last executing test programs: 15m58.29008901s ago: executing program 0 (id=18): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='omfs\x00', 0x2000091, 0x0) 15m55.803131822s ago: executing program 0 (id=21): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)) pipe2$watch_queue(&(0x7f0000002240), 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) 15m54.576685431s ago: executing program 0 (id=24): socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x1c, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x6a, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 15m51.549536546s ago: executing program 0 (id=30): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x248}}, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f0", 0xf9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 15m50.458379594s ago: executing program 0 (id=32): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x7fff, 0x9, 0xd7b, 0x9, 0x5, r5}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002ac0)={r5, 0x7}, &(0x7f0000002b00)=0x8) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r6, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) getsockopt$bt_hci(r6, 0x84, 0x6d, 0x0, &(0x7f0000000040)) 15m47.662372891s ago: executing program 0 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) dup3(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r4, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 15m31.636945288s ago: executing program 32 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) dup3(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r4, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 8m11.668298514s ago: executing program 2 (id=1043): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x4, 0x4}, 0x6) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x3, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 8m10.85442442s ago: executing program 2 (id=1044): socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) brk(0x689d80000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mount$overlay(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m10.692531904s ago: executing program 2 (id=1045): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4040006) syz_open_dev$media(0x0, 0xc, 0x80d00) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, 0x0, 0x50) 8m10.082355493s ago: executing program 2 (id=1049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 8m6.881948372s ago: executing program 2 (id=1056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r6, 0x11}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5}, 0x11) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e00090000000000000800000300000004"], 0x34}}, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840), 0x0) 8m3.098092258s ago: executing program 2 (id=1066): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x81}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000540)="3c76bd0b1b0c3d9f", 0x8}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe98, &(0x7f0000000180)=0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m46.89860195s ago: executing program 33 (id=1066): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x81}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000540)="3c76bd0b1b0c3d9f", 0x8}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe98, &(0x7f0000000180)=0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m28.282360114s ago: executing program 6 (id=1692): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x26020480) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000200)=[{r5, 0x8760}], 0x1, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendto$inet(r4, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="b4b1", 0x2}], 0x1}}], 0x1, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x18}, 0x50) 2m27.21430957s ago: executing program 6 (id=1695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x7fff, 0x9, 0xd7b, 0x9, 0x5, r6}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002ac0)={r6, 0x7}, &(0x7f0000002b00)=0x8) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r7, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) getsockopt$bt_hci(r7, 0x84, 0x6d, 0x0, &(0x7f0000000040)) 2m25.877692758s ago: executing program 6 (id=1698): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x26020480) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000200)=[{r5, 0x8760}], 0x1, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x40082104, &(0x7f0000000200)) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendto$inet(r4, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="b4", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000000)="377d3969d3fd1c0effe312b48b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x18}, 0x50) 2m24.161062787s ago: executing program 6 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d00000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r9 = dup2(r8, r4) fallocate(r9, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 2m22.965805934s ago: executing program 6 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040880) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2m21.726706334s ago: executing program 6 (id=1705): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x26020480) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000200)=[{r5, 0x8760}], 0x1, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x40082104, &(0x7f0000000200)) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendto$inet(r4, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="b4b1", 0x2}], 0x1}}], 0x1, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x182, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000000)="377d3969d3fd1c0effe312b48b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x18}, 0x50) 2m5.47328532s ago: executing program 34 (id=1705): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x26020480) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000200)=[{r5, 0x8760}], 0x1, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x40082104, &(0x7f0000000200)) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendto$inet(r4, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="b4b1", 0x2}], 0x1}}], 0x1, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x182, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000000)="377d3969d3fd1c0effe312b48b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x18}, 0x50) 23.977359276s ago: executing program 7 (id=1925): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}}) msgsnd(0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') read$ptp(r0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) 21.853884608s ago: executing program 7 (id=1932): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000005c0)="6144de9d1e3bde2f6310d84e651b89acecac569503d977ee47eebe32b8a8c5e93677e58d04908ab9fa25c2d0f9d79a7dea24a3b34a97226698c9bcfe857455baa449b6613a63579951142e3985f4ab36f9b3a16d50fd6a089121c7597d784e6446b86ab7141afc4ee1535c35d868d2f499b95de3b7863fa763f05132a4b648c4bc761e340a32c1761d66d7f988f1d3bd19a6540b23", &(0x7f0000000940)="665dad733597bd0055eb9165029b1652d08a61ef9b73a5f1af1168f924ec4353b8452a47b78d033e1cfe134d0cffcf1e8c57563ac61e6dff1e8c246d3102aa05e2c0741ec8ac109817c121f02067dc1e8389c8a740b59758b43f1061a096458b1287b921fc81aba387fc7f93beae73841c0af9e44dc2e32a75d7438b10264632241f458fe742cf4aaec2a7e7032bf54b433d3b96c67f4e25b1c4bb019df4bf862d13"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, 0x0, 0x20040880) socket$kcm(0xa, 0x2, 0x73) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, 0x0, 0x0) pipe2(0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 19.130289438s ago: executing program 3 (id=1934): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x57c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x33e, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "2068f96769f722c2c8ce1a867261d9750759594e5f3bae31c300081a2a8d77aaf7ba1bb71a5db537b50b8dfb6163fd506a97b272c9fb05534dcf6a96ef612ecc2e00a87f54bf04a836b21a48e6d177ed1e42acf3e31fdd5d3a9d7ff8bee52e200d73c0200f7ec48069a987fc794ac507ddf869419bab7ad862f7096e37ddd89055854ff2175c8d3c8c385b3956166f1bb91420e0c3aa0cc67875942545f021f45038118433358115a296ec6ab02c410ddc182899b42e521356881f27fabbeb706f9b15281461c78c3f50dcad81c1a3ecb6e22334669369b402702c53209e8b2641f37cc989b12f503c6f62bcf6f05db23c801cf6a0c5ba311015c026"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "2537861a416172e1b3a4641f689e7128268d1c658d415db2a4a062885a2bced47cb6720eacc6e377961573f48e503a971c116892a4defcf1fdcda062dfbf3e7aabe23f1cbfdad14c8e50ab42677d34e5d1de13e5670d7a948fa03547a566b48a5b0b529334f38f00989ac8f9c4af14aa1d6f7923f034eaa15615e641dce7adf46324a7669f59b73e6d793886fefbeff2388ed14f2b826848e1009e8837d31c141b8154e4b1175f5935908b76f4cf686bb96c5a08a9b4b23a894bf84c18bb013702306fa8c94dcb33de65cd85d659fdbc55821a906a47490167f0fc01aee45814527289af1f4e581d66dca0fd8dcd40bab1"}]}, 0x57c}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d9ceb5cbf18929e4aa5ba5910", 0x33}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 17.065673104s ago: executing program 3 (id=1937): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./file1\x00', 0x2008000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c6e6f6164696e6963622c6e6f6164696e6963622c73686f727461642c7569643d666f726765742c6769643d666f726765742c6769643d69676e6f72652c6e6f6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c00508d5c6fd14a140518c2f8949ec502a29ec1c3795fd47c03a3a72c97984a3502b51d8bfa33ab6090f2e4dc00fe8ed0b41f905b98973a0ca9e4c5eea9e8f394f5f12b6f8f8f86dda2c5d5dd18d0075da59034af306372c1b6cf04e02375a1f7ce9a910a4fc47c7e3a34fd"], 0x2, 0xc40, &(0x7f0000002740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17e) read$FUSE(r0, &(0x7f0000004880)={0x2020}, 0xffffffbc) 17.036937856s ago: executing program 7 (id=1938): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') ioctl$TCFLSH(r0, 0x400455c8, 0x4) 16.61775646s ago: executing program 3 (id=1942): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) 15.590215853s ago: executing program 3 (id=1944): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0), 0x1, 0x9793, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0xd63d) r1 = open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x12) r2 = open(&(0x7f0000000080)='./file2\x00', 0x101000, 0xa2) copy_file_range(r2, 0x0, r1, 0x0, 0x400000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 11.969219785s ago: executing program 1 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x2, 0x1, 0x100, 0x8, 0x3, 0x7ff, 0x8, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.922400859s ago: executing program 4 (id=1955): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/74, 0x4a) syz_usb_disconnect(r0) 11.549043729s ago: executing program 5 (id=1956): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) fsopen(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x7}) io_uring_setup(0x784c, &(0x7f0000000280)={0x0, 0x3646, 0x4000, 0x0, 0x2ac}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf79bd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) dup2(0xffffffffffffffff, r0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 11.232496294s ago: executing program 3 (id=1957): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030204000903000038000000fcffffff0e00000000002000010005000000000000000000030000007f00000004000000040020000c"], 0x958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000040), 0x10) io_submit(r3, 0x1, &(0x7f00000012c0)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309"]) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040300f110100000000000109022400010000000109040000010300060009210000000122040009058300018a56e2c7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="001605000000a32789fa1ea04fee40fd631e17c5dae477"], 0x0}, 0x0) 10.90915207s ago: executing program 1 (id=1958): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x760, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x62c, 0x1, [@m_ipt={0x254, 0x17, 0x0, 0x0, {{0x8}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x8c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x64, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xe8, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x18, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0xdc, 0x1, [@m_ipt={0xd8, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xa8, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d606"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x760}}, 0x4008800) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 10.441000928s ago: executing program 5 (id=1959): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x57c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x33e, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "2537861a416172e1b3a4641f689e7128268d1c658d415db2a4a062885a2bced47cb6720eacc6e377961573f48e503a971c116892a4defcf1fdcda062dfbf3e7aabe23f1cbfdad14c8e50ab42677d34e5d1de13e5670d7a948fa03547a566b48a5b0b529334f38f00989ac8f9c4af14aa1d6f7923f034eaa15615e641dce7adf46324a7669f59b73e6d793886fefbeff2388ed14f2b826848e1009e8837d31c141b8154e4b1175f5935908b76f4cf686bb96c5a08a9b4b23a894bf84c18bb013702306fa8c94dcb33de65cd85d659fdbc55821a906a47490167f0fc01aee45814527289af1f4e581d66dca0fd8dcd40bab1"}]}, 0x57c}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d9ceb5cbf18929e4aa5ba5910", 0x33}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 9.541759831s ago: executing program 1 (id=1960): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000005c0)="6144de9d1e3bde2f6310d84e651b89acecac569503d977ee47eebe32b8a8c5e93677e58d04908ab9fa25c2d0f9d79a7dea24a3b34a97226698c9bcfe857455baa449b6613a63579951142e3985f4ab36f9b3a16d50fd6a089121c7597d784e6446b86ab7141afc4ee1535c35d868d2f499b95de3b7863fa763f05132a4b648c4bc761e340a32c1761d66d7f988f1d3bd19a6540b23", &(0x7f0000000940)="665dad733597bd0055eb9165029b1652d08a61ef9b73a5f1af1168f924ec4353b8452a47b78d033e1cfe134d0cffcf1e8c57563ac61e6dff1e8c246d3102aa05e2c0741ec8ac109817c121f02067dc1e8389c8a740b59758b43f1061a096458b1287b921fc81aba387fc7f93beae73841c0af9e44dc2e32a75d7438b10264632241f458fe742cf4aaec2a7e7032bf54b433d3b96c67f4e25b1c4bb019df4bf862d13"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) socket$kcm(0xa, 0x2, 0x73) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, 0x0, 0x0) pipe2(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 8.534769022s ago: executing program 1 (id=1961): syz_open_dev$loop(0x0, 0xceba, 0x402603) r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nodiscard}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000014c0)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000340)=0x10) write$tcp_congestion(r5, &(0x7f0000000100)='illinois\x00', 0x9) openat(r0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8040, 0x0) getpid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r6, 0x400455c8, 0x2) 8.468468167s ago: executing program 5 (id=1962): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x78c, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x62c, 0x1, [@m_ipt={0x254, 0x17, 0x0, 0x0, {{0x8}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x8c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x64, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xe8, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x18, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x108, 0x1, [@m_ipt={0xd8, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xa8, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d606"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78c}}, 0x4008800) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 8.346339417s ago: executing program 4 (id=1963): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x200028, 0x8, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xfb, 0x4, 0xd83f}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 7.80947264s ago: executing program 4 (id=1964): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='omfs\x00', 0x2000091, 0x0) 7.44524851s ago: executing program 5 (id=1965): socket(0x2b, 0x80801, 0x1) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000880)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1a04}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff}}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048094}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.457494849s ago: executing program 7 (id=1966): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x11, 0xa, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)}) ptrace$setregset(0x4205, r4, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.420775762s ago: executing program 4 (id=1967): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008800) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 3.071909572s ago: executing program 5 (id=1968): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x339e, 0x0, &(0x7f0000002480), 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"6e5f236b8c70f03fa12ac19b650094cb", 0x0, 0x0, {0x4, 0x7}, {0x8, 0x5}, 0x0, [0x7fff, 0x0, 0x7, 0x414d, 0x3, 0x6, 0x7, 0x1b, 0x5, 0x5, 0x7fffffff, 0x5, 0xffffffff00000000, 0xf4, 0x7, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000024c0)={{r0}, r1, 0x1a, @inherit={0x50, &(0x7f0000001880)={0x0, 0x1, 0xe57, 