last executing test programs: 35m55.176328653s ago: executing program 32 (id=82): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000740)=ANY=[@ANYBLOB='discard,discard,dmask=00000000000000000000005,errors=continue,errors=remount-ro,keep_last_dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="000000df16", @ANYRESHEX=0xee01, @ANYBLOB=',errors=continue,fmask=00000000000000000000007,iocharset=iso8859-7,\x00'], 0x1, 0x1534, &(0x7f0000003e40)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x400, 0x0) 35m47.512108964s ago: executing program 33 (id=97): write(0xffffffffffffffff, &(0x7f0000000680)="ee40a7761e9508745cec1b9be97aad5d8294e67b2eea7a92394b60c0a8de0b3316420e5a67c226d9addeb539cecafbd707699bf7882f5d95480f74d161cb12172e7951b3095b5912c5", 0x49) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './bus', [{0x20, '\x98W\xe3\xab~?;\xe5\x9e\x18\x0e\xff\xff\x04\xdc\xe3\xa3p%\x16\xbd\x9a\xba\x96.\xf56\xc4\x10'}, {0x20, 'TCPOPTSTRKP\x00'}, {0x20, '.(*}{^+!#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\xf4\xe3\x8d3+\xa6kXk\xe3\xd6\xbd\xcb\xc3\xa4\xb1\x9970\xbe\x8dA\x18^\xfe\xe5w&b\xbci\xb9\x15{\xf6\xc0vD\x1eN\xfd\x96\x11\x86\xc1\x97\x04\xb8\xa5\xb2\xf4\x9e\xb9M\xaf\x89\xe1\x98\xca\xa6\x8dM\xafuR\xe3\xd0\xf6s\x1d\xcd\xc5TN\xf8D\xa2\xce\n3\xd0\xa8e4\xf3\x96o(\xac\x9f\x9c\a\xc5\x04\xd5\x1dH\x9c\xa4o\x98\xd6\x93a\x86\xd1~\t|\x9e\xca`_\x14\xf0\x14\xe9\xe2\xb4\b\x8a\x8b\xb9\xaa\x1f7z0W$@\x9d?\xc7\xc3\xe5\xb5?9\xb9\xdd_t\x05ZX\xfd\x80;;~\x1c\xeaNOf&\xabZ\x1f\x19\xbd\x92\xcc\xda\xacEG\x1ap\x0e\f2m\x19@j\xe6\xb4\x81\xae\x93\x92bib0\xe4\xd7AIw\x93\xd7\x02\xbc0|Dz'}, {0x20, '\xce|\xcb\xdf\x1d\xb3\xbd\xb0\x8e\xbcc\xdc\x022\xec\xb0\xb6\xdfa\x90\x82u\xe8\xcf{X3\x9a^9\xe4\x1a\x9c\xf86\xe6V\xda8,\xbcAZ\xd5\xb3\x17Q\xc5\xff\xdd\x81\x8a S\x0f\x11\xc3\xa8\xbdjt\xf2\xe2\t\x13\xaf\x00'/81}, {0x20, '\xa3l<`P\x95X\x9c\xfc\xf8\x0f\x1cE\x19Y\x8d\x0f\a\xaa\xc7}\x95\xcf?\x8b\xe1\x03\xff\x12\xa8\xc0\xa8O\x14\xa7\xf3\xe2+\xe6\xddY4\t\x00\xcd\xabyf\xf9\xa4\xd2\xf2$\xc1\x88\xf3? \x97\xca\xd9\x83\x06\xa5>\x10\xf3\xf9\tg\xfa\x90\xf0\xa8=\\W?\xf2\x87\xfc\x063\xed+h\x05\xc4\xce\x9b)\xbaCM3\x1a\f \xcdkC\x10\xee\xa2\xe9pi|K\x8f\xa8\xad\n\x131\xfe\xe9\x8e-\b`\xa4\x98W9\xb3\xc22\xebA\xf2y\x9d\x90\xcb\x14\x82\xe3\b4\x99\xeay\x19\xf3l\x9a\xab\xc7\xb9}\x92\xd0\x12\x84V\x0fRUU\x04\x00\x00\x00\xa5\x11\xbb\xb7Z~\xf2\xe4\x02\xf2!\xeay\x96\xc1\xdd\xcc\r\xa4\xdb4\x7f\xa4\x11\xb1\x16\x1b\xe9\xef(\xdc^\xbf?sG\x98\xa0w\xd0q\xc5\xd9\xc1$\xd2+\x83iQ2\x7f\x1b<\xe9q<6i\"\x83\xf6eU\x05\xb9\xa8\x9a\x82\xbd\xe2\x97\x8e\xcc\xe0\xb0\x88\xe0\'\xfa\x15\xebJD\xac{\xdf\xdd\xb7//\xc1F\'pM\x9c\xc8A\xe8\xb4\xa1\xaf\xa4R\xc5\xca\xd2\xa2\xc8\xa2\xfeZ\xcf\n\xff\xa7\xbc\xa7\xff,>vkd\x9d\xea8\x96\xf3\xa6\v\v\x956nD\xa8\x9fL\x80\x8a\xf0\x11\xdaE\x1e%Y\xb5Tv\x1b\x9a\xd1\xfb?\xc82c.d\xcaR\xefp\xe6\x01A\x10\xf0l\xf7Z\x7f\xb2i\fC\x94\xc6.\xc0\x01m\x15\xe3\xe2\xcf\xf2\x9fJ\x1a\a\xae;\xf8e\xc2\xd4\xa8\xf7](\xfa\x00m\x00a\xcfp5\xe0\n\xf5\x1f\x93\xe1\xae`\x84O\xc6'}]}, 0x2eb) capset(0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r3, &(0x7f0000000400)=[{{0x77359400}, 0x14, 0x1}, {{0x0, 0x2710}, 0x17, 0xd, 0xffffffff}, {{0x0, 0x2710}, 0x5, 0xe92b}], 0x48) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) 35m31.577609973s ago: executing program 34 (id=117): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x4, "aa8208d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000800)={0x20, 0xd, 0x4, "237d55b4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 34m35.899428031s ago: executing program 35 (id=171): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2400, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 33m37.37566875s ago: executing program 36 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000b000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000a2843e3900ee9c777afa1e7315abe5852495b303610800000000000000954d8d2f612f44dfa4ba3970216dbfdcad355face50cf326b758b7e46b2a598a0c8640ac51097c4da97a3b0f2eac29f5ee82a1a0539300002eb1e4753f5bd01210cdaf4d65b5a93c77d302122e7844a7d801feccba23f42ef6b550dac07053cea130adfdb38bee3d16488e586e50f815a96d8ee32e933ae91f1256f9169431c3b6ff", @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x9}}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x2a) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x608800, 0x0) 33m32.994269692s ago: executing program 37 (id=252): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004855) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x8, 0xd66}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 30m15.930539964s ago: executing program 38 (id=506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x400}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe05e39709130f3de}, 0x4000000) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) geteuid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) 29m59.859971546s ago: executing program 39 (id=533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 27m54.677666093s ago: executing program 40 (id=757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d0000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xe000000}, "0a790cc55a8e"}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x17) 27m45.011430667s ago: executing program 8 (id=800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 27m39.095476759s ago: executing program 8 (id=805): syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa10e959f3f5397fe804fde821a7e0bc927809"], 0x1a) 27m34.703461284s ago: executing program 8 (id=813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") 27m32.811986939s ago: executing program 8 (id=819): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) ftruncate(r2, 0x30) 27m13.095947715s ago: executing program 41 (id=819): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) ftruncate(r2, 0x30) 22m45.569850257s ago: executing program 42 (id=1335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002180)) recvmmsg(r0, &(0x7f00000024c0)=[{{&(0x7f00000021c0)=@sco={0x1f, @none}, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/138}], 0x0, &(0x7f0000002480)=""/22}, 0x6}], 0x1010e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4000002e, 0x0, @thr={0x0, 0x0}}) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[@ANYBLOB="12010200000000000000a8a440000102030109021b0001018140950904006d01070101050905ee827937c33d089e0b117141386b8d1a0102ff030d090d08a894ed30"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000002400)=@string={0x2}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f00000059c0)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x6b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}, 0x1c, 0x0}}], 0x1, 0x40000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="01002bda02e48d73b90f1f00000008000300", @ANYRES32, @ANYBLOB="08006b00f0000000"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$video4linux(0x0, 0x101, 0x840) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0b26c78afaea3096d9061a2df0c1", 0x10001, 0x1000000000001, 0x400000001000000, 0xffffffffffffffff, 0x1000, 0xc, 0x4, 0x8, [0x3, 0x2, 0x4, 0x96a]}) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) 22m5.531944273s ago: executing program 43 (id=1406): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 21m1.823774927s ago: executing program 44 (id=1499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r2 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r5, 0x2) 19m56.127043244s ago: executing program 7 (id=1630): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 19m55.138502084s ago: executing program 7 (id=1635): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) 19m54.307142084s ago: executing program 7 (id=1637): sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x6bf8dd7b1292a0f, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0) 19m53.38131028s ago: executing program 7 (id=1640): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 19m51.50585844s ago: executing program 7 (id=1644): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0) 19m50.12729198s ago: executing program 7 (id=1649): openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000002180)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86>,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9\x9dk\xe4', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) 19m33.801617858s ago: executing program 45 (id=1649): openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000002180)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86>,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9\x9dk\xe4', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) 16m48.320500498s ago: executing program 3 (id=2089): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$6lowpan_enable(r1, 0x0, 0x0) 16m45.780709353s ago: executing program 3 (id=2093): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x1}) 16m44.399526568s ago: executing program 3 (id=2101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @mss={0x2, 0x1}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f0000000700)="1ede55aa6d3e592729d4017273db3c80c7d4bd1b385095a92f", 0x19, 0x40011, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="b1b252c96abb52efe8fa10bfcf457670aaa11b0a65ef100d8e260d87b9eea54d6b3369e877", 0x25}], 0x1) 16m44.019956667s ago: executing program 3 (id=2103): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1010e, &(0x7f0000000300)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@debug}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 16m41.27281869s ago: executing program 3 (id=2110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5040100, 0x0, 0x32) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x16) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 16m40.082243174s ago: executing program 3 (id=2115): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) recvfrom(r0, &(0x7f00000000c0)=""/12, 0xc, 0x2020, &(0x7f0000000100)=@sco, 0x80) 16m39.061027782s ago: executing program 46 (id=2115): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) recvfrom(r0, &(0x7f00000000c0)=""/12, 0xc, 0x2020, &(0x7f0000000100)=@sco, 0x80) 16m7.192284468s ago: executing program 8 (id=2118): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x700, 0x6, 0x101}}) 16m6.53107334s ago: executing program 8 (id=2208): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f306635800000000f22e0f30f26c8", 0x47}], 0x1, 0x21, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0x800000a2a, 0x0, 0x5, 0x2, 0x80000001, 0x3, 0xbdb], 0xeeee8000, 0x3c4210}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) io_uring_setup(0x5065, &(0x7f0000000140)={0x0, 0x4dc1, 0x2, 0x3, 0x35f}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) 15m51.182149423s ago: executing program 47 (id=2208): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f306635800000000f22e0f30f26c8", 0x47}], 0x1, 0x21, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0x800000a2a, 0x0, 0x5, 0x2, 0x80000001, 0x3, 0xbdb], 0xeeee8000, 0x3c4210}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) io_uring_setup(0x5065, &(0x7f0000000140)={0x0, 0x4dc1, 0x2, 0x3, 0x35f}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) 7m36.561940483s ago: executing program 1 (id=4155): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x49, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x8, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0xa, 0x7f, 0x9, 0x2, 0xffffffff, 0xc, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3fc, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x5, 0x120000, 0x3, 0x6, 0x800aaed, 0x4, 0x65], [0x9, 0xbbb1, 0x3, 0xb, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xc, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0x1a, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0xedf6, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m35.948033191s ago: executing program 1 (id=4158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"]) 7m34.976326838s ago: executing program 1 (id=4163): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}}, 0x20}}, 0x0) 7m34.50868718s ago: executing program 1 (id=4165): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_vhci(&(0x7f0000003200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{}, 0x8}}}, 0x7) dup(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r5}, 0x38) 7m29.976683995s ago: executing program 1 (id=4179): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x8007f5c, 0x4000000, 0x30, 0x0, 0x0) 7m29.400354266s ago: executing program 1 (id=4183): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, 0xffffffffffffffff, 0x5a) epoll_create1(0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) 7m14.112919044s ago: executing program 48 (id=4183): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, 0xffffffffffffffff, 0x5a) epoll_create1(0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) 5m3.152538345s ago: executing program 4 (id=4796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 5m2.456478169s ago: executing program 4 (id=4800): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000200), 0x0}, 0x20) 5m1.849012328s ago: executing program 4 (id=4801): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="90000000100003058285d2f1e2e4f74d00000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 5m1.118167366s ago: executing program 4 (id=4806): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020400) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) 5m0.61060166s ago: executing program 4 (id=4811): bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x30, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 5m0.252640536s ago: executing program 4 (id=4813): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) 4m45.042569049s ago: executing program 49 (id=4813): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) 22.504496723s ago: executing program 9 (id=6001): unshare(0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x67, @remote, 0x0, 0x8, 'none\x00'}, {@local, 0x4, 0x0, 0x0, 0x100020, 0xfffffffe}}, 0x44) 21.986631904s ago: executing program 9 (id=6004): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 21.584956997s ago: executing program 9 (id=6007): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) syz_open_dev$loop(0x0, 0xffff, 0x109041) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 21.014037613s ago: executing program 9 (id=6009): unshare(0x22020600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r3], 0x10) 20.472272101s ago: executing program 9 (id=6013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) 19.892617528s ago: executing program 9 (id=6016): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040d0}, 0x24000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010026"], 0x0, 0x26, 0x0, 0xa}, 0x28) 6.179676101s ago: executing program 0 (id=6064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000100000000800070003000000180001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x800}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) 5.61238592s ago: executing program 0 (id=6067): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)}}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007300)="f572878c7aefc200e078de78443fc4311bb2a13cf61d1e996f971ab8d5877415908a51a4b6bdbdb894e6249076291816fd2802903228a988ffcb56631062bc03b6746ec5c74348c7676ee2286ffc8da5b067d95680006add570c0ff956bfc76ad826ddbfac9d21f02a27f380600eb887e680b3b16351cfa1d0bac3d2ae824799bd33026c015f12fbf26d015ae8f7a3d4e390c3228ffa49dbf546035f34a324ee5f6508f20e799d6fac80b3e283eb1e5e6bde74c36a16a94ecf30e49205a02c96502764a2d1f073f9a8fc52d14344c3660adf23b8b5ced27702066b465619", 0xde}, {&(0x7f0000007400)="2007958f55c3d9b287d30db0fb5ae3315c802a94fd6b45d491c96f01932d498bf38d4f4a939c2dda011380827e0027e5b1550379df10d44eae40bc853e152b6d0b639e15585c6a1a02f872741c1f19c86ca55a3f912a7dadf2922bfbf003af2c5a417734db649c805cd509", 0x6b}], 0x2}}], 0x2, 0x0) unshare(0x22020600) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 5.063343862s ago: executing program 0 (id=6071): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 4.514453447s ago: executing program 5 (id=6072): socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x1c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0xa8, 0x1}) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4.403875504s ago: executing program 0 (id=6073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) write(r3, 0x0, 0x0) 3.905373535s ago: executing program 5 (id=6076): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.052668585s ago: executing program 0 (id=6078): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) 3.015592771s ago: executing program 6 (id=6079): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x57, 0xd, 0x9}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.556219382s ago: executing program 0 (id=6081): syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7181, 0x400, 0x0, 0x2ac}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x60500, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2.554566658s ago: executing program 5 (id=6082): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 2.440538938s ago: executing program 6 (id=6083): unshare(0x22020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x602000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 2.440309492s ago: executing program 2 (id=6084): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x18, 0x29, 0x4, "0323"}], 0x18}}], 0x2, 0x600c802) 2.164489107s ago: executing program 6 (id=6085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.008984403s ago: executing program 5 (id=6086): socket$isdn_base(0x22, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 1.936445546s ago: executing program 2 (id=6087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) syz_open_dev$loop(0x0, 0xffff, 0x109041) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1.744155415s ago: executing program 6 (id=6088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) write(r3, 0x0, 0x0) 1.502974641s ago: executing program 5 (id=6089): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f0000000280)=[{0x5, 0x9, 0x3, 0x6}, {0x4, 0x1, 0x4, 0x9ea}, {0x4, 0xa5, 0x62, 0x8}, {0x5, 0x7, 0x3, 0x54d1}, {0x8, 0x4, 0x5}, {0xf, 0x4, 0xd0, 0x3}, {0x2, 0x9, 0x7, 0x401}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7a}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x24010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ppoll(&(0x7f0000000700)=[{r4, 0xa00}], 0x1, 0x0, 0x0, 0x0) 1.472374411s ago: executing program 2 (id=6090): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0b502000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 972.690169ms ago: executing program 2 (id=6091): unshare(0x22020600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {0x2, 0x1, 0x3}, 0xfd}, 0x18) 537.521304ms ago: executing program 2 (id=6092): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b0001e667726574617000800c0002"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 489.562052ms ago: executing program 6 (id=6093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x57, 0xd, 0x9}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 154.246864ms ago: executing program 6 (id=6094): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x404c894) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 56.252703ms ago: executing program 5 (id=6095): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100001800010000000000fedbdf250a000000ff00ff0800200000b1000880324d76b5be2a06d619308aab715360ab2eb3a32a85c757c6275ee5d91b08242ffdbe6d0a6d1deee842bca9e9ec6780f823bdfac40a347ade2d6151c1938f89132b46e9878eba6e4aca523cec1065fe2147666ebce4068f4eef7b1b42d057a7673c22b323b8c07f9f74ca2621439501c88504c3192be61a6a9e0f9f747d486dd1c8825ea2b052ea5cf591a07b0346b83657d34487645a7b5297be4ca55bd9be6378abede7a1789e526a302bafac00000008e70f00060000000800e300", @ANYRES32, @ANYBLOB="100016800c000180080002007d2c27000800100001"], 0x100}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 0s ago: executing program 2 (id=6096): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) kernel console output (not intermixed with test programs): r thread 0... [ 2076.168023][T20051] IPVS: using max 192 ests per chain, 9600 per kthread [ 2076.496913][T20054] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 11 [ 2079.827874][T14633] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2080.070453][T14633] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.081266][T14633] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2080.203704][T14633] usb 5-1: New USB device found, idVendor=04da, idProduct=c002, bcdDevice= 0.00 [ 2080.213603][T14633] usb 5-1: New USB device strings: Mfr=0, Product=98, SerialNumber=0 [ 2080.225292][T14633] usb 5-1: Product: syz [ 2080.235318][T14633] usb 5-1: config 0 descriptor?? [ 2082.572890][T16668] usb 5-1: USB disconnect, device number 12 [ 2083.544818][T20146] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2084.498118][ T30] audit: type=1326 audit(1750988646.894:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.6.4481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ff38e929 code=0x0 [ 2085.124830][T20178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4483'. [ 2085.135748][T20178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4483'. [ 2085.609041][T14633] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2085.880896][T14633] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.892196][T14633] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2085.930640][T14633] usb 10-1: New USB device found, idVendor=04da, idProduct=c002, bcdDevice= 0.00 [ 2085.940399][T14633] usb 10-1: New USB device strings: Mfr=0, Product=98, SerialNumber=0 [ 2085.948959][T14633] usb 10-1: Product: syz [ 2085.976656][T14633] usb 10-1: config 0 descriptor?? [ 2087.368379][T16668] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2087.493501][T14633] usb 10-1: USB disconnect, device number 23 [ 2087.547873][T16668] usb 5-1: Using ep0 maxpacket: 16 [ 2087.565471][T16668] usb 5-1: config 0 has no interfaces? [ 2087.576946][T16668] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2087.587714][T16668] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2087.595979][T16668] usb 5-1: Manufacturer: syz [ 2087.639945][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4497'. [ 2087.650128][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4497'. [ 2087.687073][T16668] usb 5-1: config 0 descriptor?? [ 2087.968206][T20206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2087.982407][T20206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.130889][T14633] usb 5-1: USB disconnect, device number 13 [ 2088.671341][T20223] hsr0: entered promiscuous mode [ 2091.142312][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4521'. [ 2092.516522][T20277] loop2: detected capacity change from 0 to 4096 [ 2092.586394][T20277] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 2092.802277][T20277] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 2094.316011][T20313] fuse: Bad value for 'fd' [ 2094.721587][T16668] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2094.931506][T16668] usb 7-1: Using ep0 maxpacket: 16 [ 2094.987227][T16668] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2095.060801][T16668] usb 7-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 2095.070622][T16668] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.079087][T16668] usb 7-1: Product: syz [ 2095.083495][T16668] usb 7-1: Manufacturer: syz [ 2095.089390][T16668] usb 7-1: SerialNumber: syz [ 2095.150837][T16668] usb 7-1: config 0 descriptor?? [ 2095.170654][T16668] ipheth 7-1:0.0: Unable to find endpoints [ 2095.426787][T20318] bond0: entered promiscuous mode [ 2095.432417][T20318] bond_slave_0: entered promiscuous mode [ 2095.439376][T20318] bond_slave_1: entered promiscuous mode [ 2095.929793][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4549'. [ 2095.939429][T20329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4549'. [ 2096.702631][T20332] loop2: detected capacity change from 0 to 4096 [ 2096.752935][T20332] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 2096.925225][T20332] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 2098.297645][T20345] fuse: Bad value for 'fd' [ 2098.378301][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2100.215607][T20364] loop9: detected capacity change from 0 to 4096 [ 2100.296359][T20364] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 2100.608913][T20364] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 2102.948843][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4578'. [ 2102.967833][T16668] usb 7-1: USB disconnect, device number 8 [ 2103.080868][T20400] 8021q: adding VLAN 0 to HW filter on device team0 [ 2104.479069][T20428] trusted_key: encrypted_key: insufficient parameters specified [ 2106.468341][T16668] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2106.726818][T16668] usb 5-1: Using ep0 maxpacket: 16 [ 2106.796243][T16668] usb 5-1: config 0 has no interfaces? [ 2106.834427][T16668] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2106.843879][T16668] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2106.852337][T16668] usb 5-1: Manufacturer: syz [ 2106.925794][T16668] usb 5-1: config 0 descriptor?? [ 2107.165411][T20450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.175046][T20450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.307881][T16668] usb 5-1: USB disconnect, device number 14 [ 2110.228249][T16668] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2110.417989][T16668] usb 7-1: Using ep0 maxpacket: 16 [ 2110.455692][T16668] usb 7-1: config 0 has no interfaces? [ 2110.487220][T16668] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2110.497005][T16668] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2110.507863][T16668] usb 7-1: Manufacturer: syz [ 2110.562980][T16668] usb 7-1: config 0 descriptor?? [ 2110.852259][T20490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.862782][T20490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.989963][T14633] usb 7-1: USB disconnect, device number 9 [ 2113.076865][T20526] netlink: 16410 bytes leftover after parsing attributes in process `syz.9.4635'. [ 2114.119873][T20540] netlink: 'syz.6.4642': attribute type 29 has an invalid length. [ 2114.157918][T20540] netlink: 'syz.6.4642': attribute type 29 has an invalid length. [ 2115.109651][T20557] Driver unsupported XDP return value 0 on prog (id 370) dev N/A, expect packet loss! [ 2115.268454][T16668] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2115.486491][T16668] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.497313][T16668] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2115.566356][T16668] usb 3-1: New USB device found, idVendor=04da, idProduct=c002, bcdDevice= 0.00 [ 2115.576093][T16668] usb 3-1: New USB device strings: Mfr=0, Product=98, SerialNumber=0 [ 2115.584632][T16668] usb 3-1: Product: syz [ 2115.608661][T16668] usb 3-1: config 0 descriptor?? [ 2116.958122][T14633] usb 3-1: USB disconnect, device number 27 [ 2119.481901][T20625] overlayfs: failed to clone upperpath [ 2119.660143][T20631] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4680'. [ 2120.818865][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'. [ 2120.892583][T20652] netlink: 'syz.0.4689': attribute type 29 has an invalid length. [ 2120.936474][T20652] netlink: 'syz.0.4689': attribute type 29 has an invalid length. [ 2121.487063][T20660] loop2: detected capacity change from 0 to 1024 [ 2121.534476][T20660] EXT4-fs: inline encryption not supported [ 2121.677330][T20660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2123.025469][T14334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2123.418239][T12753] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2123.426979][T12753] Bluetooth: hci4: Injecting HCI hardware error event [ 2123.450245][T12753] Bluetooth: hci4: hardware error 0x00 [ 2125.170818][T20702] loop6: detected capacity change from 0 to 1024 [ 2125.201213][T20702] EXT4-fs: inline encryption not supported [ 2125.525405][T12753] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2125.566621][T20702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2126.297122][T19774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2126.422359][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4716'. [ 2126.478714][T20718] 8021q: adding VLAN 0 to HW filter on device team1 [ 2127.130980][T20725] vlan3: entered promiscuous mode [ 2128.959574][T20735] tipc: Started in network mode [ 2128.964816][T20735] tipc: Node identity fac7d9e4bf46, cluster identity 4711 [ 2128.973280][T20735] tipc: Enabled bearer , priority 0 [ 2129.055110][T20734] tipc: Disabling bearer [ 2129.116325][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2129.123246][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2129.287862][T20737] loop9: detected capacity change from 0 to 1024 [ 2129.391959][T20737] EXT4-fs: inline encryption not supported [ 2130.716436][T20737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2131.648490][T15779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2133.850297][T20772] loop9: detected capacity change from 0 to 1024 [ 2133.930184][T20772] EXT4-fs: inline encryption not supported [ 2134.076910][T20772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2135.221732][T15779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2137.681898][T20806] overlayfs: failed to clone upperpath [ 2138.546323][T20812] loop6: detected capacity change from 0 to 1024 [ 2138.646352][T20812] EXT4-fs: inline encryption not supported [ 2138.662060][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4755'. [ 2138.671413][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4755'. [ 2138.791675][T20812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2138.888651][T12753] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2138.897277][T12753] Bluetooth: hci5: Injecting HCI hardware error event [ 2138.905040][T19485] Bluetooth: hci5: hardware error 0x00 [ 2139.754152][T19774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2140.052939][T20835] netlink: 'syz.0.4760': attribute type 10 has an invalid length. [ 2140.146292][T20835] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 2140.278712][T20839] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4763'. [ 2140.931906][T20843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.952644][T20843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.999814][T19485] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2141.561127][T20851] loop6: detected capacity change from 0 to 1024 [ 2141.602262][T20851] EXT4-fs: inline encryption not supported [ 2141.700461][T20851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2142.217973][ T5855] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2142.459045][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 2142.480568][ T5855] usb 5-1: config 0 has no interfaces? [ 2142.492514][ T5855] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2142.502082][ T5855] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2142.514453][ T5855] usb 5-1: Manufacturer: syz [ 2142.528772][ T5855] usb 5-1: config 0 descriptor?? [ 2142.545503][T19774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2142.770008][T20860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2142.779763][T20860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2142.863506][ T5855] usb 5-1: USB disconnect, device number 15 [ 2145.867040][T20897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4784'. [ 2145.876605][T20897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4784'. [ 2145.900829][T20897] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2145.921054][T20897] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2145.932056][T20897] Cannot create hsr debugfs directory [ 2145.939684][T20897] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 2146.628711][T14633] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 2146.881813][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'. [ 2146.904673][T14633] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2146.929465][T14633] usb 3-1: no configurations [ 2146.934330][T14633] usb 3-1: can't read configurations, error -22 [ 2147.948294][ T24] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 2148.200543][ T24] usb 10-1: config 8 has an invalid interface number: 223 but max is 0 [ 2148.209434][ T24] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.220017][ T24] usb 10-1: config 8 has no interface number 0 [ 2148.226450][ T24] usb 10-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2148.400090][ T24] usb 10-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2148.409813][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.418270][ T24] usb 10-1: Product: syz [ 2148.422761][ T24] usb 10-1: Manufacturer: syz [ 2148.427850][ T24] usb 10-1: SerialNumber: syz [ 2148.779204][ T24] usb 10-1: USB disconnect, device number 24 [ 2148.860858][T20938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4801'. [ 2148.871581][T20938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4801'. [ 2150.032592][T20963] netlink: 'syz.2.4812': attribute type 10 has an invalid length. [ 2150.087897][ T5855] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 2150.345905][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4809'. [ 2150.405577][ T5855] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2150.433556][ T5855] usb 7-1: no configurations [ 2150.441223][ T5855] usb 7-1: can't read configurations, error -22 [ 2150.648188][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2150.818320][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 2150.932537][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2151.059725][ T24] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2151.069360][ T24] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2151.077892][ T24] usb 10-1: Product: syz [ 2151.082381][ T24] usb 10-1: Manufacturer: syz [ 2151.087298][ T24] usb 10-1: SerialNumber: syz [ 2151.476001][ T24] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 2151.483436][T20974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4816'. [ 2151.484762][ T24] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2151.494090][T20974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4816'. [ 2151.501821][ T24] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2151.519840][ T24] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2151.750484][ T24] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 2152.427225][ T24] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2152.461574][ T24] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2152.475033][ T24] usb 10-1: USB disconnect, device number 25 [ 2152.500280][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2152.767278][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2152.779066][ T24] visor 10-1:1.0: device disconnected [ 2152.900283][ T30] audit: type=1326 audit(1750988715.254:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20977 comm="syz.0.