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpriority(0x0, 0xffffffffffffffff) 3.512690736s ago: executing program 4 (id=1225): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 3.329650649s ago: executing program 1 (id=1226): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) r0 = eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x8, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}]) 3.320804749s ago: executing program 2 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0x6, 0x7, 0x2, 0x9}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/526, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000f02ffe9ec85fa5769442fddca420151904df28cf570c9571a9c43a52fbd3fd7253938a15b43b4a91dc36cb01dbbd3a5f35f9eaa1bbed44fa23987073aa524c1c2f1aea7d46317f4ed1a28f0abf59d57fad5b474ec47a4af94f482a438eca44cc1d8f32452b97b84fd3c2dfa4bff9a668005fcc6911", @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000"], 0x0) unshare(0x40020000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.159972529s ago: executing program 3 (id=1228): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) write$tun(r0, 0x0, 0xfdef) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000800)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400000004034ec7fc4cb86d430720be6e04"], 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000002c0)={0x1, 0x3, 0x1, &(0x7f0000000240)={0xe, "2b1b9951e95a1dee9300000a00000000000000000000000686e66cb299dcd6b800"}}) 602.826148ms ago: executing program 4 (id=1229): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000001, 0x6, 0x6}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 497.778955ms ago: executing program 3 (id=1230): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy_home_node(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x1, 0x0) 497.564275ms ago: executing program 4 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 465.122837ms ago: executing program 3 (id=1232): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r0, @ANYBLOB="00000000000000000c001a8008000480"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 438.713869ms ago: executing program 4 (id=1233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0)=0x2, 0x4) 373.780644ms ago: executing program 3 (id=1234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635765478", 0x49}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb8", 0x91}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc", 0xe5}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 313.630908ms ago: executing program 4 (id=1235): syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x2000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0xffff0000, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x25}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DSTLEN, @SEG6_ATTR_HMACKEYID={0x3, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x0, 0x3, 0x3}]}, 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 269.656511ms ago: executing program 3 (id=1236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 198.194266ms ago: executing program 1 (id=1237): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)="f3b1de59de0557c0412319e0d7388632a82e4bf8e2c0aac73cd46a68a843508ad6df8ac8c36660ee60582f174428a61d33a70570d858ba51f0172bbca99489a371c6e32aa4bb4256d5a78362819fba16475ecf6f383b6716d1d1bb372ed989404338f6bd45c0047cfb636142bbe6533201324a6863296f6da966271000005068444559f9c95fe28e580340adc86ede21d4b2ae19a5e4de182f546f2827a2f72aee30f1a688403972e6941a2a946b88c1f5f27a6194c228a56ea51cf3756dce0941ed8d727e1fe9a3746255e108e35dbbd3cb6decb743d629", 0xd8}, {0x0}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000380)=0x8, 0x4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r4, 0x731, 0x80000004, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r8, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000080)}], 0x2) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000080000000060a010400000000000000000100000008000b4000000000500004804c0001800a00010071756f74610000003c0002800c00044000000000000007ff08000240000000000c0001400000"], 0xf4}}, 0x0) 194.532636ms ago: executing program 4 (id=1238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 64.119575ms ago: executing program 3 (id=1239): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TUNSETOFFLOAD(r1, 0x5411, 0xf0ff1f00000000) 0s ago: executing program 2 (id=1240): fcntl$notify(0xffffffffffffffff, 0x402, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x88, 0x4, 0x3, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0x80000c74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7ffffffb, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0b0, 0x9, 0x6, 0x2, 0x80, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc488, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0x8, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0xffffffff, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) close(r2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c035}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 4] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.322611][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.356017][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.373819][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.395520][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.406052][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.416246][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.435923][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.444592][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.453161][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.469374][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.478939][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.487883][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.496879][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.504799][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.515688][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.976121][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 86.087440][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 86.108731][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.137876][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.227873][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.238757][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.246649][ T5769] bridge_slave_0: entered allmulticast mode [ 86.254102][ T5769] bridge_slave_0: entered promiscuous mode [ 86.274235][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.283692][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.292001][ T5769] bridge_slave_1: entered allmulticast mode [ 86.299896][ T5769] bridge_slave_1: entered promiscuous mode [ 86.406305][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.413560][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.421217][ T5773] bridge_slave_0: entered allmulticast mode [ 86.429227][ T5773] bridge_slave_0: entered promiscuous mode [ 86.440378][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.484480][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.492862][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.501265][ T5773] bridge_slave_1: entered allmulticast mode [ 86.509543][ T5773] bridge_slave_1: entered promiscuous mode [ 86.518933][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.541471][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.549168][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.556677][ T5777] bridge_slave_0: entered allmulticast mode [ 86.564487][ T5777] bridge_slave_0: entered promiscuous mode [ 86.608161][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.616384][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.623598][ T5778] bridge_slave_0: entered allmulticast mode [ 86.631478][ T5778] bridge_slave_0: entered promiscuous mode [ 86.639592][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.647462][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.655544][ T5777] bridge_slave_1: entered allmulticast mode [ 86.662939][ T5777] bridge_slave_1: entered promiscuous mode [ 86.672824][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.686309][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.708156][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.716929][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.724206][ T5778] bridge_slave_1: entered allmulticast mode [ 86.731794][ T5778] bridge_slave_1: entered promiscuous mode [ 86.774414][ T5769] team0: Port device team_slave_0 added [ 86.817172][ T5769] team0: Port device team_slave_1 added [ 86.825945][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.839385][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.851355][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.865628][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.880746][ T5773] team0: Port device team_slave_0 added [ 86.924824][ T5773] team0: Port device team_slave_1 added [ 86.987649][ T5777] team0: Port device team_slave_0 added [ 86.996716][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.004165][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.032880][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.047096][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.054119][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.085072][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.099805][ T5778] team0: Port device team_slave_0 added [ 87.118969][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.126107][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.152819][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.167575][ T5777] team0: Port device team_slave_1 added [ 87.174476][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.182308][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.209450][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.250719][ T5778] team0: Port device team_slave_1 added [ 87.357321][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.364356][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.391907][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.403736][ T5085] Bluetooth: hci0: command tx timeout [ 87.409530][ T51] Bluetooth: hci1: command tx timeout [ 87.430145][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.441970][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.473434][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.485067][ T5085] Bluetooth: hci2: command tx timeout [ 87.502345][ T5769] hsr_slave_0: entered promiscuous mode [ 87.515281][ T5769] hsr_slave_1: entered promiscuous mode [ 87.530543][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.537956][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.564571][ T5085] Bluetooth: hci3: command tx timeout [ 87.572929][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.603188][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.616060][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.647917][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.701486][ T5773] hsr_slave_0: entered promiscuous mode [ 87.711770][ T5773] hsr_slave_1: entered promiscuous mode [ 87.720359][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.729227][ T5773] Cannot create hsr debugfs directory [ 87.880774][ T5778] hsr_slave_0: entered promiscuous mode [ 87.905738][ T5778] hsr_slave_1: entered promiscuous mode [ 87.912707][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.920849][ T5778] Cannot create hsr debugfs directory [ 87.955555][ T5777] hsr_slave_0: entered promiscuous mode [ 87.962284][ T5777] hsr_slave_1: entered promiscuous mode [ 87.969301][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.977948][ T5777] Cannot create hsr debugfs directory [ 