0x9138, {0x3, 0x3, 0x6, 0x96e1, 0xa}, [0x7]}}, @devid}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x66e, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0x2, 0x20000}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) 2.991853088s ago: executing program 7 (id=1969): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) fsopen(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x7}) io_uring_setup(0x784c, &(0x7f0000000280)={0x0, 0x3646, 0x4000, 0x0, 0x2ac}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf79bd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) dup2(0xffffffffffffffff, r0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2.982070659s ago: executing program 1 (id=1970): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff) socket$inet6_sctp(0xa, 0x801, 0x84) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) remap_file_pages(&(0x7f00003cb000/0x4000)=nil, 0x4000, 0x1000002, 0xfffffffffffffd2a, 0x20000) chdir(&(0x7f00000001c0)='./bus\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 2.830332552s ago: executing program 4 (id=1971): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000005c0)="6144de9d1e3bde2f6310d84e651b89acecac569503d977ee47eebe32b8a8c5e93677e58d04908ab9fa25c2d0f9d79a7dea24a3b34a97226698c9bcfe857455baa449b6613a63579951142e3985f4ab36f9b3a16d50fd6a089121c7597d784e6446b86ab7141afc4ee1535c35d868d2f499b95de3b7863fa763f05132a4b648c4bc761e340a32c1761d66d7f988f1d3bd19a6540b23", &(0x7f0000000940)="665dad733597bd0055eb9165029b1652d08a61ef9b73a5f1af1168f924ec4353b8452a47b78d033e1cfe134d0cffcf1e8c57563ac61e6dff1e8c246d3102aa05e2c0741ec8ac109817c121f02067dc1e8389c8a740b59758b43f1061a096458b1287b921fc81aba387fc7f93beae73841c0af9e44dc2e32a75d7438b10264632241f458fe742cf4aaec2a7e7032bf54b433d3b96c67f4e25b1c4bb019df4bf862d13"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) socket$kcm(0xa, 0x2, 0x73) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, 0x0, 0x0) pipe2(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1.900719016s ago: executing program 7 (id=1972): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x57c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x33e, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "2537861a416172e1b3a4641f689e7128268d1c658d415db2a4a062885a2bced47cb6720eacc6e377961573f48e503a971c116892a4defcf1fdcda062dfbf3e7aabe23f1cbfdad14c8e50ab42677d34e5d1de13e5670d7a948fa03547a566b48a5b0b529334f38f00989ac8f9c4af14aa1d6f7923f034eaa15615e641dce7adf46324a7669f59b73e6d793886fefbeff2388ed14f2b826848e1009e8837d31c141b8154e4b1175f5935908b76f4cf686bb96c5a08a9b4b23a894bf84c18bb013702306fa8c94dcb33de65cd85d659fdbc55821a906a47490167f0fc01aee45814527289af1f4e581d66dca0fd8dcd40bab1"}]}, 0x57c}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d9ceb5cbf18929e4aa5ba5910", 0x33}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.757344568s ago: executing program 3 (id=1973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 209.609043ms ago: executing program 1 (id=1974): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) pipe2(0x0, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 69.930324ms ago: executing program 5 (id=1975): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x78c, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x62c, 0x1, [@m_ipt={0x254, 0x17, 0x0, 0x0, {{0x8}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x8c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x64, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xe8, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x18, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x108, 0x1, [@m_ipt={0xd8, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xa8, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d606"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78c}}, 0x4008800) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 4 (id=1976): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') ioctl$TCFLSH(r0, 0x400455c8, 0x4) kernel console output (not intermixed with test programs): ou must specify a L4 protocol and not use inversions on it [ 148.108894][ T144] team0 (unregistering): Port device team_slave_1 removed [ 148.297138][ T144] team0 (unregistering): Port device team_slave_0 removed [ 148.374689][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.464904][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.712730][ T144] bond0 (unregistering): Released all slaves [ 149.742902][ T4580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.922690][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 150.952312][ T4888] netlink: 256 bytes leftover after parsing attributes in process `syz.4.135'. [ 151.004461][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.072423][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.180894][ T4580] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.272268][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.465578][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.532917][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.540415][ T459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.663263][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.700127][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.710731][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.719845][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.727361][ T459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.738603][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 151.748466][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.853000][ T4905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.470843][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.506213][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.593798][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.661554][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.727737][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.757768][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.786585][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.176463][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.255883][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.266359][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.280325][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.670211][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 157.788587][ T4948] netlink: 256 bytes leftover after parsing attributes in process `syz.3.149'. [ 158.316016][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.339373][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.464009][ T4580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.775299][ T4961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.726889][ T4296] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.450269][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.491064][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 160.506195][ T4296] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 160.518158][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.545057][ T4296] usb 2-1: config 0 descriptor?? [ 160.557286][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.633566][ T4296] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 160.685606][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.720549][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.192505][ T4580] device veth0_vlan entered promiscuous mode [ 161.215123][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.244021][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.390924][ T4580] device veth1_vlan entered promiscuous mode [ 161.470867][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.615328][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.637218][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.694154][ T4580] device veth0_macvtap entered promiscuous mode [ 161.742256][ T4580] device veth1_macvtap entered promiscuous mode [ 161.856892][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.896535][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.907527][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.919796][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.055556][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.221741][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.285882][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.323327][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.357117][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.396659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.405683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.446919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.481140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.530302][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.547753][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.616352][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.646354][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.684578][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.716655][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.756293][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.809697][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.851295][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.936754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.946173][ T4275] usb 2-1: USB disconnect, device number 6 [ 162.979602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.980638][ T5012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 163.071812][ T5014] netlink: 256 bytes leftover after parsing attributes in process `syz.1.162'. [ 163.633911][ T4580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.804838][ T4580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.872060][ T4580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.881945][ T4580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.182480][ T5021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.420657][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.473728][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.524531][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.571835][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.610379][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.682077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.166542][ T4224] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.567412][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 166.669689][ T4224] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 166.999280][ T5062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.170'. [ 167.181143][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.198366][ T4224] usb 2-1: config 0 descriptor?? [ 167.421673][ T4224] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 168.765810][ T4224] usb 2-1: USB disconnect, device number 7 [ 169.043282][ T5089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.140033][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 173.848733][ T5153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.207266][ T5183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'. [ 177.008691][ T5205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.223100][ T5219] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.692190][ T5252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'. [ 180.372504][ C1] hrtimer: interrupt took 56721 ns [ 181.464235][ T5274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.254739][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 182.298391][ T5283] netlink: 256 bytes leftover after parsing attributes in process `syz.2.216'. [ 182.519934][ T5290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.401233][ T5303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.221'. [ 185.606484][ T4259] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.942474][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.228'. [ 185.961751][ T5341] netlink: 256 bytes leftover after parsing attributes in process `syz.5.228'. [ 185.986475][ T4259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 186.009633][ T4259] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 186.080615][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.287430][ T4259] usb 4-1: config 0 descriptor?? [ 186.921005][ T4259] usb 4-1: can't set config #0, error -71 [ 186.979439][ T4259] usb 4-1: USB disconnect, device number 3 [ 187.265637][ T5360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.510841][ T5374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 189.763523][ T5395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.967479][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'. [ 190.061817][ T5402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.510565][ T5399] netlink: 256 bytes leftover after parsing attributes in process `syz.5.240'. [ 191.706692][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 191.714441][ T4259] Bluetooth: hci4: command 0x0406 tx timeout [ 191.836934][ T4259] Bluetooth: hci1: command 0x0406 tx timeout [ 191.864403][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 193.836385][ T5421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.026858][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.040953][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.396648][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 196.510134][ T5470] netlink: 256 bytes leftover after parsing attributes in process `syz.1.253'. [ 198.610669][ T5481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.699651][ T5520] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.663998][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 202.742731][ T5538] netlink: 256 bytes leftover after parsing attributes in process `syz.1.268'. [ 203.004913][ T4275] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 203.607065][ T4275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 203.627236][ T4275] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 203.638453][ T4275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.659549][ T4275] usb 3-1: config 0 descriptor?? [ 203.702402][ T4275] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 204.577515][ T5569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.105092][ T23] usb 3-1: USB disconnect, device number 6 [ 207.045957][ T5608] binder: 5584:5608 ioctl c0306201 0 returned -14 [ 207.053657][ T5608] binder: 5584:5608 ioctl c0306201 200000000140 returned -11 [ 207.071018][ T5598] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.150564][ T5626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 210.446622][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 210.907129][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 210.988483][ T4232] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 211.024385][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.064789][ T4232] usb 6-1: config 0 descriptor?? [ 211.139039][ T4232] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 211.738374][ T5653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.226845][ T4715] usb 6-1: USB disconnect, device number 2 [ 213.384815][ T5663] Cannot find add_set index 0 as target [ 213.392786][ T5663] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 215.781921][ T5703] binder: 5700:5703 ioctl c0306201 0 returned -14 [ 216.309199][ T5707] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.446617][ T5733] Cannot find add_set index 0 as target [ 218.453642][ T5733] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 219.870835][ T5758] binder: 5730:5758 ioctl c0306201 0 returned -14 [ 219.878319][ T5758] binder: 5730:5758 ioctl c0306201 200000000140 returned -11 [ 221.038246][ T5764] binder: 5762:5764 ioctl c0306201 0 returned -14 [ 221.591308][ T5770] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 222.199035][ T5772] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 222.271408][ T5772] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 222.304034][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.329120][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.390885][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.629585][ T5781] Cannot find add_set index 0 as target [ 223.647123][ T5781] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 224.987230][ T5807] binder: 5793:5807 ioctl c0306201 0 returned -14 [ 224.994875][ T5807] binder: 5793:5807 ioctl c0306201 200000000140 returned -11 [ 225.004309][ T5806] binder: 5802:5806 ioctl c0306201 0 returned -14 [ 226.069369][ T5820] binder: 5819:5820 ioctl 4018620d 0 returned -22 [ 226.096825][ T5820] binder: 5819:5820 ioctl c0306201 0 returned -14 [ 226.122435][ T5820] binder: 5819:5820 ioctl c0306201 200000000140 returned -11 [ 226.298866][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 226.395933][ T5825] 8021q: VLANs not supported on nlmon0 [ 227.350169][ T5841] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.319445][ T5848] Cannot find add_set index 0 as target [ 228.329033][ T5848] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 228.962984][ T5858] binder: 5856:5858 ioctl c0306201 0 returned -14 [ 229.090655][ T5860] binder: 5859:5860 ioctl 4018620d 0 returned -22 [ 229.130102][ T5860] binder: 5859:5860 ioctl c0306201 0 returned -14 [ 229.157214][ T5860] binder: 5859:5860 ioctl c0306201 200000000140 returned -11 [ 230.257656][ T5868] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 230.520225][ T5879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.181411][ T5885] binder: 5871:5885 ioctl c0306201 0 returned -14 [ 231.204865][ T5885] binder: 5871:5885 ioctl c0306201 200000000140 returned -11 [ 231.970994][ T5895] Cannot find add_set index 0 as target [ 231.982219][ T5895] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 232.693780][ T5902] binder: 5901:5902 ioctl 4018620d 0 returned -22 [ 232.769845][ T5902] binder: 5901:5902 ioctl c0306201 0 returned -14 [ 232.787097][ T5902] binder: 5901:5902 ioctl c0306201 200000000140 returned -11 [ 235.395926][ T5920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.787950][ T5924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.007785][ T5934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.471867][ T5937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.775787][ T5941] capability: warning: `syz.1.363' uses deprecated v2 capabilities in a way that may be insecure [ 237.806626][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 238.108062][ T5947] binder: 5945:5947 ioctl 4018620d 0 returned -22 [ 238.118209][ T5947] binder: 5945:5947 ioctl c0306201 0 returned -14 [ 238.217089][ T5947] binder: 5945:5947 ioctl c0306201 0 returned -14 [ 238.334048][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 238.785997][ T5955] Cannot find add_set index 0 as target [ 239.095105][ T5955] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 241.102416][ T5973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.410311][ T5976] binder: 5967:5976 ioctl c0306201 0 returned -14 [ 241.417876][ T5976] binder: 5967:5976 ioctl c0306201 200000000140 returned -11 [ 242.735775][ T5992] binder: 5991:5992 ioctl 4018620d 0 returned -22 [ 242.898773][ T5992] binder: 5991:5992 ioctl c0306201 0 returned -14 [ 243.170333][ T5992] binder: 5991:5992 ioctl c0306201 0 returned -14 [ 243.606418][ T6002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.197045][ T6005] Cannot find add_set index 0 as target [ 244.204339][ T6005] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 245.491458][ T6011] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.970731][ T6033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.489157][ T6036] binder: 6035:6036 ioctl 4018620d 0 returned -22 [ 248.548453][ T6036] binder: 6035:6036 ioctl c0306201 0 returned -14 [ 248.576922][ T6036] binder: 6035:6036 ioctl c0306201 0 returned -14 [ 248.936917][ T6040] binder: 6039:6040 ioctl c0306201 0 returned -14 [ 248.944015][ T6040] binder: 6039:6040 ioctl c0306201 200000000140 returned -11 [ 249.176321][ T6047] Cannot find add_set index 0 as target [ 249.184020][ T6047] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 253.067430][ T6077] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.077651][ T6077] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.086842][ T6077] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.095825][ T6077] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.372415][ T6077] Zero length message leads to an empty skb [ 253.608878][ T4715] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 253.896903][ T4715] usb 6-1: Using ep0 maxpacket: 16 [ 254.016565][ T4715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.049064][ T4715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.096961][ T4715] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.111026][ T4715] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 254.121216][ T4715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.132585][ T4715] usb 6-1: config 0 descriptor?? [ 254.862315][ T4715] hid-generic 0003:0955:7214.0001: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 255.014213][ T4715] usb 6-1: USB disconnect, device number 3 [ 255.284058][ T6095] fido_id[6095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 255.381919][ T6098] binder: 6097:6098 ioctl c0306201 0 returned -14 [ 255.389059][ T6098] binder: 6097:6098 ioctl c0306201 200000000140 returned -11 [ 255.611255][ T6101] Cannot find add_set index 0 as target [ 255.625216][ T6101] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 256.237580][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.394572][ T6107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.406448][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.858195][ T6133] binder: 6132:6133 ioctl c0306201 0 returned -14 [ 260.865456][ T6133] binder: 6132:6133 ioctl c0306201 200000000140 returned -11 [ 263.313933][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 265.748552][ T6178] binder: 6174:6178 ioctl c0306201 0 returned -14 [ 265.755715][ T6178] binder: 6174:6178 ioctl c0306201 200000000140 returned -11 [ 266.049297][ T6181] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.557447][ T6189] nfs: Unknown parameter 'smackfsroot' [ 267.599791][ T6190] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 267.649723][ T6191] ptrace attach of "./syz-executor exec"[4187] was attempted by ""[6191] [ 267.699907][ T6190] device syz_tun entered promiscuous mode [ 268.212881][ T6190] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 268.478543][ T6190] syz.2.433 (6190) used greatest stack depth: 19776 bytes left [ 271.101200][ T6211] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.062562][ T6223] binder: 6215:6223 ioctl c0306201 0 returned -14 [ 272.069885][ T6223] binder: 6215:6223 ioctl c0306201 200000000140 returned -11 [ 272.499161][ T6226] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.825620][ T6272] binder: 6267:6272 ioctl c0306201 0 returned -14 [ 277.833032][ T6272] binder: 6267:6272 ioctl c0306201 200000000140 returned -11 [ 279.204936][ T6283] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 279.992484][ T6294] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 280.031748][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 280.921084][ T6311] binder: 6302:6311 ioctl c0306201 0 returned -14 [ 280.928683][ T6311] binder: 6302:6311 ioctl c0306201 200000000140 returned -11 [ 285.016928][ T6346] binder: 6344:6346 ioctl c0306201 0 returned -14 [ 285.024642][ T6346] binder: 6344:6346 ioctl c0306201 200000000140 returned -11 [ 285.137780][ T6350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.119732][ T6363] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.324968][ T6379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.713634][ T6393] binder: 6391:6393 ioctl c0306201 0 returned -14 [ 290.729710][ T6393] binder: 6391:6393 ioctl c0306201 200000000140 returned -11 [ 292.717637][ T6408] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.858234][ T6414] libceph: resolve '4' (ret=-3): failed [ 294.076432][ T4303] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 294.507347][ T4303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 294.575019][ T4303] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 294.635275][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.672013][ T4303] usb 4-1: config 0 descriptor?? [ 294.739107][ T4303] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 294.863804][ T6425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.433171][ T4262] usb 4-1: USB disconnect, device number 4 [ 297.655845][ T6441] binder: 6439:6441 ioctl c0306201 0 returned -14 [ 297.662862][ T6441] binder: 6439:6441 ioctl c0306201 200000000140 returned -11 [ 299.837203][ T6468] binder: 6466:6468 ioctl 4018620d 0 returned -22 [ 299.858990][ T6468] binder: 6466:6468 ioctl c0306201 0 returned -14 [ 299.910599][ T6468] binder: 6466:6468 ioctl c0306201 200000000140 returned -11 [ 302.046501][ T4715] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 302.907918][ T4715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 303.590280][ T4715] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 303.601823][ T4715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.624032][ T4715] usb 6-1: config 0 descriptor?? [ 303.668475][ T4715] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 304.917028][ T6497] binder: 6495:6497 ioctl c0306201 0 returned -14 [ 304.924440][ T6497] binder: 6495:6497 ioctl c0306201 200000000140 returned -11 [ 305.125247][ T4224] usb 6-1: USB disconnect, device number 4 [ 305.150836][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 305.229634][ T6502] netlink: 256 bytes leftover after parsing attributes in process `syz.2.519'. [ 306.326819][ T4224] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 307.706514][ T4224] usb 6-1: device descriptor read/64, error -71 [ 308.036590][ T4224] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 308.266621][ T4224] usb 6-1: device descriptor read/64, error -71 [ 308.436585][ T4224] usb usb6-port1: attempt power cycle [ 308.546138][ T6513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.319495][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 314.417102][ T6555] netlink: 256 bytes leftover after parsing attributes in process `syz.3.534'. [ 314.566454][ T4232] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 314.786718][ T4232] usb 5-1: device descriptor read/64, error -71 [ 315.296295][ T4232] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 315.546343][ T4232] usb 5-1: device descriptor read/64, error -71 [ 316.447093][ T4232] usb usb5-port1: attempt power cycle [ 317.627280][ T6581] vivid-001: disconnect [ 317.692595][ T6581] vivid-001: reconnect [ 317.892402][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.928330][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.288214][ T6589] binder: 6580:6589 ioctl c0306201 0 returned -14 [ 319.866908][ T6599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.176243][ T4232] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 323.410972][ T4232] usb 3-1: device descriptor read/64, error -71 [ 324.096401][ T4232] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 324.936262][ T4232] usb 3-1: device descriptor read/64, error -71 [ 325.046499][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'. [ 325.066507][ T4232] usb usb3-port1: attempt power cycle [ 325.186520][ T6643] netlink: 256 bytes leftover after parsing attributes in process `syz.5.560'. [ 326.048957][ T6646] xt_TPROXY: Can be used only with -p tcp or -p udp [ 328.044142][ T6665] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 328.575245][ T6672] binder: 6661:6672 ioctl c0306201 0 returned -14 [ 329.919253][ T6685] tipc: Started in network mode [ 329.942775][ T6685] tipc: Node identity 321373a3b18a, cluster identity 4711 [ 330.001766][ T6685] tipc: Enabled bearer , priority 0 [ 330.016885][ T6686] device syzkaller0 entered promiscuous mode [ 330.138555][ T6685] tipc: Resetting bearer [ 330.181834][ T6684] tipc: Resetting bearer [ 330.254136][ T6684] tipc: Disabling bearer [ 330.516310][ T6690] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.346770][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 333.017418][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 333.930155][ T23] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 333.943489][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.080702][ T23] usb 6-1: config 0 descriptor?? [ 334.149275][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 334.516588][ T6716] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.525723][ T6716] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.534807][ T6716] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.543847][ T6716] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.596296][ T6718] sctp: failed to load transform for md5: -2 [ 336.675303][ T4233] usb 6-1: USB disconnect, device number 8 [ 336.791288][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.583'. [ 336.863855][ T6736] netlink: 256 bytes leftover after parsing attributes in process `syz.5.583'. [ 338.687121][ T6749] binder: 6739:6749 ioctl c0306201 0 returned -14 [ 338.785120][ T6754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.841835][ T6760] device dummy0 entered promiscuous mode [ 339.988412][ T6763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.186706][ T4262] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 342.742329][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 342.808953][ T4262] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 342.845763][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.907829][ T4262] usb 3-1: config 0 descriptor?? [ 343.840607][ T4262] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 343.961972][ T4275] usb 3-1: USB disconnect, device number 10 [ 350.845644][ T6822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.668717][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 353.741885][ T6841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.773736][ T6845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.114284][ T6854] device batadv_slave_1 entered promiscuous mode [ 354.292027][ T6854] netlink: set zone limit has 8 unknown bytes [ 355.104451][ T6846] device batadv_slave_1 left promiscuous mode [ 356.503395][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 362.361791][ T6914] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 362.928878][ T6919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.312322][ T6930] tipc: Enabled bearer , priority 0 [ 364.343853][ T6930] device syzkaller0 entered promiscuous mode [ 365.168326][ T6930] tipc: Resetting bearer [ 366.154655][ T4259] tipc: Node number set to 2207871907 [ 366.164444][ T6929] tipc: Resetting bearer [ 367.610429][ T6929] tipc: Disabling bearer [ 370.216266][ T4439] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 371.636477][ T4439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 371.654338][ T4439] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 372.650300][ T4439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.670427][ T4439] usb 5-1: config 0 descriptor?? [ 372.828012][ T4439] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 373.102745][ T6986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.242291][ T4259] usb 5-1: USB disconnect, device number 5 [ 379.133324][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.155140][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.522688][ T7032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.918939][ T7036] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 380.867227][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 382.516394][ T23] usb 2-1: device descriptor read/all, error -71 [ 384.646263][ T4275] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 384.856388][ T4275] usb 3-1: device descriptor read/64, error -71 [ 386.056610][ T4275] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 386.286658][ T4275] usb 3-1: device descriptor read/64, error -71 [ 386.747328][ T4275] usb usb3-port1: attempt power cycle [ 387.186343][ T4275] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 387.604624][ T7083] device syzkaller0 entered promiscuous mode [ 387.839943][ T4275] usb 3-1: device not accepting address 13, error -71 [ 389.366295][ T4439] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 389.730999][ T7095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.747227][ T4439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 389.934517][ T4439] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 389.988592][ T4439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.069061][ T4439] usb 4-1: config 0 descriptor?? [ 390.152056][ T4439] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 392.815098][ T4233] usb 4-1: USB disconnect, device number 5 [ 395.406293][ T4225] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 395.646379][ T4225] usb 2-1: device descriptor read/64, error -71 [ 395.936333][ T4225] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 397.968916][ T4225] usb 2-1: device descriptor read/64, error -71 [ 399.318627][ T4225] usb usb2-port1: attempt power cycle [ 400.066249][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 400.897465][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 400.954382][ T23] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 401.526218][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.583939][ T23] usb 5-1: config 0 descriptor?? [ 401.660255][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 402.101167][ T7170] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.063495][ T4224] usb 5-1: USB disconnect, device number 6 [ 403.126318][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 403.556376][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 404.214330][ T7184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.252389][ T23] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 404.312155][ T23] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 404.350990][ T23] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.404061][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 404.436407][ T4225] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 404.606646][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 404.632577][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.656337][ T4225] usb 4-1: device descriptor