last executing test programs: 15m28.065855593s ago: executing program 4 (id=319): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 15m27.616258884s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x3c, 0x3e9, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x1, 0x0, r0, 0x6, 0x8, 0x7, 0xfffffbff, 0x0, 0x7, 0x7f}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x44011) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(0xffffffffffffffff) 15m26.808142841s ago: executing program 4 (id=326): r0 = socket(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r5, r5, 0x0, 0x40008) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000300)=""/110) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000000)={0x48}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x400003, 0x7}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000000001800005"], 0x26}}, 0x0) 15m22.310432697s ago: executing program 4 (id=336): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 15m22.000549303s ago: executing program 4 (id=338): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007f00)=@newtfilter={0x25d0, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x25a0, 0x2, [@TCA_CGROUP_POLICE={0x458, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x47a4, 0x8, 0x6, 0x9, 0xd, {0x2b, 0x1, 0x4, 0x6, 0xaf, 0x68f2}, {0xcd, 0x2, 0xad, 0x4e80, 0xb5, 0x8f}, 0xabf8, 0x8, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x697c, 0x8, 0x5e18aa01, 0x48fca6a, 0x2, 0xffff, 0x7, 0x1, 0x4, 0xb8b, 0x0, 0xfffff001, 0x7, 0x1fc000, 0x470, 0x3, 0x4, 0x0, 0x5, 0x5, 0xf, 0x20c, 0xbefd, 0x5, 0x3, 0x1, 0x5, 0x66, 0x101, 0x3, 0xc336, 0x9, 0x1, 0x8, 0x80, 0x2, 0x50000, 0xffffffff, 0x5, 0xffff0000, 0x3, 0x400, 0x9, 0x7ff, 0xc032, 0x3c, 0x7, 0x6f1, 0x1, 0x1ff, 0x6, 0x8, 0x29f, 0x40, 0x9, 0x3, 0x0, 0x4, 0x40, 0x400, 0x4, 0x63, 0x7ff, 0x4, 0x7, 0x3e1, 0x500, 0x0, 0xf60, 0x6, 0xfff, 0x0, 0x200, 0x4, 0x6, 0x7ff, 0x1, 0x5, 0x226, 0x9, 0x4, 0x7d273c16, 0x1, 0x0, 0x1, 0x9, 0x8, 0x3ff, 0x100, 0x0, 0x8, 0x4, 0x2, 0x7, 0xfffffff9, 0xff, 0x2, 0x1, 0x10001, 0xdaf, 0x4, 0x5, 0x8, 0xebcd, 0xb, 0x1, 0x85c, 0x7ff, 0x2636, 0xfd, 0x4, 0x5, 0x16, 0x3ab8, 0x5, 0xf, 0x3, 0x5, 0x5, 0x1, 0x1, 0x4, 0x6, 0x9, 0x8, 0x2, 0x7f, 0x0, 0xc8, 0x5, 0x10, 0x6, 0x3, 0xa305, 0x7, 0x3ff, 0x9, 0x0, 0x6, 0x7, 0x4, 0x3a, 0x8, 0x5, 0x6, 0x3, 0x2, 0x73d17d18, 0x2, 0x7, 0x5, 0x3, 0x2, 0x5, 0x7, 0xb7, 0xe, 0x10001, 0x2, 0xf, 0x4, 0x14000, 0x5, 0x10000, 0x0, 0x0, 0xfffffeff, 0x4, 0xe483, 0x6, 0x3, 0x0, 0x10001, 0x3a040, 0x8, 0x8001, 0x9, 0x7fff, 0x8, 0x9, 0x6a1, 0x8c48, 0x100, 0x0, 0x1, 0x6, 0xfd, 0x3, 0x800, 0x3, 0x4921, 0x8, 0x1, 0x4, 0xf, 0x9, 0x10000, 0x80000000, 0x401, 0x1, 0x6, 0xaf42, 0x5, 0x10001, 0x4, 0xbf9a, 0x3, 0x0, 0x9, 0x2, 0x80000001, 0x0, 0x3, 0x40, 0x6, 0x90, 0x5, 0xf, 0xff, 0x812, 0x2, 0xffff, 0x7ff, 0x5, 0xea3c, 0x9, 0xfffffff8, 0x6, 0x6, 0x3, 0x3, 0x4b1, 0xfffffff5, 0x7, 0x7, 0x2, 0x6, 0x9, 0x54327fa3, 0x5, 0x800, 0x1, 0x9, 0x6, 0x10001, 0x1, 0x4e51, 0x1, 0x800, 0x0, 0x2, 0xfffffffe, 0x7f, 0xfffffffe, 0xfffffff7, 0x2]}]}, @TCA_CGROUP_EMATCHES={0x314, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2f8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x97}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x78, 0x2, 0x0, 0x0, {{0xb, 0x4, 0xfe0e}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7, 0x1}, {0xda46, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa000, 0x80, 0x3}, {0x8001, 0x3, 0x1}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8b27ae7f6403ef", @TCF_META_TYPE_VAR="cba1c10b48cc", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="9ea8a8c5f47616", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="632ae7cf00cc11", @TCF_META_TYPE_VAR="791a", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="26ef824e", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e02dbe15f1cb4d41e4", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x8001, 0x0, 0x7fff}, "deb844d806b9223827645c0dd503fda19505f29a88478a2823070778149051ca5d1691c483742a87366cd3905f2bdd3180207751c3c7fb1c8c8a616ff4096fde0bb99f9104d0b99cad199c43712334cc9cf3ce8f63f9c6735f8b880bd169feea14d1dce11dbc457889199558a880000fda11b3ae1a54a0bd86618e873286fe3352c3e8faaa709673"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x9}, {0x1000, 0x4a6, 0xa, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0xe8e}, {0xffffffffffffffff, 0x3, 0x1}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="de212892", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f4e2913fbb694f"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0xfff9}, {0x9, 0x2, 0x5, 0x5}}}, @TCF_EM_CONTAINER={0x108, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x7}, "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"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x80}, {0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xbff, 0x9, 0xfa71}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}, @TCA_CGROUP_ACT={0x598, 0x1, [@m_mpls={0xcc, 0x11, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x49}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9200}, @TCA_MPLS_LABEL={0x8, 0x5, 0x70f4d}, @TCA_MPLS_LABEL={0x8, 0x5, 0xde2e9}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4f225}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0xa00}]}, {0x60, 0x6, "842eec4a21d76bcc767ca5f0be98c3e9528def4685700504e06ef29f1d7ef41c62393f21fe5d068fd45a6c725ae9efc4d1cbba78b61b85aa0621b2f2b1926e3f9ceb63b6887cb97b847160b3e47cf5afbb5b2516c5d4955097cbc33c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x14c, 0x1c, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x25, 0x0, 0x909e, 0x4}, 0x7}}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x168, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x5, 0x0, 0x1, 0x1}}]}, {0x101, 0x6, "c34eba2315ff05aba3f3d84ff075bb063f3c5a2aff78c67a85ef988b89cafd2f88aca1e981f897904facc266bab86df628f12a0a052cbea6d1c2183eac843ff364e82deeee03ca4b30a69768e4a882c6b0eeb9f7becbe5fe81973e98b7e705a1ca8845ab9ab49c33bcec15f2ed10a31b649cd2b17680fdda206f6c058332e140e39962b17e59902f035e6d2cd8a78b96710b9fffc51ecd5538ca8a8f8d8ae722a5b7b81db104fa844b0c3e6ddcd531ffe61c9402f0a0753bded36491a9000a731db7ee218f9877f38888dc2fb243baa13d2d834b14d611f5a899fce293fc7e8a39dbb92031adb2a0d0f5246d126a77296dae409df1272cdc1450c12b4d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x130, 0x18, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfffffff1, 0x3, 0x9, 0x9}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x20000000, 0x0, 0x4}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xedfb, 0x7, 0x20000000, 0x6f, 0xff}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf53, 0x1, 0x3, 0x7, 0xad}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x10000000, 0x8, 0xffffffff}, 0x1d}}]}, {0x77, 0x6, "d1182fdbbdf55496fa351aee7a00e741f9fb556fb6896762ba10ecf3f0dd2583abdb67c443a7e1eba7169e05e4e387efc021d59baf93ccf1bd5a3f2a3d8b4640121897f7314d0983248954d3df0a8469ec9b27cd36f395b8f700fe55e0ac82a03d51cba39094f3ed5973e236f7aa077f3fd314"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xe4, 0x1b, 0x0, 0x0, {{0xa}, {0x4}, {0xb6, 0x6, "09324bbc647d6fe6b88bfd8e1cc74422673dd6fe6fef42d3b02d94ee0e529ec0a02339485a148edcda82f638e8c66a2ed51bfdbd369723caadca78e52a95287ce3cdc54b01da1fcf03dcf6eabde61d69fdb352ec88939d7690651b1f7c323133695fc6c4ef857304f8e81ce4082e7df0eb96409f37aa7f63b02f277c9b549c8a85a3f93202636dc1ca7942074862349ce6e2c75194b4b4b3ee53b6881f5d2a1dd4e5b5a102114c909ec099eca36eb0b6e473"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_ACT={0x5c, 0x1, [@m_mpls={0x58, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x892f}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x1b, 0x6, "2e177e7554e22ee747e039d27df005913a4b8b64b3862d"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x1520, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1198, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x2f98}, {0x9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xfffc, 0x2, 0xfffa}, {0x0, 0x5, 0x1, "2ea06653a9"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8000, 0x1, 0x9}, {0x797cd9af, 0x5, 0xa8, 0x2, 0x7, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x68, 0x0, 0x40}, "40f872c2da3439adb4b3e7af98b98a5f78ecc2455879eb0f06b9ca7e9f0f8f4aa66c074eb6bd23ea2f8f2aa55e8e5245a5a80f8ed2916fb46319424b2290ba052c2a7b202b358faef310680b1d7a9bef8a20601faa0e114e7ba4afbc8804c4f11e8660e83f47c981230c828e55ca5626edf602c381dd050ba076e20ea0c4a11541eb5f1989617947be8d5be34f5af97453b56685775a51ae868e1bc74dfab36d90eff115bdcf505dd2e21ebc8d9bb8ece83caaa6b0a85d8319b4c3b616ed4b2ea8d7397ef3fcbc0107709ec1befb95900aa34ed30ef0e2de0313f9eefae1b57a49050ea1cae5f44244ff2190d3dfb09a2b662bb95a720e84798112182204f9201ab038f913ebe2331dc8390413a18f440a0a7ce555ce762b535e4be3f07de2b4ee7a69dee77be84dad999e4cb3fd56a37588b8bec8f1496010fb7e1b19442c199915475456c8f9e17615307163a1050fe75a12c20065080c9ef8a1a256a9df4e76b71c7300d6252ee7e2bb256c145696bf7861a58875bce7d9abbf6db78302002e1f046a421ed08cfbc2b2a50253522c92e7785571ca3efab581975b067c0900a4ac7dc28c948a39f9c4a838d3b31cabb1b1ea1577021c5e7071f5156286f4c1e0591fc70b980f8b0b14c6ab7da938ffa5fbf76c221fbd8c26539c2e0d69d665cbf9f22d40eeb125f8ef42249e8b7bbaae78a574f47466ead76def46b859abcec89fe5a0ad7ec5fe58aa23fb6b6890ec516a2644ca7eb2b49a3407d1e97484b6f7897be2428fd85722deec6bcef184e07a2d10b2ec47f896da88b8ca0efa7334afd2b80df867b52a7117d1f17578c5f0ae24787c5216bf60a81a73c941b87046075a1dedf73913bcc086a83a5ce108573b39fc75ecebe52be7b1615a34fc5efd03c7c71863ab5fec7603511efb09c9a7a83dadd6fcb2d234a53d0ed535bc587e560d08a48b0079310a1d8cb5d6a16c932104cc27d09ee306dda880303d97a43a31119a2a5d4084406af2004ae0b9ace2b7e31ca1a510a3af02ed2266701ebf79ea041481ce9c667c1a8237ec8907dd2a1a327e6a88919c37b413b7901f52f90ba99f8e634344d139cdf62a7ce27146940a734695480a02dfb21c613ae9b79638c48ae81941877fb92439f5c6cc7e058e5a465c89d3256ddb6b1bcce64d846ccee688cedb98e0893c96fc188ba9be949e9bda8b127f07ec2eab832ff3f66e99dfa0e71e8c67354add28e21e876bd0fd7b50843f72bb6e65661b0b6999b83e95f6d2a418e4f0d53992c586fe14588b9fd485bb859009ad0c70e7f51e6a62282363bdf092049ff6944949d5af71763bcb40d869d00809930d172aacc0e35eb5f0e24a3d78ccfef5cccae898cded44932e64b392b7229f1a275deb2a5fb7cee2b9db02bc4d5fbf759c9e72b49225b9c24a5161635a854b0c961cfdb2dd3d68930882d698f40bff12cb95fc5c4c8a433bfdaabd94b505655fa341aac30c8c02d73226ee2a3b512d58960ef378c7dee322b63b34bbf60a39fe14a60dc067032fa3e4d1884d739d77854b66cbad3f6b72c83e1a468bfcc34ffeca61aa8543d1e5558d5d3e817b3890440544d9cf7f9b5b865bea49c72ce90a19e9e41130b308fcef86f505cb67820294c587450777378b3d1f0f24e357042be86b131b7d500c0fcbc04ea63dc87ef8bed77d88b8e794e32718d287366ce41b5f563d64bd9ff02ae781d39bf656c7421c50cd9ed3e61dc4660c2b1b47b265b7e421b37c49f302e9a390312b7baa1aceff069e613c485bc0978a6218af92491292aa42dc8089c8e11241a15f6907e686c53da13a8967b3dfd5262987a2c0c5a9e218a93d7d8d8921e8762ebc58bf1245e99f0d34ab0eec46afb9ea0a0bcbe061d00798fc16df37fca29ba140493dc5a69f7a2e2844adf00a0dcdff0306b7fb2f14bc0079823d5fbd6bd4e8bad4ef3f0821379858d40225432be998d18416c3439324b8603a096952f2bf207531e16d708ad30d1e07f67f87017ee03b61553ba8707030a212eec4bcf70b0598f2beefe4b525020f3408f9cba46a5b29314f4785e4ec8301b7abdd037c06b9b9a5c2d31a653c7f1f82440bc02762d158db681235a7836bd9076c9e5c595ddfd0332ba23af177e63a7a5d4b8d887716ecb00bb3c8da70ed9380a6aa83e4fa4753abb33240a6dcf3188cf10003ad521a0a2f71117a93dd684dfa6cc569cfb77167ff6ebebb76ad00410b6ad21c504c2ac1737b5f2c6d478b389362dcceff8abba6576a8b56fe6f794c8e3b99fa47f4fd049bcf89d13dbc78e006811683138fa397f712b70efaa9b95dc50c819aba16927d6fd9549fab62e25b646105fc7652d8c20dd6441cd9a217312818ed8b092ef3dc6b3b1a6b8431e1ce850a26226bd2062dafffccc0f3d63bdee27d608dfa12519194b60eedaf17cf885306ee4f5802a8dda46ae08c8b28c653805307645e674f80e58ecced034a4eb0d28b40fa461d679cbf5d6ba6fb2ec873503ff8db7b6981c32738578ba60492638a876d164ed71d53b42e03719f57f8a57a1489d19bb6827dbf8fcf9196e340b1b87c1ce78480ed1061f7b42dca607b3b3317302c76fbd3b8196426a2dc292a4a350d5375ad8177a56c8e495e320ca8c880ef23745962a36b39a17d1e00414cf9d6561dab3be953660c81554e0fdef60148ba61ebaa3d174657bdbc9927a3e737ea4f2e6911e9d2ea3c811f3d3fb9978d6950a7b5b6605ce38eee381523719e2e1060159027aa6e3c1931e2bae6b35a257c761533f06bd50de5ab2ee17df350be1b413bcc61e3cc2580d4be2f25476fa48b78491939f0d32df368ae74b04489005deaa6f9237fdc816252ff57c1116855a7521241792758c9f2fa05db162cd1da6115fcefe780017482161c0db0a814c76c84521181a9014fa3fcb4e85e2358b051581806d85570283f93a934ce1602c3f5c33c444956d8c879732c5cb0363a83a8d2738a8a55cb07e4bc9e1819c363a5a7819bdcecc36e28b1205623ce1f9f286f2a72076fa0b54e1f6be123faf459d8ebd65acafd55f482d81dfbe92b772bf06e0e2330a21ba416b51678324727e5f2a1bc6c7eb63bab46669bad8d84caf12af0451fa73f7107b44d1a4436859dbe2d6aaa5a5d8424af090ba2021f765e9360a792fa28c39302cd1f9cb9288a365016cb9cdcf5e2f3603bffd473699208a2d3059074c06c11b3e00438848816c875b1184a75af27175b48bc7dbe8488a2e0ed5fcd747e147f5508c9bfbbf9b2520ab457c1a2f6023812962a9004cc25803167ce5bd3aa132987a5ba838940102476d90358bc766d28d655b70c81ad7f1cc6d44e35be8361b1f39826e419278b79a98bc3a0aeeff40b18f23f3c48451cac26ee2c1598e9b409172357b592f67bc7c51a3df9fc0ebef11d75deeefd78063aa5115508bedf4beb6655798c4bc64aa6b35f089f3a992b76d4be7bdcb9545b71711b00f53119002ee017d4affadf992d92711a13ba780ae3dd4155cb384577d197958487559646d78bbc8b61f011fe6c60dc1a087da466dada5a8adb36e0cb716d3b65f906eddfb5de9dbc1f12b3222a960c24ad452a20c8f441cf3c4da7f9b5f786122eda9d5a965374799f37a537e2c85c64750065e9e98d3bb3f7a038ed021025f5928d04dace5e926be8c02a139424bcdf18750c9be7577b0d68f83a849a25d3c3a952dff64aa938a8b66442bee7716e26617737abba7be5932cc030545c530aa0bf909570f6809a095c4af9ed317493727e261993b558ba1f0c9df119d477167255ffd4632e1a5d088823cb8f09fe9bd5914c083523b3dfc9a6e9fcfd842a5b317c29c4eef67eb97b1af4d317bf16199c9bd21ddd6e5791382ad3c9ff3855019c8d1a2918bf32fcad37ee323ad1aa836cde5153ec3a5a63d9864a1c89295dceea3e3920c00af08f71020d7d08b1640ff7d178bd288bfb44386aac977e145586524355859c287c425b1372d245b8e261306c8b5fc1099f5f167bbfae04cb436fee5e9ec4f8ecb7add76c1f2a6f3e19dcc2d28870f73a0a5e67df525333b6682a4d54d8e11e4ec85bb391f00f03f94c3d1e395979f6519266b5663bece59fd5d13b9bdf8bb700c244a44e2573825e10abcc43b692ce828dab2b0d286f791f9842ef462939431a5b133ea94cae1590ad7a6f2ecc6dfc3a84d16a8935a2e756de4cd19315adb928bcdac4e2ce7475a60fedfce06b1ed007e9bdf6c35f11803eae432e35858727f491ae46ca214f90c45392fb989bd91b363410eaaab0f56de0e3ff8b2abd9c3e5290d4f0244d94c33c88656d24d7649695c86b6b2a5769ee7acc640529eb78ec09a3cff3334945c511856f990cbc5f697969d20d9459eaa4dc4e66e88503d1374dc52ac1078dbd1a64a75e786b03049ed34741880e4deb9cdd797ed6c9bf6825d5d7c77d7a92757dcac28cd8937ff9aa128f97970139eac4fa7f5e6cf9d6b3104ac50b05ed0c72cfadfb39473c00c975443c753c448612769384063e5a4790612c15f893ec383c049edb785a6453c4209b95687b36e3d0483b647124c10ec2b7a6722c88ceccf48959c405ad49cbc067350d4f06851322d1c9b1b0ad8c76db1450a2f21a40bc4d42f4d221c1554f183c80afb0bae4bb3a2307dac5e7fa6cff0735943d990d753ffe6b7bb891d732f3c0f232597bd9214a19ed98bae197e9c65b154e438560fe6e2905936800d747c8e6439bdbfac7fc487e1a1321fcb436d51f9b76160afbc693bc4e5fba443ad8ef0c92b09fb10b2317e67833919cb18cc30f8f62b844968b559c01ec71504e86e8f3201a103129111089d25014d02d181c212654ebab0ad37fa3a65bafcbf75898bcafaadc87c59b103e131de998e500f9b62cf214e25b6ff5508f7046d8c7ca3fcb6b8a7cd7e6406bf36cc928cd33457112e8f649fa6c45e6ca957983aa7d3b0513490c2893c3bbb1935f2affa18dd482c12a7ab29d2bf89681e1757df4631e445da2fbcd0043af366cdb37c167ea8e92339793ed5a0792d1cbd18249f4b367693a8c07ffc7cfb05d96dcb84c4ba684ec1b7dccf63c494d96f128db949b4db6b9ce45d34407e5717eadd748c29e855e6ebd77f1e2a51b168d0cd1ad0eba988d510c54ac61c1baf134739f4eeae502d717419d66a0c4ffa0e6536fdea1b674162259d7fbcee39b007acf6865f19b3cc672f296f00d437b6fd7210f42ea218c8c82968bf9627f04f5785bf10c4435cec990e582da6be41582b675e57195559bea9eccfd6e7b2230470bd2ca0e46109830f015a33208f6695bbd35b6f9a1bb4d2cef84a2808e4a345709e04af3e57c80304b50d9551215a0358b5f8f99713ca2564ac7fd9fb6f6233e6f2a05e8b3d83cf48071729a8fba3880b4d547549225bbafaf2ec9000f233dd8db0c2f42a70a03761f0facb98fcd93c439b65ae265951767ec2229ccd27c4f6c1e60a2d988201128ca0a7037ed85c432b3727ff80a17ed9e9bef6c28acc661563995e797950827989587a091456f37faef9fef57dfc218f5980a74f6e279e549b9d4eb2ac0399f3b7238a71b802ee1092a8063d166c9e205adb58d72ebd540c4edf134313e9f5761ac1d0ca2045d4698b1c7bbac517e0ebdd52295218c77072c692ea8770e46e15ff92d2fb6b211ae85e30cbf3c5f94968123112fb36432087ae49086cbcacfd4694d16d98e2b991eb3fbb03cfabfdcd519edfbfab5ddd7b1b0749e7c7931573c9b0c77b911821265198ffe9a4cc07ba37bc0ebfcef7175faa473219f7022c56b2dc1982512"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x5}, {0x5, 0x8, 0xa0, 0x7}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x80, 0x7, 0x2}, {{0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0xfff}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x4}, "dfa1df9bf4d270ec575c56ffd9103b0e2f8e960fedbc802f8da565ff6fd6669af3596726591011cecd41db680ae53434b25971ec590de05c59ab9391631e04e5dbd1b8da2a1a412b6ff15bb16418b35c2fd37304ed646a2f6e55915862bf2eebed8914a5e73253962549b56127b652d18e3ce40ff3e889f909e1bfc6f80795f871b1e9d1e6e33c661ba456ae9a33927dc08b333f524dbe3b8fbf8fa07edb1e6dedd9594bebaebed1baed32263ae1a9e78298e5dcdebb38a0d635ba637aeff872e89852d237fad23e5c8ac3402f4d5436795d2562b856354b126ec2300e9210dc9ab93e1bfba8f568aa48ed3074696bb0cbd5d1c26c03cc"}}]}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x4, 0x0, 0x0, {{0x80, 0x3, 0x9}, {0x80000000, 0x2, 0x101, 0x1ff}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x80}, {0x1, 0x9, 0x1d, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x24d}, {0x4e207ae4, 0x0, 0x2, 0x7, 0xa, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x0, 0x3, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x400, 0x4, 0x4282}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xb, 0x2}, {0x0, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="57d81982"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2}, {0x55, 0x7, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x9}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x4}, {0xdb56, 