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9147f8e929 code=0x7fc00000 [ 2153.929514][T20993] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4822'. [ 2155.135478][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4827'. [ 2155.192581][T21006] dummy0: entered promiscuous mode [ 2155.198523][T21006] macvtap2: entered promiscuous mode [ 2155.205004][T21006] macvtap2: entered allmulticast mode [ 2155.211009][T21006] dummy0: entered allmulticast mode [ 2155.267013][T21010] dummy0: left allmulticast mode [ 2155.273609][T21010] dummy0: left promiscuous mode [ 2155.396939][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4828'. [ 2155.849522][T21013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4829'. [ 2155.858958][T21013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4829'. [ 2156.611989][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4833'. [ 2157.069094][T21026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4835'. [ 2157.261062][T21030] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2157.267901][T21030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2157.276868][T21030] vhci_hcd vhci_hcd.0: Device attached [ 2157.527904][ T5855] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 2157.606593][T16668] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2157.805374][T16668] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.818648][T16668] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2157.830845][T16668] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2157.840953][T16668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.882776][T16668] usb 3-1: config 0 descriptor?? [ 2158.145882][T21031] vhci_hcd: cannot find a urb of seqnum 64 max seqnum 1 [ 2158.174127][T14633] usb 3-1: USB disconnect, device number 30 [ 2158.181484][ T7075] vhci_hcd: stop threads [ 2158.186027][ T7075] vhci_hcd: release socket [ 2158.191198][ T7075] vhci_hcd: disconnect device [ 2158.307724][ T24] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 2158.459116][T21047] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4843'. [ 2158.468898][T21047] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4843'. [ 2158.590556][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4842'. [ 2158.613754][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2158.668329][ T24] usb 7-1: no configurations [ 2158.673314][ T24] usb 7-1: can't read configurations, error -22 [ 2159.771670][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4847'. [ 2160.034589][T21060] loop2: detected capacity change from 0 to 164 [ 2160.081564][T21060] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2160.112089][T21060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2160.696749][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4849'. [ 2162.628635][ T5855] vhci_hcd: vhci_device speed not set [ 2162.802001][T21085] loop6: detected capacity change from 0 to 1024 [ 2162.932618][T21085] hfsplus: bad catalog folder thread [ 2163.540748][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4860'. [ 2164.225740][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4863'. [ 2164.814841][ T30] audit: type=1326 audit(1750988727.224:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21103 comm="syz.9.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2038e929 code=0x7ffc0000 [ 2164.838345][ T30] audit: type=1326 audit(1750988727.224:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21103 comm="syz.9.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2038e929 code=0x7ffc0000 [ 2165.551223][ T24] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2165.742086][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 2165.778503][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2165.787071][ T24] usb 10-1: config 0 has no interface number 0 [ 2165.793917][ T24] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2165.810295][ T24] usb 10-1: config 0 interface 1 has no altsetting 0 [ 2165.832996][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'. [ 2165.888356][ T24] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2165.903494][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.913277][ T24] usb 10-1: Product: syz [ 2165.918488][ T24] usb 10-1: Manufacturer: syz [ 2165.923420][ T24] usb 10-1: SerialNumber: syz [ 2165.978029][ T24] usb 10-1: config 0 descriptor?? [ 2166.095716][T21121] loop6: detected capacity change from 0 to 2048 [ 2166.248471][ T24] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2166.314782][T21122] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2166.330084][ T24] cx231xx 10-1:0.1: Failed to read PCB config [ 2166.336576][ T24] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71 [ 2166.380229][ T24] usb 10-1: USB disconnect, device number 26 [ 2166.598741][T21127] bond0: entered promiscuous mode [ 2166.604288][T21127] bond_slave_0: entered promiscuous mode [ 2166.611397][T21127] bond_slave_1: entered promiscuous mode [ 2166.622706][T21127] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 2166.631221][T21127] bond0: entered allmulticast mode [ 2166.636569][T21127] bond_slave_0: entered allmulticast mode [ 2166.642666][T21127] bond_slave_1: entered allmulticast mode [ 2166.648776][T21127] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 2166.746431][T12753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2166.769738][T12753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2166.788740][T12753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2166.833311][T12753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2166.841199][ T24] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2166.866838][T12753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2167.032211][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 2167.053084][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2167.062000][ T24] usb 10-1: config 0 has no interface number 0 [ 2167.068558][ T24] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2167.079736][ T24] usb 10-1: config 0 interface 1 has no altsetting 0 [ 2167.254628][ T24] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2167.264615][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.273079][ T24] usb 10-1: Product: syz [ 2167.277671][ T24] usb 10-1: Manufacturer: syz [ 2167.282585][ T24] usb 10-1: SerialNumber: syz [ 2167.329905][ T24] usb 10-1: config 0 descriptor?? [ 2167.428491][T21137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4878'. [ 2167.587199][ T24] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2167.628240][ T24] cx231xx 10-1:0.1: bad scenario!!!!! [ 2167.628240][ T24] config_info=0 [ 2167.637217][ T24] cx231xx 10-1:0.1: Failed to read PCB config [ 2167.878140][ T24] usb 10-1: USB disconnect, device number 27 [ 2168.968212][T19485] Bluetooth: hci2: command tx timeout [ 2169.206626][T21150] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4882'. [ 2169.342039][T21155] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4882'. [ 2169.363437][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4883'. [ 2169.809443][T21128] chnl_net:caif_netlink_parms(): no params data found [ 2170.319348][T21158] loop9: detected capacity change from 0 to 128 [ 2170.464449][T21158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 2170.574144][T21158] System zones: 1-3, 19-19, 35-36 [ 2170.660959][T21158] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2170.788001][T21158] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2170.953402][T21158] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 27 (only 1 groups) [ 2171.020388][T19485] Bluetooth: hci2: command tx timeout [ 2171.209080][T21165] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4886'. [ 2171.412338][T15779] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2171.881993][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4888'. [ 2171.893171][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4888'. [ 2172.234134][ T3931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.310524][T21128] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.318329][T21128] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.326099][T21128] bridge_slave_0: entered allmulticast mode [ 2172.335753][T21128] bridge_slave_0: entered promiscuous mode [ 2172.425482][ T3931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.518954][T21128] bridge0: port 2(bridge_slave_1) entered blocking state [ 2172.526641][T21128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.534618][T21128] bridge_slave_1: entered allmulticast mode [ 2172.544367][T21128] bridge_slave_1: entered promiscuous mode [ 2172.632725][ T3931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.677102][T21183] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4893'. [ 2172.802644][ T5855] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2172.895813][T21183] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4893'. [ 2172.933148][ T3931] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 2172.943678][ T3931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.974650][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4894'. [ 2173.044757][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 2173.112230][ T5855] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2173.121176][ T5855] usb 3-1: config 0 has no interface number 0 [ 2173.127687][ T5855] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2173.138767][ T5855] usb 3-1: config 0 interface 1 has no altsetting 0 [ 2173.146029][T19485] Bluetooth: hci2: command tx timeout [ 2173.173282][T21128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2173.202766][T21128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2173.253746][ T5855] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2173.263231][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.274135][ T5855] usb 3-1: Product: syz [ 2173.279108][ T5855] usb 3-1: Manufacturer: syz [ 2173.283847][ T5855] usb 3-1: SerialNumber: syz [ 2173.380422][ T5855] usb 3-1: config 0 descriptor?? [ 2173.465582][T21128] team0: Port device team_slave_0 added [ 2173.577146][T21128] team0: Port device team_slave_1 added [ 2173.650003][ T5855] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2173.725652][ T5855] cx231xx 3-1:0.1: Failed to read PCB config [ 2173.732351][ T5855] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 2173.813081][T21196] bond0: entered allmulticast mode [ 2173.818866][T21196] bond_slave_0: entered allmulticast mode [ 2173.825002][T21196] bond_slave_1: entered allmulticast mode [ 2173.837338][T21196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2173.847838][ T5855] usb 3-1: USB disconnect, device number 31 [ 2173.946574][ T3931] bridge_slave_1: left allmulticast mode [ 2173.952653][ T3931] bridge_slave_1: left promiscuous mode [ 2173.959452][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.038951][ T3931] bridge_slave_0: left allmulticast mode [ 2174.044970][ T3931] bridge_slave_0: left promiscuous mode [ 2174.051999][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.472276][ T5855] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2174.677763][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 2174.690651][ T5855] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2174.699348][ T5855] usb 3-1: config 0 has no interface number 0 [ 2174.708227][ T5855] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2174.720375][ T5855] usb 3-1: config 0 interface 1 has no altsetting 0 [ 2174.760256][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2174.776718][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4902'. [ 2174.786650][T21207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4902'. [ 2174.858621][ T5855] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2174.868251][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.876521][ T5855] usb 3-1: Product: syz [ 2174.881972][ T5855] usb 3-1: Manufacturer: syz [ 2174.886931][ T5855] usb 3-1: SerialNumber: syz [ 2174.899313][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2174.937242][ T3931] bond0 (unregistering): Released all slaves [ 2174.970108][ T5855] usb 3-1: config 0 descriptor?? [ 2175.030015][T21128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2175.037311][T21128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.064420][T21128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2175.088297][T21128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2175.095477][T21128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.128331][T21128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2175.208084][T19485] Bluetooth: hci2: command tx timeout [ 2175.269251][ T5855] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2175.334996][ T5855] cx231xx 3-1:0.1: Failed to read PCB config [ 2175.341683][ T5855] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 2175.489413][ T5855] usb 3-1: USB disconnect, device number 32 [ 2175.576629][T21128] hsr_slave_0: entered promiscuous mode [ 2175.586915][T21128] hsr_slave_1: entered promiscuous mode [ 2175.595854][T21128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2175.603755][T21128] Cannot create hsr debugfs directory [ 2175.984400][ T3931] team0: left promiscuous mode [ 2175.990375][ T3931] team_slave_0: left promiscuous mode [ 2175.999569][ T3931] team_slave_1: left promiscuous mode [ 2176.030624][T21216] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4906'. [ 2176.089895][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4907'. [ 2176.124451][ T3931] hsr_slave_0: left promiscuous mode [ 2176.142971][ T3931] hsr_slave_1: left promiscuous mode [ 2176.154554][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2176.162502][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2176.183957][T21220] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4906'. [ 2176.215340][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2176.223634][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2176.373471][ T3931] veth1_macvtap: left promiscuous mode [ 2176.379404][ T3931] veth0_macvtap: left promiscuous mode [ 2176.385644][ T3931] veth1_vlan: left promiscuous mode [ 2176.391346][ T3931] veth0_vlan: left promiscuous mode [ 2177.289998][ T3931] team0 (unregistering): Port device team_slave_1 removed [ 2177.374042][ T3931] team0 (unregistering): Port device team_slave_0 removed [ 2178.459863][T21233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4914'. [ 2178.469571][T21233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4914'. [ 2179.486625][ T42] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2179.537103][T21128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2179.562291][T21128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2179.659410][T21128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2179.707738][ T42] usb 10-1: Using ep0 maxpacket: 32 [ 2179.725732][ T42] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2179.734239][ T42] usb 10-1: config 0 has no interface number 0 [ 2179.740805][ T42] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2179.751865][ T42] usb 10-1: config 0 interface 1 has no altsetting 0 [ 2179.798877][ T42] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2179.808604][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.816952][ T42] usb 10-1: Product: syz [ 2179.821544][ T42] usb 10-1: Manufacturer: syz [ 2179.829836][ T42] usb 10-1: SerialNumber: syz [ 2179.889280][T21128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2179.900524][ T42] usb 10-1: config 0 descriptor?? [ 2180.146493][ T42] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2180.189769][ T42] cx231xx 10-1:0.1: Failed to read PCB config [ 2180.196257][ T42] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71 [ 2180.269090][ T42] usb 10-1: USB disconnect, device number 28 [ 2180.321213][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4920'. [ 2182.036437][T21128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2182.227720][ T42] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2182.441055][T21128] 8021q: adding VLAN 0 to HW filter on device team0 [ 2182.631102][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.638773][ T3973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2182.832493][ T3973] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.840244][ T3973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2184.348835][ T42] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2184.528366][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 2184.596601][ T42] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2184.606817][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.615314][ T42] usb 7-1: Product: syz [ 2184.620022][ T42] usb 7-1: Manufacturer: syz [ 2184.624860][ T42] usb 7-1: SerialNumber: syz [ 2184.966918][ T42] usb 7-1: config 0 descriptor?? [ 2185.441877][ T42] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2185.654720][T21128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2186.027793][T21314] loop9: detected capacity change from 0 to 512 [ 2186.185121][T21314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2186.200009][T21314] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2186.225393][T14633] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2187.075707][T14633] usb 3-1: Using ep0 maxpacket: 32 [ 2187.109673][T14633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.121297][T14633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.131913][T14633] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2187.141348][T14633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.185120][T14633] usb 3-1: config 0 descriptor?? [ 2187.541957][T14633] hub 3-1:0.0: USB hub found [ 2188.110465][T21330] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.4941: corrupted inode contents [ 2188.178871][T21330] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.4941: mark_inode_dirty error [ 2188.193498][T21330] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.4941: corrupted inode contents [ 2189.085293][ T42] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2189.160140][T21330] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.4941: mark_inode_dirty error [ 2189.201313][ T42] usb 7-1: USB disconnect, device number 14 [ 2189.831742][T14633] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 2189.954375][T14633] usbhid 3-1:0.0: can't add hid device: -71 [ 2189.962010][T14633] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2190.099700][T14633] usb 3-1: USB disconnect, device number 33 [ 2190.120576][T15779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2190.136721][T21128] veth0_vlan: entered promiscuous mode [ 2190.202609][T21128] veth1_vlan: entered promiscuous mode [ 2190.279063][T21340] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4946'. [ 2190.369623][T21128] veth0_macvtap: entered promiscuous mode [ 2190.402035][T21341] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4946'. [ 2190.452852][T21128] veth1_macvtap: entered promiscuous mode [ 2190.579364][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2190.586196][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2190.650213][T21128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2190.734929][T21128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2191.432845][T21128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.442081][T21128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.451277][T21128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.460381][T21128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.909429][T21382] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4960'. [ 2195.034484][T21385] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4960'. [ 2197.151823][T21410] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4967'. [ 2200.419690][T12753] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2201.311334][T21415] kexec: Could not allocate control_code_buffer [ 2202.359595][ T7076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2202.367848][ T7076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2202.465911][ T7076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2202.474292][ T7076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2202.496559][T21424] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4972'. [ 2202.620436][T21424] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4972'. [ 2203.733657][T21445] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4980'. [ 2203.747205][T21441] loop6: detected capacity change from 0 to 1764 [ 2203.919699][T21441] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2212.041922][T21462] loop8: detected capacity change from 0 to 79 [ 2212.072459][T21461] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4986'. [ 2212.213201][T21463] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4986'. [ 2212.711820][T21471] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.4990'. [ 2212.987616][ T30] audit: type=1326 audit(1750988775.384:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21473 comm="syz.9.4992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce2038e929 code=0x0 [ 2213.313071][ T24] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2213.550864][ T24] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 2213.565296][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2213.574844][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2213.588081][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2213.663469][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2213.673737][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2213.685337][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2213.723465][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2213.732906][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2213.744147][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2213.774886][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2213.784559][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2213.795785][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2213.845601][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2213.855346][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2213.866832][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2213.899892][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2213.909361][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2213.920572][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2213.965076][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2213.974475][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2213.985777][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2214.083160][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2214.092521][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2214.103972][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2214.175643][ T24] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2214.185255][ T24] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2214.193948][ T24] usb 10-1: Product: syz [ 2214.198697][ T24] usb 10-1: Manufacturer: syz [ 2214.203515][ T24] usb 10-1: SerialNumber: syz [ 2214.682941][ T24] usb 10-1: config 0 descriptor?? [ 2214.735790][ T24] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 2215.883243][ T5855] usb 10-1: USB disconnect, device number 30 [ 2216.138925][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2216.499375][ T5855] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 2217.116202][T21498] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5001'. [ 2217.213913][T21503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5001'. [ 2217.348756][T21506] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.5004'. [ 2217.994951][T21514] loop2: detected capacity change from 0 to 256 [ 2218.115701][T21514] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2218.129958][T21514] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 2218.778210][T21514] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 2218.793433][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5010'. [ 2224.643635][T21538] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5016'. [ 2224.748212][T21539] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5016'. [ 2224.875949][T21541] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.5017'. [ 2225.770395][ T5855] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2226.049294][ T5855] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 2226.057831][ T5855] usb 3-1: config 0 has no interface number 0 [ 2226.196671][ T5855] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 2226.206392][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.217346][ T5855] usb 3-1: Product: syz [ 2226.222686][ T5855] usb 3-1: Manufacturer: syz [ 2226.227750][ T5855] usb 3-1: SerialNumber: syz [ 2226.461394][ T5855] usb 3-1: config 0 descriptor?? [ 2226.946805][ T5855] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 2227.005123][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2227.109151][ T5855] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 2227.117778][ T5855] usb 3-1: media controller created [ 2227.298695][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2230.279113][T21572] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5030'. [ 2230.299829][ T5855] DVB: Unable to find symbol dib7000p_attach() [ 2230.310527][ T5855] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 2230.442142][T21577] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5030'. [ 2230.557577][T21578] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.5031'. [ 2230.750680][ T5855] rc_core: IR keymap rc-dib0700-rc5 not found [ 2230.757235][ T5855] Registered IR keymap rc-empty [ 2230.763712][ T5855] dvb-usb: could not initialize remote control. [ 2230.770552][ T5855] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 2230.878172][ T5855] usb 3-1: USB disconnect, device number 34 [ 2231.263651][ T5855] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 2231.359478][T21591] loop5: detected capacity change from 0 to 64 [ 2234.584729][T21602] loop9: detected capacity change from 0 to 4096 [ 2234.643738][T21604] loop2: detected capacity change from 0 to 4096 [ 2234.667785][T21602] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 2234.764206][T21606] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2234.880840][T21604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2234.888429][T21604] IPv6: NLM_F_CREATE should be set when creating new route [ 2235.678853][T21610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5044'. [ 2235.785551][T21612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5044'. [ 2235.899716][T21613] loop2: detected capacity change from 0 to 64 [ 2236.748624][T21622] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.5046'. [ 2238.281317][T21634] program syz.9.5052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2238.340243][T21637] netlink: 'syz.0.5053': attribute type 10 has an invalid length. [ 2238.818777][T21641] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5055'. [ 2238.930300][T21645] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5055'. [ 2239.889510][T21648] netlink: 1004 bytes leftover after parsing attributes in process `syz.9.5058'. [ 2242.355007][T21657] netlink: 'syz.9.5061': attribute type 12 has an invalid length. [ 2245.356142][T21677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5068'. [ 2245.571953][T21678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5068'. [ 2246.878329][ T5855] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2247.067717][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 2247.103277][ T5855] usb 6-1: config 64 has an invalid interface number: 176 but max is 0 [ 2247.112052][ T5855] usb 6-1: config 64 has no interface number 0 [ 2247.118578][ T5855] usb 6-1: config 64 interface 176 has no altsetting 0 [ 2247.188130][ T5855] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 2247.197724][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.208461][ T5855] usb 6-1: Product: syz [ 2247.212878][ T5855] usb 6-1: Manufacturer: syz [ 2247.219075][ T5855] usb 6-1: SerialNumber: syz [ 2247.659304][ T5855] peak_usb 6-1:64.176 can0: unable to request usb[type=0 value=1] err=-71 [ 2247.668504][ T5855] peak_usb 6-1:64.176: unable to read PCAN-USB X6 firmware info (err -71) [ 2247.892675][ T5855] peak_usb 6-1:64.176: probe with driver peak_usb failed with error -71 [ 2248.873384][ T5855] usb 6-1: USB disconnect, device number 12 [ 2252.229374][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2252.236376][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2252.531204][T21710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5080'. [ 2253.729256][T21714] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5081'. [ 2253.829419][T21717] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5081'. [ 2254.042443][T21722] cramfs: wrong magic [ 2255.710493][T21737] infiniband syz!: set active [ 2255.715491][T21737] infiniband syz!: added team_slave_0 [ 2255.934592][T21737] RDS/IB: syz!: added [ 2255.939193][T21737] smc: adding ib device syz! with port count 1 [ 2255.945793][T21737] smc: ib device syz! port 1 has pnetid [ 2256.485388][T21747] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5096'. [ 2257.570338][T21754] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5099'. [ 2257.696724][T21756] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5099'. [ 2259.699537][T21780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5111'. [ 2259.844614][T21785] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5111'. [ 2261.489052][T21811] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5125'. [ 2261.752548][T21817] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5127'. [ 2261.880840][T21819] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5127'. [ 2263.933448][T21850] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5144'. [ 2264.051737][T21854] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5144'. [ 2265.748922][T21885] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5159'. [ 2266.100855][T21890] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5160'. [ 2266.301912][T21895] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5160'. [ 2267.110904][T21902] loop6: detected capacity change from 0 to 8192 [ 2267.129258][T21902] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 2267.143476][T21902] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 2267.156728][T21902] ntfs3(loop6): Failed to load $MFT. [ 2268.041871][T21915] netlink: 'syz.0.5171': attribute type 29 has an invalid length. [ 2268.096327][T21918] netlink: 'syz.0.5171': attribute type 29 has an invalid length. [ 2268.437030][T21922] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5174'. [ 2268.736750][T21926] loop6: detected capacity change from 0 to 1024 [ 2268.772315][T21926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2268.821164][T21928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5177'. [ 2268.856548][T21926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2268.951456][T21935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5177'. [ 2269.417084][T19774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2270.519804][T21944] loop9: detected capacity change from 0 to 8192 [ 2270.678644][T21944] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 2270.707793][T21944] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 2270.788182][T21944] ntfs3(loop9): volume is dirty and "force" flag is not set! [ 2271.514529][T21972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5193'. [ 2271.635812][T21972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5193'. [ 2271.659797][T21973] loop6: detected capacity change from 0 to 1024 [ 2271.700498][T21973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2271.816999][T21973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2272.276078][T19774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2272.407799][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2272.589359][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.604720][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2272.656380][ T24] usb 3-1: New USB device found, idVendor=04da, idProduct=c002, bcdDevice= 0.00 [ 2272.666644][ T24] usb 3-1: New USB device strings: Mfr=0, Product=98, SerialNumber=0 [ 2272.675842][ T24] usb 3-1: Product: syz [ 2272.710148][ T24] usb 3-1: config 0 descriptor?? [ 2272.955501][T16668] usb 3-1: USB disconnect, device number 35 [ 2273.721137][T22008] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5206'. [ 2273.882314][T22011] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5206'. [ 2274.864271][T22030] batman_adv: batadv0: Adding interface: ipvlan4 [ 2274.871038][T22030] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2274.896937][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.907755][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.918306][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 2274.928492][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.938740][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 2274.949024][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.965034][T22030] batman_adv: batadv0: Interface activated: ipvlan4 [ 2275.489767][T22039] pimreg: entered allmulticast mode [ 2275.919877][T22048] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5220'. [ 