88.385224][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.404536][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.419492][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.430661][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.512325][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.527341][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.541963][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.552664][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.654703][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.668832][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.681099][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.698857][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.772209][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.796103][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.818093][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.830319][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.870419][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.933876][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.981230][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.004016][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.011694][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.063604][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.070954][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.103308][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.139553][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.147147][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.170307][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.177917][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.229899][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.278925][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.362952][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.384693][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.420670][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.428036][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.463579][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.470976][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.478847][ T5085] Bluetooth: hci1: command tx timeout [ 89.485580][ T5085] Bluetooth: hci0: command tx timeout [ 89.497246][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.504568][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.534221][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.541541][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.562313][ T51] Bluetooth: hci2: command tx timeout [ 89.635160][ T51] Bluetooth: hci3: command tx timeout [ 89.775250][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.926065][ T5778] veth0_vlan: entered promiscuous mode [ 89.953831][ T5778] veth1_vlan: entered promiscuous mode [ 90.049350][ T5778] veth0_macvtap: entered promiscuous mode [ 90.074435][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.112037][ T5778] veth1_macvtap: entered promiscuous mode [ 90.186852][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.212546][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.290049][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.308741][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.320252][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.329921][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.340174][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.371915][ T5777] veth0_vlan: entered promiscuous mode [ 90.433601][ T5777] veth1_vlan: entered promiscuous mode [ 90.525595][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.550507][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.560026][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.613132][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.625978][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.642787][ T5773] veth0_vlan: entered promiscuous mode [ 90.659033][ T5777] veth0_macvtap: entered promiscuous mode [ 90.688176][ T5777] veth1_macvtap: entered promiscuous mode [ 90.724597][ T5773] veth1_vlan: entered promiscuous mode [ 90.774114][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.789521][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.806023][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.854137][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.870430][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.882517][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.919305][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.931492][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.934723][ T5831] syz.0.1[5831]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.943372][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.968481][ T5831] loop0: detected capacity change from 0 to 256 [ 90.975030][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.985272][ T5769] veth0_vlan: entered promiscuous mode [ 91.003061][ T5831] exfat: Deprecated parameter 'namecase' [ 91.030957][ T5831] exfat: Deprecated parameter 'namecase' [ 91.069851][ T5773] veth0_macvtap: entered promiscuous mode [ 91.093674][ T5773] veth1_macvtap: entered promiscuous mode [ 91.103234][ T5831] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 91.119786][ T5769] veth1_vlan: entered promiscuous mode [ 91.248590][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.260600][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.271757][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.285063][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.298660][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.358849][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.393813][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.409164][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.422836][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.444768][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.471174][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482873][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.492963][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.502144][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.522109][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.549570][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.557489][ T51] Bluetooth: hci0: command tx timeout [ 91.557553][ T51] Bluetooth: hci1: command tx timeout [ 91.571703][ T5769] veth0_macvtap: entered promiscuous mode [ 91.609797][ T5769] veth1_macvtap: entered promiscuous mode [ 91.635118][ T5085] Bluetooth: hci2: command tx timeout [ 91.674025][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.702201][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.713006][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.723810][ T5085] Bluetooth: hci3: command tx timeout [ 91.731421][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.741902][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.753361][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.763663][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.774383][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.787215][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.803594][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.825549][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.837655][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.842166][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.851168][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.866553][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.877863][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.889697][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.902171][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.954199][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.963326][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.973856][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984258][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.993265][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.005937][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252426][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.266956][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.362607][ T967] cfg80211: failed to load regulatory.db [ 92.401563][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.465035][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.567730][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.593465][ T5849] loop2: detected capacity change from 0 to 512 [ 92.679973][ T5847] loop1: detected capacity change from 0 to 4096 [ 92.737899][ T5847] EXT4-fs: inline encryption not supported [ 92.812497][ T5849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.863797][ T5859] loop3: detected capacity change from 0 to 256 [ 92.875247][ T5849] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.166923][ T5849] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.8: corrupted xattr block 33: invalid header [ 93.270630][ T5861] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.8: corrupted xattr block 33: invalid header [ 93.284823][ T28] audit: type=1800 audit(1775597784.067:2): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 93.486350][ T5866] ======================================================= [ 93.486350][ T5866] WARNING: The mand mount option has been deprecated and [ 93.486350][ T5866] and is ignored by this kernel. Remove the mand [ 93.486350][ T5866] option from the mount to silence this warning. [ 93.486350][ T5866] ======================================================= [ 93.720111][ T51] Bluetooth: hci0: command tx timeout [ 93.725939][ T5776] Bluetooth: hci2: command tx timeout [ 93.731792][ T5085] Bluetooth: hci1: command tx timeout [ 94.085075][ T5085] Bluetooth: hci3: command tx timeout [ 94.143093][ T5847] EXT4-fs (loop1): Test dummy encryption mode enabled [ 94.150454][ T28] audit: type=1326 audit(1775597784.267:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 94.174902][ T5864] loop0: detected capacity change from 0 to 1024 [ 94.199046][ T5861] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.8: corrupted xattr block 33: invalid header [ 94.248029][ T5847] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 94.315301][ T5847] System zones: 0-5 [ 94.325944][ T28] audit: type=1326 audit(1775597784.267:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 94.446592][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.575905][ T28] audit: type=1326 audit(1775597784.277:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 94.684315][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.777173][ T28] audit: type=1326 audit(1775597784.277:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 94.901237][ T28] audit: type=1326 audit(1775597784.277:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 94.931433][ T28] audit: type=1326 audit(1775597784.287:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 97.014481][ T28] audit: type=1326 audit(1775597784.337:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 97.141795][ T28] audit: type=1326 audit(1775597784.337:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 97.177598][ T28] audit: type=1326 audit(1775597784.