0x7fff, 0x6, 0x4, 0x3, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x1}, {0xa181, 0x6, 0x0, "7bbca8bd5123"}}}, @TCF_EM_IPT={0x50, 0x2, 0x0, 0x0, {{0x72a, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2450, 0x8, 0x9}, {0x1, 0x2, 0x1}}}, @TCF_EM_IPT={0x6c, 0x1, 0x0, 0x0, {{0x25b, 0x9, 0x8a26}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x3c, 0x5, "7a1f81b02321b9783f9416a84cb59ca70ba5afff9b2573cabab0c0d22a5da25865ee74c367afd7b81ca70a88440114e850130b3147a87cec"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x200, 0x3, 0x3}, {0x2, 0x80000000, 0xff, 0x10001}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1df7, 0x8, 0x7}, {0xffffffffffffffff, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x1}, {0x100, 0xc, 0x6, 0x0, 0x1, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "13ac557beec42cad167c6afbe9509f4fc1d7f53fadddbc9c32e4acb547485ddf70df0b6154bbfa34fcec54fe4c20e44a6c295943de3710be2aad910a3d63fe311111e789d60ec07f82f5ac3644f891fcc5e49c0c783d51a0876624dd59fb54a3d1193bfa65650c57a5ba005f74a8250eed8f118c4c6c5a97294b65144550afc6eb708809583c816b7d7a530293aa62920f69421fdde27ea283df69b9d934b2a659b932046c1e3051195ab7eff77010dfe84c0b57f8574e07b08162fe7a53395f5fac4af6e8c1868a2cc31954ce880ef82ddf744f0fa9"}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_DATA={0xc, 0x5, "f3c44bac72d8ce97"}]}}]}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x64, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "6d9804c9637a27a57c45f195cc99778de07c42597eb831f7fac686e39b564591d05d3cf951dd31b145e0dec3f554095c3056e3356327b08cee8620ea8a517ba07e5b751c290151e54493b66f909e4dcd4a68af43dfcb1351"}}]}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_CGROUP_EMATCHES={0x2d0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x170, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0x8000, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0xc1e7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5}, {0x5f, 0x9}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="ef95135b", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="508ff78bc2a0d1"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="170596a4126c125029", @TCF_META_TYPE_VAR="72edb1"]}]}}, @TCF_EM_META={0xd4, 0x3, 0x0, 0x0, {{0x1ff, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="f8", @TCF_META_TYPE_VAR="92c5350ab9dca538"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x9, 0x1}, {0xff7f, 0x7c}}}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='s', @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c0", @TCF_META_TYPE_VAR="9ff2", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="67c78a", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="1a712fcc3ecda08e", @TCF_META_TYPE_VAR="f4c8", @TCF_META_TYPE_VAR="65c1", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d8", @TCF_META_TYPE_VAR="aeca"]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="a7cb41", @TCF_META_TYPE_VAR='\r\"']}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="e6dbc125c782f0cf", @TCF_META_TYPE_VAR="e9170d96600cc0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7}, {0x5, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="cc9db1d9aa7326", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="13a4", @TCF_META_TYPE_VAR="7f04f14598", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd8ec, 0x1, 0x2}, {0x6, 0xe}}}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x120, 0x3, 0x0, 0x0, {{0x800, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x79, 0x5, "46a7dde6f6b6c45a5e748d2f040466317b381f00b8571a656ee1dcac27fa93940a8759342857dac2d2ff47615707bb039cb542d15d650720867b5b3dd353ad14d4614fce6f78df5502e289c42680bad9ff844d8ac2dfdad55cc9a584bb7eef08dd56680ac8df41173851f5b349e189236b6cebc302"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x8d, 0x5, "071b609922f06416db20e19dc59db8cbcfe6c8b11f7b9bd7369017ef66fc5d852fabf1f267cba07a10b06b1b0500716fcc9b288dc20c72dc652aed94cac41330aaa8810150c7b550a98f9caf2e15f673109af81997863befcdb05edefe65aeed489873b60ebe3a75b30fa27fbb324c511cc21c50de57107252af473fa8e9d2a5f4835a26d3689a9a84"}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x25d0}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 15m20.973119797s ago: executing program 4 (id=339): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x11, &(0x7f0000000000)="8b480485ba1db7113174de71d883b3b0f3") sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000800)={'sit0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x4102}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000000)={0x0}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) 15m5.093298194s ago: executing program 32 (id=339): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x11, &(0x7f0000000000)="8b480485ba1db7113174de71d883b3b0f3") sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000800)={'sit0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x4102}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000000)={0x0}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) 14m45.895502748s ago: executing program 3 (id=393): mkdir(&(0x7f0000000000)='./file1\x00', 0x74) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) times(&(0x7f0000000180)) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) pread64(r0, &(0x7f0000033240)=""/102389, 0x18ff5, 0x41e) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'lo\x00'}) 14m40.729118171s ago: executing program 3 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000080000000000030926ecff9c6645225a2609100799e773ca9fece00a0db94485e7f9febc0f0a083ab392cbcc2d645c844ba09b786f9687e8b748a19b2f008e820bf0094cab30edf691f32f8815d4f11e21422e42114624ca529476cf37f1d7d621c436b03f1c8c084f48dc3d03ecd337d7f22dba1cb25b68c06177abfb6aacf461023a619881d6d8e928723bd0dde2bdb95043afa43062286929129088b791e59952ffa5ee36f30c650b515e931fd75fb2661cf0337cb95d108c2f9f17ac5c31dd42ee1cf288fb3af0c"], 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES8=r3, @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000e40)={0x2020}, 0xffffffffffffff74) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x40008) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) 14m37.285025599s ago: executing program 3 (id=407): r0 = socket(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000300)=""/110) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x400003, 0x7}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000000001800005"], 0x26}}, 0x0) 14m30.942599755s ago: executing program 3 (id=414): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000000)="003e2e0037c4a0362e98ad0f0000", 0xe}, {&(0x7f0000000040)="b263414167e0c426a615fff2504e2d8b5a81bddd722309fe2444ee74a2f4f4", 0x1f}, {&(0x7f0000000100)="ca6cbd08f5e1e17e4056ba58a0c63f00abc1d1caf6", 0x15}], 0x4) 14m30.551282841s ago: executing program 3 (id=417): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xd94, 0xfffffffffffffff4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309acb9"]) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$dri(0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x39440, 0x0) readahead(r6, 0x0, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010700c14f0000000000001090224"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_io_uring_setup(0x5c2, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x3b6}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) 14m27.096314166s ago: executing program 3 (id=421): socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0xfffffffd) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x19, 0x0, 0x8, 0xff, 0x48020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff00"}) 14m11.938236384s ago: executing program 33 (id=421): socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0xfffffffd) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x19, 0x0, 0x8, 0xff, 0x48020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff00"}) 4m28.524571626s ago: executing program 5 (id=1633): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) 4m28.224111778s ago: executing program 5 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 4m25.928409702s ago: executing program 5 (id=1643): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 4m25.667916482s ago: executing program 5 (id=1646): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b0000000000060001"], 0x40}}, 0x20) 4m25.338788139s ago: executing program 5 (id=1650): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m21.060309801s ago: executing program 5 (id=1664): r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) shutdown(0xffffffffffffffff, 0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 4m5.368173774s ago: executing program 34 (id=1664): r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) shutdown(0xffffffffffffffff, 0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 22.339317573s ago: executing program 1 (id=2867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x1ac, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x140, 0x9, 0x0, 0x1, [@m_mpls={0x98, 0x1e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x61, 0x6, "38a86b2ea57c2ab9fc6990b590e2cf10b4525acddaa1a21554b3536689e103f92b2b35d2340847a99750261d33b226164f17bc0e5e17b66b648a19530fd437c23b32848120ccc8079c0d909366fa5c7c6e0772fffd9471a08bf86ffeeb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x3, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @empty, @multicast1, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 21.883563242s ago: executing program 1 (id=2872): r0 = syz_open_procfs(0x0, &(0x7f0000001000)='net/fib_trie\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000000000)=""/4096, 0x1000) 20.342204236s ago: executing program 1 (id=2879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 19.522395111s ago: executing program 1 (id=2883): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rename(0x0, 0x0) 19.216465015s ago: executing program 1 (id=2886): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.103344344s ago: executing program 1 (id=2887): bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback, 0xffffffffffffffff, 0x2b, 0x4004}, 0x20) close(0xffffffffffffffff) unshare(0x6a040000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r3, r1}, 0xc) 8.261562988s ago: executing program 0 (id=2942): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000400000004000000f961eeec473b2f1200795d06f9ef9d18cefa000000000300d3c943ac1b663d3bd3277ef2506cb96000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) msgget$private(0x0, 0x100) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6.976465308s ago: executing program 0 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, 0x0, r2, 0x0, 0x2, 0x9) 6.858147935s ago: executing program 0 (id=2950): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) open$dir(&(0x7f00000003c0)='./file0\x00', 0x8000, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_SPLICE={0x1e, 0x15, 0x0, @fd_index=0x4, 0x3, {}, 0x3ff, 0x1, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 6.276765573s ago: executing program 7 (id=2952): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x5f, 0x6, 0x7, 0x4, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x41}, 0x78c8, 0x10, 0x4, 0x8}}) 5.604369966s ago: executing program 7 (id=2953): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3, 0x1000000}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18) 5.548278898s ago: executing program 0 (id=2954): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x36}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 5.459884822s ago: executing program 0 (id=2956): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4.675648878s ago: executing program 6 (id=2958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040040) 4.624920884s ago: executing program 7 (id=2959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffa, 0x2, 0xc, 0x4, 0x9, 0x8e, 0xffffffff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.503768226s ago: executing program 2 (id=2960): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1, 0x0, 0x1}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9cb]}, 0x8) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.436664611s ago: executing program 6 (id=2961): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114000000010600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 4.200498838s ago: executing program 6 (id=2962): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x5f, 0x6, 0x7, 0x4, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x41}, 0x78c8, 0x10, 0x4, 0x8}}) 3.979973512s ago: executing program 6 (id=2963): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) pipe(&(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 3.843914585s ago: executing program 6 (id=2964): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) 3.644411658s ago: executing program 7 (id=2965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca300000000000024030000c0feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000030000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x498, 0x0, &(0x7f0000000340), &(0x7f0000000040)) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) open$dir(0x0, 0x200200, 0x15) 3.555992752s ago: executing program 6 (id=2966): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x67, 0x1000, 0x10, 0x100, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5a3b, 0x1}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.500291324s ago: executing program 2 (id=2967): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000400000004000000f961eeec473b2f1200795d06f9ef9d18cefa000000000300d3c943ac1b663d3bd3277ef2506cb96000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) msgget$private(0x0, 0x100) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.31246736s ago: executing program 0 (id=2968): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r2, 0x1000000}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) 2.647185322s ago: executing program 2 (id=2969): socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r4, r4, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) getpgrp(0x0) 1.561078149s ago: executing program 2 (id=2970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040040) 1.111501922s ago: executing program 2 (id=2971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x460, &(0x7f0000000100)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, 0x0, 0x0, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 104.244985ms ago: executing program 7 (id=2972): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d9, 0x80, 0x3, 0x2b0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) close_range(r0, 0xffffffffffffffff, 0x0) 58.534897ms ago: executing program 2 (id=2973): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) pipe(&(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 0s ago: executing program 7 (id=2974): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f01"], 0xdd12}], 0x1}, 0x20040051) kernel console output (not intermixed with test programs): high-speed USB device number 32 using dummy_hcd [ 786.593531][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 786.601161][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 786.610720][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.632991][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 786.931976][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.179203][ T10] pvrusb2: ********** [ 787.183254][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 787.193643][ T10] pvrusb2: Important functionality might not be entirely working. [ 787.233527][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.334029][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 787.345587][ T10] pvrusb2: ********** [ 787.481825][ T9175] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 787.504749][ T44] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 787.522841][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 787.535956][ T44] usb 2-1: SerialNumber: syz [ 787.736669][ T9175] usb 7-1: Using ep0 maxpacket: 16 [ 787.837918][T11806] netlink: 'syz.5.1334': attribute type 3 has an invalid length. [ 788.247022][ T2342] pvrusb2: Invalid write control endpoint [ 788.297077][ T9175] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 788.332357][ T9175] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 788.363836][ T9175] usb 7-1: Product: syz [ 788.378426][ T9175] usb 7-1: Manufacturer: syz [ 788.392795][ T9175] usb 7-1: SerialNumber: syz [ 788.416680][ T9175] usb 7-1: config 0 descriptor?? [ 788.444639][ T2342] pvrusb2: Invalid write control endpoint [ 788.464856][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 788.498923][T11811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1342'. [ 788.519237][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 788.539467][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 788.572827][T11810] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 788.589566][ T2342] pvrusb2: Device being rendered inoperable [ 788.613592][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 788.631141][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 788.680405][ T2342] pvrusb2: Attached sub-driver cx25840 [ 788.701455][ T9175] usb 7-1: USB disconnect, device number 16 [ 788.713592][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 788.753787][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 789.714897][ T9175] usb 6-1: USB disconnect, device number 21 [ 789.848613][T11823] tipc: Enabling of bearer rejected, failed to enable media [ 789.876679][ T44] usb 2-1: 0:2 : does not exist [ 790.053875][ T44] usb 2-1: USB disconnect, device number 32 [ 790.422203][T11528] udevd[11528]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.740655][T11840] bond2: entered promiscuous mode [ 