2276.072073][T22051] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5220'. [ 2276.651995][T22053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5224'. [ 2277.176722][T22055] Cannot find del_set index 0 as target [ 2278.395775][T22068] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5229'. [ 2280.779822][T22099] batman_adv: batadv0: Adding interface: ipvlan3 [ 2280.786408][T22099] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2280.815961][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.828569][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.839095][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 2280.849290][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.859529][T22099] batman_adv: batadv0: Interface activated: ipvlan3 [ 2280.979822][T22099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5244'. [ 2282.418225][T12753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2282.435964][T12753] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2282.445862][T12753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2282.459816][T12753] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2282.471093][T12753] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2284.318907][T22118] chnl_net:caif_netlink_parms(): no params data found [ 2284.511985][T14612] bond0: (slave netdevsim3): Releasing backup interface [ 2284.541047][T12753] Bluetooth: hci5: command tx timeout [ 2284.549958][T14612] netdevsim netdevsim2 netdevsim3 (unregistering): left promiscuous mode [ 2284.561446][T14612] netdevsim netdevsim2 netdevsim3 (unregistering): left allmulticast mode [ 2284.575200][T14612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.618520][T22138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5258'. [ 2284.672391][T14612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.912659][T14612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.122282][T14612] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 2285.134297][T14612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.637318][T14612] bridge_slave_1: left allmulticast mode [ 2285.643453][T14612] bridge_slave_1: left promiscuous mode [ 2285.650320][T14612] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.732707][T14612] bridge_slave_0: left allmulticast mode [ 2285.738799][T14612] bridge_slave_0: left promiscuous mode [ 2285.745484][T14612] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.847096][T22153] fuse: Bad value for 'fd' [ 2286.428553][T14612] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2286.548084][T14612] dvmrp0 (unregistering): left allmulticast mode [ 2286.657148][T12753] Bluetooth: hci5: command tx timeout [ 2286.909501][T14612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2286.949039][T14612] bond_slave_0: left promiscuous mode [ 2286.955452][T14612] bond_slave_0: left allmulticast mode [ 2286.989401][T14612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2287.009659][T14612] bond_slave_1: left promiscuous mode [ 2287.016258][T14612] bond_slave_1: left allmulticast mode [ 2287.026358][T14612] bond0 (unregistering): Released all slaves [ 2287.056157][T14612] bond1 (unregistering): Released all slaves [ 2287.465425][T14612] tipc: Left network mode [ 2287.491245][T22118] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.498989][T22118] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.506773][T22118] bridge_slave_0: entered allmulticast mode [ 2287.516418][T22118] bridge_slave_0: entered promiscuous mode [ 2287.684619][T22118] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.693110][T22118] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.701027][T22118] bridge_slave_1: entered allmulticast mode [ 2287.710656][T22118] bridge_slave_1: entered promiscuous mode [ 2287.901686][T22172] netlink: 136 bytes leftover after parsing attributes in process `syz.9.5272'. [ 2287.911211][T22172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2288.111435][T22118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2288.222423][T22118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2288.710595][T19485] Bluetooth: hci5: command tx timeout [ 2288.806775][T22118] team0: Port device team_slave_0 added [ 2288.855131][T22118] team0: Port device team_slave_1 added [ 2288.978112][T14612] hsr_slave_0: left promiscuous mode [ 2289.007877][T14612] hsr_slave_1: left promiscuous mode [ 2289.015945][T14612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2289.023965][T14612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2289.106102][T14612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2289.115314][T14612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2289.161808][T14612] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 2289.169572][T14612] batman_adv: batadv0: Removing interface: ipvlan2 [ 2289.228417][T14612] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 2289.235609][T14612] batman_adv: batadv0: Removing interface: ipvlan3 [ 2289.268073][T14612] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 2289.275303][T14612] batman_adv: batadv0: Removing interface: ipvlan4 [ 2289.355598][T14612] veth1_macvtap: left promiscuous mode [ 2289.362683][T14612] veth0_macvtap: left promiscuous mode [ 2289.368862][T14612] veth1_vlan: left promiscuous mode [ 2289.374444][T14612] veth0_vlan: left promiscuous mode [ 2289.915270][T19485] Bluetooth: hci2: command 0x0406 tx timeout [ 2290.135288][T14612] pimreg (unregistering): left allmulticast mode [ 2290.660934][T14612] team0 (unregistering): Port device team_slave_1 removed [ 2290.733605][T14612] team0 (unregistering): Port device team_slave_0 removed [ 2290.779690][T12753] Bluetooth: hci5: command tx timeout [ 2291.628821][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5284'. [ 2291.754157][T22118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2291.763152][T22118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.790044][T22118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2291.892326][T14612] IPVS: stop unused estimator thread 0... [ 2291.940726][T22118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2291.948055][T22118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.978556][T22118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2292.426893][T22118] hsr_slave_0: entered promiscuous mode [ 2292.437068][T22118] hsr_slave_1: entered promiscuous mode [ 2292.445803][T22118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2292.453884][T22118] Cannot create hsr debugfs directory [ 2292.508839][T22214] netlink: 277 bytes leftover after parsing attributes in process `syz.9.5291'. [ 2293.563108][T22228] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5298'. [ 2294.975081][T22118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2295.111332][T22118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2295.238565][T22118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2295.384496][T22118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2295.991454][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5304'. [ 2296.001706][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5304'. [ 2296.161129][T22245] netlink: 'syz.9.5305': attribute type 1 has an invalid length. [ 2296.359216][T22247] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5306'. [ 2296.691542][T22254] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5309'. [ 2296.882059][T22118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.990234][T22251] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5308'. [ 2297.051797][T22118] 8021q: adding VLAN 0 to HW filter on device team0 [ 2297.125243][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2297.132869][ T7075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2297.218078][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.225758][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2298.046319][T22269] loop5: detected capacity change from 0 to 2048 [ 2298.141724][T22269] NILFS (loop5): invalid segment: Magic number mismatch [ 2298.149389][T22269] NILFS (loop5): trying rollback from an earlier position [ 2298.202841][T22274] xt_connbytes: Forcing CT accounting to be enabled [ 2298.209966][T22274] set match dimension is over the limit! [ 2298.268472][T22269] NILFS (loop5): recovery complete [ 2298.305508][T22278] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2299.000803][T22283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5321'. [ 2300.325202][T22118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2300.896107][T22296] syzkaller1: entered promiscuous mode [ 2300.902070][T22296] syzkaller1: entered allmulticast mode [ 2301.021091][T22297] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 2301.115923][T22291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5324'. [ 2301.453866][T22118] veth0_vlan: entered promiscuous mode [ 2301.503482][T22299] loop9: detected capacity change from 0 to 4096 [ 2301.608209][T22300] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2301.639706][T22118] veth1_vlan: entered promiscuous mode [ 2301.685210][T22299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.692776][T22299] IPv6: NLM_F_CREATE should be set when creating new route [ 2301.948032][T22118] veth0_macvtap: entered promiscuous mode [ 2302.031022][T22118] veth1_macvtap: entered promiscuous mode [ 2302.048105][T22304] loop5: detected capacity change from 0 to 1024 [ 2302.083263][T22304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2302.168590][T22118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2302.226409][T22118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2302.299292][T22304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2302.325356][T22118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.336436][T22118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.345994][T22118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.355188][T22118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.699785][T22316] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5333'. [ 2302.909430][T21128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2304.653480][T22334] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5338'. [ 2305.117025][T22339] loop5: detected capacity change from 0 to 4096 [ 2305.290488][T22350] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2305.412417][T22339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2305.420016][T22339] IPv6: NLM_F_CREATE should be set when creating new route [ 2305.735345][T22355] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5345'. [ 2306.694855][T22369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5351'. [ 2307.122424][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5354'. [ 2307.351666][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5357'. [ 2307.539718][T22384] loop9: detected capacity change from 0 to 4096 [ 2307.674581][T22389] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5358'. [ 2307.710861][T22390] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2307.778665][T22384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2308.179050][T10181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2308.187307][T10181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2308.388691][T14633] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2308.446022][T22401] netlink: 'syz.5.5364': attribute type 5 has an invalid length. [ 2308.454616][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5364'. [ 2308.456050][ T7075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2308.472354][ T7075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2308.524318][T22399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5363'. [ 2308.533843][T22399] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5363'. [ 2308.587706][T14633] usb 7-1: Using ep0 maxpacket: 8 [ 2308.595523][T14633] usb 7-1: no configurations [ 2308.602135][T14633] usb 7-1: can't read configurations, error -22 [ 2308.779406][T14633] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2308.977958][T14633] usb 7-1: Using ep0 maxpacket: 8 [ 2308.987161][T14633] usb 7-1: no configurations [ 2308.992669][T14633] usb 7-1: can't read configurations, error -22 [ 2309.012453][T14633] usb usb7-port1: attempt power cycle [ 2309.096253][T22406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2309.312518][T22413] loop2: detected capacity change from 0 to 1024 [ 2309.344463][T22413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2309.389760][T14633] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2309.411722][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5369'. [ 2309.436501][T22413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2309.440656][T14633] usb 7-1: Using ep0 maxpacket: 8 [ 2309.457210][T14633] usb 7-1: no configurations [ 2309.468046][T14633] usb 7-1: can't read configurations, error -22 [ 2309.607648][T14633] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2309.639429][T14633] usb 7-1: Using ep0 maxpacket: 8 [ 2309.648920][T14633] usb 7-1: no configurations [ 2309.653824][T14633] usb 7-1: can't read configurations, error -22 [ 2309.680409][T14633] usb usb7-port1: unable to enumerate USB device [ 2309.720650][T22118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2310.473444][T22431] __nla_validate_parse: 2 callbacks suppressed [ 2310.473527][T22431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5375'. [ 2310.493327][T22431] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5375'. [ 2310.508539][T22433] netlink: 'syz.0.5376': attribute type 5 has an invalid length. [ 2310.516869][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5376'. [ 2311.535825][T22445] netlink: 'syz.6.5382': attribute type 10 has an invalid length. [ 2311.567657][T22445] team0: Port device dummy0 added [ 2311.574891][T22444] loop5: detected capacity change from 0 to 1024 [ 2311.588439][T22444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2311.645891][T22445] netlink: 'syz.6.5382': attribute type 10 has an invalid length. [ 2311.655700][T22441] Cannot find del_set index 0 as target [ 2311.698526][T22445] team0: Port device dummy0 removed [ 2311.723395][T22445] dummy0: entered promiscuous mode [ 2311.730026][T22445] dummy0: entered allmulticast mode [ 2311.738549][T22445] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2311.862076][T22444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2312.286073][T21128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2312.561618][T22460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5387'. [ 2312.571588][T22460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5387'. [ 2312.631196][T22462] netlink: 'syz.5.5388': attribute type 5 has an invalid length. [ 2312.643566][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5388'. [ 2313.307942][T22475] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5393'. [ 2313.333536][T22475] veth0: entered promiscuous mode [ 2313.349385][T22475] veth0: left promiscuous mode [ 2313.479534][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2313.486241][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2314.321117][T22485] loop9: detected capacity change from 0 to 1024 [ 2314.353893][T22485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2314.452511][T22485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2314.838129][T22495] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5402'. [ 2314.847720][T22495] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5402'. [ 2314.962897][T15779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2315.766675][T16668] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2315.826796][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5409'. [ 2315.979942][T16668] usb 7-1: Using ep0 maxpacket: 8 [ 2316.002726][T16668] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.014231][T16668] usb 7-1: config 0 has no interfaces? [ 2316.052380][T16668] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2316.062112][T16668] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2316.070587][T16668] usb 7-1: Product: syz [ 2316.074991][T16668] usb 7-1: Manufacturer: syz [ 2316.079994][T16668] usb 7-1: SerialNumber: syz [ 2316.129382][T16668] usb 7-1: config 0 descriptor?? [ 2316.895599][T22523] loop2: detected capacity change from 0 to 1024 [ 2316.948769][T22523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2317.036087][T22523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2317.416103][T22532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5418'. [ 2317.491929][T22118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2317.538709][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'. [ 2318.727110][T14633] usb 7-1: USB disconnect, device number 19 [ 2319.586092][T22556] xt_connbytes: Forcing CT accounting to be enabled [ 2319.593169][T22556] Cannot find set identified by id 0 to match [ 2319.765982][T22559] loop6: detected capacity change from 0 to 1024 [ 2319.826430][T22559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2319.959091][T22559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2320.451830][T19774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2320.614718][T22577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5437'. [ 