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 97.260950][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.293341][ T5883] Zero length message leads to an empty skb [ 97.312483][ T5883] netlink: 'syz.0.14': attribute type 29 has an invalid length. [ 97.410421][ T5885] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.599823][ T5894] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.064433][ T5913] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.123408][ T5938] loop1: detected capacity change from 0 to 1024 [ 100.206409][ T5938] EXT4-fs: Ignoring removed oldalloc option [ 100.213672][ T5938] EXT4-fs: Ignoring removed bh option [ 100.245191][ T5938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.277605][ T5938] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 100.277605][ T5938] [ 102.145562][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.254858][ T5954] loop3: detected capacity change from 0 to 256 [ 102.374249][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.400240][ T5954] FAT-fs (loop3): Directory bread(block 64) failed [ 102.407334][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.425161][ T5954] FAT-fs (loop3): Directory bread(block 65) failed [ 102.442301][ T5954] FAT-fs (loop3): Directory bread(block 66) failed [ 102.446008][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.455214][ T5954] FAT-fs (loop3): Directory bread(block 67) failed [ 102.486198][ T5810] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.503087][ T5954] FAT-fs (loop3): Directory bread(block 68) failed [ 102.515877][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.526106][ T5954] FAT-fs (loop3): Directory bread(block 69) failed [ 102.552903][ T5954] FAT-fs (loop3): Directory bread(block 70) failed [ 102.557742][ T5810] usb 2-1: config 0 descriptor?? [ 102.584516][ T5954] FAT-fs (loop3): Directory bread(block 71) failed [ 102.603377][ T5954] FAT-fs (loop3): Directory bread(block 72) failed [ 102.622075][ T5954] FAT-fs (loop3): Directory bread(block 73) failed [ 103.083547][ T5810] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 103.165676][ T5810] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.115631][ T5877] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 105.285306][ T5877] usb 2-1: device descriptor read/64, error -32 [ 105.575061][ T5877] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 105.755059][ T5877] usb 2-1: device descriptor read/64, error -32 [ 106.035228][ T5877] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 106.295118][ T5877] usb 2-1: device not accepting address 2, error -71 [ 106.604722][ T5982] syz_tun: entered promiscuous mode [ 106.610759][ T5982] macsec1: entered allmulticast mode [ 106.616288][ T5982] syz_tun: entered allmulticast mode [ 106.668382][ T5982] syz_tun: left allmulticast mode [ 106.673785][ T5982] syz_tun: left promiscuous mode [ 107.568339][ T5988] loop3: detected capacity change from 0 to 512 [ 107.579605][ T5990] loop2: detected capacity change from 0 to 512 [ 107.597453][ T5988] EXT4-fs: Ignoring removed nobh option [ 107.635990][ T5988] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.52: corrupted in-inode xattr: overlapping e_value [ 107.705320][ T5995] PKCS8: Unsupported PKCS#8 version [ 107.718532][ T5988] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.52: couldn't read orphan inode 15 (err -117) [ 107.770489][ T5990] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a816c018, mo2=0002] [ 107.796375][ T5988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.809131][ T5990] System zones: 0-2, 18-18, 34-35 [ 107.832916][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.865331][ T5990] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.913381][ T5759] usb 2-1: USB disconnect, device number 2 [ 107.960707][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.110004][ T6001] loop3: detected capacity change from 0 to 256 [ 108.148781][ T6001] exfat: Deprecated parameter 'utf8' [ 108.187722][ T6001] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 108.450885][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.871744][ T6014] binder_alloc: 6012: binder_alloc_buf, no vma [ 111.373202][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.670617][ T6036] Illegal XDP return value 4294967294 on prog (id 3) dev syz_tun, expect packet loss! [ 111.705528][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.725744][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.744375][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.782321][ T787] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.811353][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.826235][ T787] usb 3-1: Product: syz [ 111.830591][ T787] usb 3-1: Manufacturer: syz [ 111.838155][ T787] usb 3-1: SerialNumber: syz [ 111.853976][ T787] usb 3-1: config 0 descriptor?? [ 111.907182][ T6040] loop3: detected capacity change from 0 to 4096 [ 111.915931][ T6040] EXT4-fs: Ignoring removed nobh option [ 111.921587][ T6040] EXT4-fs: inline encryption not supported [ 111.949147][ T6040] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a04ec018, mo2=0003] [ 111.981521][ T6040] System zones: 0-5 [ 112.000467][ T6040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.228576][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.594603][ T6053] loop3: detected capacity change from 0 to 512 [ 112.674640][ T6053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.687964][ T6053] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.799475][ T6065] loop1: detected capacity change from 0 to 512 [ 114.825881][ T6065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.894530][ T6065] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 114.916847][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.933555][ T6067] loop0: detected capacity change from 0 to 512 [ 115.018081][ T6067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.056321][ T6067] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 115.081429][ T787] usb 3-1: USB disconnect, device number 2 [ 115.112238][ T6067] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 115.170775][ T6067] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 115.222915][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.266949][ T6067] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 115.278109][ T6067] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.300937][ T6067] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.74: bg 0: block 34: padding at end of block bitmap is not set [ 115.333026][ T6067] __quota_error: 23 callbacks suppressed [ 115.333043][ T6067] Quota error (device loop0): write_blk: dquota write failed [ 115.356574][ T6067] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 115.402212][ T6067] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.74: Failed to acquire dquot type 1 [ 115.515316][ T6067] EXT4-fs (loop0): 1 truncate cleaned up [ 115.581219][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.647067][ T6067] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.74: iget: bad i_size value: 360287970189639690 [ 115.852725][ T6083] loop1: detected capacity change from 0 to 128 [ 115.975569][ T6083] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.049969][ T6083] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.106337][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.328395][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.393103][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.417916][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.452290][ T787] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.463695][ T6083] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 116.476319][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.503143][ T787] usb 3-1: config 0 descriptor?? [ 116.576791][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.938886][ T787] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 116.973539][ T787] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.024682][ T6067] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 117.033209][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.050475][ T6067] syz.0.74 (6067) used greatest stack depth: 20816 bytes left [ 117.116948][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.229513][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.281226][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.405106][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.734440][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.744095][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.766921][ T9] usb 2-1: config 0 descriptor?? [ 118.784484][ T28] audit: type=1326 audit(1775597809.587:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7218b9c819 code=0x0 [ 118.901182][ T5759] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 119.066561][ T5759] usb 3-1: device descriptor read/64, error -32 [ 119.210459][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 119.234323][ T9] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 119.365486][ T5759] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 119.412788][ T9] usb 2-1: USB disconnect, device number 3 [ 119.515186][ T5759] usb 3-1: device descriptor read/64, error -32 [ 119.626829][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.678677][ T6119] loop0: detected capacity change from 0 to 4096 [ 119.686370][ T6119] EXT4-fs: inline encryption not supported [ 119.696735][ T6119] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.723117][ T6119] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 119.732753][ T6119] System zones: 0-5 [ 119.741242][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.785186][ T5759] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 119.907593][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.920210][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.951473][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.004182][ T27] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.021937][ T6124] loop2: detected capacity change from 0 to 512 [ 120.024344][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.052788][ T5759] usb 3-1: device not accepting address 3, error -71 [ 120.063661][ T27] usb 4-1: Product: syz [ 120.084852][ T27] usb 4-1: Manufacturer: syz [ 120.106475][ T27] usb 4-1: SerialNumber: syz [ 120.142880][ T6124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.143728][ T27] usb 4-1: config 0 descriptor?? [ 120.198000][ T6124] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.232885][ T6119] fscrypt (loop0): Error allocating 'cts(cbc(aes))' transform: -4 [ 122.291031][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.329099][ T6125] overlayfs: failed to resolve './bus': -2 [ 122.462816][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.625763][ T5808] usb 3-1: USB disconnect, device number 3 [ 125.421343][ T27] usb 4-1: USB disconnect, device number 2 [ 125.752633][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.084921][ C0] sched: RT throttling activated [ 131.346174][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.535219][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 131.754514][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 132.941873][ T6288] loop1: detected capacity change from 0 to 512 [ 133.061610][ T6288] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.084775][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.094846][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.103211][ T27] usb 3-1: Product: syz [ 133.171401][ T6288] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.265645][ T6288] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.109: corrupted xattr entries [ 133.313053][ T6288] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.333414][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.341015][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.397172][ T6288] EXT4-fs (loop1): 1 truncate cleaned up [ 133.420381][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.489404][ T6288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.541457][ T27] usb 3-1: Manufacturer: syz [ 133.546418][ T27] usb 3-1: SerialNumber: syz [ 133.790555][ T27] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 133.815448][ T27] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.822796][ T27] usb 3-1: unit 56 not found! [ 133.853441][ T27] usb 3-1: USB disconnect, device number 4 [ 133.911723][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.830369][ T6321] loop0: detected capacity change from 0 to 4096 [ 136.868003][ T6321] EXT4-fs (loop0): Test dummy encryption mode enabled [ 136.910795][ T6321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.291395][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.568297][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.858905][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 139.827024][ T6323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.094647][ T6353] input: syz0 as /devices/virtual/input/input5 [ 140.177429][ T6359] loop1: detected capacity change from 0 to 512 [ 140.197095][ T6359] EXT4-fs: Ignoring removed nobh option [ 140.231531][ T6359] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.135: iget: bad i_size value: 38620345925642 [ 140.335995][ T6359] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.135: couldn't read orphan inode 15 (err -117) [ 140.361655][ T6359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.529557][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.874369][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 142.435699][ T6400] loop2: detected capacity change from 0 to 512 [ 142.475967][ T6400] EXT4-fs: Ignoring removed nobh option [ 142.607962][ T6400] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.150: iget: bad i_size value: 38620345925642 [ 142.660484][ T6400] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.150: couldn't read orphan inode 15 (err -117) [ 143.418065][ T6400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.638923][ T6393] sctp: failed to load transform for md5: -2 [ 144.202470][ T6418] syz.0.152 uses obsolete (PF_INET,SOCK_PACKET) [ 144.300331][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.435068][ T5809] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 144.537025][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 144.618122][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 144.650332][ T5809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.680377][ T5809] usb 2-1: not running at top speed; connect to a high speed hub [ 144.715669][ T5809] usb 2-1: config 202 has an invalid interface number: 93 but max is 2 [ 144.724386][ T5809] usb 2-1: config 202 has an invalid interface number: 91 but max is 2 [ 144.748410][ T5809] usb 2-1: config 202 has an invalid interface number: 32 but max is 2 [ 144.775840][ T5809] usb 2-1: config 202 has no interface number 0 [ 144.789770][ T5809] usb 2-1: config 202 has no interface number 1 [ 144.797170][ T5809] usb 2-1: config 202 has no interface number 2 [ 144.803663][ T5809] usb 2-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 144.815938][ T5809] usb 2-1: config 202 interface 32 altsetting 223 has a duplicate endpoint with address 0x7, skipping [ 144.828030][ T5809] usb 2-1: config 202 interface 93 has no altsetting 0 [ 144.836380][ T5809] usb 2-1: config 202 interface 32 has no altsetting 0 [ 144.875831][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 144.883149][ T5809] usb 2-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 144.899309][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.909037][ T5809] usb 2-1: Product: syz [ 144.913448][ T5809] usb 2-1: Manufacturer: syz [ 144.918866][ T5809] usb 2-1: SerialNumber: syz [ 144.929378][ T6419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.182831][ T5809] pl2303 2-1:202.93: required interrupt-in endpoint missing [ 145.266586][ T5809] pl2303 2-1:202.91: required endpoints missing [ 145.797589][ T5809] pl2303 2-1:202.32: required endpoints missing [ 146.220630][ T5809] usb 2-1: USB disconnect, device number 4 [ 146.862697][ T6458] overlayfs: failed to resolve './file1': -2 [ 147.314051][ T6468] loop1: detected capacity change from 0 to 512 [ 147.346328][ T6468] EXT4-fs: Ignoring removed nobh option [ 147.415241][ T6468] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.172: iget: bad i_size value: 38620345925642 [ 147.595783][ T6468] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.172: couldn't read orphan inode 15 (err -117) [ 147.962579][ T6468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.256873][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.424143][ T6503] overlayfs: failed to resolve './file1': -2 [ 152.625047][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 152.945264][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.120062][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 153.228046][ T27] usb 1-1: config 8 has an invalid interface number: 99 but max is 0 [ 153.267578][ T27] usb 1-1: config 8 has no interface number 0 [ 153.305299][ T27] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8d.1e [ 153.348046][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.388470][ T27] usb 1-1: Product: syz [ 153.402978][ T27] usb 1-1: Manufacturer: syz [ 153.439698][ T27] usb 1-1: SerialNumber: syz [ 153.462790][ T28] audit: type=1326 audit(1775597844.267:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b3b79c819 code=0x0 [ 153.484450][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.654952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 153.734327][ T27] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 153.751251][ T27] usb 1-1: USB disconnect, device number 2 [ 153.835282][ T5810] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.045128][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 154.056093][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.067009][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.079414][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.094194][ T5810] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.104016][ T5810] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.112339][ T5810] usb 3-1: Manufacturer: syz [ 154.121785][ T5810] usb 3-1: config 0 descriptor?? [ 154.452462][ T6548] loop1: detected capacity change from 0 to 512 [ 154.460393][ T6548] EXT4-fs: Ignoring removed nobh option [ 154.482329][ T6548] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.194: iget: bad i_size value: 38620345925642 [ 154.506088][ T6548] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.194: couldn't read orphan inode 15 (err -117) [ 154.537531][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.594294][ T967] usb 3-1: USB disconnect, device number 5 [ 155.591405][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.025264][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 156.525660][ T5810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.718523][ T5810] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 156.734367][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.749783][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.762224][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.774689][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.785545][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.803819][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.813754][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.827007][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.840537][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.855713][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.864781][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.876368][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.890938][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.900039][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.909569][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.927932][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.937522][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.952578][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.966344][ T27] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 156.978186][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.989062][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.004108][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.015548][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.027925][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.045919][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.057896][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.067862][ T5810] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 157.079049][ T5810] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 157.087898][ T5810] usb 1-1: Product: syz [ 157.092369][ T5810] usb 1-1: Manufacturer: syz [ 157.097417][ T5810] usb 1-1: SerialNumber: syz [ 157.105425][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.115782][ T5811] usb 2-1: config 1 has an invalid interface number: 22 but max is 0 [ 157.126663][ T5810] usb 1-1: config 0 descriptor?? [ 157.132416][ T5811] usb 2-1: config 1 has no interface number 0 [ 157.142752][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice=96.0a [ 157.162374][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.177765][ T5810] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 157.196187][ T5811] usb 2-1: Product: syz [ 157.201279][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.217976][ T5811] usb 2-1: Manufacturer: syz [ 157.229649][ T27] usb 3-1: not running at top speed; connect to a high speed hub [ 157.237720][ T5811] usb 2-1: SerialNumber: syz [ 157.271236][ T27] usb 3-1: config 135 has an invalid interface number: 3 but max is 0 [ 157.281965][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.22/input/input6 [ 157.298315][ T27] usb 3-1: config 135 has no interface number 0 [ 157.312167][ T27] usb 3-1: config 135 interface 3 has no altsetting 0 [ 157.329345][ T27] usb 3-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=e1.63 [ 157.349198][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.385060][ T27] usb 3-1: Product: syz [ 157.389658][ T27] usb 3-1: Manufacturer: syz [ 157.394460][ T27] usb 3-1: SerialNumber: syz [ 157.493556][ T5125] bcm5974 2-1:1.22: could not read from device [ 157.501826][ T967] usb 2-1: USB disconnect, device number 5 [ 157.517543][ T5125] bcm5974 2-1:1.22: could not read from device [ 157.552692][ T5781] udevd[5781]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 157.579261][ T6590] overlayfs: failed to clone upperpath [ 157.681820][ T27] qmi_wwan: probe of 3-1:135.3 failed with error -22 [ 157.715338][ T27] usb 3-1: USB disconnect, device number 6 [ 159.266829][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 159.739745][ T5810] usb 1-1: USB disconnect, device number 3 [ 159.868744][ T5810] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 161.898980][ T6638] netlink: 104 bytes leftover after parsing attributes in process `syz.0.226'. [ 162.049861][ T6641] 9pnet_virtio: no channels available for device syz [ 166.260448][ T6687] vlan2: entered promiscuous mode [ 166.289838][ T6687] vlan2: entered allmulticast mode [ 166.309898][ T6687] hsr_slave_1: entered allmulticast mode [ 167.175614][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 167.569233][ T6699] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 167.576365][ T6699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.629439][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 167.710106][ T6699] vhci_hcd vhci_hcd.0: Device attached [ 167.985218][ T5810] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 168.025057][ T6700] vhci_hcd: connection closed [ 168.035397][ T6215] vhci_hcd: stop threads [ 168.064024][ T6215] vhci_hcd: release socket [ 168.108180][ T6215] vhci_hcd: disconnect device [ 168.365029][ T967] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.273346][ T967] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 169.294417][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 169.319280][ T967] usb 3-1: Product: syz [ 169.329559][ T967] usb 3-1: Manufacturer: syz [ 169.347420][ T967] usb 3-1: SerialNumber: syz [ 169.382669][ T967] usb 3-1: config 0 descriptor?? [ 169.393886][ T967] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 169.426095][ T967] dvb-usb: bulk message failed: -22 (2/0) [ 169.478637][ T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.507284][ T967] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 169.529008][ T967] usb 3-1: media controller created [ 169.616844][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.631610][ T6726] overlayfs: failed to clone upperpath [ 170.441364][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 170.974705][ T6748] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 171.142104][ T6751] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.203058][ T967] cxusb: set interface failed [ 171.210436][ T967] dvb-usb: bulk message failed: -22 (1/0) [ 171.330454][ T967] DVB: Unable to find symbol mt352_attach() [ 171.337516][ T967] dvb-usb: bulk message failed: -22 (5/0) [ 171.344630][ T967] zl10353_read_register: readreg error (reg=127, ret==-121) [ 171.358663][ T967] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 171.545055][ T967] rc_core: IR keymap rc-dvico-mce not found [ 171.563562][ T967] Registered IR keymap rc-empty [ 171.627394][ T967] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 171.673673][ T967] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 171.707770][ T967] dvb-usb: schedule remote query interval to 100 msecs. [ 171.772804][ T967] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 171.876957][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 171.883872][ T967] usb 3-1: USB disconnect, device number 7 [ 172.117766][ T967] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 172.806925][ T6762] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 173.160247][ T5810] vhci_hcd: vhci_device speed not set [ 173.522002][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 