read/64, error -71 [ 404.673797][ T23] usb 3-1: Product: syz [ 404.690595][ T23] usb 3-1: Manufacturer: syz [ 404.711005][ T23] usb 3-1: SerialNumber: syz [ 404.937407][ T4225] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 405.019750][ T23] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 405.615140][ T4225] usb 4-1: device descriptor read/64, error -71 [ 405.746485][ T4225] usb usb4-port1: attempt power cycle [ 406.149393][ T7197] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.839528][ T4225] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 407.066394][ T4225] usb 4-1: device descriptor read/8, error -71 [ 407.643933][ T4259] usb 3-1: USB disconnect, device number 15 [ 408.499358][ T4259] usblp0: removed [ 409.226092][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 410.809855][ T7226] tipc: Started in network mode [ 410.816285][ T7226] tipc: Node identity 9676d3bca2ef, cluster identity 4711 [ 410.824195][ T7226] tipc: Enabled bearer , priority 0 [ 410.836733][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 410.864462][ T7229] device syzkaller0 entered promiscuous mode [ 410.866317][ T23] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 410.916259][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.937377][ T7226] tipc: Resetting bearer [ 410.947397][ T23] usb 6-1: config 0 descriptor?? [ 410.971328][ T7225] tipc: Resetting bearer [ 411.009065][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 411.023477][ T7225] tipc: Disabling bearer [ 413.875773][ T4225] usb 6-1: USB disconnect, device number 9 [ 415.942976][ T7276] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.021013][ T7282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.910647][ T7292] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 419.816840][ T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 420.237838][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 420.286811][ T23] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 420.297707][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.324649][ T23] usb 6-1: config 0 descriptor?? [ 420.406676][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 422.099414][ T7312] UBIFS error (pid: 7312): cannot open "usrquota", error -22 [ 424.583884][ T4224] usb 6-1: USB disconnect, device number 10 [ 424.871960][ T7340] binder: 7330:7340 ioctl c0306201 0 returned -14 [ 424.884565][ T7340] binder: 7330:7340 ioctl c0306201 200000000140 returned -11 [ 425.518801][ T7342] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.622676][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 429.077331][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 429.203002][ T23] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 429.397160][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.432868][ T23] usb 5-1: config 0 descriptor?? [ 429.502578][ T7389] binder: 7384:7389 ioctl c0306201 0 returned -14 [ 429.510985][ T7389] binder: 7384:7389 ioctl c0306201 200000000140 returned -11 [ 429.674109][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 430.265642][ T7393] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.476617][ T4225] usb 5-1: USB disconnect, device number 7 [ 431.933643][ T7405] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 431.944154][ T7405] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 432.648678][ T7423] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 433.526170][ T7430] binder: 7425:7430 ioctl c0306201 0 returned -14 [ 433.534033][ T7430] binder: 7425:7430 ioctl c0306201 200000000140 returned -11 [ 434.311735][ T4224] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 434.404852][ T7435] tipc: Enabled bearer , priority 0 [ 434.422283][ T7436] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.343068][ T7429] xt_TPROXY: Can be used only with -p tcp or -p udp [ 435.393251][ T7435] device syzkaller0 entered promiscuous mode [ 435.441458][ T7435] tipc: Resetting bearer [ 435.463459][ T7433] tipc: Resetting bearer [ 435.789123][ T23] tipc: Node number set to 882496444 [ 435.836572][ T4224] usb 2-1: device descriptor read/all, error -71 [ 436.429105][ T7433] tipc: Disabling bearer [ 439.605556][ T7455] UBIFS error (pid: 7455): cannot open "", error -22 [ 441.291825][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.316487][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.047680][ T7479] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 445.226455][ T4224] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 445.628247][ T4224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 445.642384][ T4224] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 445.656200][ T4224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.950997][ T4224] usb 4-1: config 0 descriptor?? [ 446.121822][ T4224] usb 4-1: can't set config #0, error -71 [ 446.131596][ T4224] usb 4-1: USB disconnect, device number 10 [ 446.651895][ T7509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.834549][ T7508] tipc: Started in network mode [ 446.840373][ T7508] tipc: Node identity 526ad0d6148, cluster identity 4711 [ 446.848458][ T7508] tipc: Enabled bearer , priority 0 [ 446.861000][ T7508] tipc: Resetting bearer [ 446.874318][ T7507] tipc: Disabling bearer [ 452.084611][ T7556] xt_TPROXY: Can be used only with -p tcp or -p udp [ 452.096721][ T4232] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 452.916438][ T7562] tipc: Enabled bearer , priority 0 [ 452.925832][ T7562] device syzkaller0 entered promiscuous mode [ 453.304068][ T7573] binder: 7564:7573 ioctl c0306201 0 returned -14 [ 453.917973][ T4224] tipc: Node number set to 1189794006 [ 453.976724][ T7557] tipc: Resetting bearer [ 454.603256][ T7557] tipc: Disabling bearer [ 454.706992][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.818'. [ 457.846388][ T4232] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 458.207437][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 458.478532][ T4232] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 458.500254][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.530825][ T4232] usb 5-1: config 0 descriptor?? [ 458.575400][ T7609] ======================================================= [ 458.575400][ T7609] WARNING: The mand mount option has been deprecated and [ 458.575400][ T7609] and is ignored by this kernel. Remove the mand [ 458.575400][ T7609] option from the mount to silence this warning. [ 458.575400][ T7609] ======================================================= [ 458.613250][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.817549][ T4232] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 460.461936][ T4439] usb 5-1: USB disconnect, device number 8 [ 460.977312][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.831'. [ 464.676363][ T4303] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 465.148383][ T4303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 465.257705][ T4303] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 465.330294][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.367685][ T4303] usb 4-1: config 0 descriptor?? [ 465.442238][ T4303] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 467.657584][ T4232] usb 4-1: USB disconnect, device number 11 [ 469.002275][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 470.670401][ T7703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.636594][ T4224] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 475.992450][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 476.943688][ T7746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 477.934102][ T7753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.464840][ T7778] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.699183][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.873'. [ 481.267861][ T4224] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 481.276540][ T4224] usb 4-1: can't read configurations, error -110 [ 482.787893][ T7802] tipc: Enabling of bearer rejected, failed to enable media [ 484.806155][ T7827] UBIFS error (pid: 7827): cannot open "", error -22 [ 485.721949][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.884'. [ 486.838434][ T7847] tipc: Enabled bearer , priority 0 [ 487.176786][ T7847] tipc: Resetting bearer [ 487.326556][ T7841] tipc: Disabling bearer [ 494.856788][ T7930] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 498.936283][ T4439] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 501.101563][ T7986] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 501.969018][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.975865][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.474742][ T8033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.273890][ T8061] netlink: 256 bytes leftover after parsing attributes in process `syz.4.945'. [ 510.122161][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 512.283647][ T8086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.446583][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'. [ 514.739818][ T8111] netlink: 256 bytes leftover after parsing attributes in process `syz.3.956'. [ 517.693173][ T8134] device syzkaller0 entered promiscuous mode [ 520.510702][ T8159] netlink: 256 bytes leftover after parsing attributes in process `syz.1.971'. [ 522.018093][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.5.974'. [ 523.904795][ T8183] device syzkaller0 entered promiscuous mode [ 526.793915][ T8194] netlink: 256 bytes leftover after parsing attributes in process `syz.1.982'. [ 527.467065][ T8209] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 528.469163][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 529.568185][ T8233] device syzkaller0 entered promiscuous mode [ 529.873738][ T8238] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.917584][ T8248] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 532.097264][ T8258] netlink: 256 bytes leftover after parsing attributes in process `syz.4.998'. [ 533.775979][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1003'. [ 535.023328][ T8283] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 537.975880][ T8315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 538.076185][ T4224] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 539.116305][ T4224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 539.198982][ T4224] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 539.803279][ T4224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.120939][ T4224] usb 3-1: config 0 descriptor?? [ 540.124715][ T8341] device wlan0 entered promiscuous mode [ 540.199042][ T4224] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 543.497440][ T8367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 543.582569][ T8369] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 545.984222][ T4232] usb 3-1: USB disconnect, device number 17 [ 547.033495][ T8401] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1039'. [ 548.257183][ T8409] [U] „ [ 550.550483][ T8442] binder: 8433:8442 ioctl c0306201 0 returned -14 [ 554.389640][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'. [ 555.534927][ T8490] binder: 8482:8490 ioctl c0306201 0 returned -14 [ 558.733802][ T8511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.406125][ T8538] binder: 8534:8538 ioctl c0306201 0 returned -14 [ 563.416440][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.433266][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.096733][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 567.783630][ T8571] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 567.795648][ T8571] FAT-fs (loop3): unable to read boot sector [ 572.778238][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1087'. [ 574.736230][ T4224] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 574.954857][ T8608] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.963750][ T8608] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.973767][ T8608] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.982719][ T8608] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.998108][ T4224] usb 6-1: device descriptor read/64, error -71 [ 576.686236][ T8616] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 580.121260][ T8636] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 580.131035][ T8636] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 580.560509][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 581.769108][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 581.961629][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.994122][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.057113][ T8622] device bridge_slave_0 entered promiscuous mode [ 582.136137][ T4232] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 582.161873][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.185056][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.204057][ T8622] device bridge_slave_1 entered promiscuous mode [ 582.306203][ T21] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 582.449066][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.496202][ T21] usb 2-1: device descriptor read/64, error -71 [ 582.553591][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.563519][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 582.589363][ T4232] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 582.690667][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.759408][ T4232] usb 4-1: config 0 descriptor?? [ 582.776253][ T21] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 582.821721][ T4232] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 582.932696][ T8508] bond0: (slave syz_tun): Releasing backup interface [ 582.976162][ T21] usb 2-1: device descriptor read/64, error -71 [ 583.096649][ T21] usb usb2-port1: attempt power cycle [ 583.113361][ T8622] team0: Port device team_slave_0 added [ 583.138732][ T8622] team0: Port device team_slave_1 added [ 583.199726][ T4348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.348783][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.376171][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.476608][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.516650][ T21] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 583.552918][ T4348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.616412][ T21] usb 2-1: device descriptor read/8, error -71 [ 583.625482][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.644228][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.762486][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.786209][ T4259] Bluetooth: hci5: command 0x041b tx timeout [ 583.947231][ T4348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.074734][ T8665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.419394][ T21] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 584.489454][ T4224] usb 4-1: USB disconnect, device number 14 [ 584.516985][ T21] usb 2-1: device descriptor read/8, error -71 [ 584.646944][ T21] usb usb2-port1: unable to enumerate USB device [ 585.461191][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1107'. [ 586.671045][ T4225] Bluetooth: hci5: command 0x040f tx timeout [ 586.707728][ T8622] device hsr_slave_0 entered promiscuous mode [ 586.742537][ T8622] device hsr_slave_1 entered promiscuous mode [ 586.773200][ T4348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.870724][ T8687] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 588.084366][ T4259] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 588.696152][ T4259] usb 5-1: Using ep0 maxpacket: 32 [ 588.746302][ T4233] Bluetooth: hci5: command 0x0419 tx timeout [ 588.923896][ T4259] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.933494][ T4259] usb 5-1: config 0 has no interface number 0 [ 589.062906][ T8709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.827394][ T4259] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 589.877046][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.979060][ T4259] usb 5-1: Product: syz [ 590.027590][ T4259] usb 5-1: Manufacturer: syz [ 590.156982][ T4259] usb 5-1: SerialNumber: syz [ 590.213170][ T8622] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.345659][ T4259] usb 5-1: config 0 descriptor?? [ 590.496508][ T4259] usb 5-1: can't set config #0, error -71 [ 590.587390][ T4259] usb 5-1: USB disconnect, device number 10 [ 591.887069][ T4348] tipc: Left network mode [ 591.897014][ T8622] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 592.095211][ T8622] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 592.156365][ T4439] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 592.506591][ T8622] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.955355][ T4439] usb 5-1: device descriptor read/64, error -71 [ 594.766536][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 595.574596][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.074655][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 596.165256][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 596.490479][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.606606][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 596.630368][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 