2320.630492][T22577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5437'. [ 2320.807774][T14633] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2320.980227][T14633] usb 10-1: Using ep0 maxpacket: 8 [ 2320.994518][T14633] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2321.005341][T14633] usb 10-1: config 0 has no interfaces? [ 2321.040860][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2321.053427][T14633] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2321.063168][T14633] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2321.071849][T14633] usb 10-1: Product: syz [ 2321.076352][T14633] usb 10-1: Manufacturer: syz [ 2321.081475][T14633] usb 10-1: SerialNumber: syz [ 2321.093464][T14633] usb 10-1: config 0 descriptor?? [ 2321.169825][T22587] set match dimension is over the limit! [ 2321.244636][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 2321.256712][ T24] usb 6-1: config 0 has no interfaces? [ 2321.267713][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2321.277298][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2321.285662][ T24] usb 6-1: Manufacturer: syz [ 2321.327783][ T24] usb 6-1: config 0 descriptor?? [ 2321.565400][T22581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2321.574964][T22581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2321.669256][T16668] usb 6-1: USB disconnect, device number 13 [ 2323.013196][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5451'. [ 2323.023144][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5451'. [ 2323.450937][T22611] xt_connbytes: Forcing CT accounting to be enabled [ 2323.458219][T22611] Cannot find set identified by id 0 to match [ 2323.701989][T22614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2323.709725][T22614] IPv6: NLM_F_CREATE should be set when creating new route [ 2323.741204][ T5855] usb 10-1: USB disconnect, device number 31 [ 2324.438592][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2324.626057][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 2324.632202][ T5855] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2324.676011][ T24] usb 7-1: config 0 has no interfaces? [ 2324.687689][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2324.697268][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2324.705729][ T24] usb 7-1: Manufacturer: syz [ 2324.744968][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5464'. [ 2324.759290][ T24] usb 7-1: config 0 descriptor?? [ 2324.788758][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 2324.826429][ T5855] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2324.836114][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.900265][ T5855] usb 3-1: config 0 descriptor?? [ 2325.123933][T22622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2325.139164][T22622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2325.168381][ T5855] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2325.202828][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2325.270110][ T5855] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2325.277809][ T5855] usb 3-1: media controller created [ 2325.299595][ T24] usb 7-1: USB disconnect, device number 20 [ 2325.379226][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2325.395130][T22625] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 2325.765535][T22642] set match dimension is over the limit! [ 2326.249039][ T5855] az6027: usb out operation failed. (-71) [ 2326.278214][ T5855] az6027: usb out operation failed. (-71) [ 2326.284183][ T5855] stb0899_attach: Driver disabled by Kconfig [ 2326.291017][ T5855] az6027: no front-end attached [ 2326.291017][ T5855] [ 2326.333444][ T5855] az6027: usb out operation failed. (-71) [ 2326.339686][ T5855] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2326.350731][ T5855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 2326.413620][T22647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2326.421225][T22647] IPv6: NLM_F_CREATE should be set when creating new route [ 2326.431559][ T5855] dvb-usb: schedule remote query interval to 400 msecs. [ 2326.439157][ T5855] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2326.510844][ T5855] usb 3-1: USB disconnect, device number 36 [ 2326.734837][ T5855] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2327.658925][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5476'. [ 2328.161733][T22674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.658937][T22681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2329.300497][T22685] loop9: detected capacity change from 0 to 2048 [ 2329.363891][T22685] NILFS (loop9): invalid segment: Magic number mismatch [ 2329.373000][T22685] NILFS (loop9): trying rollback from an earlier position [ 2329.455351][T22685] NILFS (loop9): recovery complete [ 2329.474780][T22694] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2330.392068][T22704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5492'. [ 2331.529518][T22710] syzkaller1: entered promiscuous mode [ 2331.535438][T22710] syzkaller1: entered allmulticast mode [ 2331.861945][T22714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2333.597120][T22734] netlink: 'syz.0.5504': attribute type 303 has an invalid length. [ 2333.644753][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5504'. [ 2333.988911][T22736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5505'. [ 2335.412826][T22755] loop5: detected capacity change from 0 to 2048 [ 2335.478727][T22755] NILFS (loop5): invalid segment: Magic number mismatch [ 2335.486074][T22755] NILFS (loop5): trying rollback from an earlier position [ 2335.738135][T22755] NILFS (loop5): recovery complete [ 2335.767889][T22762] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2340.555604][T22818] loop6: detected capacity change from 0 to 2048 [ 2340.621166][T22818] NILFS (loop6): invalid segment: Magic number mismatch [ 2340.628780][T22818] NILFS (loop6): trying rollback from an earlier position [ 2340.703222][T22818] NILFS (loop6): recovery complete [ 2340.739714][T22820] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2344.094023][T22849] bridge0: port 3(erspan0) entered blocking state [ 2344.103185][T22849] bridge0: port 3(erspan0) entered disabled state [ 2344.110622][T22849] erspan0: entered allmulticast mode [ 2344.119480][T22849] erspan0: entered promiscuous mode [ 2344.127577][T22849] bridge0: port 3(erspan0) entered blocking state [ 2344.134514][T22849] bridge0: port 3(erspan0) entered forwarding state [ 2344.207806][T22856] erspan0: left allmulticast mode [ 2344.213141][T22856] erspan0: left promiscuous mode [ 2344.219613][T22856] bridge0: port 3(erspan0) entered disabled state [ 2345.783044][T22869] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5556'. [ 2347.893952][T22898] loop5: detected capacity change from 0 to 2048 [ 2348.018013][T22898] NILFS (loop5): invalid segment: Magic number mismatch [ 2348.025456][T22898] NILFS (loop5): trying rollback from an earlier position [ 2348.140951][T22898] NILFS (loop5): recovery complete [ 2348.192916][T22907] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2350.112406][T22923] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2350.126253][T22923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2350.136113][T22923] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2350.152414][T22923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2350.165135][T22923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2351.400203][T22922] chnl_net:caif_netlink_parms(): no params data found [ 2352.287709][T22923] Bluetooth: hci3: command tx timeout [ 2352.871082][T22951] Cannot find del_set index 0 as target [ 2353.504737][T22954] loop5: detected capacity change from 0 to 2048 [ 2353.607709][T22954] NILFS (loop5): invalid segment: Magic number mismatch [ 2353.614960][T22954] NILFS (loop5): trying rollback from an earlier position [ 2353.775597][T22954] NILFS (loop5): recovery complete [ 2353.916267][T22961] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2353.959189][T22922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2353.966770][T22922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2353.975427][T22922] bridge_slave_0: entered allmulticast mode [ 2353.985838][T22922] bridge_slave_0: entered promiscuous mode [ 2354.022807][T22957] tipc: Started in network mode [ 2354.028531][T22957] tipc: Node identity 2d0b50e1d8a655f0002e, cluster identity 4711 [ 2354.159237][ T3931] bond0: (slave netdevsim3): Releasing backup interface [ 2354.226961][ T3931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2354.327247][T22923] Bluetooth: hci3: command tx timeout [ 2354.404572][T22922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.412340][T22922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.428325][T22922] bridge_slave_1: entered allmulticast mode [ 2354.438148][T22922] bridge_slave_1: entered promiscuous mode [ 2354.616540][ T3931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2354.802205][ T3931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2355.127959][ T3931] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 2355.143830][ T3931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2355.330634][T22922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2355.480257][T22975] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5594'. [ 2355.489741][T22975] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5594'. [ 2355.509729][T22922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2355.680546][ T3931] bridge_slave_1: left allmulticast mode [ 2355.686468][ T3931] bridge_slave_1: left promiscuous mode [ 2355.693188][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 2355.759338][ T3931] bridge_slave_0: left allmulticast mode [ 2355.766091][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 2355.981057][T22981] IPv4: Oversized IP packet from 127.202.26.0 [ 2356.386550][T22923] Bluetooth: hci3: command tx timeout [ 2356.615980][ T3931] bridge0 (unregistering): left promiscuous mode [ 2356.725289][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2356.845105][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2356.944886][ T3931] bond0 (unregistering): Released all slaves [ 2357.051400][T22922] team0: Port device team_slave_0 added [ 2357.114233][T22922] team0: Port device team_slave_1 added [ 2357.570319][T22922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2357.579245][T22922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2357.611753][T22922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2357.811422][T22922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2357.819212][T22922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2357.845787][T22922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2358.218768][ T3931] batman_adv: batadv0: Interface deactivated: dummy0 [ 2358.225848][ T3931] batman_adv: batadv0: Removing interface: dummy0 [ 2358.286720][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2358.294832][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2358.312862][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2358.325150][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2358.426440][ T3931] veth1_vlan: left promiscuous mode [ 2358.432278][ T3931] veth0_vlan: left promiscuous mode [ 2358.527918][T22923] Bluetooth: hci3: command tx timeout [ 2359.246121][T23012] loop5: detected capacity change from 0 to 2048 [ 2359.352036][T23012] NILFS (loop5): invalid segment: Magic number mismatch [ 2359.359730][T23012] NILFS (loop5): trying rollback from an earlier position [ 2359.509922][T23012] NILFS (loop5): recovery complete [ 2359.643508][T23016] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2359.840503][T23023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5614'. [ 2360.939737][T22922] hsr_slave_0: entered promiscuous mode [ 2360.950087][T22922] hsr_slave_1: entered promiscuous mode [ 2360.959052][T22922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2360.966847][T22922] Cannot create hsr debugfs directory [ 2362.439889][T23053] netlink: 'syz.6.5624': attribute type 1 has an invalid length. [ 2362.480241][T23054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5625'. [ 2362.489714][T23054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5625'. [ 2362.658926][T22922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2362.991684][T23056] bond1 (unregistering): Released all slaves [ 2363.084119][T22922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2363.176783][T23060] loop9: detected capacity change from 0 to 2048 [ 2363.189657][T22922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2363.258898][T22922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2363.300943][T23060] NILFS (loop9): invalid segment: Magic number mismatch [ 2363.308685][T23060] NILFS (loop9): trying rollback from an earlier position [ 2363.445194][T23060] NILFS (loop9): recovery complete [ 2363.492615][T23067] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2364.418887][T22922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2364.536189][T22922] 8021q: adding VLAN 0 to HW filter on device team0 [ 2364.616741][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.624466][ T7075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2364.720535][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.728173][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2365.823497][T23086] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5635'. [ 2366.691528][T22922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2366.948673][T23096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5638'. [ 2366.959032][T23096] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5638'. [ 2367.151460][T22922] veth0_vlan: entered promiscuous mode [ 2367.200235][T23099] netlink: 'syz.9.5639': attribute type 10 has an invalid length. [ 2367.208980][T23099] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5639'. [ 2367.289543][T23099] team0: Port device netdevsim1 added [ 2367.306399][T22922] veth1_vlan: entered promiscuous mode [ 2367.697766][T22922] veth0_macvtap: entered promiscuous mode [ 2367.779242][T22922] veth1_macvtap: entered promiscuous mode [ 2368.152650][T23107] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5643'. [ 2368.170455][T22922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2368.312579][T22922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2368.507965][T22922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.517027][T22922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.526237][T22922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.535344][T22922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.210679][T23114] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5646'. [ 2369.233529][T23118] tipc: Started in network mode [ 2369.239116][T23118] tipc: Node identity -, cluster identity 4711 [ 2369.954108][T23130] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5651'. [ 2369.963871][T23130] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5651'. [ 2371.002237][T23151] tipc: Cannot configure node identity twice [ 2371.043356][T23149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5660'. [ 2372.079627][T23165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5666'. [ 2372.089207][T23165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5666'. [ 2372.670937][T23176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2373.266066][T23183] tipc: Started in network mode [ 2373.272008][T23183] tipc: Node identity -, cluster identity 4711 [ 2373.342009][T23184] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5672'. [ 2374.952598][ T7075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2374.960809][ T7075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.988730][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2374.995545][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2375.456266][ T3669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2375.464652][ T3669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2375.738509][T23203] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5679'. [ 2375.748017][T23203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2375.755455][T23203] IPv6: NLM_F_CREATE should be set when creating new route [ 2375.935258][T23203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5679'. [ 2376.519002][T23215] tipc: Started in network mode [ 2376.524370][T23215] tipc: Node identity -, cluster identity 4711 [ 2377.598141][T23234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5691'. [ 2378.149455][T23242] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5695'. [ 2378.268892][T23244] bond0: entered promiscuous mode [ 2378.282421][T23244] bond_slave_0: entered promiscuous mode [ 2378.291541][T23244] bond_slave_1: entered promiscuous mode [ 2378.298638][T23244] bond0: entered allmulticast mode [ 2378.304018][T23244] bond_slave_0: entered allmulticast mode [ 2378.310109][T23244] bond_slave_1: entered allmulticast