178.699294][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 178.801211][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.293'. [ 178.983293][ T6842] netlink: 48 bytes leftover after parsing attributes in process `syz.3.299'. [ 179.427688][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.298'. [ 183.985140][ T6872] netlink: 68 bytes leftover after parsing attributes in process `syz.0.307'. [ 185.693599][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 186.626639][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 186.638532][ T5085] CPU: 0 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 186.646277][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.656718][ T5085] Workqueue: hci0 hci_rx_work [ 186.661520][ T5085] Call Trace: [ 186.664872][ T5085] [ 186.667942][ T5085] dump_stack_lvl+0x18c/0x250 [ 186.672949][ T5085] ? show_regs_print_info+0x20/0x20 [ 186.678305][ T5085] ? load_image+0x420/0x420 [ 186.682982][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 186.688155][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 186.692992][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 186.698363][ T5085] kobject_add_internal+0x61c/0xcc0 [ 186.704038][ T5085] kobject_add+0x164/0x240 [ 186.708505][ T5085] ? __rwlock_init+0x150/0x150 [ 186.713325][ T5085] ? kobject_init+0x1e0/0x1e0 [ 186.718067][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 186.723002][ T5085] ? get_device_parent+0x366/0x390 [ 186.728230][ T5085] device_add+0x408/0xc20 [ 186.732629][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 186.737639][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 186.742986][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 186.748288][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 186.754680][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 186.760358][ T5085] ? skb_pull_data+0xfb/0x200 [ 186.765088][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 186.770677][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 186.776789][ T5085] hci_event_packet+0x7ba/0x1270 [ 186.782510][ T5085] ? bis_list+0x290/0x290 [ 186.786999][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 186.792421][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 186.797775][ T5085] hci_rx_work+0x43a/0xd60 [ 186.802335][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 186.808619][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 186.814417][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 186.820279][ T5085] ? assign_work+0x3d2/0x5d0 [ 186.824922][ T5085] worker_thread+0xa55/0xfc0 [ 186.829652][ T5085] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 186.835654][ T5085] ? _raw_spin_unlock+0x40/0x40 [ 186.840666][ T5085] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 186.846791][ T5085] kthread+0x2fa/0x390 [ 186.850899][ T5085] ? pr_cont_work+0x560/0x560 [ 186.855706][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 186.860341][ T5085] ret_from_fork+0x48/0x80 [ 186.864795][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 186.869511][ T5085] ret_from_fork_asm+0x11/0x20 [ 186.874359][ T5085] [ 186.879463][ T5085] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.893842][ T5085] Bluetooth: hci0: failed to register connection device [ 188.766794][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 191.278595][ T6935] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 191.318366][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 191.423014][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.328'. [ 192.630647][ T6954] netlink: 'syz.0.334': attribute type 13 has an invalid length. [ 193.666271][ T28] audit: type=1326 audit(1775597884.467:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.743432][ T28] audit: type=1326 audit(1775597884.467:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.802561][ T28] audit: type=1326 audit(1775597884.467:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.835190][ T28] audit: type=1326 audit(1775597884.467:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.862738][ T28] audit: type=1326 audit(1775597884.467:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.901292][ T28] audit: type=1326 audit(1775597884.467:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.931209][ T28] audit: type=1326 audit(1775597884.467:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.959380][ T28] audit: type=1326 audit(1775597884.467:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 193.986936][ T28] audit: type=1326 audit(1775597884.467:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 194.009198][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.026489][ T28] audit: type=1326 audit(1775597884.467:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 194.425812][ T27] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 194.632018][ T27] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 194.761510][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.764062][ T27] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 194.768333][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.882556][ T27] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 195.012065][ T27] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 195.083725][ T27] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 195.210255][ T27] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 195.680786][ T27] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 195.764766][ T27] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 195.870236][ T27] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 197.097982][ T27] usb 2-1: string descriptor 0 read error: -22 [ 197.265140][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 197.333297][ T27] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 197.527066][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.563160][ T27] usb 2-1: can't set config #168, error -71 [ 197.590878][ T27] usb 2-1: USB disconnect, device number 6 [ 197.631691][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.690738][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.764393][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.853745][ T787] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 198.092458][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.101501][ T787] usb 1-1: Product: syz [ 198.114272][ T787] usb 1-1: Manufacturer: syz [ 198.805034][ T787] usb 1-1: SerialNumber: syz [ 198.877215][ T787] usb 1-1: config 0 descriptor?? [ 198.915226][ T787] usb 1-1: can't set config #0, error -71 [ 198.955677][ T787] usb 1-1: USB disconnect, device number 4 [ 200.327847][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 200.470785][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 202.835001][ T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.057098][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.069724][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.084984][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.114774][ T787] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.135426][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.153934][ T787] usb 2-1: Product: syz [ 203.170086][ T787] usb 2-1: Manufacturer: syz [ 203.185295][ T787] usb 2-1: SerialNumber: syz [ 203.192743][ T787] usb 2-1: config 0 descriptor?? [ 204.534928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 204.554921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 204.574931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 204.594913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 204.975058][ T787] usb 2-1: USB disconnect, device number 7 [ 205.081681][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.333308][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 205.504019][ T7075] IPv6: NLM_F_REPLACE set, but no existing node found! [ 207.105366][ T7095] netlink: 'syz.2.371': attribute type 72 has an invalid length. [ 209.276247][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 211.137522][ T7128] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.382'. [ 211.156944][ T7131] sp0: Synchronizing with TNC [ 211.501770][ T7141] loop0: detected capacity change from 0 to 512 [ 211.536872][ T7141] EXT4-fs: Ignoring removed nobh option [ 211.608694][ T7141] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.389: iget: bad i_size value: 38620345925642 [ 211.777693][ T7141] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.389: couldn't read orphan inode 15 (err -117) [ 211.837548][ T7141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.547463][ T7120] Bluetooth: hci0: command 0x0406 tx timeout [ 212.553851][ T7120] Bluetooth: hci1: command 0x0406 tx timeout [ 212.560858][ T7120] Bluetooth: hci2: command 0x0406 tx timeout [ 212.567631][ T7120] Bluetooth: hci3: command 0x0406 tx timeout [ 212.809673][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.691341][ T7158] process 'syz.3.386' launched './file1' with NULL argv: empty string added [ 214.037955][ T7165] netlink: 76 bytes leftover after parsing attributes in process `syz.2.393'. [ 214.501215][ T7170] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.395'. [ 216.302875][ T7203] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.405'. [ 218.432243][ T7232] batman_adv: batadv0: Adding interface: gretap1 [ 218.460095][ T5776] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 218.474576][ T7232] batman_adv: batadv0: Interface activated: gretap1 [ 220.095295][ T5759] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.374173][ T5759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.387932][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.424930][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.473775][ T5759] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.498788][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.527377][ T5759] usb 2-1: Product: syz [ 220.532848][ T5759] usb 2-1: Manufacturer: syz [ 220.555049][ T5759] usb 2-1: SerialNumber: syz [ 220.577592][ T5759] usb 2-1: config 0 descriptor?? [ 220.905995][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 220.957750][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 220.961471][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 222.517057][ T5776] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 222.527708][ T5776] Bluetooth: hci3: Injecting HCI hardware error event [ 222.537239][ T5776] Bluetooth: hci3: hardware error 0x00 [ 222.638769][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 222.638784][ T28] audit: type=1326 audit(1775597913.447:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 222.776630][ T28] audit: type=1326 audit(1775597913.507:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 222.885023][ T28] audit: type=1326 audit(1775597913.507:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 222.977955][ T28] audit: type=1326 audit(1775597913.507:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 223.161744][ T7305] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 223.388323][ T7305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.439740][ T5759] usb 2-1: USB disconnect, device number 8 [ 223.505272][ T5770] udevd[5770]: setting mode of /dev/dsp3 to 020660 failed: No such file or directory [ 223.519921][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.563350][ T5770] udevd[5770]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: No such file or directory [ 224.428738][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 224.461315][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 224.479276][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 224.595284][ T5776] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 225.679035][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 225.868031][ T5759] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 226.089915][ T5759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.131838][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 226.184391][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.252433][ T5759] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 226.312812][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.434788][ T5759] usb 3-1: Product: syz [ 226.652214][ T5759] usb 3-1: Manufacturer: syz [ 227.105172][ T5759] usb 3-1: SerialNumber: syz [ 227.166355][ T5759] usb 3-1: config 0 descriptor?? [ 228.417056][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 228.449129][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 229.244932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 230.365988][ T7389] fuse: Unknown parameter '&d#ᗑ0^wPiŽt'eX(0_9D7S8ZYX8b__bRfG0x0000000000000004' [ 230.488534][ T5759] usb 3-1: USB disconnect, device number 8 [ 231.001557][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.156412][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 231.208427][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 232.021975][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 232.112775][ T7407] hugetlbfs: syz.3.464 (7407): Using mlock ulimits for SHM_HUGETLB is obsolete [ 238.562267][ T7464] loop1: detected capacity change from 0 to 512 [ 238.600699][ T7464] EXT4-fs: Ignoring removed nobh option [ 238.729729][ T7464] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.487: iget: bad i_size value: 38620345925642 [ 238.810760][ T7464] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.487: couldn't read orphan inode 15 (err -117) [ 238.877672][ T7464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.931533][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 239.819165][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.724140][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 241.582954][ T7502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.780827][ T7514] overlayfs: failed to resolve './file1': -2 [ 242.944157][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 243.081822][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.510'. [ 247.409946][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 248.398553][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 248.536391][ T7571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.526'. [ 251.124382][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 251.336891][ T7595] 9pnet_virtio: no channels available for device syz [ 251.349925][ T7587] fuse: Unknown parameter 'user_i00000000000000000000' [ 254.667573][ T28] audit: type=1326 audit(1775597945.457:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b3b79c819 code=0x0 [ 254.699061][ T7628] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 255.969388][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.551'. [ 256.235688][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.242237][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.248303][ T7656] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 257.639221][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 257.936108][ T7681] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 258.640921][ T7678] syz.3.564 (7678) used greatest stack depth: 17000 bytes left [ 259.014517][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 261.054705][ T6217] Bluetooth: hci4: Frame reassembly failed (-84) [ 262.444538][ T7718] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 263.086360][ T5771] Bluetooth: hci4: command 0x1003 tx timeout [ 263.165535][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 263.723163][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 264.097449][ T7740] loop2: detected capacity change from 0 to 512 [ 264.126192][ T7740] EXT4-fs: Ignoring removed nobh option [ 264.164648][ T7740] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.587: iget: bad i_size value: 38620345925642 [ 264.181933][ T7740] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.587: couldn't read orphan inode 15 (err -117) [ 264.218514][ T7740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.221177][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.773341][ T7782] netlink: 48 bytes leftover after parsing attributes in process `syz.1.599'. [ 267.076964][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 267.307134][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.332106][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 267.358979][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.401820][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.421204][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.448857][ T27] usb 3-1: Product: syz [ 267.457101][ T27] usb 3-1: Manufacturer: syz [ 267.473051][ T27] usb 3-1: SerialNumber: syz [ 267.497800][ T27] usb 3-1: config 0 descriptor?? [ 267.930640][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.940151][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.251279][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.293804][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.477119][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.610'. [ 269.810074][ T7788] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.821626][ T7788] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.837158][ T7788] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.848840][ T7788] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.465115][ T5877] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 273.696118][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 273.710715][ T5877] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.734529][ T5877] usb 2-1: config 179 has no interface number 0 [ 273.760292][ T7854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.619'. [ 273.778283][ T5877] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 273.885022][ T5877] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 273.915250][ T5877] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 273.949461][ T5877] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 273.975097][ T5877] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.022322][ T5877] usb 2-1: config 179 interface 65 has no altsetting 0 [ 274.051034][ T5877] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 274.125503][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.645475][ T5877] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 274.835419][ T5125] input input8: unable to receive magic message: -110 [ 274.905141][ T5125] input input8: unable to receive magic message: -32 [ 275.248676][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.620'. [ 275.825065][ T5125] input input8: unable to receive magic message: -32 [ 275.955926][ T5125] input input8: unable to receive magic message: -32 [ 276.003412][ T5125] input input8: unable to receive magic message: -32 [ 276.386313][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 276.842321][ T5125] input input8: unable to receive magic message: -32 [ 277.125618][ T7881] netlink: 'syz.0.626': attribute type 4 has an invalid length. [ 277.278382][ T7804] usb 2-1: USB disconnect, device number 9 [ 277.284714][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 277.335819][ T7804] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 277.643723][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 277.704920][ T7811] usb 3-1: USB disconnect, device number 9 [ 279.533109][ T7899] netlink: 14 bytes leftover after parsing attributes in process `syz.1.634'. [ 279.590961][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 279.686014][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 280.085004][ T7818] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 280.251505][ T7811] IPVS: starting estimator thread 0... [ 280.285134][ T7818] usb 2-1: Using ep0 maxpacket: 32 [ 280.308556][ T7818] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 280.369097][ T7818] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 280.383593][ T7921] IPVS: using max 16 ests per chain, 38400 per kthread [ 280.412808][ T7818] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 280.606791][ T7818] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 280.758621][ T7818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.866706][ T7818] usb 2-1: Product: syz [ 280.922880][ T7818] usb 2-1: Manufacturer: syz [ 280.986470][ T7818] usb 2-1: SerialNumber: syz [ 281.027084][ T7818] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 281.067039][ T7818] imon 2-1:155.0: unable to initialize intf0, err -19 [ 281.096399][ T7818] imon:imon_probe: failed to initialize context! [ 281.102839][ T7818] imon 2-1:155.0: unable to register, err -19 [ 281.300218][ T7925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 283.274405][ T7954] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.340659][ T7954] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 284.397571][ T27] usb 2-1: USB disconnect, device number 10 [ 285.055052][ T7959] netlink: 36 bytes leftover after parsing attributes in process `syz.3.653'. [ 288.875021][ T7989] netlink: 68 bytes leftover after parsing attributes in process `syz.0.660'. [ 291.594733][ T7990] ceph: No mds server is up or the cluster is laggy [ 291.606739][ T7818] libceph: connect (1)[c::]:6789 error -101 [ 291.640113][ T7818] libceph: mon0 (1)[c::]:6789 connect error [ 291.727721][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 292.066521][ T8002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.665'. [ 295.070353][ T8041] Bluetooth: MGMT ver 1.22 [ 296.143614][ T8054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.757674][ T8155] bridge_slave_0: left allmulticast mode [ 307.763510][ T8155] bridge_slave_0: left promiscuous mode [ 307.795747][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.887063][ T8155] bridge_slave_1: left allmulticast mode [ 308.915005][ T8155] bridge_slave_1: left promiscuous mode [ 308.932478][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.962727][ T8155] bond0: (slave bond_slave_0): Releasing backup interface [ 308.995639][ T8155] bond0: (slave bond_slave_1): Releasing backup interface [ 309.816179][ T8155] team0: Port device team_slave_0 removed [ 309.858269][ T8155] team0: Port device team_slave_1 removed [ 309.869684][ T8155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.893989][ T8155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.976182][ T8167] loop2: detected capacity change from 0 to 512 [ 309.997097][ T8167] EXT4-fs: Ignoring removed nobh option [ 310.055938][ T8167] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.719: iget: bad i_size value: 38620345925642 [ 310.250592][ T8167] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.719: couldn't read orphan inode 15 (err -117) [ 310.291768][ T8167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.260588][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.557799][ T5776] Bluetooth: hci0: unexpected subevent 0x04 length: 18 > 11 [ 314.051882][ T8198] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 314.609605][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 314.905784][ T8214] loop2: detected capacity change from 0 to 512 [ 314.925818][ T8214] EXT4-fs: Ignoring removed nobh option [ 314.964767][ T8214] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.730: iget: bad i_size value: 38620345925642 [ 315.047594][ T8214] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.730: couldn't read orphan inode 15 (err -117) [ 315.128188][ T8214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.605449][ T8217] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 316.017735][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.386811][ T8230] fuse: Unknown parameter '01777777777777777777777' [ 316.408458][ T8230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.533727][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.739'. [ 317.639814][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.646510][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.026215][ T8257] block device autoloading is deprecated and will be removed. [ 318.905301][ T967] libceph: connect (1)[c::]:6789 error -101 [ 318.925212][ T967] libceph: mon0 (1)[c::]:6789 connect error [ 318.943400][ T8278] ceph: No mds server is up or the cluster is laggy [ 319.021806][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.032004][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.073898][ T8284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.861815][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'. [ 319.905662][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 320.101284][ T27] usb 2-1: config 0 has an invalid interface number: 127 but max is 0 [ 320.123611][ T27] usb 2-1: config 0 has no interface