596.646958][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.654189][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.720949][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 596.887165][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 596.978357][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.986388][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.047860][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.195963][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.248516][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.485393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.902015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.064658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 599.091013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.107151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.126624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.173652][ T8622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.246891][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 599.282783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 599.293444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 599.344321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 599.386255][ T4303] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 599.446529][ T23] usb 4-1: unable to read config index 0 descriptor/all [ 599.454482][ T23] usb 4-1: can't read configurations, error -71 [ 599.586270][ T4303] usb 2-1: device descriptor read/64, error -71 [ 599.609530][ T4348] device hsr_slave_0 left promiscuous mode [ 599.620105][ T4348] device hsr_slave_1 left promiscuous mode [ 599.630799][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.638807][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.647645][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.655848][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.664835][ T4348] device bridge_slave_1 left promiscuous mode [ 599.671386][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.682304][ T4348] device bridge_slave_0 left promiscuous mode [ 599.689540][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.705259][ T4348] device veth1_macvtap left promiscuous mode [ 599.712328][ T4348] device veth0_macvtap left promiscuous mode [ 599.719299][ T4348] device veth1_vlan left promiscuous mode [ 599.725575][ T4348] device veth0_vlan left promiscuous mode [ 600.007929][ T8810] binder: 8807:8810 ioctl c0306201 0 returned -14 [ 600.712363][ T4303] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 600.873564][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 600.890293][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 600.906509][ T4303] usb 2-1: device descriptor read/64, error -71 [ 601.021493][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.036420][ T4303] usb usb2-port1: attempt power cycle [ 601.068433][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.342522][ T4348] bond0 (unregistering): Released all slaves [ 601.568557][ T8828] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.592151][ T4303] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 601.696847][ T4303] usb 2-1: device descriptor read/8, error -71 [ 601.986752][ T4303] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 602.327626][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.335836][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.400404][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.174360][ T4303] usb 2-1: device not accepting address 23, error -71 [ 603.182829][ T4303] usb usb2-port1: unable to enumerate USB device [ 604.667709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 604.709636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.994882][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 605.038023][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 605.104953][ T8622] device veth0_vlan entered promiscuous mode [ 605.154387][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 605.204725][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.293479][ T8622] device veth1_vlan entered promiscuous mode [ 605.503175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 605.529949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 605.597485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 605.637883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 605.684142][ T8622] device veth0_macvtap entered promiscuous mode [ 605.711247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.755059][ T8622] device veth1_macvtap entered promiscuous mode [ 605.848719][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.876587][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.916175][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.946223][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.976228][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.006137][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.184514][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.196965][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.209167][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.239637][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.307853][ T8904] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 606.541714][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.634904][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.716076][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.779337][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.856078][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.927495][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.146779][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.178980][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.352459][ T8916] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 607.629953][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.938455][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.026309][ T4233] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 608.118114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 608.345264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 608.345467][ T4233] usb 4-1: device descriptor read/64, error -71 [ 608.401276][ T8622] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.585900][ T8622] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.952974][ T8622] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.054143][ T8622] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.406391][ T4233] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 610.355771][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.391737][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.101104][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 611.174905][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.196246][ T8947] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 611.666238][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.954557][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 615.007604][ T9002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.490477][ T4224] Bluetooth: hci2: command 0x1003 tx timeout [ 619.775842][ T9047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.192194][ T4196] Bluetooth: hci2: sending frame failed (-49) [ 622.333101][ T9073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.086899][ T4439] Bluetooth: hci2: command 0x1001 tx timeout [ 623.100134][ T4196] Bluetooth: hci2: sending frame failed (-49) [ 624.429405][ T9097] syz.5.1192 sent an empty control message without MSG_MORE. [ 624.839249][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.847286][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.736981][ T4439] Bluetooth: hci2: command 0x1009 tx timeout [ 626.157832][ T9123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.336137][ T4439] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 626.686552][ T4439] usb 6-1: device descriptor read/64, error -71 [ 626.746587][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.220068][ T9137] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.752733][ T4439] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 628.096238][ T4439] usb 6-1: device descriptor read/64, error -71 [ 628.234721][ T4439] usb usb6-port1: attempt power cycle [ 632.016451][ T9177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 635.233459][ T9194] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 636.926424][ T4259] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 637.392603][ T4259] usb 7-1: device descriptor read/64, error -71 [ 638.765716][ T9244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 639.526466][ T4439] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 639.678584][ T9252] binder: 9247:9252 ioctl c0306201 0 returned -14 [ 639.907307][ T4439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 640.308859][ T4439] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 640.374311][ T4439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.444922][ T4439] usb 5-1: config 0 descriptor?? [ 640.463085][ T23] Bluetooth: hci2: command 0x1003 tx timeout [ 640.472167][ T4196] Bluetooth: hci2: sending frame failed (-49) [ 640.498975][ T4439] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 640.763372][ T9259] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.838027][ T4224] usb 5-1: USB disconnect, device number 13 [ 642.519190][ T9279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'. [ 643.220568][ T23] Bluetooth: hci2: command 0x1001 tx timeout [ 643.226942][ T4196] Bluetooth: hci2: sending frame failed (-49) [ 643.872557][ T9283] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 643.926309][ T9283] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 645.256166][ T23] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 645.309871][ T4439] Bluetooth: hci2: command 0x1009 tx timeout [ 645.466345][ T23] usb 2-1: device descriptor read/64, error -71 [ 645.904513][ T9316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.611437][ T23] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 646.971914][ T9327] binder: 9319:9327 ioctl c0306201 0 returned -14 [ 647.687474][ T9326] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 649.216367][ T23] usb usb2-port1: attempt power cycle [ 649.766326][ T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 650.036671][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 650.095702][ T23] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 650.336528][ T9372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 650.357377][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.745259][ T23] usb 2-1: config 0 descriptor?? [ 650.835220][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 651.735225][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 652.106855][ T23] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 652.185691][ T9385] binder: 9382:9385 ioctl c0306201 0 returned -14 [ 652.306548][ T23] usb 4-1: device descriptor read/64, error -71 [ 652.586400][ T23] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 652.985069][ T23] usb 4-1: device descriptor read/64, error -71 [ 654.150995][ T4715] usb 2-1: USB disconnect, device number 26 [ 654.457599][ T23] usb usb4-port1: attempt power cycle [ 655.227001][ T23] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 655.496818][ T23] usb 4-1: device not accepting address 21, error -71 [ 657.260566][ T9430] binder: 9429:9430 ioctl c0306201 0 returned -14 [ 657.270961][ T9414] tipc: Enabling of bearer rejected, failed to enable media [ 661.696254][ T4259] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 661.886376][ T4259] usb 6-1: device descriptor read/64, error -71 [ 662.156241][ T4259] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 662.396158][ T4259] usb 6-1: device descriptor read/64, error -71 [ 662.516439][ T4259] usb usb6-port1: attempt power cycle [ 666.227659][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1278'. [ 669.296125][ T4259] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 669.498186][ T9550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.246303][ T4259] usb 5-1: device descriptor read/64, error -71 [ 670.456172][ T9555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.780009][ T4259] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 671.652715][ T4259] usb 5-1: device descriptor read/64, error -71 [ 671.817698][ T4259] usb usb5-port1: attempt power cycle [ 677.716217][ T4259] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 678.276170][ T4259] usb 4-1: device descriptor read/64, error -71 [ 678.546214][ T4259] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 679.608020][ T4259] usb 4-1: device descriptor read/64, error -71 [ 679.806257][ T4259] usb usb4-port1: attempt power cycle [ 682.363821][ T9672] binder: 9634:9672 ioctl c0306201 0 returned -14 [ 683.462438][ T9677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.856317][ T4224] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 686.096373][ T4224] usb 4-1: device descriptor read/64, error -71 [ 686.272851][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.282426][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.376337][ T4224] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 686.576920][ T4224] usb 4-1: device descriptor read/64, error -71 [ 686.697264][ T4224] usb usb4-port1: attempt power cycle [ 687.432749][ T4224] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 687.526671][ T4224] usb 4-1: device descriptor read/8, error -71 [ 687.826392][ T4224] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 687.956501][ T4224] usb 4-1: device descriptor read/8, error -71 [ 688.148640][ T4224] usb usb4-port1: unable to enumerate USB device [ 695.056396][ T4715] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 695.286246][ T4715] usb 4-1: device descriptor read/64, error -71 [ 695.576569][ T4715] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 695.806331][ T4715] usb 4-1: device descriptor read/64, error -71 [ 695.937105][ T4715] usb usb4-port1: attempt power cycle [ 696.347510][ T4715] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 696.417214][ T9357] Bluetooth: hci2: command 0x1003 tx timeout [ 696.723262][ T4715] usb 4-1: device not accepting address 32, error -71 [ 698.657606][ T9804] device syzkaller0 entered promiscuous mode [ 698.708908][ T9357] Bluetooth: hci2: command 0x1001 tx timeout [ 698.715445][ T4196] Bluetooth: hci2: sending frame failed (-49) [ 699.234234][ T9813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 699.933835][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 702.014381][ T21] Bluetooth: hci2: command 0x1009 tx timeout [ 702.596442][ T21] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 702.908228][ T21] usb 5-1: device descriptor read/64, error -71 [ 703.197982][ T21] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 704.036283][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 704.102288][ T9837] binder: 9832:9837 ioctl c0306201 0 returned -14 [ 709.464467][ T4715] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 710.516279][ T4715] usb 6-1: device descriptor read/64, error -71 [ 710.806921][ T4715] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 711.036539][ T4715] usb 6-1: device descriptor read/64, error -71 [ 711.179393][ T4715] usb usb6-port1: attempt power cycle [ 711.707631][ T4715] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 712.229143][ T4715] usb 6-1: device not accepting address 21, error -71 [ 714.480836][ T9934] binder: 9901:9934 ioctl c0306201 0 returned -14 [ 716.378088][ T9955] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.387536][ T9955] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.396887][ T9955] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.406200][ T9955] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.080611][ T9946] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 717.089852][ T9946] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 717.489127][ T9959] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 717.596143][ T9893] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 718.227103][ T9893] usb 4-1: device descriptor read/64, error -71 [ 718.536113][ T9893] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 718.756398][ T9893] usb 4-1: device descriptor read/64, error -71 [ 719.631489][ T9893] usb usb4-port1: attempt power cycle [ 721.303882][T10001] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.313491][T10001] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.322874][T10001] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.332609][T10001] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.200511][T10007] binder: 9986:10007 ioctl c0306201 0 returned -14 [ 722.272579][T10008] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 725.706307][T10014] process '/newroot/324/file0' started with executable stack [ 727.381681][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1398'. [ 727.923637][T10056] fuse: Unknown parameter 'group_id00000000000000000000' [ 729.731953][T10074] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 731.986923][T10085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 732.472012][T10088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 