mode [ 2378.640063][T23249] tipc: Cannot configure node identity twice [ 2379.984028][T23272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5710'. [ 2380.556703][T23280] tipc: Cannot configure node identity twice [ 2381.545399][T23302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5723'. [ 2383.221519][T23329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5735'. [ 2384.190269][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5743'. [ 2385.246177][T23361] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5747'. [ 2385.678241][T23356] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2385.705375][T23356] syzkaller0: entered promiscuous mode [ 2385.711388][T23356] syzkaller0: entered allmulticast mode [ 2386.216096][T23377] Cannot find del_set index 0 as target [ 2386.222616][T23376] loop2: detected capacity change from 0 to 2048 [ 2386.295471][T23376] NILFS (loop2): invalid segment: Magic number mismatch [ 2386.303696][T23376] NILFS (loop2): trying rollback from an earlier position [ 2386.424747][T23376] NILFS (loop2): recovery complete [ 2386.482512][T23384] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2386.744667][T23388] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5758'. [ 2387.539273][T23397] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5762'. [ 2388.226945][T12753] Bluetooth: hci3: command 0x0405 tx timeout [ 2388.333438][T23411] SET target dimension over the limit! [ 2388.479570][T23412] loop6: detected capacity change from 0 to 2048 [ 2388.502527][T23412] NILFS (loop6): invalid segment: Magic number mismatch [ 2388.510414][T23412] NILFS (loop6): trying rollback from an earlier position [ 2388.604343][T23412] NILFS (loop6): recovery complete [ 2388.632319][T23416] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2389.485216][T23429] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5776'. [ 2391.259726][T23449] loop0: detected capacity change from 0 to 2048 [ 2391.343149][T23449] NILFS (loop0): invalid segment: Magic number mismatch [ 2391.351166][T23449] NILFS (loop0): trying rollback from an earlier position [ 2391.404564][T23457] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5788'. [ 2391.438168][T23449] NILFS (loop0): recovery complete [ 2391.460858][T23458] SET target dimension over the limit! [ 2391.493228][T23459] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2392.128814][T23467] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5790'. [ 2392.704303][T23463] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2392.740342][T23463] syzkaller0: entered promiscuous mode [ 2392.746085][T23463] syzkaller0: entered allmulticast mode [ 2393.391112][T23479] "syz.6.5794" (23479) uses obsolete ecb(arc4) skcipher [ 2393.913756][T23497] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5801'. [ 2394.075863][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5802'. [ 2394.472082][T23508] Cannot find del_set index 0 as target [ 2395.782606][T23529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5816'. [ 2396.030805][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5817'. [ 2396.388724][T23538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5820'. [ 2396.640491][T23548] Cannot find del_set index 0 as target [ 2397.509806][T23563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5830'. [ 2397.762124][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'. [ 2398.675702][T23580] Cannot find del_set index 0 as target [ 2398.900835][T23589] team0: Device gtp0 is of different type [ 2399.250310][T23595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'. [ 2399.298876][T23597] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5843'. [ 2399.333348][T23596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5844'. [ 2400.608480][T23613] SET target dimension over the limit! [ 2400.816712][T23618] team0: Device gtp0 is of different type [ 2400.903835][T12753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2400.919638][T12753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2400.933072][T12753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2400.948775][T12753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2400.964906][T12753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2401.630464][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5859'. [ 2401.701539][T23628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5858'. [ 2402.505940][T23623] chnl_net:caif_netlink_parms(): no params data found [ 2402.933820][ T7075] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.019757][T12753] Bluetooth: hci1: command tx timeout [ 2403.047130][ T7075] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.095748][T23652] team0: Device gtp0 is of different type [ 2403.144584][ T7075] team0: Port device netdevsim1 removed [ 2403.156801][ T7075] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.378974][ T7075] netdevsim netdevsim9 netdevsim0 (unregistering): left promiscuous mode [ 2403.389831][ T7075] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.953824][T23662] SET target dimension over the limit! [ 2403.992589][ T7075] bridge_slave_1: left allmulticast mode [ 2403.999609][ T7075] bridge_slave_1: left promiscuous mode [ 2404.006255][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 2404.033234][ T7075] bridge_slave_0: left allmulticast mode [ 2404.039624][ T7075] bridge_slave_0: left promiscuous mode [ 2404.041289][T23666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5871'. [ 2404.046153][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 2404.332548][T23673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5873'. [ 2404.945244][ T7075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2405.018185][ T7075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2405.054318][ T7075] bond0 (unregistering): Released all slaves [ 2405.117709][T12753] Bluetooth: hci1: command tx timeout [ 2405.211671][T23623] bridge0: port 1(bridge_slave_0) entered blocking state [ 2405.219522][T23623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2405.227263][T23623] bridge_slave_0: entered allmulticast mode [ 2405.236872][T23623] bridge_slave_0: entered promiscuous mode [ 2405.254131][T23623] bridge0: port 2(bridge_slave_1) entered blocking state [ 2405.261824][T23623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.269972][T23623] bridge_slave_1: entered allmulticast mode [ 2405.279457][T23623] bridge_slave_1: entered promiscuous mode [ 2405.370446][ T7075] tipc: Left network mode [ 2405.560455][T23623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2405.625278][T23623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2406.007240][T23623] team0: Port device team_slave_0 added [ 2406.036906][T23623] team0: Port device team_slave_1 added [ 2406.505474][ T7075] hsr_slave_0: left promiscuous mode [ 2406.540969][ T7075] hsr_slave_1: left promiscuous mode [ 2406.549170][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2406.557010][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2406.633206][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2406.646013][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2406.677114][ T7075] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 2406.684612][ T7075] batman_adv: batadv0: Removing interface: ipvlan2 [ 2406.738466][ T7075] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 2406.749258][ T7075] batman_adv: batadv0: Removing interface: ipvlan3 [ 2406.770477][ T7075] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 2406.777917][ T7075] batman_adv: batadv0: Removing interface: ipvlan4 [ 2406.865523][ T7075] veth1_macvtap: left promiscuous mode [ 2406.871588][ T7075] veth0_macvtap: left promiscuous mode [ 2406.877661][ T7075] veth1_vlan: left promiscuous mode [ 2406.883250][ T7075] veth0_vlan: left promiscuous mode [ 2407.197568][T22923] Bluetooth: hci1: command tx timeout [ 2407.244503][T23704] Cannot find del_set index 0 as target [ 2407.658356][T22923] Bluetooth: hci5: command 0x0406 tx timeout [ 2407.774227][ T7075] team0 (unregistering): Port device team_slave_1 removed [ 2407.894481][ T7075] team0 (unregistering): Port device team_slave_0 removed [ 2408.223545][T23623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2408.231198][T23623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2408.258492][T23623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2408.345511][T23623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2408.353365][T23623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2408.380193][T23623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2408.861365][T23623] hsr_slave_0: entered promiscuous mode [ 2408.871745][T23623] hsr_slave_1: entered promiscuous mode [ 2408.882031][T23623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2408.890082][T23623] Cannot create hsr debugfs directory [ 2408.926833][T23722] fuse: Unknown parameter 'grou00000000000000000000' [ 2409.258133][T12753] Bluetooth: hci1: command tx timeout [ 2410.643437][T23623] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2410.687919][T23623] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2410.743109][T23749] fuse: Unknown parameter 'grou00000000000000000000' [ 2410.789774][T23623] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2410.849641][T23623] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2411.064513][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5905'. [ 2411.354173][T23760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5906'. [ 2411.381749][T23760] veth0: entered promiscuous mode [ 2411.601226][T23763] netlink: 'syz.2.5908': attribute type 303 has an invalid length. [ 2411.706704][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5908'. [ 2411.921240][T23623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2411.938943][T23768] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5910'. [ 2412.138194][T23623] 8021q: adding VLAN 0 to HW filter on device team0 [ 2412.215841][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.223524][ T7075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2412.307459][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.315121][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2412.676030][T23778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5915'. [ 2412.729231][T23780] fuse: Unknown parameter 'grou00000000000000000000' [ 2412.779888][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5915'. [ 2413.152968][T23785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5917'. [ 2413.943166][T23623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2413.963707][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5921'. [ 2414.145706][T23802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5923'. [ 2414.546587][T23807] tipc: Enabled bearer , priority 10 [ 2414.651660][T23811] fuse: Unknown parameter 'group_i00000000000000000000' [ 2414.694896][T23813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5928'. [ 2415.659787][T16668] tipc: Node number set to 757989376 [ 2416.146706][T23623] veth0_vlan: entered promiscuous mode [ 2416.274140][T23623] veth1_vlan: entered promiscuous mode [ 2416.534919][T23623] veth0_macvtap: entered promiscuous mode [ 2416.546157][T23842] fuse: Unknown parameter 'group_i00000000000000000000' [ 2416.600444][T23623] veth1_macvtap: entered promiscuous mode [ 2416.757035][T23623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2416.771230][T23845] __nla_validate_parse: 4 callbacks suppressed [ 2416.771313][T23845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5941'. [ 2416.829130][T23623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2416.888004][T23845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5941'. [ 2416.915286][T23623] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2416.926034][T23623] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2416.935272][T23623] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2416.944522][T23623] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2416.991040][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5942'. [ 2417.278573][T23849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5944'. [ 2417.289551][T23849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5944'. [ 2417.301586][T23849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5944'. [ 2417.311995][T23849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5944'. [ 2419.297865][T23881] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 2419.306582][T23881] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 2419.315503][T23881] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2419.686382][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5954'. [ 2419.699671][T23885] fuse: Unknown parameter 'group_i00000000000000000000' [ 2420.952356][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5963'. [ 2421.220498][T23916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5964'. [ 2421.230256][T23916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2421.809399][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5966'. [ 2422.050083][T23926] fuse: Unknown parameter 'group_id00000000000000000000' [ 2423.207969][ T7075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2423.216109][ T7075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2423.385511][ T7076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2423.393707][ T7076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2423.597723][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2423.793581][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 2423.819108][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2423.827638][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2423.838203][ T24] usb 3-1: config 0 has no interface number 0 [ 2423.841995][T23957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5979'. [ 2423.859818][ T24] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2423.871155][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 2423.981376][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2423.990996][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.999391][ T24] usb 3-1: Product: syz [ 2424.003717][ T24] usb 3-1: Manufacturer: syz [ 2424.008605][ T24] usb 3-1: SerialNumber: syz [ 2424.033468][ T24] usb 3-1: config 0 descriptor?? [ 2424.274036][ T24] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2424.283556][ T24] cx231xx 3-1:0.1: Not found matching IAD interface [ 2424.444134][ T24] usb 3-1: USB disconnect, device number 37 [ 2424.817826][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2424.843692][T23964] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5982'. [ 2425.018472][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 2425.080426][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2425.092272][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2425.102780][ T24] usb 3-1: config 0 has no interface number 0 [ 2425.109193][ T24] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2425.120238][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 2425.226552][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2425.236195][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.244732][ T24] usb 3-1: Product: syz [ 2425.249243][ T24] usb 3-1: Manufacturer: syz [ 2425.254069][ T24] usb 3-1: SerialNumber: syz [ 2425.330188][ T24] usb 3-1: config 0 descriptor?? [ 2425.605306][ T24] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2425.615485][ T24] cx231xx 3-1:0.1: Not found matching IAD interface [ 2426.156250][T23988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5990'. [ 2426.166447][T23988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5990'. [ 2426.175900][T23988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5990'. [ 2426.185337][T23988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5990'. [ 2426.789090][T16668] usb 3-1: USB disconnect, device number 38 [ 2427.315239][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5996'. [ 2427.450538][T23995] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2427.479504][T23995] syzkaller0: entered promiscuous mode [ 2427.485244][T23995] syzkaller0: entered allmulticast mode [ 2428.316554][T24017] "syz.6.6002" (24017) uses obsolete ecb(arc4) skcipher [ 2429.003550][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6008'. [ 2429.013614][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6008'. [ 2429.036142][T24032] gretap0: entered promiscuous mode [ 2429.059305][T24033] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2429.071657][T24033] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2429.081885][T24033] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2429.091528][T24033] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2429.117954][T24032] gretap0: left promiscuous mode [ 2429.706441][T24038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6010'. [ 2430.413106][ T3931] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.523373][T24041] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2430.553840][T24041] syzkaller0: entered promiscuous mode [ 2430.559739][T24041] syzkaller0: entered allmulticast