number 0 [ 320.160062][ T27] usb 2-1: config 0 interface 127 has no altsetting 0 [ 320.195492][ T27] usb 2-1: string descriptor 0 read error: -71 [ 320.201972][ T27] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=fe.2d [ 320.253803][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.292539][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 320.470890][ T27] usb 2-1: config 0 descriptor?? [ 320.490313][ T27] usb 2-1: can't set config #0, error -71 [ 321.805333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 322.214992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 322.437487][ T27] usb 2-1: USB disconnect, device number 11 [ 324.418403][ T8331] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 324.488177][ T8331] kvm: pic: level sensitive irq not supported [ 324.488613][ T8331] kvm: pic: non byte read [ 324.545508][ T8331] kvm: pic: level sensitive irq not supported [ 324.545611][ T8331] kvm: pic: non byte read [ 324.566894][ T8331] kvm: pic: level sensitive irq not supported [ 324.566978][ T8331] kvm: pic: non byte read [ 324.588131][ T8331] kvm: pic: level sensitive irq not supported [ 324.588226][ T8331] kvm: pic: non byte read [ 324.605362][ T8331] kvm: pic: level sensitive irq not supported [ 324.607126][ T8331] kvm: pic: non byte read [ 324.805485][ T8331] kvm: pic: level sensitive irq not supported [ 324.805566][ T8331] kvm: pic: non byte read [ 324.826712][ T8331] kvm: pic: level sensitive irq not supported [ 324.827094][ T8331] kvm: pic: non byte read [ 324.842930][ T8331] kvm: pic: level sensitive irq not supported [ 324.842987][ T8331] kvm: pic: non byte read [ 324.856494][ T8331] kvm: pic: level sensitive irq not supported [ 324.856575][ T8331] kvm: pic: non byte read [ 324.870632][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 324.895608][ T8331] kvm: pic: level sensitive irq not supported [ 324.895668][ T8331] kvm: pic: non byte read [ 326.925422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 327.334935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 329.793620][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 334.692614][ T8410] overlayfs: failed to clone upperpath [ 334.884463][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.798'. [ 334.935449][ T7811] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 335.127055][ T7811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.153593][ T7811] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.180072][ T7811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.209379][ T7811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.230385][ T8409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 335.243090][ T7811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 335.481005][ T7811] usb 3-1: USB disconnect, device number 10 [ 335.495277][ T8422] overlayfs: failed to clone upperpath [ 342.525104][ T8486] mmap: syz.2.822 (8486) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 343.576711][ T5776] Bluetooth: hci0: ISO packet too small [ 347.308382][ T5771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.322487][ T5771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.332581][ T5771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.343137][ T5771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.351456][ T5771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.360209][ T5771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.909524][ T8527] chnl_net:caif_netlink_parms(): no params data found [ 349.185644][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.193147][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.206109][ T8527] bridge_slave_0: entered allmulticast mode [ 349.237394][ T8527] bridge_slave_0: entered promiscuous mode [ 349.249429][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.257234][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.264535][ T8527] bridge_slave_1: entered allmulticast mode [ 349.272330][ T8527] bridge_slave_1: entered promiscuous mode [ 349.347814][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.388132][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.397722][ T5776] Bluetooth: hci4: command tx timeout [ 349.579409][ T8527] team0: Port device team_slave_0 added [ 349.604623][ T8527] team0: Port device team_slave_1 added [ 349.643333][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.653931][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.688775][ T8527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.741868][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.751540][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.783896][ T8527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.969656][ T8527] hsr_slave_0: entered promiscuous mode [ 349.985805][ T8527] hsr_slave_1: entered promiscuous mode [ 350.002589][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.010678][ T8527] Cannot create hsr debugfs directory [ 350.494337][ T28] audit: type=1326 audit(1775598041.297:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 350.565061][ T28] audit: type=1326 audit(1775598041.317:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 350.658494][ T28] audit: type=1326 audit(1775598041.327:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 350.740554][ T28] audit: type=1326 audit(1775598041.327:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 350.814702][ T28] audit: type=1326 audit(1775598041.347:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 351.014374][ T28] audit: type=1326 audit(1775598041.347:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 351.585263][ T5776] Bluetooth: hci4: command tx timeout [ 351.740969][ T28] audit: type=1326 audit(1775598041.347:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 351.835044][ T28] audit: type=1326 audit(1775598041.347:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 351.888415][ T8527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.912350][ T8527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.925299][ T28] audit: type=1326 audit(1775598041.347:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 351.948422][ T28] audit: type=1326 audit(1775598041.347:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 351.978331][ T8527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.010593][ T8527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.294310][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.342997][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.386815][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.394067][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.557357][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.564658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.067696][ T7818] IPVS: starting estimator thread 0... [ 353.175121][ T8589] IPVS: using max 28 ests per chain, 67200 per kthread [ 353.629616][ T8527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.637223][ T5771] Bluetooth: hci4: command tx timeout [ 355.310328][ T8527] veth0_vlan: entered promiscuous mode [ 355.357939][ T8527] veth1_vlan: entered promiscuous mode [ 355.453837][ T8527] veth0_macvtap: entered promiscuous mode [ 355.479095][ T8527] veth1_macvtap: entered promiscuous mode [ 355.523165][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.541382][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.576051][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.620433][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.636201][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.678837][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.716521][ T5771] Bluetooth: hci4: command tx timeout [ 355.737299][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.826850][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.856773][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.899305][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.931700][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.963084][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.014932][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.046467][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.095557][ T8527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.104347][ T8527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.154978][ T8527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.163763][ T8527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.410359][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.436421][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.512030][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.533765][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.176178][ T8639] loop4: detected capacity change from 0 to 512 [ 359.184551][ T8639] EXT4-fs: Ignoring removed nobh option [ 359.270665][ T8639] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.866: iget: bad i_size value: 38620345925642 [ 359.328684][ T8639] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.866: couldn't read orphan inode 15 (err -117) [ 359.389361][ T8639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.114783][ T8644] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 361.178556][ T8527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.256295][ T8654] 9pnet_fd: Insufficient options for proto=fd [ 361.760340][ T8671] overlayfs: failed to clone upperpath [ 362.738559][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 362.738574][ T28] audit: type=1326 audit(1775598053.547:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.1.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 362.840725][ T28] audit: type=1326 audit(1775598053.607:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.1.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 362.925611][ T28] audit: type=1326 audit(1775598053.727:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.1.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 363.009572][ T28] audit: type=1326 audit(1775598053.727:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.1.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 363.091892][ T28] audit: type=1326 audit(1775598053.767:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.1.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f04d635d04e code=0x7ffc0000 [ 363.164446][ T28] audit: type=1326 audit(1775598053.937:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.1.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 365.147855][ T8714] netlink: 68 bytes leftover after parsing attributes in process `syz.4.888'. [ 365.364288][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 365.467364][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 365.743133][ T8730] batman_adv: batadv0: Adding interface: dummy0 [ 365.761671][ T8730] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.849258][ T8730] batman_adv: batadv0: Interface activated: dummy0 [ 365.918286][ T8733] batadv0: mtu less than device minimum [ 365.941139][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.954403][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.967110][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.980140][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.992834][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.005441][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.018005][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.030566][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.043097][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.254995][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 366.363718][ T8743] netlink: 68 bytes leftover after parsing attributes in process `syz.1.899'. [ 366.446651][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 366.470050][ T27] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 366.496272][ T27] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 366.516195][ T27] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 366.548601][ T27] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 366.562665][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.588250][ T27] usb 5-1: Product: syz [ 366.602844][ T27] usb 5-1: Manufacturer: syz [ 366.624982][ T27] usb 5-1: SerialNumber: syz [ 366.677329][ T27] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 366.685654][ T27] imon 