733.584294][ T4588] Bluetooth: hci2: Frame reassembly failed (-84) [ 735.254952][T10117] fuse: Unknown parameter 'group_id00000000000000000000' [ 736.149792][ T4439] Bluetooth: hci2: command 0x1003 tx timeout [ 736.211876][ T4196] Bluetooth: hci2: sending frame failed (-49) [ 738.008558][T10146] binder: 10132:10146 ioctl c0306201 0 returned -14 [ 738.266187][ T4439] Bluetooth: hci2: command 0x1001 tx timeout [ 738.273331][ T4196] Bluetooth: hci2: sending frame failed (-49) [ 740.356292][ T9357] Bluetooth: hci2: command 0x1009 tx timeout [ 740.921530][T10171] fuse: Unknown parameter 'group_id00000000000000000000' [ 742.884481][T10185] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 743.776403][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 743.802403][T10188] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1432'. [ 744.078227][T10192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.916955][T10212] binder: 10205:10212 ioctl c0306201 0 returned -14 [ 747.710464][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.716902][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.316767][T10230] device syzkaller0 entered promiscuous mode [ 749.510946][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1446'. [ 749.523322][T10244] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1446'. [ 750.080243][T10252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 754.810643][T10286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.550769][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'. [ 756.571605][T10291] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1457'. [ 756.867783][T10298] device syzkaller0 entered promiscuous mode [ 757.104651][T10303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.289471][T10343] fuse: Bad value for 'user_id' [ 764.846717][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 765.017487][T10338] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1470'. [ 765.737128][T10360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 771.044245][T10390] binder: 10389:10390 ioctl c0306201 0 returned -14 [ 771.614847][T10397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 772.215678][T10409] fuse: Bad value for 'user_id' [ 773.136360][ T9893] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 773.472353][T10420] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 773.502128][T10420] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 773.776126][ T9893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 773.967567][ T9893] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 773.977686][ T9893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.992502][ T9893] usb 5-1: config 0 descriptor?? [ 774.112491][T10436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.580811][ T9893] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 775.146672][T10446] binder: 10441:10446 ioctl c0306201 0 returned -14 [ 775.794277][ T4439] usb 5-1: USB disconnect, device number 19 [ 777.562556][T10464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 777.979212][T10467] fuse: Bad value for 'fd' [ 780.354401][T10486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.626272][T10499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.847564][T10503] binder: 10494:10503 ioctl c0306201 0 returned -14 [ 783.086982][T10514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.623911][T10519] fuse: Bad value for 'fd' [ 788.319223][T10540] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 789.471097][T10555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 790.537963][T10569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 790.576438][T10570] binder: 10560:10570 ioctl c0306201 0 returned -14 [ 791.951776][T10585] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 794.042286][T10603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.051498][T10633] binder: 10624:10633 ioctl c0306201 0 returned -14 [ 797.442861][T10639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.827087][T10651] fuse: Bad value for 'fd' [ 802.904432][T10680] binder: 10678:10680 ioctl c0306201 0 returned -14 [ 804.311858][T10700] device syzkaller0 entered promiscuous mode [ 805.825902][T10705] fuse: Bad value for 'fd' [ 806.525006][T10712] fuse: Bad value for 'user_id' [ 809.782448][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.789519][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.200083][T10735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 812.498321][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1563'. [ 813.341866][ T9893] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 814.237219][T10768] device syzkaller0 entered promiscuous mode [ 815.514147][T10785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 816.608503][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1578'. [ 817.166613][T10796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 824.760170][T10850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 827.246084][ T9893] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 827.889908][T10875] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 829.259357][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1598'. [ 830.829255][T10888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 832.650667][T10905] fuse: Bad value for 'fd' [ 833.446384][T10907] fuse: Invalid rootmode [ 840.918287][T10938] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.504178][T10946] device syzkaller0 entered promiscuous mode [ 841.635697][T10948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 843.541217][T10959] fuse: Invalid rootmode [ 844.225554][T10964] fuse: Bad value for 'fd' [ 844.965267][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1618'. [ 845.541758][T10972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 848.067732][T11001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.666872][T11010] fuse: Unknown parameter 'user00000000000000000000' [ 852.174112][T11019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 854.693636][T11035] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 857.382358][T11053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 857.879005][T11056] fuse: Unknown parameter 'user_i00000000000000000000' [ 860.021059][T11076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 863.232679][T11091] fuse: Unknown parameter '00000000000000000000' [ 863.870361][T11097] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.803990][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1651'. [ 865.775825][T11111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 866.469267][T11117] fuse: Unknown parameter 'user_i00000000000000000000' [ 868.536209][T11129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.211976][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.220910][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.510667][T11152] fuse: Unknown parameter 'user00000000000000000000' [ 875.352439][T11166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 878.476833][T11195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 881.895292][T11217] fuse: Unknown parameter 'user00000000000000000000' [ 886.656671][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1681'. [ 887.613785][T11248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 889.337422][T11265] fuse: Unknown parameter 'user00000000000000000000' [ 894.700264][T11305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1696'. [ 895.750205][T11311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 897.007676][T11321] fuse: Unknown parameter 'user_i00000000000000000000' [ 897.727811][T11329] sctp: [Deprecated]: syz.5.1701 (pid 11329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.727811][T11329] Use struct sctp_sack_info instead [ 899.491467][T11344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 899.610308][T11349] fuse: Unknown parameter 'user_id00000000000000000000' [ 900.759623][T11356] tipc: Enabling of bearer rejected, failed to enable media [ 900.870354][T11362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 901.397623][T11365] device syzkaller0 entered promiscuous mode [ 902.769896][T11376] fuse: Unknown parameter 'user_i00000000000000000000' [ 904.549803][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1713'. [ 904.682779][T11386] sctp: [Deprecated]: syz.4.1715 (pid 11386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 904.682779][T11386] Use struct sctp_sack_info instead [ 906.640520][T11404] fuse: Unknown parameter 'user_id00000000000000000000' [ 908.933018][T11415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.447006][T11431] fuse: Unknown parameter 'user_i00000000000000000000' [ 912.418479][T11433] loop4: detected capacity change from 0 to 8 [ 912.486994][T11433] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 912.503928][ T4602] udevd[4602]: incorrect cramfs checksum on /dev/loop4 [ 913.766303][T11444] cramfs: Error -5 while decompressing! [ 913.772471][T11444] cramfs: ffffffff961e6028(26)->ffff88805b4b3000(4096) [ 913.779956][T11444] cramfs: Error -3 while decompressing! [ 913.785746][T11444] cramfs: ffffffff961e6042(26)->ffff888058408000(4096) [ 913.792839][T11444] cramfs: Error -3 while decompressing! [ 913.798560][T11444] cramfs: ffffffff961e605c(16)->ffff888058409000(4096) [ 913.806159][T11444] cramfs: Error -5 while decompressing! [ 913.811944][T11444] cramfs: ffffffff961e6028(26)->ffff88805b4b3000(4096) [ 914.100274][ T4602] udevd[4602]: incorrect cramfs checksum on /dev/loop4 [ 914.183166][T11449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1730'. [ 916.094485][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.141903][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.351074][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.557929][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.192186][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.232077][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.317921][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.343005][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.656015][ T4439] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 918.256503][ T4439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 918.475724][ T4439] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 918.754403][T11469] chnl_net:caif_netlink_parms(): no params data found [ 918.769268][ T4439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.829652][ T9893] Bluetooth: hci2: command 0x0409 tx timeout [ 918.917019][ T4439] usb 5-1: config 0 descriptor?? [ 920.390582][T11469] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.418952][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.671072][T11517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.002125][ T4715] Bluetooth: hci2: command 0x041b tx timeout [ 921.317322][T11469] device bridge_slave_0 entered promiscuous mode [ 921.472353][T11469] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.486195][T11469] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.536202][T11469] device bridge_slave_1 entered promiscuous mode [ 921.835317][T11469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.932666][T11469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.329014][T11469] team0: Port device team_slave_0 added [ 922.376326][ T4439] usb 5-1: can't set config #0, error -71 [ 922.489736][T11469] team0: Port device team_slave_1 added [ 922.512667][T11539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1749'. [ 922.552420][ T4439] usb 5-1: USB disconnect, device number 21 [ 922.559735][T11539] netlink: set zone limit has 8 unknown bytes [ 922.845343][T11469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.057639][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.090479][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 923.360719][T11469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.374038][T11469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.386842][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.618679][T11469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.242274][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 925.480453][T11559] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1752'. [ 926.317244][T11469] device hsr_slave_0 entered promiscuous mode [ 926.382665][T11469] device hsr_slave_1 entered promiscuous mode [ 926.390257][T11469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.398559][T11469] Cannot create hsr debugfs directory [ 926.711371][T11575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 930.478532][ T9] device hsr_slave_0 left promiscuous mode [ 930.496411][ T9] device hsr_slave_1 left promiscuous mode [ 930.497277][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.497328][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.505686][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.505721][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.507563][ T9] device bridge_slave_1 left promiscuous mode [ 930.507702][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.509421][ T9] device bridge_slave_0 left promiscuous mode [ 930.509561][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.726601][ T9] device veth1_macvtap left promiscuous mode [ 930.726714][ T9] device veth0_macvtap left promiscuous mode [ 930.726812][ T9] device veth1_vlan left promiscuous mode [ 930.726897][ T9] device veth0_vlan left promiscuous mode [ 931.016319][ T4233] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 931.384630][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 931.384690][ T4233] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 931.384718][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.417810][ T4233] usb 4-1: config 0 descriptor?? [ 931.458684][ T4233] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 931.546364][ T4233] Bluetooth: hci1: command 0x0000 tx timeout [ 931.584438][T11612] loop4: detected capacity change from 0 to 1024 [ 931.816357][T11612] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 931.816538][T11612] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.999162][ T3033] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 932.013965][ T3033] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 932.014010][ T3033] EXT4-fs (loop4): This should not happen!! Data will be lost [ 932.014010][ T3033] [ 932.538220][T11632] binder: 11627:11632 ioctl c0306201 0 returned -14 [ 932.546567][T11632] binder: 11627:11632 ioctl c0306201 0 returned -14 [ 935.096700][ T4233] usb 4-1: USB disconnect, device number 38 [ 935.097040][ T9] team0 (unregistering): Port device team_slave_1 removed [ 935.248298][ T9] team0 (unregistering): Port device team_slave_0 removed [ 935.353085][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.768550][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.890934][ T9] bond0 (unregistering): Released all slaves [ 937.152566][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.160895][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.440244][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 937.456504][T11670] loop5: detected capacity change from 0 to 8 [ 937.567000][T11670] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 937.788138][T11678] binder: 11673:11678 ioctl c0306201 0 returned -14 [ 938.583335][T11680] cramfs: Error -5 while decompressing! [ 938.589797][T11680] cramfs: ffffffff961ea028(26)->ffff88805c11c000(4096) [ 938.597928][T11680] cramfs: Error -3 while decompressing! [ 938.603908][T11680] cramfs: ffffffff961ea042(26)->ffff88805c11d000(4096) [ 938.611436][T11680] cramfs: Error -3 while decompressing! [ 938.617643][T11680] cramfs: ffffffff961ea05c(16)->ffff88805ccdc000(4096) [ 938.625958][T11680] cramfs: Error -5 while decompressing! [ 938.632077][T11680] cramfs: ffffffff961ea028(26)->ffff88805c11c000(4096) [ 939.205761][T11684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 940.479852][T11469] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 940.532433][T11469] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 940.634450][T11469] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 940.766939][T11469] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 941.904068][T11469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.994158][T11469] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.024745][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 942.046693][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 942.096385][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 942.147188][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 942.162904][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.170428][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.212036][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 942.235606][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 942.250871][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.258086][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.287048][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 942.385636][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 942.545118][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 942.741653][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 