790.745790][T11840] bond2: entered allmulticast mode [ 790.751350][T11840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.652802][ T44] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 792.969277][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 792.988324][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.004272][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.037926][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 793.101449][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 793.142411][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.218298][ T44] usb 3-1: config 0 descriptor?? [ 794.315788][ T977] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 794.517387][ T977] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 794.652608][ T977] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 794.948297][ T44] HID 045e:07da: Invalid code 65791 type 1 [ 794.992263][ T977] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 795.943618][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input11 [ 797.269667][ T44] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 797.583169][ T44] usb 3-1: USB disconnect, device number 29 [ 797.815968][T11886] fido_id[11886]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 798.073794][ T9175] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 798.274215][T11903] tipc: Started in network mode [ 798.281323][T11903] tipc: Node identity 3a1c0c4a6f7a, cluster identity 4711 [ 798.289135][T11903] tipc: Enabled bearer , priority 0 [ 798.298225][T11904] fido_id[11904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 798.315488][T11903] syzkaller0: entered promiscuous mode [ 798.325158][T11903] syzkaller0: entered allmulticast mode [ 798.483548][ T9175] usb 6-1: Using ep0 maxpacket: 8 [ 798.523201][ T9175] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 798.785010][ T9175] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.796069][ T9175] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 798.920396][ T9175] usb 6-1: config 1 has no interface number 1 [ 798.927014][ T9175] usb 6-1: too many endpoints for config 1 interface 5 altsetting 5: 89, using maximum allowed: 30 [ 798.943676][ T9175] usb 6-1: config 1 interface 5 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 798.963663][ T9175] usb 6-1: config 1 interface 5 has no altsetting 0 [ 799.091031][ T9175] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 799.167338][ T9175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.177830][T11902] tipc: Resetting bearer [ 799.195382][ T9175] usb 6-1: Product: syz [ 799.199604][ T9175] usb 6-1: Manufacturer: syz [ 799.252765][ T9175] usb 6-1: SerialNumber: syz [ 799.389881][T11902] tipc: Disabling bearer [ 799.398198][ T44] tipc: Node number set to 1432751178 [ 799.419587][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1368'. [ 799.485545][T11917] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1368'. [ 799.971244][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 800.045754][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 801.297024][T11932] ubi: mtd0 is already attached to ubi31 [ 801.653371][ T9175] usb 6-1: 0:2 : does not exist [ 801.750444][ T9175] usb 6-1: USB disconnect, device number 22 [ 802.847701][ T30] audit: type=1800 audit(1755660283.707:181): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1395" name="bus" dev="tmpfs" ino=811 res=0 errno=0 [ 806.169485][T11999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.325220][T12004] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1399'. [ 809.192484][T12027] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1406'. [ 813.559784][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.566442][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.709883][T12073] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1421'. [ 814.737206][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 814.764213][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 817.735201][T12101] geneve2: entered promiscuous mode [ 818.558290][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 818.583680][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 820.756782][ T10] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 820.936065][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.951509][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 820.981172][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 821.022499][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.057793][ T10] usb 3-1: config 0 descriptor?? [ 821.105977][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 821.131485][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 821.162297][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 821.192941][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 821.212486][ T10] usb 3-1: media controller created [ 821.223635][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.267188][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 821.311331][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 821.320004][T12118] dvb-usb: bulk message failed: -22 (2/0) [ 821.678922][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 822.022999][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 822.072669][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 822.122731][ T10] usb 3-1: USB disconnect, device number 30 [ 822.421659][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 822.708737][T12140] geneve2: entered promiscuous mode [ 824.795621][T12146] syz.2.1440 (12146) used greatest stack depth: 16784 bytes left [ 824.879770][T12149] ceph: No mds server is up or the cluster is laggy [ 825.008627][T12162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.134171][ T30] audit: type=1326 audit(1755660305.987:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12163 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 825.188719][ T30] audit: type=1326 audit(1755660305.987:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12163 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 825.265088][ T30] audit: type=1326 audit(1755660305.987:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12163 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 825.369128][ T30] audit: type=1326 audit(1755660305.987:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12163 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 825.443522][ T30] audit: type=1326 audit(1755660305.987:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12163 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 825.910326][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1454'. [ 826.088772][T12195] SET target dimension over the limit! [ 829.257198][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1462'. [ 832.386557][T12242] random: crng reseeded on system resumption [ 834.002228][T12254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.206405][T12254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.296585][T12262] netlink: 'syz.5.1473': attribute type 4 has an invalid length. [ 834.364022][T12264] netlink: 'syz.5.1473': attribute type 4 has an invalid length. [ 834.664226][T12258] trusted_key: encrypted_key: insufficient parameters specified [ 840.159099][T12311] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 840.273820][T12311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 840.297240][T12314] bond3: (slave geneve2): making interface the new active one [ 840.321274][T12314] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 849.038525][T12364] syz.6.1506 (12364): drop_caches: 2 [ 856.786208][ T5923] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 857.106306][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.800961][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 857.951495][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 857.983551][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 858.008891][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 858.035503][ T5923] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 858.045293][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 858.083274][ T5923] usb 2-1: Product: syz [ 858.102749][ T5923] usb 2-1: Manufacturer: syz [ 858.838836][ T5923] usb 2-1: SerialNumber: syz [ 858.862584][ T5923] usb 2-1: config 0 descriptor?? [ 859.433474][ T5923] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 859.453620][ T5923] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 859.614857][T12441] netlink: 'syz.6.1529': attribute type 1 has an invalid length. [ 859.634183][ T5923] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 859.641999][ T5923] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 859.665253][ T5923] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 859.864072][ T5923] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 861.159384][ T5923] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 861.186185][ T5923] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 861.220690][ T5923] usb 2-1: USB disconnect, device number 33 [ 861.583550][ T5923] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 861.830639][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 861.863317][ T5923] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 861.872603][ T5923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 861.900103][ T5923] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 861.912647][ T5923] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 861.927488][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.966257][ T5923] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 861.978144][ T5923] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 862.002205][ T5923] usb 2-1: Product: syz [ 862.009810][ T5923] usb 2-1: Manufacturer: syz [ 862.016848][ T5923] usb 2-1: SerialNumber: syz [ 862.024995][ T5923] usb 2-1: config 0 descriptor?? [ 862.047536][ T5923] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 862.075553][ T5923] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 862.279356][ T5927] usb 2-1: USB disconnect, device number 34 [ 862.295553][ T5927] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 864.055559][ T5923] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 864.253420][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.280509][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 864.308635][ T5923] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 864.330407][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.345441][ T5923] usb 2-1: Product: syz [ 864.357062][ T5923] usb 2-1: Manufacturer: syz [ 864.362034][ T5923] usb 2-1: SerialNumber: syz [ 864.370525][ T5923] usb 2-1: config 0 descriptor?? [ 864.382776][ T5923] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 864.411991][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 864.424185][ T5923] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 864.433781][ T5923] usb 2-1: media controller created [ 864.482752][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.748570][ T5923] DVB: Unable to find symbol tda10046_attach() [ 864.766031][ T5923] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 864.775542][ T5923] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 864.984400][T12435] macsec0: entered promiscuous mode [ 864.990230][T12435] macsec0: entered allmulticast mode [ 864.996002][T12435] veth1_macvtap: entered allmulticast mode [ 865.003273][T12441] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 865.070901][T12443] gretap1: entered promiscuous mode [ 865.650367][ T5923] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 865.677017][ T5923] usb 2-1: USB disconnect, device number 35 [ 870.571913][T12517] ptrace attach of "./syz-executor exec"[5835] was attempted by " [ 873.905846][T12534] loop6: detected capacity change from 0 to 524287999 [ 875.129587][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.136981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.635368][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1558'. [ 875.707002][T12554] : entered promiscuous mode [ 876.203754][ T5921] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 876.396685][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 876.450729][ T5921] usb 3-1: config 9 has an invalid interface number: 10 but max is 0 [ 876.454640][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1563'. [ 876.469503][ T5921] usb 3-1: config 9 has no interface number 0 [ 876.500018][ T5921] usb 3-1: config 9 interface 10 has no altsetting 0 [ 876.524958][ T5921] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=b4.72 [ 876.550036][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.583654][ T5921] usb 3-1: Product: syz [ 876.587957][ T5921] usb 3-1: Manufacturer: syz [ 876.592598][ T5921] usb 3-1: SerialNumber: syz [ 876.829872][ T5921] usb 3-1: Error in usbnet_get_endpoints (-22) [ 876.850225][ T5921] usb 3-1: USB disconnect, device number 31 [ 877.293959][T12559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.335530][T12559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.783024][T12559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.956983][T12559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.368521][T12591] NILFS (nullb0): couldn't find nilfs on the device [ 883.440333][T12559] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.409811][T12559] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.654399][T12607] overlayfs: overlapping lowerdir path [ 885.040515][T12559] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.219416][T12559] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.498119][T12619] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 886.811387][T12633] NILFS (nullb0): couldn't find nilfs on the device [ 890.037285][T12667] netlink: 'syz.2.1598': attribute type 10 has an invalid length. [ 890.920081][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806c782000: rx timeout, send abort [ 890.982456][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 891.422173][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806c782400: rx timeout, send abort [ 891.433423][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806c782000: abort rx timeout. Force session deactivation [ 893.859703][ T30] audit: type=1326 audit(1755660374.727:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 893.926100][ T30] audit: type=1326 audit(1755660374.727:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 893.979762][ T30] audit: type=1326 audit(1755660374.757:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 894.026787][ T30] audit: type=1326 audit(1755660374.757:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 894.275316][ T30] audit: type=1326 audit(1755660374.757:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 894.298083][ T30] audit: type=1326 audit(1755660374.777:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 894.320531][ T30] audit: type=1326 audit(1755660374.777:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 894.342925][ T30] audit: type=1326 audit(1755660374.777:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12686 comm="syz.1.