5-1:155.0: unable to initialize intf0, err -19 [ 366.692493][ T27] imon:imon_probe: failed to initialize context! [ 366.699566][ T27] imon 5-1:155.0: unable to register, err -19 [ 366.897155][ T8715] Process accounting resumed [ 367.318735][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 367.554638][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 367.584111][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 367.603033][ T8778] bridge0: port 3(geneve1) entered blocking state [ 367.614464][ T8778] bridge0: port 3(geneve1) entered disabled state [ 367.625329][ T8778] geneve1: entered allmulticast mode [ 367.638671][ T8778] geneve1: entered promiscuous mode [ 367.652209][ T8778] bridge0: port 3(geneve1) entered blocking state [ 367.659817][ T8778] bridge0: port 3(geneve1) entered forwarding state [ 367.671862][ T8779] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 367.690927][ T8779] bridge0: port 3(geneve1) entered disabled state [ 367.697732][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.705933][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.720385][ T8779] bridge0: port 3(geneve1) entered blocking state [ 367.727180][ T8779] bridge0: port 3(geneve1) entered forwarding state [ 367.735534][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.743969][ T8779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.751660][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.759158][ T8779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.770959][ T8779] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 368.870865][ T7802] usb 5-1: USB disconnect, device number 2 [ 369.155665][ T8805] 9pnet_virtio: no channels available for device syz [ 370.085513][ T8804] overlay: Unknown parameter '/' [ 370.225778][ T8805] overlay: Bad value for 'xino' [ 370.615634][ T8807] overlay: Unknown parameter 'audit' [ 371.721895][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 371.734235][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 372.172465][ T28] audit: type=1326 audit(1775598062.977:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.273048][ T28] audit: type=1326 audit(1775598062.977:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.407631][ T28] audit: type=1326 audit(1775598063.017:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.487796][ T28] audit: type=1326 audit(1775598063.017:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.589190][ T28] audit: type=1326 audit(1775598063.017:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.665107][ T28] audit: type=1326 audit(1775598063.017:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.725068][ T28] audit: type=1326 audit(1775598063.017:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.747892][ T28] audit: type=1326 audit(1775598063.017:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.793362][ T28] audit: type=1326 audit(1775598063.017:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 372.892747][ T28] audit: type=1326 audit(1775598063.017:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6b3b79c819 code=0x7ffc0000 [ 373.389837][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 373.419627][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 378.935524][ T8889] capability: warning: `syz.2.953' uses deprecated v2 capabilities in a way that may be insecure [ 379.081603][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.088231][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.563017][ T8908] dlm: Unknown command passed to DLM device : 3 [ 379.563017][ T8908] [ 381.556539][ T8915] random: crng reseeded on system resumption [ 382.616666][ T8916] batman_adv: batadv0: Adding interface: macsec1 [ 382.623296][ T8916] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.695830][ T8916] batman_adv: batadv0: Interface activated: macsec1 [ 384.692874][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 385.501854][ T8952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.974'. [ 390.308099][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.982'. [ 395.941375][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'. [ 397.102463][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 397.475094][ T5771] Bluetooth: hci4: command tx timeout [ 397.763355][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 397.763370][ T28] audit: type=1326 audit(1775598088.567:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 397.869048][ T28] audit: type=1326 audit(1775598088.607:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 397.901793][ T28] audit: type=1326 audit(1775598088.607:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 397.933304][ T28] audit: type=1326 audit(1775598088.607:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 397.970365][ T28] audit: type=1326 audit(1775598088.607:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 398.033887][ T28] audit: type=1326 audit(1775598088.607:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 398.065679][ T28] audit: type=1326 audit(1775598088.607:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 398.137824][ T28] audit: type=1326 audit(1775598088.607:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 398.193317][ T28] audit: type=1326 audit(1775598088.617:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 398.215938][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.223376][ T28] audit: type=1326 audit(1775598088.617:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f04d639c819 code=0x7ffc0000 [ 398.245672][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.217291][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 400.099807][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 409.892178][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 410.232659][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1034'. [ 413.925896][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 413.925912][ T28] audit: type=1326 audit(1775598104.737:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 414.026455][ T28] audit: type=1326 audit(1775598104.737:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 414.131904][ T28] audit: type=1326 audit(1775598104.737:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 414.194503][ T28] audit: type=1326 audit(1775598104.737:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 414.259743][ T28] audit: type=1326 audit(1775598104.737:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 414.335129][ T28] audit: type=1326 audit(1775598104.737:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 414.417247][ T28] audit: type=1326 audit(1775598104.737:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 414.554957][ T28] audit: type=1326 audit(1775598104.737:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 414.675543][ T28] audit: type=1326 audit(1775598104.737:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 415.645527][ T28] audit: type=1326 audit(1775598104.737:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7a99c4ab code=0x7ffc0000 [ 415.823279][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 415.925097][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1047'. [ 421.618889][ T9221] overlayfs: failed to clone upperpath [ 422.414598][ T9224] net_ratelimit: 10 callbacks suppressed [ 422.414604][ T9224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.174147][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 425.216017][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 425.373135][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 425.408282][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 428.858205][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 428.885337][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 429.201629][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 431.035740][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 431.061681][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 432.368713][ T9345] overlayfs: failed to clone upperpath [ 432.811582][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1105'. [ 432.999803][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 433.043027][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 434.508839][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 435.904712][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 435.925992][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 436.320233][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 436.596071][ T9397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 440.203218][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 440.226292][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 440.520058][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.528002][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.335771][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 441.416174][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1129'. [ 442.604540][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 442.656200][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 444.388663][ T9485] pimreg: entered allmulticast mode [ 444.543451][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1141'. [ 444.569102][ T9485] pimreg: left allmulticast mode [ 445.091261][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 445.129087][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 445.336521][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'. [ 445.476657][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1146'. [ 448.072071][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 448.082721][ T9539] Cannot find add_set index 1 as target [ 448.122677][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 448.135339][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 448.257995][ T9542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1155'. [ 450.827907][ T9572] pimreg: entered allmulticast mode [ 450.877591][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 450.925358][ T9572] pimreg: left allmulticast mode [ 451.090982][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 451.106351][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 451.485213][ T9581] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1167'. [ 452.612958][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 452.636439][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 453.490892][ T9620] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1180'. [ 453.855110][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 453.884306][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 456.164108][ T9650] x_tables: duplicate underflow at hook 4 [ 456.399514][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 456.603928][ T9658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1196'. [ 462.385347][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 462.570372][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'. [ 466.477867][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 469.142075][ T9738] erspan0: entered promiscuous mode [ 469.214285][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 469.344223][ T9743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 469.369828][ T9746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.520953][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 469.520970][ T28] audit: type=1326 audit(1775598160.327:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 469.564418][ T28] audit: type=1326 audit(1775598160.337:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 469.595064][ T28] audit: type=1326 audit(1775598160.357:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 469.618378][ T28] audit: type=1326 audit(1775598160.367:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 469.641409][ T28] audit: type=1326 audit(1775598160.367:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a99c819 code=0x7ffc0000 [ 470.435328][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.736982][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 472.759922][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1235'. [ 473.144924][ T8383] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 473.257567][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1237'. [ 473.424729][ T5776] Bluetooth: hci4: command 0x0406 tx timeout