mode [ 2430.663825][ T3931] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.892473][ T3931] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.019988][ T3931] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.278435][ T3931] bridge_slave_1: left allmulticast mode [ 2431.284362][ T3931] bridge_slave_1: left promiscuous mode [ 2431.294581][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 2431.320721][ T3931] bridge_slave_0: left allmulticast mode [ 2431.327483][ T3931] bridge_slave_0: left promiscuous mode [ 2431.334234][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 2431.775271][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2431.822393][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2431.851436][ T3931] bond0 (unregistering): Released all slaves [ 2432.487844][T24060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6020'. [ 2432.497405][T24060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6020'. [ 2432.521375][T24060] gretap0: entered promiscuous mode [ 2432.689537][T24060] gretap0: left promiscuous mode [ 2432.795349][ T3931] hsr_slave_0: left promiscuous mode [ 2432.850875][ T3931] hsr_slave_1: left promiscuous mode [ 2432.864258][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2432.872073][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2432.935694][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2432.943752][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2433.052339][ T3931] veth1_macvtap: left promiscuous mode [ 2433.063005][ T3931] veth0_macvtap: left promiscuous mode [ 2433.070098][ T3931] veth1_vlan: left promiscuous mode [ 2433.075557][ T3931] veth0_vlan: left promiscuous mode [ 2433.894290][ T3931] team0 (unregistering): Port device team_slave_1 removed [ 2433.926182][ T3931] team0 (unregistering): Port device team_slave_0 removed [ 2434.008127][T22923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2434.045348][T22923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2434.150173][T22923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2434.165022][T22923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2434.178340][T22923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2435.037999][T24075] netlink: 'syz.5.6024': attribute type 1 has an invalid length. [ 2435.439464][T24084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6025'. [ 2435.449051][T24084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6025'. [ 2435.458459][T24084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6025'. [ 2435.467949][T24084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6025'. [ 2435.777619][T24069] chnl_net:caif_netlink_parms(): no params data found [ 2436.227719][T22923] Bluetooth: hci0: command tx timeout [ 2436.321763][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2436.329509][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2436.631774][T24093] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2436.664754][T24093] syzkaller0: entered promiscuous mode [ 2436.670622][T24093] syzkaller0: entered allmulticast mode [ 2436.831226][T24107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6033'. [ 2436.844497][T24069] bridge0: port 1(bridge_slave_0) entered blocking state [ 2436.858454][T24069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2436.866234][T24069] bridge_slave_0: entered allmulticast mode [ 2436.875951][T24069] bridge_slave_0: entered promiscuous mode [ 2437.033891][T24069] bridge0: port 2(bridge_slave_1) entered blocking state [ 2437.046144][T24069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2437.057933][T24069] bridge_slave_1: entered allmulticast mode [ 2437.067555][T24069] bridge_slave_1: entered promiscuous mode [ 2437.425241][T24069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2437.476055][T24069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2437.710666][T24069] team0: Port device team_slave_0 added [ 2437.756976][T24069] team0: Port device team_slave_1 added [ 2437.939088][T24069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2437.947550][T24069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2437.974255][T24069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2438.001480][T24069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2438.009058][T24069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2438.035950][T24069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2438.052804][T24121] netlink: 'syz.5.6038': attribute type 1 has an invalid length. [ 2438.206850][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6039'. [ 2438.216767][T24123] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6039'. [ 2438.305405][T22923] Bluetooth: hci0: command tx timeout [ 2438.352987][T24069] hsr_slave_0: entered promiscuous mode [ 2438.366147][T24069] hsr_slave_1: entered promiscuous mode [ 2438.375016][T24069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2438.383043][T24069] Cannot create hsr debugfs directory [ 2438.424742][T24125] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6040'. [ 2438.434179][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6040'. [ 2438.443605][T24125] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6040'. [ 2438.958941][T24129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6043'. [ 2438.969573][T24129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6043'. [ 2438.980032][T24129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6043'. [ 2438.989817][T24129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6043'. [ 2439.466146][T24140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6046'. [ 2439.989670][T24138] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2440.016023][T24138] syzkaller0: entered promiscuous mode [ 2440.026774][T24138] syzkaller0: entered allmulticast mode [ 2440.115678][T24069] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2440.181518][T24069] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2440.343384][T24069] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2440.377715][T22923] Bluetooth: hci0: command tx timeout [ 2440.494868][T24069] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2440.770661][T24155] netlink: 'syz.6.6050': attribute type 1 has an invalid length. [ 2441.540293][T24069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2441.731410][T24069] 8021q: adding VLAN 0 to HW filter on device team0 [ 2441.833113][T21332] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.840784][T21332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2441.928248][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.935843][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2442.247717][ T5855] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 2442.407719][ T5855] usb 7-1: device descriptor read/64, error -71 [ 2442.459364][T22923] Bluetooth: hci0: command tx timeout [ 2442.651559][ T5855] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 2442.819262][ T5855] usb 7-1: device descriptor read/64, error -71 [ 2442.932705][ T5855] usb usb7-port1: attempt power cycle [ 2443.235528][T24069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2443.319779][ T5855] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 2443.350236][ T5855] usb 7-1: device descriptor read/8, error -71 [ 2443.447715][T24188] syzkaller0: entered promiscuous mode [ 2443.453471][T24188] syzkaller0: entered allmulticast mode [ 2443.608894][ T5855] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 2443.660850][ T5855] usb 7-1: device descriptor read/8, error -71 [ 2443.829030][ T5855] usb usb7-port1: unable to enumerate USB device [ 2444.966613][T24218] __nla_validate_parse: 3 callbacks suppressed [ 2444.966693][T24218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6067'. [ 2445.379794][T24069] veth0_vlan: entered promiscuous mode [ 2445.465483][T24069] veth1_vlan: entered promiscuous mode [ 2445.754718][T24069] veth0_macvtap: entered promiscuous mode [ 2445.835237][T24069] veth1_macvtap: entered promiscuous mode [ 2446.023126][T24069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2446.098857][T24069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2446.175316][T24069] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2446.184764][T24069] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2446.195303][T24069] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2446.204492][T24069] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.464053][T24252] "syz.0.6078" (24252) uses obsolete ecb(arc4) skcipher [ 2448.322613][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 2448.519108][ T24] usb 1-1: device descriptor read/64, error -71 [ 2448.787849][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 2448.967871][ T24] usb 1-1: device descriptor read/64, error -71 [ 2449.079481][ T24] usb usb1-port1: attempt power cycle [ 2449.477107][T24280] syzkaller0: entered promiscuous mode [ 2449.483064][T24280] syzkaller0: entered allmulticast mode [ 2449.495524][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 2449.571356][ T24] usb 1-1: device descriptor read/8, error -71 [ 2449.951935][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 2449.979780][ T24] usb 1-1: device descriptor read/8, error -71 [ 2450.090607][ T24] usb usb1-port1: unable to enumerate USB device [ 2450.426578][T24303] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6095'. [ 2450.436404][T24303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2450.443927][T24303] IPv6: NLM_F_CREATE should be set when creating new route [ 2450.450498][T24301] ===================================================== [ 2450.458592][T24301] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 2450.465842][T24301] eth_type_trans+0x69d/0x9a0 [ 2450.470896][T24301] __dev_forward_skb2+0x4b1/0x950 [ 2450.476165][T24301] dev_forward_skb_nomtu+0x3b/0xe0 [ 2450.481680][T24301] __bpf_redirect+0x14d6/0x1760 [ 2450.486733][T24301] bpf_clone_redirect+0x366/0x530 [ 2450.492112][T24301] ___bpf_prog_run+0x1294/0xeba0 [ 2450.497356][T24301] __bpf_prog_run512+0xc5/0x100 [ 2450.502424][T24301] bpf_test_run+0x54a/0xd20 [ 2450.507117][T24301] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2450.512928][T24301] bpf_prog_test_run+0x5bf/0xa40 [ 2450.518228][T24301] __sys_bpf+0x6ca/0xe60 [ 2450.522666][T24301] __x64_sys_bpf+0xa4/0xf0 [ 2450.527544][T24301] x64_sys_call+0x2c3b/0x3db0 [ 2450.532466][T24301] do_syscall_64+0xd9/0x210 [ 2450.537164][T24301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2450.543409][T24301] [ 2450.545839][T24301] Uninit was created at: [ 2450.550489][T24301] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 2450.556593][T24301] kmalloc_reserve+0x13c/0x4b0 [ 2450.561737][T24301] pskb_expand_head+0x1fc/0x1610 [ 2450.566875][T24301] skb_ensure_writable+0x44e/0x510 [ 2450.572362][T24301] bpf_clone_redirect+0x1c1/0x530 [ 2450.577687][T24301] ___bpf_prog_run+0x1294/0xeba0 [ 2450.582827][T24301] __bpf_prog_run512+0xc5/0x100 [ 2450.588060][T24301] bpf_test_run+0x54a/0xd20 [ 2450.592755][T24301] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2450.598553][T24301] bpf_prog_test_run+0x5bf/0xa40 [ 2450.603702][T24301] __sys_bpf+0x6ca/0xe60 [ 2450.608281][T24301] __x64_sys_bpf+0xa4/0xf0 [ 2450.612886][T24301] x64_sys_call+0x2c3b/0x3db0 [ 2450.617953][T24301] do_syscall_64+0xd9/0x210 [ 2450.622647][T24301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2450.628889][T24301] [ 2450.631355][T24301] CPU: 0 UID: 0 PID: 24301 Comm: syz.6.6094 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 2450.643896][T24301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2450.654282][T24301] ===================================================== [ 2450.661496][T24301] Disabling lock debugging due to kernel taint [ 2450.667906][T24301] Kernel panic - not syncing: kmsan.panic set ... [ 2450.674566][T24301] CPU: 0 UID: 0 PID: 24301 Comm: syz.6.6094 Tainted: G B 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 2450.688557][T24301] Tainted: [B]=BAD_PAGE [ 2450.692845][T24301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2450.703076][T24301] Call Trace: [ 2450.706487][T24301] [ 2450.709550][T24301] __dump_stack+0x26/0x30 [ 2450.714107][T24301] dump_stack_lvl+0x53/0x270 [ 2450.718933][T24301] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2450.725013][T24301] dump_stack+0x1e/0x25 [ 2450.729382][T24301] panic+0x4bd/0xd50 [ 2450.733541][T24301] kmsan_report+0x31c/0x320 [ 2450.738274][T24301] ? bpf_prog_test_run+0x5bf/0xa40 [ 2450.743602][T24301] ? __msan_warning+0x1b/0x30 [ 2450.748517][T24301] ? eth_type_trans+0x69d/0x9a0 [ 2450.753579][T24301] ? __dev_forward_skb2+0x4b1/0x950 [ 2450.759002][T24301] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 2450.764511][T24301] ? __bpf_redirect+0x14d6/0x1760 [ 2450.769718][T24301] ? bpf_clone_redirect+0x366/0x530 [ 2450.775111][T24301] ? ___bpf_prog_run+0x1294/0xeba0 [ 2450.780432][T24301] ? __bpf_prog_run512+0xc5/0x100 [ 2450.785661][T24301] ? bpf_test_run+0x54a/0xd20 [ 2450.790520][T24301] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2450.796348][T24301] ? bpf_prog_test_run+0x5bf/0xa40 [ 2450.801666][T24301] ? __sys_bpf+0x6ca/0xe60 [ 2450.806260][T24301] ? __x64_sys_bpf+0xa4/0xf0 [ 2450.811022][T24301] ? x64_sys_call+0x2c3b/0x3db0 [ 2450.816098][T24301] ? do_syscall_64+0xd9/0x210 [ 2450.820961][T24301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2450.827231][T24301] ? kmem_cache_charge+0x9a1/0x9d0 [ 2450.832532][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.837876][T24301] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2450.843935][T24301] ? eth_get_headlen+0x161/0x1e0 [ 2450.849071][T24301] ? filter_irq_stacks+0x49/0x190 [ 2450.854287][T24301] ? stack_depot_save_flags+0x35/0x7b0 [ 2450.859955][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.865295][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.870639][T24301] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2450.877203][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.882561][T24301] __msan_warning+0x1b/0x30 [ 2450.887270][T24301] eth_type_trans+0x69d/0x9a0 [ 2450.892182][T24301] __dev_forward_skb2+0x4b1/0x950 [ 2450.897430][T24301] ? pskb_expand_head+0x1268/0x1610 [ 2450.902841][T24301] dev_forward_skb_nomtu+0x3b/0xe0 [ 2450.908189][T24301] __bpf_redirect+0x14d6/0x1760 [ 2450.913230][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.918585][T24301] bpf_clone_redirect+0x366/0x530 [ 2450.923823][T24301] ___bpf_prog_run+0x1294/0xeba0 [ 2450.929005][T24301] __bpf_prog_run512+0xc5/0x100 [ 2450.934079][T24301] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2450.940645][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.945985][T24301] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2450.952029][T24301] ? __local_bh_enable_ip+0x11/0xb0 [ 2450.957413][T24301] ? filter_irq_stacks+0x49/0x190 [ 2450.962626][T24301] ? stack_depot_save_flags+0x35/0x7b0 [ 2450.968301][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.973641][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.978990][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.984335][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2450.989674][T24301] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2450.996228][T24301] ? kmsan_get_metadata+0x150/0x160 [ 2451.001654][T24301] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2451.007697][T24301] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2451.013369][T24301] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2451.019022][T24301] bpf_test_run+0x54a/0xd20 [ 2451.023703][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2451.029047][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2451.034394][T24301] ? kmsan_get_metadata+0xfb/0x160 [ 2451.039733][T24301] ? bpf_test_run+0x39e/0xd20 [ 2451.044628][T24301] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2451.050681][T24301] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2451.056376][T24301] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2451.062375][T24301] bpf_prog_test_run+0x5bf/0xa40 [ 2451.067530][T24301] __sys_bpf+0x6ca/0xe60 [ 2451.072002][T24301] __x64_sys_bpf+0xa4/0xf0 [ 2451.076597][T24301] x64_sys_call+0x2c3b/0x3db0 [ 2451.081507][T24301] do_syscall_64+0xd9/0x210 [ 2451.086201][T24301] ? irqentry_exit+0x16/0x60 [ 2451.090960][T24301] ? clear_bhb_loop+0x40/0x90 [ 2451.095835][T24301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.101945][T24301] RIP: 0033:0x7f68ff38e929 [ 2451.106512][T24301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2451.126330][T24301] RSP: 002b:00007f690015a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2451.134952][T24301] RAX: ffffffffffffffda RBX: 00007f68ff5b5fa0 RCX: 00007f68ff38e929 [ 2451.143092][T24301] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 2451.151217][T24301] RBP: 00007f68ff410b39 R08: 0000000000000000 R09: 0000000000000000 [ 2451.159339][T24301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2451.167453][T24301] R13: 0000000000000000 R14: 00007f68ff5b5fa0 R15: 00007fffa4a1d068 [ 2451.175612][T24301] [ 2451.179024][T24301] Kernel Offset: disabled [ 2451.183421][T24301] Rebooting in 86400 seconds..