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 895.056377][T12689] 9pnet_fd: p9_fd_create_tcp (12689): problem connecting socket to 127.0.0.1 [ 896.305947][T12719] binder: BINDER_SET_CONTEXT_MGR already set [ 896.312018][T12719] binder: 12718:12719 ioctl 4018620d 200000004a80 returned -16 [ 897.070255][T12733] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 897.862375][T12739] netlink: 'syz.5.1620': attribute type 1 has an invalid length. [ 898.093647][ T5921] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 898.333675][ T5927] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 898.614315][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 898.735236][ T5927] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 898.915042][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 898.920551][ T5927] usb 2-1: config 0 has no interface number 0 [ 898.943587][ T5927] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 898.991281][ T5927] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 899.033431][ T5927] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 899.057437][ T5921] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 899.066743][ T5921] usb 3-1: config 0 has no interface number 0 [ 899.076669][ T5921] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 899.089608][ T5927] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.092339][ T5921] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.117237][ T5921] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.130611][ T5921] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 899.156627][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.157140][ T5927] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 899.173122][ T5921] usb 3-1: Product: syz [ 899.190556][ T5921] usb 3-1: Manufacturer: syz [ 899.199939][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.210459][ T5921] usb 3-1: SerialNumber: syz [ 899.243093][ T5927] usb 2-1: config 0 descriptor?? [ 899.248072][ T5921] usb 3-1: config 0 descriptor?? [ 899.270715][T12735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 899.285223][ T5927] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 899.290043][ T5921] plusb 3-1:0.231: probe with driver plusb failed with error -22 [ 899.518908][ T5921] usb 2-1: USB disconnect, device number 36 [ 899.556401][ T5921] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 900.454169][T12735] netlink: zone id is out of range [ 900.459344][T12735] netlink: zone id is out of range [ 900.464595][T12735] netlink: zone id is out of range [ 900.469744][T12735] netlink: zone id is out of range [ 900.475022][T12735] netlink: zone id is out of range [ 900.480333][T12735] netlink: zone id is out of range [ 900.516575][T12735] netlink: set zone limit has 4 unknown bytes [ 900.545983][ T5927] usb 3-1: USB disconnect, device number 32 [ 900.583756][T12775] netlink: 'syz.6.1637': attribute type 1 has an invalid length. [ 902.190099][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1646'. [ 902.865303][ T5927] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 903.036386][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.047312][ T5927] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 903.057337][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.079371][ T5927] usb 6-1: config 0 descriptor?? [ 903.108544][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 903.156506][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1654'. [ 903.660710][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 903.669166][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 903.707634][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 903.865805][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 903.883521][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 903.890977][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 903.899382][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 903.914387][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 903.936510][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 903.954714][ T5927] pwc: recv_control_msg error -32 req 02 val 2500 [ 904.075885][ T5927] pwc: recv_control_msg error -32 req 02 val 2400 [ 904.674132][ T5927] pwc: recv_control_msg error -32 req 02 val 2600 [ 904.691497][ T5927] pwc: recv_control_msg error -32 req 02 val 2900 [ 904.715532][ T5927] pwc: recv_control_msg error -32 req 02 val 2800 [ 904.997665][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 905.115186][ T5927] pwc: Registered as video103. [ 905.122780][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 905.140231][ T5927] usb 6-1: USB disconnect, device number 23 [ 907.330940][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1662'. [ 912.896727][T12861] NILFS (nullb0): couldn't find nilfs on the device [ 918.405751][T12903] lo speed is unknown, defaulting to 1000 [ 918.413464][T12903] lo speed is unknown, defaulting to 1000 [ 918.421977][T12903] lo speed is unknown, defaulting to 1000 [ 918.434925][T12903] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 918.451499][T12903] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 918.493155][T12903] lo speed is unknown, defaulting to 1000 [ 918.502277][T12903] lo speed is unknown, defaulting to 1000 [ 918.509523][T12903] lo speed is unknown, defaulting to 1000 [ 918.516843][T12903] lo speed is unknown, defaulting to 1000 [ 918.525939][T12903] lo speed is unknown, defaulting to 1000 [ 919.180456][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 919.362601][T12912] loop8: detected capacity change from 0 to 8 [ 919.371506][T12912] Dev loop8: unable to read RDB block 8 [ 919.377349][T12912] loop8: unable to read partition table [ 919.383274][T12912] loop8: partition table beyond EOD, truncated [ 919.389580][T12912] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 921.148577][T12932] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 922.307621][T12940] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1687'. [ 922.326210][T12940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1687'. [ 922.353581][T12940] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1687'. [ 924.108934][ T30] audit: type=1326 audit(1755660404.977:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 924.203774][ T30] audit: type=1326 audit(1755660405.037:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 924.403544][ T30] audit: type=1326 audit(1755660405.037:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 924.533229][ T30] audit: type=1326 audit(1755660405.037:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 925.343689][ T30] audit: type=1326 audit(1755660405.037:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 925.365932][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.372457][ T30] audit: type=1326 audit(1755660405.037:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 925.394425][ T30] audit: type=1326 audit(1755660405.037:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 925.416171][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.430760][ T30] audit: type=1326 audit(1755660405.037:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12957 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199438ebe9 code=0x7ffc0000 [ 925.679710][T12972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 926.504126][T12972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 926.522157][T12972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 926.534826][T12972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 926.545359][T12972] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 926.558554][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 926.575269][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 926.591307][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 926.604805][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 926.612910][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 926.819777][T12969] lo speed is unknown, defaulting to 1000 [ 928.578491][T12991] binder: 12990:12991 ioctl c0306201 200000000440 returned -14 [ 928.681543][T12972] Bluetooth: hci4: command tx timeout [ 928.978647][ T3465] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.143546][ T5921] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 930.190320][ T5921] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 931.153421][ T5921] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 931.153562][T12972] Bluetooth: hci4: command tx timeout [ 931.164941][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 931.178307][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 931.323142][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 931.383304][ T5921] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 931.417609][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 931.439869][ T5921] usb 2-1: Product: syz [ 931.459911][ T5921] usb 2-1: Manufacturer: syz [ 931.503762][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 931.509249][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 931.528229][ T3465] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.539810][ T5921] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 931.550095][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol [ 931.793519][ T5921] usb 2-1: USB disconnect, device number 37 [ 931.824866][ T3465] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.974247][T12969] chnl_net:caif_netlink_parms(): no params data found [ 932.099706][ T3465] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.201408][T13023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.233574][T12972] Bluetooth: hci4: command tx timeout [ 933.515850][T13036] block device autoloading is deprecated and will be removed. [ 933.648034][T12969] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.666005][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.678183][T12969] bridge_slave_0: entered allmulticast mode [ 933.688956][T12969] bridge_slave_0: entered promiscuous mode [ 933.693719][ T5873] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 933.719397][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.729377][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.739461][T12969] bridge_slave_1: entered allmulticast mode [ 933.750494][T12969] bridge_slave_1: entered promiscuous mode [ 933.855741][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.877387][ T5873] usb 7-1: config 0 has no interfaces? [ 933.898008][ T5873] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 933.913470][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.919871][T12969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.938356][ T5873] usb 7-1: config 0 descriptor?? [ 934.048369][T12969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.564194][T12969] team0: Port device team_slave_0 added [ 934.588438][T12969] team0: Port device team_slave_1 added [ 934.596013][ T3465] bridge_slave_1: left allmulticast mode [ 934.602300][ T3465] bridge_slave_1: left promiscuous mode [ 934.644453][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.886714][ T3465] bridge_slave_0: left allmulticast mode [ 934.892642][ T3465] bridge_slave_0: left promiscuous mode [ 934.902824][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.663372][T12972] Bluetooth: hci4: command tx timeout [ 935.975446][T13058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.438990][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.445648][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.540330][ T5921] usb 7-1: USB disconnect, device number 17 [ 937.181304][T13080] ALSA: mixer_oss: invalid index 40000 [ 937.372280][ T3465] dvmrp8 (unregistering): left allmulticast mode [ 937.603827][ T3465] dvmrp1 (unregistering): left allmulticast mode [ 938.509742][ T3465] bond0 (unregistering): (slave veth3): Releasing active interface [ 938.522398][ T3465] dummy0: entered promiscuous mode [ 938.551406][ T3465] bond0 (unregistering): (slave dummy0): Releasing active interface [ 938.576815][ T3465] bond0 (unregistering): Released all slaves [ 938.772903][ T5921] lo speed is unknown, defaulting to 1000 [ 938.988358][T12969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.425284][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.462899][T12969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.580871][T12969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.610013][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.672536][T12969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.714272][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 939.721830][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 939.849740][T13100] ceph: No mds server is up or the cluster is laggy [ 939.965874][T12969] hsr_slave_0: entered promiscuous mode [ 939.972708][T12969] hsr_slave_1: entered promiscuous mode [ 939.999908][T12969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.024928][T12969] Cannot create hsr debugfs directory [ 940.068223][T13113] kAFS: Can only specify source 'none' with -o dyn [ 940.534225][T13117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.234095][T13123] overlayfs: missing 'workdir' [ 941.554149][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.980218][T13091] syz.6.1733: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 942.074004][T13091] CPU: 1 UID: 0 PID: 13091 Comm: syz.6.1733 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 942.074036][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 942.074052][T13091] Call Trace: [ 942.074062][T13091] [ 942.074072][T13091] dump_stack_lvl+0x189/0x250 [ 942.074109][T13091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 942.074135][T13091] ? __pfx__printk+0x10/0x10 [ 942.074164][T13091] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 942.074195][T13091] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 942.074226][T13091] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 942.074257][T13091] warn_alloc+0x214/0x310 [ 942.074292][T13091] ? __pfx_warn_alloc+0x10/0x10 [ 942.074330][T13091] ? __get_vm_area_node+0x28f/0x300 [ 942.074355][T13091] ? hash_ipmark_create+0x3e6/0x1080 [ 942.074388][T13091] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 942.074413][T13091] ? do_syscall_64+0xfa/0x3b0 [ 942.074474][T13091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 942.074508][T13091] ? rcu_is_watching+0x15/0xb0 [ 942.074557][T13091] ? hash_ipmark_create+0x3e6/0x1080 [ 942.074585][T13091] ? hash_ipmark_create+0x3e6/0x1080 [ 942.074609][T13091] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 942.074634][T13091] ? hash_ipmark_create+0x3e6/0x1080 [ 942.074660][T13091] ? hash_ipmark_create+0x387/0x1080 [ 942.074691][T13091] hash_ipmark_create+0x3e6/0x1080 [ 942.074720][T13091] ? __nla_parse+0x40/0x60 [ 942.074742][T13091] ? __pfx_hash_ipmark_create+0x10/0x10 [ 942.074766][T13091] ip_set_create+0xa94/0x1940 [ 942.074787][T13091] ? ip_set_create+0x4a2/0x1940 [ 942.074817][T13091] ? __pfx_ip_set_create+0x10/0x10 [ 942.074869][T13091] nfnetlink_rcv_msg+0xb4d/0x1130 [ 942.074891][T13091] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 942.074929][T13091] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 942.074948][T13091] ? kasan_save_free_info+0x46/0x50 [ 942.075017][T13091] netlink_rcv_skb+0x205/0x470 [ 942.075045][T13091] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 942.075066][T13091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 942.075102][T13091] ? bpf_lsm_capable+0x9/0x20 [ 942.075126][T13091] ? security_capable+0x7e/0x2e0 [ 942.075157][T13091] nfnetlink_rcv+0x26a/0x2520 [ 942.075180][T13091] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 942.075203][T13091] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 942.075223][T13091] ? __dev_queue_xmit+0x27e/0x3a70 [ 942.075242][T13091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.075269][T13091] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 942.075288][T13091] ? __pfx___dev_queue_xmit+0x10/0x10 [ 942.075319][T13091] ? ref_tracker_free+0x63a/0x7d0 [ 942.075338][T13091] ? __copy_skb_header+0xa7/0x550 [ 942.075357][T13091] ? __pfx_ref_tracker_free+0x10/0x10 [ 942.075393][T13091] ? skb_clone+0x246/0x3a0 [ 942.075413][T13091] ? __netlink_deliver_tap+0x807/0x850 [ 942.075439][T13091] ? netlink_deliver_tap+0x2e/0x1b0 [ 942.075469][T13091] ? netlink_deliver_tap+0x2e/0x1b0 [ 942.075494][T13091] ? netlink_deliver_tap+0x2e/0x1b0 [ 942.075525][T13091] netlink_unicast+0x75c/0x8e0 [ 942.075558][T13091] netlink_sendmsg+0x805/0xb30 [ 942.075592][T13091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.075625][T13091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 942.075650][T13091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.075681][T13091] __sock_sendmsg+0x21c/0x270 [ 942.075705][T13091] ____sys_sendmsg+0x505/0x830 [ 942.075739][T13091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.075775][T13091] ? import_iovec+0x74/0xa0 [ 942.075805][T13091] ___sys_sendmsg+0x21f/0x2a0 [ 942.075835][T13091] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.075897][T13091] ? __fget_files+0x2a/0x420 [ 942.075916][T13091] ? __fget_files+0x3a0/0x420 [ 942.075947][T13091] __x64_sys_sendmsg+0x19b/0x260 [ 942.075978][T13091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.076016][T13091] ? rcu_is_watching+0x15/0xb0 [ 942.076040][T13091] ? do_syscall_64+0xbe/0x3b0 [ 942.076063][T13091] do_syscall_64+0xfa/0x3b0 [ 942.076082][T13091] ? lockdep_hardirqs_on+0x9c/0x150 [ 942.076101][T13091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.076121][T13091] ? clear_bhb_loop+0x60/0xb0 [ 942.076144][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.076163][T13091] RIP: 0033:0x7f7b3718ebe9 [ 942.076180][T13091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.076196][T13091] RSP: 002b:00007f7b353f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.076216][T13091] RAX: ffffffffffffffda RBX: 00007f7b373b6180 RCX: 00007f7b3718ebe9 [ 942.076229][T13091] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000006 [ 942.076241][T13091] RBP: 00007f7b37211e19 R08: 0000000000000000 R09: 0000000000000000 [ 942.076252][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.076262][T13091] R13: 00007f7b373b6218 R14: 00007f7b373b6180 R15: 00007ffe4258b1b8 [ 942.076291][T13091] [ 942.076316][T13091] Mem-Info: [ 942.567465][ T3465] hsr_slave_0: left promiscuous mode [ 942.610480][T13091] active_anon:284 inactive_anon:4462 isolated_anon:0 [ 942.610480][T13091] active_file:13537 inactive_file:38258 isolated_file:0 [ 942.610480][T13091] unevictable:768 dirty:164 writeback:0 [ 942.610480][T13091] slab_reclaimable:5943 slab_unreclaimable:102577 [ 942.610480][T13091] mapped:30620 shmem:1408 pagetables:970 [ 942.610480][T13091] sec_pagetables:0 bounce:0 [ 942.610480][T13091] kernel_misc_reclaimable:0 [ 942.610480][T13091] free:1310445 free_pcp:12812 free_cma:0 [ 942.696043][ T3465] hsr_slave_1: left promiscuous mode [ 942.702834][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.723443][T13091] Node 0 active_anon:1136kB inactive_anon:17748kB active_file:53952kB inactive_file:153032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118696kB dirty:656kB writeback:0kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11424kB pagetables:3896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 942.786244][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.800851][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.809129][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.821850][T13091] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 942.883813][T13091] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.915014][ T3465] veth1_macvtap: left promiscuous mode [ 942.923694][ T3465] veth0_macvtap: left promiscuous mode [ 942.929448][ T3465] veth1_vlan: left promiscuous mode [ 942.930484][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 942.975786][ T3465] veth0_vlan: left promiscuous mode [ 942.993819][T13091] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 943.037391][T13091] Node 0 DMA32 free:1309604kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1132kB inactive_anon:18308kB active_file:52180kB inactive_file:152972kB unevictable:1536kB writepending:656kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:48228kB local_pcp:26052kB free_cma:0kB [ 943.126867][T13091] lowmem_reserve[]: 0 0 1 1 1 [ 943.139764][T13091] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 