942.946309][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 943.075207][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 943.106732][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 943.135214][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 943.322303][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 943.786873][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 944.060454][T11469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 944.146483][T11469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 944.201835][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 944.236119][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 945.583759][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 945.598571][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 945.630470][T11469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.980530][T11765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 950.010878][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 950.064553][T11795] loop1: detected capacity change from 0 to 4096 [ 950.066721][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 950.176330][T11795] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 950.316212][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 950.325617][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 950.367193][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 950.508353][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 950.631783][T11469] device veth0_vlan entered promiscuous mode [ 951.448520][T11469] device veth1_vlan entered promiscuous mode [ 951.597449][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 951.747061][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 951.782903][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 951.814966][T11469] device veth0_macvtap entered promiscuous mode [ 951.873585][T11469] device veth1_macvtap entered promiscuous mode [ 952.053080][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.306015][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.610206][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.836055][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.916108][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.977247][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.994913][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.161260][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.173312][T11469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.182993][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 953.233116][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 953.290596][T11819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 953.452214][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 953.534751][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.762604][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.776732][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.792204][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.803506][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.813542][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.998048][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.009645][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.021033][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.035598][T11469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.693136][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 956.762204][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 956.819596][T11469] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.852737][T11469] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.872544][T11469] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.894130][T11469] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.634074][ T4407] Bluetooth: hci5: Frame reassembly failed (-84) [ 958.716146][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.724331][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.041285][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 959.090553][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.145358][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.245758][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 960.086881][T11852] loop4: detected capacity change from 0 to 32768 [ 960.786259][T11882] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 961.179240][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 961.190186][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 961.443233][T11852] XFS (loop4): Mounting V5 Filesystem [ 961.717691][T11852] XFS (loop4): log mount failed [ 962.606283][ T4262] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 963.258596][ T4715] Bluetooth: hci5: command 0x1001 tx timeout [ 963.446539][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 963.867291][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 963.903779][ T4262] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 963.952748][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.210482][ T4262] usb 2-1: config 0 descriptor?? [ 965.678954][ T4715] Bluetooth: hci5: command 0x1009 tx timeout [ 965.791076][T11930] loop3: detected capacity change from 0 to 2048 [ 965.866520][T11930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.315973][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 967.576023][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 967.752882][ T4262] usb 2-1: can't set config #0, error -71 [ 968.516043][ T23] usb 8-1: config 0 has no interfaces? [ 968.581332][ T4262] usb 2-1: USB disconnect, device number 27 [ 968.716152][ T23] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 969.519114][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.527992][ T23] usb 8-1: Product: syz [ 969.532376][ T23] usb 8-1: Manufacturer: syz [ 969.537227][ T23] usb 8-1: SerialNumber: syz [ 969.545203][ T23] usb 8-1: config 0 descriptor?? [ 970.270370][ T4232] usb 8-1: USB disconnect, device number 2 [ 971.289248][T11976] loop1: detected capacity change from 0 to 128 [ 972.033816][T11976] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 972.100665][T11976] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 974.196983][ T4588] Bluetooth: hci5: Frame reassembly failed (-84) [ 974.892952][T12021] hub 6-0:1.0: USB hub found [ 974.902224][T12021] hub 6-0:1.0: 1 port detected [ 975.402366][ T4262] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 975.824533][T12025] loop3: detected capacity change from 0 to 512 [ 975.976351][ T4262] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 976.036103][ T4262] usb 8-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 976.077392][ T4262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.126951][ T4262] usb 8-1: config 0 descriptor?? [ 976.218770][ T4262] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 976.249089][T12032] loop1: detected capacity change from 0 to 8 [ 976.268094][ T4225] Bluetooth: hci5: command 0x1003 tx timeout [ 976.286383][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 977.500241][ T26] audit: type=1800 audit(1755729990.834:2): pid=12037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1846" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 977.958520][ T8625] Bluetooth: hci2: link tx timeout [ 977.966929][ T8625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 977.979688][ T8625] Bluetooth: hci2: link tx timeout [ 977.985192][ T8625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 977.993239][ T8625] Bluetooth: hci2: link tx timeout [ 977.998844][ T8625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 978.007204][ T8625] Bluetooth: hci2: link tx timeout [ 978.012679][ T8625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 978.870246][ T4225] Bluetooth: hci5: command 0x1001 tx timeout [ 978.896145][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 979.545766][T12055] loop1: detected capacity change from 0 to 1024 [ 980.618454][ T4715] Bluetooth: hci2: command 0x0406 tx timeout [ 980.916000][ T4225] Bluetooth: hci5: command 0x1009 tx timeout [ 981.017854][T12071] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 981.764701][T12074] loop4: detected capacity change from 0 to 764 [ 981.795791][ T26] audit: type=1800 audit(1755729995.194:3): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1850" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 981.829907][ T4224] usb 8-1: USB disconnect, device number 3 [ 981.991515][T12080] hub 6-0:1.0: USB hub found [ 981.996811][T12080] hub 6-0:1.0: 1 port detected [ 982.960379][T12081] Symlink component flag not implemented [ 982.968745][T12081] Symlink component flag not implemented [ 982.995910][T12081] Symlink component flag not implemented (128) [ 983.006398][T12081] Symlink component flag not implemented (122) [ 983.681310][T12089] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 984.804463][T12095] loop1: detected capacity change from 0 to 512 [ 986.101462][ T4232] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 986.261394][T12095] EXT4-fs (loop1): Ignoring removed bh option [ 986.268512][T12095] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 987.748150][T12095] EXT4-fs: failed to create workqueue [ 987.786105][T12095] EXT4-fs (loop1): mount failed [ 987.866345][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 987.889100][ T4232] usb 4-1: can't read configurations, error -71 [ 987.923098][T12129] ptrace attach of "./syz-executor exec"[4189] was attempted by ""[12129] [ 988.665433][T12141] loop5: detected capacity change from 0 to 256 [ 989.732529][T12141] FAT-fs (loop5): Directory bread(block 64) failed [ 989.740270][T12141] FAT-fs (loop5): Directory bread(block 65) failed [ 989.747629][T12141] FAT-fs (loop5): Directory bread(block 66) failed [ 989.754537][T12141] FAT-fs (loop5): Directory bread(block 67) failed [ 989.761897][T12141] FAT-fs (loop5): Directory bread(block 68) failed [ 989.768767][T12141] FAT-fs (loop5): Directory bread(block 69) failed [ 989.775976][T12141] FAT-fs (loop5): Directory bread(block 70) failed [ 989.782934][T12141] FAT-fs (loop5): Directory bread(block 71) failed [ 989.790060][T12141] FAT-fs (loop5): Directory bread(block 72) failed [ 989.797866][T12141] FAT-fs (loop5): Directory bread(block 73) failed [ 991.404807][ T4693] Bluetooth: hci5: Frame reassembly failed (-84) [ 993.527168][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 993.533682][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 995.366060][ T9357] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 995.480100][T12204] loop4: detected capacity change from 0 to 256 [ 995.511623][T12204] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 995.531729][T12204] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 995.555426][T12204] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 995.570068][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 995.579209][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 995.646203][ T9357] usb 2-1: Using ep0 maxpacket: 16 [ 995.914473][T12206] exFAT-fs (loop4): hint_cluster is invalid (17) [ 995.923685][T12206] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 995.932417][T12206] exFAT-fs (loop4): Filesystem has been set read-only [ 995.966461][ T9357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.978715][ T9357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.992435][ T9357] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 996.769760][ T9357] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 996.787211][ T9357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.801830][ T9357] usb 2-1: config 0 descriptor?? [ 997.304681][ T9357] HID 045e:07da: Invalid code 65791 type 1 [ 997.699419][ T9357] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input5 [ 997.836219][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 997.984528][ T9357] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 998.004588][ T9357] usb 2-1: USB disconnect, device number 28 [ 998.134304][T12228] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 998.423797][T12227] fido_id[12227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 998.589925][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.609153][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.128272][T12259] loop5: detected capacity change from 0 to 8 [ 1002.168862][T12259] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1002.199998][T12259] cramfs: Error -5 while decompressing! [ 1002.205810][T12259] cramfs: ffffffff961e6028(26)->ffff88804dbd1000(4096) [ 1002.213156][T12259] cramfs: Error -3 while decompressing! [ 1002.218768][T12259] cramfs: ffffffff961e6042(26)->ffff88804dbd2000(4096) [ 1002.225715][T12259] cramfs: Error -3 while decompressing! [ 1002.231676][T12259] cramfs: ffffffff961e605c(16)->ffff88804dbd3000(4096) [ 1002.238959][T12259] cramfs: Error -5 while decompressing! [ 1002.244716][T12259] cramfs: ffffffff961e6028(26)->ffff88804dbd1000(4096) [ 1002.273038][ T4602] udevd[4602]: incorrect cramfs checksum on /dev/loop5 [ 1002.342360][ T4602] udevd[4602]: incorrect cramfs checksum on /dev/loop5 [ 1002.415013][ T4224] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1002.656138][ T23] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1002.906285][ T4224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 1003.027076][ T4224] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1003.040872][ T4224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.076199][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1003.116551][ T4224] usb 5-1: config 0 descriptor?? [ 1003.426434][ T4224] usb 5-1: can't set config #0, error -71 [ 1003.446197][ T23] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1003.455673][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.466159][ T4224] usb 5-1: USB disconnect, device number 22 [ 1003.512150][ T23] usb 6-1: Product: syz [ 1003.528846][T12284] device syzkaller0 entered promiscuous mode [ 1003.539930][ T23] usb 6-1: Manufacturer: syz [ 1003.553301][ T23] usb 6-1: SerialNumber: syz [ 1003.574900][ T23] usb 6-1: config 0 descriptor?? [ 1003.622305][ T23] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1003.655167][ T23] usb 6-1: Detected FT232H [ 1004.182295][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1004.256343][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1004.430617][ T23] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1004.478503][ T23] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1004.519848][ T23] usb 6-1: USB disconnect, device number 24 [ 1004.609710][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1004.778504][ T23] ftdi_sio 6-1:0.0: device disconnected [ 1006.681036][ T7449] Bluetooth: hci5: Frame reassembly failed (-84) [ 1006.961984][T12295] loop4: detected capacity change from 0 to 32768 [ 1008.467527][T12347] loop4: detected capacity change from 0 to 512 [ 1008.534454][T12347] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1906: dx entry: limit 0 != root limit 125 [ 1008.550974][T12347] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1906: Corrupt directory, running e2fsck is recommended [ 1008.566620][T12347] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1008.576552][T12347] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1906: corrupted in-inode xattr [ 1008.625109][T12347] EXT4-fs (loop4): Remounting filesystem read-only [ 1008.636168][T12347] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1906: couldn't read orphan inode 15 (err -117) [ 1008.649837][T12347] EXT4-fs (loop4): Remounting filesystem read-only [ 1008.666082][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 1008.686025][ T4262] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1008.696017][T12347] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,nodelalloc,user_xattr,grpjquota=.max_batch_time=0x0000000000000003,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 1008.703539][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 1008.788529][T12347] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1906: dx entry: limit 0 != root limit 125 [ 1008.802401][T12347] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1906: Corrupt directory, running e2fsck is recommended [ 1008.816384][T12347] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 255: comm syz.4.1906: path /424/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1008.851040][T12347] EXT4-fs (loop4): Remounting filesystem read-only [ 1008.893917][T12347] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 8: comm syz.4.1906: path /424/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 1008.959649][T12347] EXT4-fs (loop4): Remounting filesystem read-only [ 1009.036911][T12349] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 1009.084647][T12349] EXT4-fs (loop4): Remounting filesystem read-only [ 1009.107873][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 1009.120298][ T4262] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1009.130222][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.141033][ T4262] usb 2-1: config 0 descriptor?? [ 1009.219065][ T4262] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1010.661830][T12364] device syzkaller0 entered promiscuous mode [ 1010.766413][ T9357] Bluetooth: hci5: command 0x1001 tx timeout [ 1010.772666][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 1011.912602][T12379] loop3: detected capacity change from 0 to 64 [ 1012.826125][ T4224] Bluetooth: hci5: command 0x1009 tx timeout [ 1014.334782][T12395] device syzkaller0 entered promiscuous mode [ 1015.302158][T12406] loop3: detected capacity change from 0 to 256 [ 1015.335687][ T4224] usb 2-1: USB disconnect, device number 29 [ 1015.385678][T12406] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1015.406146][T12406] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1015.495612][T12406] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1017.148407][T12427] exFAT-fs (loop3): hint_cluster is invalid (17) [ 1017.156616][T12427] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 1017.165612][T12427] exFAT-fs (loop3): Filesystem has been set read-only [ 1018.114687][T12431] loop7: detected capacity change from 0 to 8 [ 1018.170432][T12327] udevd[12327]: incorrect cramfs checksum on /dev/loop7 [ 1018.178795][T12431] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1018.270948][T12431] cramfs: Error -5 while decompressing! [ 1018.277043][T12431] cramfs: ffffffff961ea028(26)->ffff88805054d000(4096) [ 1018.284298][T12431] cramfs: Error -3 while decompressing! [ 1018.290584][T12431] cramfs: ffffffff961ea042(26)->ffff888051a68000(4096) [ 1018.298080][T12431] cramfs: Error -3 while decompressing! [ 1018.303737][T12431] cramfs: ffffffff961ea05c(16)->ffff888051a69000(4096) [ 1018.311539][T12431] cramfs: Error -5 while decompressing! [ 1018.317420][T12431] cramfs: ffffffff961ea028(26)->ffff88805054d000(4096) [ 1021.193290][T12459] usb usb1: usbfs: process 12459 (syz.3.1933) did not claim interface 0 before use [ 1021.204002][T12459] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1021.308067][T12454] loop1: detected capacity change from 0 to 1764 [ 1023.430155][T12477] loop3: detected capacity change from 0 to 2048 [ 1023.781884][ T4292] Bluetooth: hci5: Frame reassembly failed (-84) [ 1023.804942][ T4292] Bluetooth: hci5: Frame reassembly failed (-84) [ 1023.814781][ T4189] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 49534 different from extent length 52094. Filesystem need not be standards compliant. [ 1024.779608][T12497] loop4: detected capacity change from 0 to 8 [ 1024.891745][T12497] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1024.942991][T12327] udevd[12327]: incorrect cramfs checksum on /dev/loop4 [ 1024.970855][T12497] cramfs: Error -5 while decompressing! [ 1024.976820][T12497] cramfs: ffffffff961e6028(26)->ffff888058065000(4096) [ 1024.984129][T12497] cramfs: Error -3 while decompressing! [ 1024.989930][T12497] cramfs: ffffffff961e6042(26)->ffff888050b29000(4096) [ 1024.997944][T12497] cramfs: Error -3 while decompressing! [ 1025.003760][T12497] cramfs: ffffffff961e605c(16)->ffff888050b37000(4096) [ 1025.011027][T12497] cramfs: Error -5 while decompressing! [ 1025.017247][T12497] cramfs: ffffffff961e6028(26)->ffff888058065000(4096) [ 1025.117142][T12327] udevd[12327]: incorrect cramfs checksum on /dev/loop4 [ 1025.333534][T12506] loop1: detected capacity change from 0 to 8192 [ 1026.278058][ T9357] Bluetooth: hci5: command 0x1003 tx timeout [ 1026.284946][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 1026.334260][T12499] loop3: detected capacity change from 0 to 32768 [ 1026.470201][T12499] XFS (loop3): Mounting V5 Filesystem [ 1027.455811][T12499] XFS (loop3): Ending clean mount [ 1028.457194][ T4224] Bluetooth: hci5: command 0x1001 tx timeout [ 1028.463928][ T8625] Bluetooth: hci5: sending frame failed (-49) [ 1028.804401][T12554] device syzkaller0 entered promiscuous mode [ 1028.915723][ T26] audit: type=1800 audit(1755730298.314:4): pid=12549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1944" name="file2" dev="loop3" ino=6151 res=0 errno=0 [ 1029.128074][ T4189] XFS (loop3): Unmounting Filesystem [ 1029.276889][ T4262] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1029.566852][ T4262] usb 5-1: Using ep0 maxpacket: 32 [ 1029.856461][ T4262] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1030.076104][ T4262] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1030.791401][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1030.800904][ T4262] usb 5-1: Product: syz [ 1030.805282][ T4262] usb 5-1: Manufacturer: syz [ 1030.812035][ T4262] usb 5-1: SerialNumber: syz [ 1030.818653][ T4262] usb 5-1: config 0 descriptor?? [ 1030.828390][ T9357] Bluetooth: hci5: command 0x1009 tx timeout [ 1030.836498][T12555] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1031.903418][T12588] loop1: detected capacity change from 0 to 128 [ 1031.948795][T12100] usb 5-1: USB disconnect, device number 23 [ 1032.310728][T12588] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nodiscard,,errors=continue. Quota mode: none. [ 1032.426781][ T4262] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1032.500663][T12588] ext4 filesystem being mounted at /427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.534649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.837276][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 1032.889566][ T4262] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1033.085238][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.191107][T12609] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1034.067184][ T4262] usb 4-1: config 0 descriptor?? [ 1034.297484][ T4262] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1038.628182][T12100] usb 4-1: USB disconnect, device number 41 [ 1038.639188][T12631] netlink: 'syz.5.1968': attribute type 10 has an invalid length. [ 1039.469022][T12640] mmap: syz.1.1970 (12640) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1040.162115][T12631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.170405][T12631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.214787][T12631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.222772][T12631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.232659][T12631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.240020][T12631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.253380][T12631] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1040.420401][T12637] ================================================================== [ 1040.430255][T12637] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 1040.438381][T12637] Read of size 1 at addr ffff888062a86832 by task syz.7.1972/12637 [ 1040.446324][T12637] [ 1040.448864][T12637] CPU: 0 PID: 12637 Comm: syz.7.1972 Not tainted 5.15.189-syzkaller #0 [ 1040.457506][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1040.468055][T12637] Call Trace: [ 1040.471393][T12637] [ 1040.474413][T12637] dump_stack_lvl+0x168/0x230 [ 1040.479406][T12637] ? show_regs_print_info+0x20/0x20 [ 1040.484842][T12637] ? _printk+0xcc/0x110 [ 1040.489029][T12637] ? rose_transmit_link+0x5b0/0x730 [ 1040.494539][T12637] ? load_image+0x3b0/0x3b0 [ 1040.499166][T12637] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1040.504781][T12637] print_address_description+0x60/0x2d0 [ 1040.510640][T12637] ? rose_transmit_link+0x5b0/0x730 [ 1040.515960][T12637] kasan_report+0xdf/0x130 [ 1040.520671][T12637] ? rose_transmit_link+0x5b0/0x730 [ 1040.526413][T12637] ? __phys_addr+0xb6/0x170 [ 1040.531043][T12637] rose_transmit_link+0x5b0/0x730 [ 1040.536130][T12637] ? skb_put+0x117/0x210 [ 1040.540935][T12637] rose_write_internal+0x673/0x1e80 [ 1040.546261][T12637] ? rose_validate_nr+0x120/0x120 [ 1040.551868][T12637] ? del_timer+0x11a/0x1b0 [ 1040.556465][T12637] ? skb_queue_purge+0x62/0x290 [ 1040.561746][T12637] rose_release+0x22a/0x4e0 [ 1040.566292][T12637] sock_close+0xd5/0x240 [ 1040.570741][T12637] ? sock_mmap+0x90/0x90 [ 1040.575186][T12637] __fput+0x234/0x930 [ 1040.579298][T12637] task_work_run+0x125/0x1a0 [ 1040.584203][T12637] get_signal+0x1222/0x12c0 [ 1040.588880][T12637] arch_do_signal_or_restart+0xc1/0x1300 [ 1040.594835][T12637] ? kick_process+0xd4/0x140 [ 1040.599552][T12637] ? task_work_add+0x1a7/0x1d0 [ 1040.604435][T12637] ? get_sigframe_size+0x10/0x10 [ 1040.609971][T12637] ? __sys_connect+0x239/0x410 [ 1040.614814][T12637] ? exit_to_user_mode_loop+0x3b/0x130 [ 1040.620337][T12637] exit_to_user_mode_loop+0x9e/0x130 [ 1040.625680][T12637] exit_to_user_mode_prepare+0xb1/0x140 [ 1040.631304][T12637] syscall_exit_to_user_mode+0x16/0x40 [ 1040.636901][T12637] do_syscall_64+0x58/0xa0 [ 1040.641350][T12637] ? clear_bhb_loop+0x30/0x80 [ 1040.646143][T12637] ? clear_bhb_loop+0x30/0x80 [ 1040.650853][T12637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1040.656792][T12637] RIP: 0033:0x7f1cae163be9 [ 1040.661690][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.681903][T12637] RSP: 002b:00007f1cac3aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1040.690620][T12637] RAX: fffffffffffffe00 RBX: 00007f1cae38b090 RCX: 00007f1cae163be9 [ 1040.699057][T12637] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000009 [ 1040.707319][T12637] RBP: 00007f1cae1e6e19 R08: 0000000000000000 R09: 0000000000000000 [ 1040.715598][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.724069][T12637] R13: 00007f1cae38b128 R14: 00007f1cae38b090 R15: 00007ffe8264dd58 [ 1040.732093][T12637] [ 1040.735422][T12637] [ 1040.737773][T12637] Allocated by task 11665: [ 1040.742224][T12637] __kasan_kmalloc+0xb5/0xf0 [ 1040.746847][T12637] rose_add_node+0x227/0xdb0 [ 1040.751485][T12637] rose_rt_ioctl+0x9db/0xe20 [ 1040.756359][T12637] rose_ioctl+0x27a/0x790 [ 1040.760809][T12637] sock_do_ioctl+0xd3/0x2f0 [ 1040.765358][T12637] sock_ioctl+0x4ed/0x6e0 [ 1040.769969][T12637] __se_sys_ioctl+0xfa/0x170 [ 1040.774876][T12637] do_syscall_64+0x4c/0xa0 [ 1040.779347][T12637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1040.785875][T12637] [ 1040.788322][T12637] Freed by task 12632: [ 1040.792668][T12637] kasan_set_track+0x4b/0x70 [ 1040.797295][T12637] kasan_set_free_info+0x1f/0x40 [ 1040.802711][T12637] ____kasan_slab_free+0xd5/0x110 [ 1040.807793][T12637] slab_free_freelist_hook+0xea/0x170 [ 1040.813202][T12637] kfree+0xef/0x2a0 [ 1040.817043][T12637] rose_rt_device_down+0x4e2/0x530 [ 1040.822387][T12637] rose_device_event+0x5ec/0x680 [ 1040.827380][T12637] raw_notifier_call_chain+0xcb/0x160 [ 1040.832798][T12637] __dev_notify_flags+0x178/0x2d0 [ 1040.838244][T12637] dev_change_flags+0xe3/0x1a0 [ 1040.843150][T12637] dev_ifsioc+0x147/0xe70 [ 1040.847927][T12637] dev_ioctl+0x55f/0xe50 [ 1040.852800][T12637] sock_do_ioctl+0x222/0x2f0 [ 1040.857659][T12637] sock_ioctl+0x4ed/0x6e0 [ 1040.862038][T12637] __se_sys_ioctl+0xfa/0x170 [ 1040.866676][T12637] do_syscall_64+0x4c/0xa0 [ 1040.871342][T12637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1040.877557][T12637] [ 1040.880024][T12637] The buggy address belongs to the object at ffff888062a86800 [ 1040.880024][T12637] which belongs to the cache kmalloc-512 of size 512 [ 1040.894455][T12637] The buggy address is located 50 bytes inside of [ 1040.894455][T12637] 512-byte region [ffff888062a86800, ffff888062a86a00) [ 1040.908172][T12637] The buggy address belongs to the page: [ 1040.914012][T12637] page:ffffea00018aa100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062a86000 pfn:0x62a84 [ 1040.925667][T12637] head:ffffea00018aa100 order:2 compound_mapcount:0 compound_pincount:0 [ 1040.934217][T12637] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1040.942335][T12637] raw: 00fff00000010200 ffffea0000906b08 ffffea0001823a08 ffff888016841c80 [ 1040.951386][T12637] raw: ffff888062a86000 0000000000100001 00000001ffffffff 0000000000000000 [ 1040.960270][T12637] page dumped because: kasan: bad access detected [ 1040.966799][T12637] page_owner tracks the page as allocated [ 1040.972800][T12637] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4187, ts 67378502802, free_ts 23380804943 [ 1040.992496][T12637] get_page_from_freelist+0x1b77/0x1c60 [ 1040.998655][T12637] __alloc_pages+0x1e1/0x470 [ 1041.003537][T12637] new_slab+0xc0/0x4b0 [ 1041.007636][T12637] ___slab_alloc+0x81e/0xdf0 [ 1041.012443][T12637] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 1041.018447][T12637] __alloc_skb+0x22c/0x750 [ 1041.023362][T12637] inet_netconf_notify_devconf+0x16f/0x230 [ 1041.029761][T12637] __devinet_sysctl_register+0x321/0x380 [ 1041.035680][T12637] devinet_sysctl_register+0x17c/0x1f0 [ 1041.041342][T12637] inetdev_init+0x28c/0x4d0 [ 1041.045865][T12637] inetdev_event+0x280/0x1360 [ 1041.050570][T12637] raw_notifier_call_chain+0xcb/0x160 [ 1041.056077][T12637] register_netdevice+0x1275/0x16b0 [ 1041.061490][T12637] __ip_tunnel_create+0x2bf/0x380 [ 1041.066545][T12637] ip_tunnel_init_net+0x232/0x6b0 [ 1041.071657][T12637] ops_init+0x357/0x600 [ 1041.075811][T12637] page last free stack trace: [ 1041.080504][T12637] free_unref_page_prepare+0x637/0x6c0 [ 1041.086053][T12637] free_unref_page+0x94/0x280 [ 1041.090838][T12637] free_contig_range+0x96/0xf0 [ 1041.096272][T12637] destroy_args+0xef/0x8b0 [ 1041.100996][T12637] debug_vm_pgtable+0x318/0x370 [ 1041.106316][T12637] do_one_initcall+0x1ee/0x680 [ 1041.111198][T12637] do_initcall_level+0x137/0x1f0 [ 1041.116470][T12637] do_initcalls+0x4b/0x90 [ 1041.120950][T12637] kernel_init_freeable+0x3ce/0x560 [ 1041.126197][T12637] kernel_init+0x19/0x1b0 [ 1041.130537][T12637] ret_from_fork+0x1f/0x30 [ 1041.134986][T12637] [ 1041.137317][T12637] Memory state around the buggy address: [ 1041.143260][T12637] ffff888062a86700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1041.151805][T12637] ffff888062a86780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1041.160247][T12637] >ffff888062a86800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1041.168394][T12637] ^ [ 1041.174255][T12637] ffff888062a86880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1041.182598][T12637] ffff888062a86900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1041.191113][T12637] ================================================================== [ 1041.199342][T12637] Disabling lock debugging due to kernel taint [ 1041.205515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1041.479084][T12637] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1041.486821][T12637] CPU: 0 PID: 12637 Comm: syz.7.1972 Tainted: G B 5.15.189-syzkaller #0 [ 1041.496952][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1041.507843][T12637] Call Trace: [ 1041.511289][T12637] [ 1041.514244][T12637] dump_stack_lvl+0x168/0x230 [ 1041.519025][T12637] ? show_regs_print_info+0x20/0x20 [ 1041.524232][T12637] ? load_image+0x3b0/0x3b0 [ 1041.528862][T12637] panic+0x2c9/0x7f0 [ 1041.533091][T12637] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1041.539255][T12637] ? bpf_jit_dump+0xd0/0xd0 [ 1041.544053][T12637] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1041.550151][T12637] ? _raw_spin_unlock+0x40/0x40 [ 1041.555476][T12637] ? rose_transmit_link+0x5b0/0x730 [ 1041.561072][T12637] check_panic_on_warn+0x80/0xa0 [ 1041.566022][T12637] ? rose_transmit_link+0x5b0/0x730 [ 1041.571499][T12637] end_report+0x6d/0xf0 [ 1041.575920][T12637] kasan_report+0x102/0x130 [ 1041.580928][T12637] ? rose_transmit_link+0x5b0/0x730 [ 1041.586213][T12637] ? __phys_addr+0xb6/0x170 [ 1041.590739][T12637] rose_transmit_link+0x5b0/0x730 [ 1041.596449][T12637] ? skb_put+0x117/0x210 [ 1041.600716][T12637] rose_write_internal+0x673/0x1e80 [ 1041.606120][T12637] ? rose_validate_nr+0x120/0x120 [ 1041.611160][T12637] ? del_timer+0x11a/0x1b0 [ 1041.615604][T12637] ? skb_queue_purge+0x62/0x290 [ 1041.620731][T12637] rose_release+0x22a/0x4e0 [ 1041.625533][T12637] sock_close+0xd5/0x240 [ 1041.629873][T12637] ? sock_mmap+0x90/0x90 [ 1041.634361][T12637] __fput+0x234/0x930 [ 1041.638629][T12637] task_work_run+0x125/0x1a0 [ 1041.643310][T12637] get_signal+0x1222/0x12c0 [ 1041.647849][T12637] arch_do_signal_or_restart+0xc1/0x1300 [ 1041.653760][T12637] ? kick_process+0xd4/0x140 [ 1041.658722][T12637] ? task_work_add+0x1a7/0x1d0 [ 1041.663665][T12637] ? get_sigframe_size+0x10/0x10 [ 1041.668612][T12637] ? __sys_connect+0x239/0x410 [ 1041.673468][T12637] ? exit_to_user_mode_loop+0x3b/0x130 [ 1041.679023][T12637] exit_to_user_mode_loop+0x9e/0x130 [ 1041.684398][T12637] exit_to_user_mode_prepare+0xb1/0x140 [ 1041.689961][T12637] syscall_exit_to_user_mode+0x16/0x40 [ 1041.695526][T12637] do_syscall_64+0x58/0xa0 [ 1041.700127][T12637] ? clear_bhb_loop+0x30/0x80 [ 1041.704869][T12637] ? clear_bhb_loop+0x30/0x80 [ 1041.710346][T12637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1041.716247][T12637] RIP: 0033:0x7f1cae163be9 [ 1041.720672][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.740812][T12637] RSP: 002b:00007f1cac3aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1041.749518][T12637] RAX: fffffffffffffe00 RBX: 00007f1cae38b090 RCX: 00007f1cae163be9 [ 1041.757841][T12637] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000009 [ 1041.766306][T12637] RBP: 00007f1cae1e6e19 R08: 0000000000000000 R09: 0000000000000000 [ 1041.774310][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.782436][T12637] R13: 00007f1cae38b128 R14: 00007f1cae38b090 R15: 00007ffe8264dd58 [ 1041.790876][T12637] [ 1041.794264][T12637] Kernel Offset: disabled [ 1041.800114][T12637] Rebooting in 86400 seconds..