943.239851][T13091] lowmem_reserve[]: 0 0 0 0 0 [ 943.255379][T13091] Node 1 Normal free:3918444kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5636kB local_pcp:1856kB free_cma:0kB [ 943.309321][T13091] lowmem_reserve[]: 0 0 0 0 0 [ 943.341424][T13091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 943.372625][T13091] Node 0 DMA32: 1707*4kB (UME) 883*8kB (UME) 343*16kB (ME) 896*32kB (UME) 341*64kB (UME) 76*128kB (UME) 45*256kB (UME) 42*512kB (UME) 27*1024kB (UME) 4*2048kB (UM) 284*4096kB (M) = 1311732kB [ 943.425822][T13091] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 943.450660][T13091] Node 1 Normal: 161*4kB (UME) 43*8kB (UME) 41*16kB (UME) 212*32kB (UME) 80*64kB (UME) 25*128kB (UME) 7*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 951*4096kB (M) = 3918444kB [ 943.489010][T13091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.516455][T13091] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 943.526393][T13091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.598335][T13091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 943.623465][T13091] 53202 total pagecache pages [ 943.630514][T13091] 1 pages in swap cache [ 943.666443][T13091] Free swap = 124992kB [ 943.670918][T13091] Total swap = 124996kB [ 943.681078][T13091] 2097051 pages RAM [ 943.691248][T13091] 0 pages HighMem/MovableOnly [ 943.701462][T13091] 424695 pages reserved [ 943.705848][T13091] 0 pages cma reserved [ 944.515722][ T5921] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 944.694093][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 944.710700][ T5921] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 944.743971][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 944.755636][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 944.765746][ T5921] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 944.791914][ T5921] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.801271][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.832776][ T5921] usb 7-1: config 0 descriptor?? [ 944.861668][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 945.282329][ T5921] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 945.341506][ T5921] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 945.540445][T13126] batadv0: entered promiscuous mode [ 945.563967][T13126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 945.572951][T13126] batadv0: left promiscuous mode [ 945.609332][ T5873] usb 7-1: USB disconnect, device number 18 [ 945.833390][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'. [ 945.837382][T13152] ALSA: mixer_oss: invalid index 40000 [ 946.082542][T12969] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 946.087377][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 946.112845][T12969] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 946.164549][T12969] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 946.195824][T12969] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 946.438173][T12969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.491663][T12969] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.206250][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.213540][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.255947][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.263171][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.400788][T13185] ALSA: mixer_oss: invalid index 40000 [ 947.535462][T13189] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1765'. [ 947.759800][T12969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.619788][T13228] ALSA: mixer_oss: invalid index 40000 [ 950.223839][T12969] veth0_vlan: entered promiscuous mode [ 950.387291][T12969] veth1_vlan: entered promiscuous mode [ 950.445438][T12969] veth0_macvtap: entered promiscuous mode [ 950.477187][T12969] veth1_macvtap: entered promiscuous mode [ 950.542200][T12969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.579181][T12969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.621628][T12969] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.641238][T12969] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.671996][T12969] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.691810][T12969] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.957460][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.978358][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.073686][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.082643][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.409849][T13262] ALSA: mixer_oss: invalid index 40000 [ 953.615772][ T30] audit: type=1326 audit(1755660434.477:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.681293][ T30] audit: type=1326 audit(1755660434.477:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.743444][ T30] audit: type=1326 audit(1755660434.487:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.827225][ T30] audit: type=1326 audit(1755660434.487:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.856981][T12181] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 953.861391][ T30] audit: type=1326 audit(1755660434.487:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.899701][ T30] audit: type=1326 audit(1755660434.487:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.933034][ T30] audit: type=1326 audit(1755660434.487:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.958531][ T30] audit: type=1326 audit(1755660434.487:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995658ebe9 code=0x7ffc0000 [ 953.993143][T13297] binder: BINDER_SET_CONTEXT_MGR already set [ 954.002770][T13297] binder: 13296:13297 ioctl 4018620d 2000000002c0 returned -16 [ 954.187880][T12181] usb 2-1: Using ep0 maxpacket: 8 [ 954.213529][T12181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.255147][T13298] ALSA: mixer_oss: invalid index 40000 [ 954.324668][T12181] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 954.420480][T12181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.583824][T12181] usb 2-1: config 0 descriptor?? [ 954.649850][T12181] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 955.082875][T13306] block nbd0: shutting down sockets [ 955.295375][T12181] gspca_vc032x: reg_w err -71 [ 955.352287][T12181] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 955.414324][T12181] usb 2-1: USB disconnect, device number 38 [ 957.088449][T13351] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1824'. [ 957.554762][ T5873] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 957.753404][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 957.769735][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.816303][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.858834][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 957.915103][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 957.954948][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 958.023415][ T5873] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 958.042949][ T5873] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 958.071295][ T5873] usb 2-1: Manufacturer: syz [ 958.092896][ T5873] usb 2-1: config 0 descriptor?? [ 958.159238][T13372] IPv6: Can't replace route, no match found [ 958.486202][ T5873] rc_core: IR keymap rc-hauppauge not found [ 958.502448][ T5873] Registered IR keymap rc-empty [ 958.511337][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.553583][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.563012][T13382] netlink: 'syz.7.1838': attribute type 1 has an invalid length. [ 958.607419][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 958.636135][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 958.675352][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.694948][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.743531][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.767003][T13388] netlink: 'syz.2.1839': attribute type 4 has an invalid length. [ 958.783526][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.834145][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.887927][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.963675][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 958.995755][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 959.023914][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 959.063893][ T5873] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 959.100068][T13395] program syz.7.1843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 959.115328][ T5873] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 959.132814][ T5873] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 959.148147][ T5873] usb 2-1: USB disconnect, device number 39 [ 960.329481][T13411] virtio-fs: tag not found [ 960.871783][T13428] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1857'. [ 961.214171][T13440] netlink: 'syz.7.1862': attribute type 1 has an invalid length. [ 962.311834][T13447] fuse: root generation should be zero [ 962.380122][T13455] netlink: 'syz.2.1868': attribute type 4 has an invalid length. [ 962.793179][T13465] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 962.824581][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1872'. [ 963.312060][T13479] 9pnet_fd: Insufficient options for proto=fd [ 964.280879][T13498] NILFS (nullb0): couldn't find nilfs on the device [ 964.741667][T13509] syz_tun: entered allmulticast mode [ 964.783165][T13508] syz_tun: left allmulticast mode [ 965.034309][T13514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 965.570894][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 966.245510][ T5923] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 966.414575][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 966.446023][ T5923] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 966.619903][ T5923] usb 2-1: config 0 has no interface number 0 [ 966.643925][ T5923] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 966.910116][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.951720][ T5923] usb 2-1: config 0 descriptor?? [ 967.094092][ T5923] viperboard 2-1:0.143: version 0.00 found at bus 002 address 040 [ 967.152971][ T5923] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 967.188168][ T5923] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 967.223238][ T5923] usb 2-1: USB disconnect, device number 40 [ 967.857959][T13562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 968.267018][T13575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.653497][ T5923] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 968.803459][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 968.822649][ T5923] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 968.849501][ T5923] usb 3-1: config 0 has no interface number 0 [ 968.866726][ T5923] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 968.881255][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.906107][ T5923] usb 3-1: Product: syz [ 968.921183][ T5923] usb 3-1: Manufacturer: syz [ 968.938195][ T5923] usb 3-1: SerialNumber: syz [ 968.963235][ T5923] usb 3-1: config 0 descriptor?? [ 969.343793][ T5923] radio-si470x 3-1:0.35: this is not a si470x device. [ 969.547480][ T5923] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 969.577763][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 970.426510][ T5923] usb 3-1: USB disconnect, device number 33 [ 971.093504][ T5843] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 971.220818][T13615] netlink: 'syz.1.1929': attribute type 4 has an invalid length. [ 971.261266][ T5843] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 971.292704][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.320947][ T5843] usb 7-1: config 0 descriptor?? [ 971.340185][ T5843] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 971.461440][T13623] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 971.550685][T13623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 971.743173][ T5843] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 972.142431][ T5843] gspca_cpia1: usb_control_msg 02, error -71 [ 972.150911][ T5843] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 972.201079][ T5843] usb 7-1: USB disconnect, device number 19 [ 972.631710][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 976.402817][T13728] netlink: 'syz.1.1970': attribute type 1 has an invalid length. [ 976.535922][T13728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.617898][T13730] bond0: (slave geneve2): making interface the new active one [ 976.627561][T13730] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 976.643829][T13732] lo speed is unknown, defaulting to 1000 [ 976.657424][T13732] lo speed is unknown, defaulting to 1000 [ 976.667983][T13739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1971'. [ 976.681518][T13732] lo speed is unknown, defaulting to 1000 [ 976.713110][T13732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 976.771128][T13732] lo speed is unknown, defaulting to 1000 [ 976.788347][T13732] lo speed is unknown, defaulting to 1000 [ 976.802103][T13732] lo speed is unknown, defaulting to 1000 [ 976.809664][T13732] lo speed is unknown, defaulting to 1000 [ 976.817034][T13732] lo speed is unknown, defaulting to 1000 [ 977.161219][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1978'. [ 977.213759][ T5843] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 977.514344][ T5843] usb 8-1: Using ep0 maxpacket: 8 [ 977.560519][ T5843] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 977.742349][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.795053][ T5843] usb 8-1: config 0 descriptor?? [ 978.089079][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'. [ 978.130894][ T5843] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 978.445589][T12181] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 978.615581][T12181] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 978.625418][T12181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.653029][T12181] usb 2-1: config 0 descriptor?? [ 978.724809][T12181] cp210x 2-1:0.0: cp210x converter detected [ 978.733825][ T5843] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 978.754992][ T5843] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 978.795183][ T5843] asix 8-1:0.0: probe with driver asix failed with error -71 [ 978.829930][ T5843] usb 8-1: USB disconnect, device number 2 [ 979.169670][T12181] usb 2-1: cp210x converter now attached to ttyUSB0 [ 979.346168][ T5843] usb 2-1: USB disconnect, device number 41 [ 979.371688][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 979.391220][ T5843] cp210x 2-1:0.0: device disconnected [ 982.009781][T13806] bridge0: port 3(syz_tun) entered blocking state [ 982.073622][T13806] bridge0: port 3(syz_tun) entered disabled state [ 982.082041][T13806] syz_tun: entered allmulticast mode [ 982.118486][T13806] syz_tun: entered promiscuous mode [ 982.129782][T13806] bridge0: port 3(syz_tun) entered blocking state [ 982.136873][T13806] bridge0: port 3(syz_tun) entered forwarding state [ 982.347986][T13820] NILFS (nullb0): couldn't find nilfs on the device [ 984.614216][T13870] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.623403][T13870] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.137104][T13870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.218318][T13870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.259393][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2034'. [ 986.099602][T13870] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.133539][T13870] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.152961][T13870] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.188486][T13870] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.413625][T13906] netlink: 'syz.0.2042': attribute type 4 has an invalid length. [ 986.649957][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 986.676958][T13909] netlink: 'syz.2.2045': attribute type 7 has an invalid length. [ 986.688308][T13909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2045'. [ 987.486011][ T5873] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 987.607089][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2062'. [ 987.672024][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.719179][ T5873] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 987.740997][ T5873] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 987.778760][ T5873] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 987.802003][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.817986][ T5873] usb 3-1: Product: syz [ 987.822248][ T5873] usb 3-1: Manufacturer: syz [ 987.834501][T13958] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2065'. [ 987.843633][ T5873] usb 3-1: SerialNumber: syz [ 988.032136][T13966] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2069'. [ 988.071827][T13937] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 988.694934][T13937] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 988.711079][T13988] netlink: 'syz.7.2079': attribute type 4 has an invalid length. [ 988.837653][T13996] netlink: 'syz.7.2082': attribute type 1 has an invalid length. [ 989.001892][ T5873] cdc_mbim 3-1:1.0: bind() failure [ 989.085274][ T5873] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 989.101688][ T5873] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 989.287904][ T5873] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 989.390129][T13996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 989.405111][ T5873] usb 3-1: USB disconnect, device number 34 [ 989.489162][T14001] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.504447][T14001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.528463][T14001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.554401][T14001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.636685][T14001] bond1: (slave geneve2): making interface the new active one [ 989.672680][T14011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.698675][T14001] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 990.713414][T14020] dvmrp1: left allmulticast mode [ 991.057031][T14029] netlink: 'syz.7.2093': attribute type 4 has an invalid length. [ 991.865648][T14048] ALSA: mixer_oss: invalid index 40000 [ 995.903514][ T5873] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 996.253743][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 996.272248][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.301611][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 996.338489][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 996.349985][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.369493][ T5873] usb 2-1: Product: syz [ 996.374636][ T5873] usb 2-1: Manufacturer: syz [ 996.379658][ T5873] usb 2-1: SerialNumber: syz [ 996.627730][ T5873] usb 2-1: 0:2 : does not exist [ 996.685993][ T5873] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 996.738435][ T5873] usb 2-1: USB disconnect, device number 42 [ 997.880514][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.887202][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.972089][T14127] 9pnet_fd: Insufficient options for proto=fd [ 999.343697][ T5873] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 999.505677][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 999.938693][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.006846][ T5873] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1000.076294][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.141745][ T5873] usb 3-1: config 0 descriptor?? [ 1000.569119][ T5873] kye 0003:0458:5016.000D: control desc unexpectedly large [ 1000.621720][ T5873] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000D/input/input18 [ 1000.749382][ T5873] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000D/input/input19 [ 1000.866875][ T5873] kye 0003:0458:5016.000D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 1000.920346][T14157] netlink: 'syz.6.2137': attribute type 4 has an invalid length. [ 1001.136357][T12181] usb 3-1: USB disconnect, device number 35 [ 1001.440349][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'. [ 1001.470252][T14163] team_slave_0: entered promiscuous mode [ 1001.476461][T14163] team_slave_1: entered promiscuous mode [ 1001.515315][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'. [ 1001.537953][T14163] macvtap0: entered promiscuous mode [ 1001.566226][T14163] team0: entered promiscuous mode [ 1001.585043][T14163] macvtap0: entered allmulticast mode [ 1001.600999][T14163] team0: entered allmulticast mode [ 1001.621383][T14163] team_slave_0: entered allmulticast mode [ 1001.643635][T14163] team_slave_1: entered allmulticast mode [ 1001.734328][T14163] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1001.778843][T14164] team0: left allmulticast mode [ 1001.815457][T14164] team_slave_0: left allmulticast mode [ 1001.821369][T14164] team_slave_1: left allmulticast mode [ 1001.830692][T14164] team0: left promiscuous mode [ 1001.845173][T14164] team_slave_0: left promiscuous mode [ 1001.851282][T14164] team_slave_1: left promiscuous mode [ 1002.315760][ T5843] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1002.763524][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 1002.905273][ T5843] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=e3.90 [ 1002.954710][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.079448][ T5843] usb 3-1: Product: syz [ 1003.179781][ T5843] usb 3-1: Manufacturer: syz [ 1003.532133][ T5843] usb 3-1: SerialNumber: syz [ 1003.554452][ T5843] usb 3-1: config 0 descriptor?? [ 1003.554583][T14190] netlink: 'syz.6.2148': attribute type 4 has an invalid length. [ 1003.772389][ T5843] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 1003.835773][ T5843] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 1003.862904][ T5843] f81534a_ctrl 3-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1003.917455][ T5843] usb 3-1: USB disconnect, device number 36 [ 1004.038727][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 1006.423195][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2163'. [ 1007.231502][T12181] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1007.290166][T14259] syz_tun: entered allmulticast mode [ 1007.345561][T14258] syz_tun: left allmulticast mode [ 1007.416136][T12181] usb 8-1: Using ep0 maxpacket: 32 [ 1007.512169][T12181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.603607][T14264] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2173'. [ 1007.613401][T12181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.642864][T12181] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1007.684044][T12181] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.710179][T12181] usb 8-1: config 0 descriptor?? [ 1007.722251][T12181] hub 8-1:0.0: USB hub found [ 1007.958380][T12181] hub 8-1:0.0: 1 port detected [ 1008.564273][ T5921] hub 8-1:0.0: activate --> -90 [ 1009.437229][ T5921] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1009.437309][ T5873] usb 8-1: USB disconnect, device number 3 [ 1009.794940][T14296] syz_tun: entered allmulticast mode [ 1009.808208][T14295] syz_tun: left allmulticast mode [ 1009.865448][ T5921] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1010.033805][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 1010.044649][ T5921] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1010.059055][ T5921] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1010.069379][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1010.084672][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1010.098000][ T5921] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.113193][ T5921] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1010.148975][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.403202][ T5921] usb 2-1: GET_CAPABILITIES returned 0 [ 1010.419037][ T5921] usbtmc 2-1:16.0: can't read capabilities [ 1010.667349][ T5873] usb 2-1: USB disconnect, device number 43 [ 1011.986402][T14326] netlink: 'syz.6.2196': attribute type 4 has an invalid length. [ 1012.204980][T14330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.212293][T14330] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.308213][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2199'. [ 1012.359783][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2199'. [ 1012.372839][T14332] bond_slave_0: entered promiscuous mode [ 1012.379110][T14332] bond_slave_1: entered promiscuous mode [ 1012.408061][T14332] macvtap3: entered promiscuous mode [ 1012.417718][T14332] bond0: entered promiscuous mode [ 1012.427822][T14332] macvtap3: entered allmulticast mode [ 1012.433835][T14332] bond0: entered allmulticast mode [ 1012.440579][T14332] bond_slave_0: entered allmulticast mode [ 1012.447223][T14332] bond_slave_1: entered allmulticast mode [ 1012.456357][T14332] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1012.485853][T14334] bond0: left allmulticast mode [ 1012.491031][T14334] bond_slave_0: left allmulticast mode [ 1012.497340][T14334] bond_slave_1: left allmulticast mode [ 1012.503027][T14334] bond0: left promiscuous mode [ 1012.509419][T14334] bond_slave_0: left promiscuous mode [ 1012.515435][T14334] bond_slave_1: left promiscuous mode [ 1013.390801][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'. [ 1013.765843][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1013.808050][T14376] macvtap1: entered promiscuous mode [ 1013.821305][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1013.849283][T14376] bond0: entered promiscuous mode [ 1013.856844][T14376] bond_slave_0: entered promiscuous mode [ 1013.864541][T14376] bond_slave_1: entered promiscuous mode [ 1013.870785][T14376] macvtap1: entered allmulticast mode [ 1013.916903][T14376] bond0: entered allmulticast mode [ 1013.933442][T14376] bond_slave_0: entered allmulticast mode [ 1013.939442][T14376] bond_slave_1: entered allmulticast mode [ 1013.947657][T14376] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1013.972675][T14380] bond0: left allmulticast mode [ 1013.986484][T14380] bond_slave_0: left allmulticast mode [ 1013.992237][T14380] bond_slave_1: left allmulticast mode [ 1014.008212][T14380] bond0: left promiscuous mode [ 1014.015810][T14380] bond_slave_0: left promiscuous mode [ 1014.027869][T14380] bond_slave_1: left promiscuous mode [ 1015.042033][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2231'. [ 1016.165276][T14436] loop8: detected capacity change from 0 to 8 [ 1016.187646][T14436] Dev loop8: unable to read RDB block 8 [ 1016.202092][T14436] loop8: unable to read partition table [ 1016.222486][T14436] loop8: partition table beyond EOD, truncated [ 1016.248546][T14436] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 1016.467914][T14442] netlink: 'syz.2.2240': attribute type 4 has an invalid length. [ 1016.737786][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2246'. [ 1016.756598][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2246'. [ 1018.073548][ T5873] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1018.578690][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.626276][T14485] binder: BINDER_SET_CONTEXT_MGR already set [ 1018.663348][ T5873] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.696214][T14485] binder: 14484:14485 ioctl 4018620d 2000000002c0 returned -16 [ 1018.745305][ T5873] usb 8-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1018.794226][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.819705][ T5873] usb 8-1: config 0 descriptor?? [ 1019.270681][ T5873] ortek 0003:1223:3F07.000E: unknown main item tag 0x3 [ 1019.303411][ T5873] ortek 0003:1223:3F07.000E: item fetching failed at offset 48/69 [ 1019.312296][ T5873] ortek 0003:1223:3F07.000E: probe with driver ortek failed with error -22 [ 1019.467713][ T5921] usb 8-1: USB disconnect, device number 4 [ 1019.794429][T12181] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1019.957212][T12181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.974201][T12181] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1019.987255][T12181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.999445][T12181] usb 3-1: config 0 descriptor?? [ 1020.019951][T12181] pwc: Askey VC010 type 2 USB webcam detected. [ 1020.427028][T12181] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1020.434870][T12181] pwc: recv_control_msg error -32 req 02 val 2700 [ 1020.442127][T12181] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1020.734619][T12181] pwc: recv_control_msg error -32 req 04 val 1000 [ 1020.753088][T12181] pwc: recv_control_msg error -32 req 04 val 1300 [ 1020.774345][T12181] pwc: recv_control_msg error -32 req 04 val 1400 [ 1020.790361][T12181] pwc: recv_control_msg error -32 req 02 val 2000 [ 1020.807540][T12181] pwc: recv_control_msg error -32 req 02 val 2100 [ 1021.019251][T12181] pwc: recv_control_msg error -71 req 02 val 2500 [ 1021.036738][T12181] pwc: recv_control_msg error -71 req 02 val 2400 [ 1021.067237][T12181] pwc: recv_control_msg error -71 req 02 val 2600 [ 1021.088481][T12181] pwc: recv_control_msg error -71 req 02 val 2900 [ 1021.105917][T12181] pwc: recv_control_msg error -71 req 02 val 2800 [ 1021.127671][T12181] pwc: recv_control_msg error -71 req 04 val 1100 [ 1021.140424][T12181] pwc: recv_control_msg error -71 req 04 val 1200 [ 1021.167958][T12181] pwc: Registered as video103. [ 1021.179688][T12181] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 1021.230457][T12181] usb 3-1: USB disconnect, device number 37 [ 1021.465595][T14536] block device autoloading is deprecated and will be removed. [ 1021.831366][T14551] NILFS (nullb0): couldn't find nilfs on the device [ 1022.820570][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 1022.874891][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 1023.716506][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2290'. [ 1024.638742][T12183] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1024.805362][T12183] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 1024.837206][T12183] usb 8-1: config 0 has no interface number 0 [ 1024.859002][T12183] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1024.900875][T12183] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.925094][T12183] usb 8-1: Product: syz [ 1024.935012][T12183] usb 8-1: Manufacturer: syz [ 1024.944225][T12183] usb 8-1: SerialNumber: syz [ 1025.001073][T12183] usb 8-1: config 0 descriptor?? [ 1025.589424][T12183] usb 8-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73) [ 1025.799895][T12183] usb 8-1: Read permanent extended address 52:39:35:8d:79:3e:bf:c5 from device [ 1025.829668][T12183] usb 8-1: atusb_probe: initialization failed, error = -524 [ 1025.869090][T12183] atusb 8-1:0.128: probe with driver atusb failed with error -524 [ 1026.022981][T12181] usb 8-1: USB disconnect, device number 5 [ 1026.832224][T14562] dummy0: entered promiscuous mode [ 1026.841721][T14562] macvtap8: entered promiscuous mode [ 1026.865143][T14562] macvtap8: entered allmulticast mode [ 1026.913717][T14562] dummy0: entered allmulticast mode [ 1027.057346][T14610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1027.186688][T14619] pim6reg: entered allmulticast mode [ 1027.233793][T14619] macvlan0: entered allmulticast mode [ 1027.276441][T14619] veth1_vlan: entered allmulticast mode [ 1029.243893][T12183] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1029.542700][T12183] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.560958][T12183] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.573146][T12183] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1029.583006][T12183] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.604579][T12183] usb 8-1: config 0 descriptor?? [ 1029.748759][T14657] tipc: Enabling of bearer rejected, failed to enable media [ 1030.244160][T12183] usb 8-1: language id specifier not provided by device, defaulting to English [ 1030.646719][T12183] uclogic 0003:256C:006D.000F: interface is invalid, ignoring [ 1030.851746][T12183] usb 8-1: USB disconnect, device number 6 [ 1033.794163][T12181] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1033.993039][T12181] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.043633][T12181] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1034.068664][T12181] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1034.087099][T12181] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.100853][T12181] usb 8-1: Product: syz [ 1034.105582][T12181] usb 8-1: Manufacturer: syz [ 1034.110396][T12181] usb 8-1: SerialNumber: syz [ 1034.350730][T12181] usb 8-1: 0:2 : does not exist [ 1034.386463][T12181] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1034.461653][T12181] usb 8-1: USB disconnect, device number 7 [ 1035.020766][T14703] syz_tun: entered allmulticast mode [ 1035.051462][T14702] syz_tun: left allmulticast mode [ 1035.896139][T14710] netlink: 'syz.6.2337': attribute type 17 has an invalid length. [ 1035.966372][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2336'. [ 1036.323814][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 1036.525861][T14727] ALSA: mixer_oss: invalid index 40000 [ 1036.814197][T14728] tipc: Enabling of bearer rejected, failed to enable media [ 1037.035579][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2346'. [ 1037.282697][T12181] lo speed is unknown, defaulting to 1000 [ 1038.988924][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 1039.224311][ T5873] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1039.388516][T14781] tipc: Enabling of bearer rejected, failed to enable media [ 1039.404646][ T5873] usb 7-1: Using ep0 maxpacket: 32 [ 1039.416245][ T5873] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1039.433523][ T5873] usb 7-1: config 0 has no interface number 0 [ 1039.452786][ T5873] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1039.472331][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.486825][ T5873] usb 7-1: Product: syz [ 1039.491075][ T5873] usb 7-1: Manufacturer: syz [ 1039.510871][ T5873] usb 7-1: SerialNumber: syz [ 1039.532681][ T5873] usb 7-1: config 0 descriptor?? [ 1039.558988][ T5873] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1039.580982][ T5873] usb 7-1: selecting invalid altsetting 1 [ 1039.600860][ T5873] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1039.629035][ T5873] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1039.655981][ T5873] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1039.667793][ T5873] usb 7-1: media controller created [ 1039.747379][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1039.841112][ T5873] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1039.861038][ T5873] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1039.895515][ T5873] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1040.012594][ T5873] usb 7-1: USB disconnect, device number 20 [ 1040.128844][T14804] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2366'. [ 1040.381727][T14807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1040.409565][T12181] lo speed is unknown, defaulting to 1000 [ 1040.438386][T12181] syz2: Port: 1 Link ACTIVE [ 1043.592653][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2393'. [ 1044.883796][T14842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1044.896227][T14842] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1044.902986][T14842] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.929355][T14842] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1045.052174][T14868] bridge_slave_0: left allmulticast mode [ 1045.060259][T14868] bridge_slave_0: left promiscuous mode [ 1045.248636][T14868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.248295][T14868] bridge_slave_1: left allmulticast mode [ 1046.265506][T14868] bridge_slave_1: left promiscuous mode [ 1046.271481][T14868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.660280][T14868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.495824][T14868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.855810][T14868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.923424][T14868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.921582][T14908] syz_tun: entered allmulticast mode [ 1048.943977][T14908] syz_tun: left allmulticast mode [ 1051.316815][T14942] ALSA: mixer_oss: invalid index 40000 [ 1052.148031][T14957] syz_tun: entered allmulticast mode [ 1052.155557][T14956] syz_tun: left allmulticast mode [ 1053.540357][T14966] dvmrp8: entered allmulticast mode [ 1053.629704][T14966] lo speed is unknown, defaulting to 1000 [ 1053.647947][T14966] lo speed is unknown, defaulting to 1000 [ 1053.671165][T14971] netlink: 'syz.0.2421': attribute type 23 has an invalid length. [ 1054.317531][T14965] dvmrp8: left allmulticast mode [ 1055.565165][T14984] NILFS (nullb0): couldn't find nilfs on the device [ 1055.616639][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 1055.674603][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 1057.107310][T12724] bridge0: port 3(syz_tun) entered disabled state [ 1057.220929][T12724] syz_tun (unregistering): left allmulticast mode [ 1057.303527][T12724] syz_tun (unregistering): left promiscuous mode [ 1057.310068][T12724] bridge0: port 3(syz_tun) entered disabled state [ 1057.441115][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1057.455019][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1057.491369][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1057.501106][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1057.509200][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1057.570702][T15000] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.722514][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.758816][T15012] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1057.769922][T15006] lo speed is unknown, defaulting to 1000 [ 1057.803520][T15006] lo speed is unknown, defaulting to 1000 [ 1058.019205][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.261627][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.606280][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.344226][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.350680][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.556470][ T5851] Bluetooth: hci0: command tx timeout [ 1059.821595][ T59] bridge_slave_1: left allmulticast mode [ 1059.858259][ T59] bridge_slave_1: left promiscuous mode [ 1059.889042][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.971444][ T59] bridge_slave_0: left allmulticast mode [ 1059.993350][ T59] bridge_slave_0: left promiscuous mode [ 1060.009520][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.642091][ T59] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1061.721503][ T5851] Bluetooth: hci0: command tx timeout [ 1061.936211][ T59] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1062.427386][ T59] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1062.814838][ T59] bond0 (unregistering): Released all slaves [ 1062.831122][ T59] bond1 (unregistering): Released all slaves [ 1062.972030][ T59] bond2 (unregistering): Released all slaves [ 1063.120645][ T59] bond3 (unregistering): Released all slaves [ 1063.266078][ T59] bond4 (unregistering): Released all slaves [ 1063.296694][T15078] bridge_slave_0: left allmulticast mode [ 1063.302427][T15078] bridge_slave_0: left promiscuous mode [ 1063.332522][T15078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.389924][T15078] bridge_slave_1: left allmulticast mode [ 1063.398209][T15078] bridge_slave_1: left promiscuous mode [ 1063.404560][T15078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.463053][T15078] bond0: (slave bond_slave_0): Releasing backup interface [ 1063.508840][T15078] bond0: (slave bond_slave_1): Releasing backup interface [ 1063.539775][T15078] team0: Port device team_slave_0 removed [ 1063.568538][T15078] team0: Port device team_slave_1 removed [ 1063.581323][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2455'. [ 1063.581710][T15078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.604523][T15078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.620680][T15078] bond1: (slave geneve2): Releasing active interface [ 1063.630468][T15078] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.641967][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2455'. [ 1063.645133][T15078] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.662888][T15078] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.677831][T15078] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.689467][T15079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1063.736778][ T59] tipc: Left network mode [ 1063.771822][T15087] bond_slave_0: entered promiscuous mode [ 1063.777645][T15087] bond_slave_1: entered promiscuous mode [ 1063.795818][ T5851] Bluetooth: hci0: command tx timeout [ 1063.803071][T15087] macvtap4: entered promiscuous mode [ 1063.812874][T15087] bond0: entered promiscuous mode [ 1063.828705][T15087] macvtap4: entered allmulticast mode [ 1063.863377][T15087] bond0: entered allmulticast mode [ 1063.880933][T15087] bond_slave_0: entered allmulticast mode [ 1063.905127][T15087] bond_slave_1: entered allmulticast mode [ 1063.935567][T15087] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1063.974937][T15088] bond0: left allmulticast mode [ 1063.980608][T15088] bond_slave_0: left allmulticast mode [ 1064.013506][T15088] bond_slave_1: left allmulticast mode [ 1064.033624][T15088] bond0: left promiscuous mode [ 1064.056027][T15088] bond_slave_0: left promiscuous mode [ 1064.061561][T15088] bond_slave_1: left promiscuous mode [ 1064.126512][T15006] chnl_net:caif_netlink_parms(): no params data found [ 1065.312505][T15006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.347908][T15006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.379009][T15006] bridge_slave_0: entered allmulticast mode [ 1065.399384][T15006] bridge_slave_0: entered promiscuous mode [ 1065.490150][ T59] hsr_slave_0: left promiscuous mode [ 1065.883508][ T5851] Bluetooth: hci0: command tx timeout [ 1065.921393][ T59] hsr_slave_1: left promiscuous mode [ 1065.929593][ T59] batman_adv: batadv0: Interface deactivated: dummy0 [ 1065.938755][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 1065.955553][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.975527][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.994823][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.002348][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.063499][ T59] veth0_macvtap: left allmulticast mode [ 1066.069307][ T59] veth1_macvtap: left allmulticast mode [ 1066.076616][ T59] veth1_macvtap: left promiscuous mode [ 1066.082274][ T59] veth0_macvtap: left promiscuous mode [ 1066.088501][ T59] veth1_vlan: left allmulticast mode [ 1066.095961][ T59] veth1_vlan: left promiscuous mode [ 1066.101599][ T59] veth0_vlan: left promiscuous mode [ 1066.220260][ T59] pim6reg (unregistering): left allmulticast mode [ 1066.506486][ T59] macvlan0 (unregistering): left allmulticast mode [ 1067.287274][T15006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.294997][T15006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.302494][T15006] bridge_slave_1: entered allmulticast mode [ 1067.311296][T15006] bridge_slave_1: entered promiscuous mode [ 1067.358712][T15131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2470'. [ 1067.530775][T15138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1067.576417][T15006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.602175][T15006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.622220][T15140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2474'. [ 1067.707595][T15143] serio: Serial port ptm0 [ 1067.769031][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2477'. [ 1067.803895][T15006] team0: Port device team_slave_0 added [ 1067.819540][T15006] team0: Port device team_slave_1 added [ 1067.864217][T15148] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2476'. [ 1067.927050][T15006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.977533][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.457924][T15006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.520544][T15006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.542604][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.596511][T15006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.193072][T15006] hsr_slave_0: entered promiscuous mode [ 1069.240600][T15006] hsr_slave_1: entered promiscuous mode [ 1069.648349][T15177] serio: Serial port ptm0 [ 1070.934306][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'. [ 1070.976882][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'. [ 1071.468083][T15212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2501'. [ 1071.490364][T15212] openvswitch: netlink: Flow actions attr not present in new flow. [ 1071.599848][T15214] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2503'. [ 1071.644412][T15006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1071.670159][T15006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1071.701040][T15006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1071.761601][T15006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1071.765144][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 1072.290615][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2508'. [ 1072.306614][T15006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.328380][T15235] team_slave_0: entered promiscuous mode [ 1072.334461][T15235] team_slave_1: entered promiscuous mode [ 1072.342011][T15235] macvtap5: entered promiscuous mode [ 1072.348731][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2508'. [ 1072.357840][T15235] team0: entered promiscuous mode [ 1072.368423][T15235] macvtap5: entered allmulticast mode [ 1072.374869][T15235] team0: entered allmulticast mode [ 1072.380170][T15235] team_slave_0: entered allmulticast mode [ 1072.388698][T15235] team_slave_1: entered allmulticast mode [ 1072.399101][T15235] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1072.415996][T15236] team0: left allmulticast mode [ 1072.422688][T15236] team_slave_0: left allmulticast mode [ 1072.432633][T15236] team_slave_1: left allmulticast mode [ 1072.443061][T15236] team0: left promiscuous mode [ 1072.449525][T15236] team_slave_0: left promiscuous mode [ 1072.455148][T15236] team_slave_1: left promiscuous mode [ 1072.496974][T15006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.535488][T14096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.542837][T14096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.638336][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.645673][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.518954][T15006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.619269][T15006] veth0_vlan: entered promiscuous mode [ 1073.642657][T15006] veth1_vlan: entered promiscuous mode [ 1073.697839][T15259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2515'. [ 1073.718903][T15258] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1073.813858][T15259] openvswitch: netlink: Flow actions attr not present in new flow. [ 1073.848573][T15006] veth0_macvtap: entered promiscuous mode [ 1073.882482][T15006] veth1_macvtap: entered promiscuous mode [ 1073.944238][T15006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.976430][T15006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.009261][T15006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.032360][T15006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.057870][T15006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.083131][T15264] serio: Serial port ptm0 [ 1074.091884][T15006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.207178][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2519'. [ 1074.261993][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2519'. [ 1074.272362][T15268] macvtap2: entered promiscuous mode [ 1074.292383][T15268] team0: entered promiscuous mode [ 1074.304004][T15268] macvtap2: entered allmulticast mode [ 1074.309698][T15268] team0: entered allmulticast mode [ 1074.321068][T15268] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1074.345124][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.354117][T15270] team0: left allmulticast mode [ 1074.358707][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.364704][T15270] team0: left promiscuous mode [ 1074.470550][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.490910][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.657458][T15285] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 1077.267812][T15312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2532'. [ 1077.288547][T15312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1077.295982][T15312] IPv6: NLM_F_CREATE should be set when creating new route [ 1077.607670][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1077.624166][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1077.637100][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1077.646857][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1078.410178][T15328] net veth1_virt_wifi џџџџџџџџ: renamed from virt_wifi0 [ 1079.128720][T15339] ALSA: mixer_oss: invalid index 40000 [ 1079.712792][T15345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2544'. [ 1080.102292][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1080.130458][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1080.509830][T15358] netlink: 'syz.2.2550': attribute type 1 has an invalid length. [ 1080.533396][T12181] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1080.547536][T15358] netlink: 'syz.2.2550': attribute type 1 has an invalid length. [ 1080.717545][T12181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.748515][T12181] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1080.796521][T12181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.839854][T12181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.984792][T12181] usb 2-1: config 0 descriptor?? [ 1081.207650][ T5851] Bluetooth: hci0: command tx timeout [ 1081.254189][T12181] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1082.101666][T15383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2558'. [ 1083.232258][T15400] serio: Serial port ptm0 [ 1083.682650][ T5923] usb 2-1: USB disconnect, device number 44 [ 1085.386004][T15478] NILFS (nullb0): couldn't find nilfs on the device [ 1086.373061][T15485] syzkaller0: entered promiscuous mode [ 1086.388708][T15485] syzkaller0: entered allmulticast mode [ 1086.859164][T15492] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2578'. [ 1086.877758][T15492] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 1086.992680][T15492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1088.708244][T15510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2584'. [ 1088.873576][T12181] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1089.357120][T12181] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1089.419124][T15522] NILFS (nullb0): couldn't find nilfs on the device [ 1089.571243][T12181] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1089.846109][T12181] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1089.901943][T12181] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.932883][T12181] usb 7-1: config 0 descriptor?? [ 1089.963868][T12181] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1091.094899][T15540] pim6reg: entered allmulticast mode [ 1091.202423][T15540] macvlan0: entered allmulticast mode [ 1091.933738][T12183] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1092.616335][ T5873] usb 7-1: USB disconnect, device number 21 [ 1092.673503][T12183] usb 8-1: Using ep0 maxpacket: 16 [ 1092.682790][T12183] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.698530][T12183] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.747881][T12183] usb 8-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1092.769866][T12183] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.802446][T12183] usb 8-1: config 0 descriptor?? [ 1094.132943][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 1094.160875][T12183] usbhid 8-1:0.0: can't add hid device: -71 [ 1094.182641][T12183] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1094.207615][T12183] usb 8-1: USB disconnect, device number 8 [ 1094.527314][T15598] ALSA: mixer_oss: invalid index 40000 [ 1094.953155][T15606] serio: Serial port ptm0 [ 1095.162241][T15614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2604'. [ 1095.201471][T15614] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 1095.335650][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2605'. [ 1095.357274][T15621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.364677][T15621] IPv6: NLM_F_CREATE should be set when creating new route [ 1098.203495][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2597'. [ 1098.438028][T15640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2610'. [ 1098.524117][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2611'. [ 1099.113885][T15660] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1099.821778][T15695] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2622'. [ 1099.889454][T15695] netlink: 'syz.7.2622': attribute type 1 has an invalid length. [ 1100.075690][T15695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1100.275778][T15709] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1100.699875][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1100.729290][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1100.900888][T15730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2633'. [ 1101.127096][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1102.216799][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 1102.272236][T15774] team_slave_0: entered promiscuous mode [ 1102.278154][T15774] team_slave_1: entered promiscuous mode [ 1102.291470][T15781] netlink: 'syz.1.2646': attribute type 15 has an invalid length. [ 1102.311465][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 1102.334162][T15774] macvtap1: entered promiscuous mode [ 1102.339983][T15774] team0: entered promiscuous mode [ 1102.354089][T12972] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.379579][T15774] macvtap1: entered allmulticast mode [ 1102.392349][T15774] team0: entered allmulticast mode [ 1102.395985][T15784] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2647'. [ 1102.398298][T15774] team_slave_0: entered allmulticast mode [ 1102.413767][T15774] team_slave_1: entered allmulticast mode [ 1102.421489][T15774] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1102.449807][T15782] team0: left allmulticast mode [ 1102.465291][T15782] team_slave_0: left allmulticast mode [ 1102.471326][T15782] team_slave_1: left allmulticast mode [ 1102.479982][T15782] team0: left promiscuous mode [ 1102.534382][T15782] team_slave_0: left promiscuous mode [ 1102.540023][T15782] team_slave_1: left promiscuous mode [ 1102.690735][T15792] ALSA: mixer_oss: invalid index 40000 [ 1102.852707][T15788] syzkaller0: entered promiscuous mode [ 1102.883842][T15788] syzkaller0: entered allmulticast mode [ 1104.222242][T15822] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2661'. [ 1105.048637][T15830] ALSA: mixer_oss: invalid index 40000 [ 1108.737061][T15855] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1108.831489][T15855] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1108.934212][T15862] NILFS (nullb0): couldn't find nilfs on the device [ 1110.102191][T15871] ALSA: mixer_oss: invalid index 40000 [ 1110.819429][T15885] syz_tun: entered allmulticast mode [ 1110.821322][T15881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2681'. [ 1110.876817][T15883] syz_tun: left allmulticast mode [ 1111.927313][T15892] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2685'. [ 1112.461425][T15919] syz_tun: entered allmulticast mode [ 1112.469500][T15918] syz_tun: left allmulticast mode [ 1113.529433][T15925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2701'. [ 1113.643560][T15929] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1113.723730][T15933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1113.754675][T15933] openvswitch: netlink: Flow actions attr not present in new flow. [ 1114.495631][T15951] syz_tun: entered allmulticast mode [ 1114.538112][T15950] syz_tun: left allmulticast mode [ 1118.032238][T15997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2727'. [ 1120.049832][T15988] pimreg: entered allmulticast mode [ 1120.068621][T15994] syz_tun: entered allmulticast mode [ 1120.099742][T15994] syz_tun: left allmulticast mode [ 1120.201100][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2729'. [ 1120.389122][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'. [ 1120.668527][T16022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1120.808426][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.815241][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.187595][T16040] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2743'. [ 1121.347371][T16043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2744'. [ 1121.678662][T16050] ALSA: mixer_oss: invalid index 40000 [ 1123.836190][T16070] NILFS (nullb0): couldn't find nilfs on the device [ 1124.761409][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'. [ 1126.990711][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2760'. [ 1127.045706][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2760'. [ 1127.925703][T16099] dummy0: entered promiscuous mode [ 1127.931267][T16099] macvtap6: entered promiscuous mode [ 1127.958118][T16099] macvtap6: entered allmulticast mode [ 1127.992979][T16099] dummy0: entered allmulticast mode [ 1128.929961][T16133] team0: No ports can be present during mode change [ 1128.953044][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2772'. [ 1129.613075][T16133] team0 (unregistering): Port device team_slave_0 removed [ 1129.630054][T16133] team0 (unregistering): Port device team_slave_1 removed [ 1129.656145][T16144] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2774'. [ 1132.329579][T16182] NILFS (nullb0): couldn't find nilfs on the device [ 1134.810056][T16174] macvtap1: left promiscuous mode [ 1134.820096][T16174] macvtap1: left allmulticast mode [ 1134.826264][T16174] macvtap2: left promiscuous mode [ 1134.851376][T16174] macvtap2: left allmulticast mode [ 1135.200205][T16211] ALSA: mixer_oss: invalid index 40000 [ 1136.194528][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 1136.272925][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 1136.354005][T16231] dummy0: entered promiscuous mode [ 1136.365084][T16231] macvtap1: entered promiscuous mode [ 1136.380965][T16231] macvtap1: entered allmulticast mode [ 1136.396596][T16231] dummy0: entered allmulticast mode [ 1137.643988][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'. [ 1137.677046][T16260] macvtap4: entered promiscuous mode [ 1137.682512][T16260] dummy0: entered promiscuous mode [ 1137.689686][T16260] macvtap4: entered allmulticast mode [ 1137.728031][T16260] dummy0: entered allmulticast mode [ 1137.732964][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'. [ 1139.172019][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'. [ 1139.209864][T16303] macvtap9: entered promiscuous mode [ 1139.218384][T16303] macvtap9: entered allmulticast mode [ 1139.230400][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'. [ 1139.472964][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1139.503506][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1139.512861][T16313] netlink: 'syz.2.2837': attribute type 1 has an invalid length. [ 1139.572491][T16313] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1139.693618][T16313] nbd: socks must be embedded in a SOCK_ITEM attr [ 1139.710610][T16313] block nbd0: shutting down sockets [ 1139.977130][T16322] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2840'. [ 1144.846759][T16391] __nla_validate_parse: 1 callbacks suppressed [ 1144.846782][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 1144.910542][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2862'. [ 1145.421031][T16399] lo speed is unknown, defaulting to 1000 [ 1145.432973][T16399] lo speed is unknown, defaulting to 1000 [ 1145.462832][T16402] netlink: 'syz.2.2866': attribute type 1 has an invalid length. [ 1145.520881][T16402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.631082][T16409] bond0: (slave geneve3): making interface the new active one [ 1145.645114][T16409] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1145.990890][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 1146.050281][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 1146.385672][T16428] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2875'. [ 1147.637777][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 1147.951549][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 1147.961362][T16448] netlink: 46 bytes leftover after parsing attributes in process `syz.1.2879'. [ 1148.183108][T16458] netlink: 'syz.7.2882': attribute type 15 has an invalid length. [ 1148.276717][T16458] syzkaller0: entered promiscuous mode [ 1148.282382][T16458] syzkaller0: entered allmulticast mode [ 1150.331586][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1150.351953][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1150.368271][T16491] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 1150.377358][T16491] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1150.416750][T16491] nbd: socks must be embedded in a SOCK_ITEM attr [ 1150.434205][T16491] block nbd0: shutting down sockets [ 1150.709685][T16501] netlink: 'syz.0.2901': attribute type 1 has an invalid length. [ 1152.335179][T16511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1152.348429][T16511] openvswitch: netlink: Flow actions attr not present in new flow. [ 1153.623870][T16501] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1153.659367][T16472] lo speed is unknown, defaulting to 1000 [ 1153.676527][T16472] lo speed is unknown, defaulting to 1000 [ 1153.787219][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'. [ 1155.907801][T12972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1155.925786][T12972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1155.951089][T12972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1155.982982][T12972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1156.044049][T12972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1156.229702][T16553] ALSA: mixer_oss: invalid index 40000 [ 1156.342628][T16556] netlink: 'syz.0.2918': attribute type 1 has an invalid length. [ 1156.412812][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2919'. [ 1156.481575][T16556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1156.580967][T16550] lo speed is unknown, defaulting to 1000 [ 1156.645735][T16559] bond1: (slave geneve2): making interface the new active one [ 1156.679977][T16559] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1156.839933][T16550] lo speed is unknown, defaulting to 1000 [ 1157.032872][T16574] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1157.093642][T15471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.425677][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2930'. [ 1157.549303][T15471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.675830][T15471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.819184][T16592] ALSA: mixer_oss: invalid index 40000 [ 1158.368788][T12972] Bluetooth: hci5: command tx timeout [ 1158.693682][T15471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.834273][T16605] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 1158.960714][T16605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1159.002965][T16610] syzkaller0: entered promiscuous mode [ 1159.041166][T16610] syzkaller0: entered allmulticast mode [ 1159.179840][T16550] chnl_net:caif_netlink_parms(): no params data found [ 1159.466003][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 1159.530476][T15471] bridge_slave_1: left allmulticast mode [ 1159.544517][T15471] bridge_slave_1: left promiscuous mode [ 1159.550476][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.615103][T15471] bridge_slave_0: left allmulticast mode [ 1159.621608][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.730451][T16634] Bluetooth: MGMT ver 1.23 [ 1160.002787][T16638] ALSA: mixer_oss: invalid index 40000 [ 1160.445661][T12972] Bluetooth: hci5: command tx timeout [ 1160.788029][T16646] netlink: 'syz.6.2948': attribute type 1 has an invalid length. [ 1161.033669][T15471] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1161.707184][T15471] bond0 (unregistering): Released all slaves [ 1161.986587][T15471] bond1 (unregistering): Released all slaves [ 1162.054765][T16646] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1162.458316][T16675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2957'. [ 1162.503586][T15471] tipc: Left network mode [ 1162.506585][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.514115][T12972] Bluetooth: hci5: command tx timeout [ 1162.969305][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.984442][T16550] bridge_slave_0: entered allmulticast mode [ 1163.010063][T16550] bridge_slave_0: entered promiscuous mode [ 1163.093783][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.101487][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.166991][T16550] bridge_slave_1: entered allmulticast mode [ 1163.176159][T16550] bridge_slave_1: entered promiscuous mode [ 1163.398934][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.448381][T16683] tipc: Started in network mode [ 1163.460525][T16683] tipc: Node identity aeb5e825cd9d, cluster identity 4711 [ 1163.498458][T16683] tipc: Enabled bearer , priority 0 [ 1163.544247][T16689] syzkaller0: entered promiscuous mode [ 1163.559363][T16689] syzkaller0: entered allmulticast mode [ 1163.571392][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.747077][T16684] tipc: Resetting bearer [ 1163.825493][T16550] team0: Port device team_slave_0 added [ 1163.842394][T16681] tipc: Resetting bearer [ 1163.881650][T16681] tipc: Disabling bearer [ 1163.924993][T16550] team0: Port device team_slave_1 added [ 1163.974640][T15471] hsr_slave_0: left promiscuous mode [ 1163.999051][T15471] hsr_slave_1: left promiscuous mode [ 1164.018615][T15471] batman_adv: batadv0: Removing interface: dummy0 [ 1164.062243][T15471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.082208][T15471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.119385][T15471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.142139][T15471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.224152][T15471] dummy0: left allmulticast mode [ 1164.253353][T15471] dummy0: left promiscuous mode [ 1164.258762][T15471] veth0_macvtap: left allmulticast mode [ 1164.309695][T15471] veth1_macvtap: left promiscuous mode [ 1164.336029][T15471] veth0_macvtap: left promiscuous mode [ 1164.373267][T16701] netlink: 'syz.6.2966': attribute type 1 has an invalid length. [ 1164.424742][T15471] veth1_vlan: left promiscuous mode [ 1164.451048][T15471] veth0_vlan: left promiscuous mode [ 1164.775882][ T5851] Bluetooth: hci5: command tx timeout [ 1165.611087][T16712] ALSA: mixer_oss: invalid index 40000 [ 1167.774646][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1167.793466][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1167.802415][T16727] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 1167.824523][T16727] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1167.876260][T16727] [ 1167.878669][T16727] ====================================================== [ 1167.885906][T16727] WARNING: possible circular locking dependency detected [ 1167.893075][T16727] 6.16.0-syzkaller #0 Not tainted [ 1167.898146][T16727] ------------------------------------------------------ [ 1167.905211][T16727] syz.2.2973/16727 is trying to acquire lock: [ 1167.911379][T16727] ffff8881427b0988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1167.922691][T16727] [ 1167.922691][T16727] but task is already holding lock: [ 1167.930154][T16727] ffff8881427b0a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 1167.939948][T16727] [ 1167.939948][T16727] which lock already depends on the new lock. [ 1167.939948][T16727] [ 1167.950555][T16727] [ 1167.950555][T16727] the existing dependency chain (in reverse order) is: [ 1167.959675][T16727] [ 1167.959675][T16727] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1167.967622][T16727] lock_acquire+0x120/0x360 [ 1167.972755][T16727] __mutex_lock+0x182/0xe80 [ 1167.977897][T16727] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1167.984198][T16727] nbd_config_put+0x2c/0x790 [ 1167.989431][T16727] nbd_release+0xfe/0x140 [ 1167.994404][T16727] bdev_release+0x533/0x650 [ 1167.999451][T16727] blkdev_release+0x15/0x20 [ 1168.004667][T16727] __fput+0x449/0xa70 [ 1168.009191][T16727] fput_close_sync+0x119/0x200 [ 1168.014507][T16727] __x64_sys_close+0x7f/0x110 [ 1168.019727][T16727] do_syscall_64+0xfa/0x3b0 [ 1168.024781][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.031297][T16727] [ 1168.031297][T16727] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1168.039145][T16727] lock_acquire+0x120/0x360 [ 1168.044190][T16727] __mutex_lock+0x182/0xe80 [ 1168.049331][T16727] __del_gendisk+0x129/0x9e0 [ 1168.054725][T16727] del_gendisk+0xe8/0x160 [ 1168.059606][T16727] loop_remove+0x42/0xc0 [ 1168.064459][T16727] loop_control_ioctl+0x4ac/0x5a0 [ 1168.070020][T16727] __se_sys_ioctl+0xfc/0x170 [ 1168.075245][T16727] do_syscall_64+0xfa/0x3b0 [ 1168.080290][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.086811][T16727] [ 1168.086811][T16727] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1168.095263][T16727] validate_chain+0xb9b/0x2140 [ 1168.100567][T16727] __lock_acquire+0xab9/0xd20 [ 1168.105953][T16727] lock_acquire+0x120/0x360 [ 1168.110993][T16727] down_write+0x96/0x1f0 [ 1168.115791][T16727] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1168.122151][T16727] nbd_start_device+0x16c/0xac0 [ 1168.127544][T16727] nbd_genl_connect+0x135b/0x18f0 [ 1168.133201][T16727] genl_family_rcv_msg_doit+0x215/0x300 [ 1168.139386][T16727] genl_rcv_msg+0x60e/0x790 [ 1168.144606][T16727] netlink_rcv_skb+0x205/0x470 [ 1168.149918][T16727] genl_rcv+0x28/0x40 [ 1168.154444][T16727] netlink_unicast+0x75c/0x8e0 [ 1168.159757][T16727] netlink_sendmsg+0x805/0xb30 [ 1168.165086][T16727] __sock_sendmsg+0x21c/0x270 [ 1168.170554][T16727] ____sys_sendmsg+0x505/0x830 [ 1168.176021][T16727] ___sys_sendmsg+0x21f/0x2a0 [ 1168.181265][T16727] __x64_sys_sendmsg+0x19b/0x260 [ 1168.186771][T16727] do_syscall_64+0xfa/0x3b0 [ 1168.191821][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.198261][T16727] [ 1168.198261][T16727] other info that might help us debug this: [ 1168.198261][T16727] [ 1168.208769][T16727] Chain exists of: [ 1168.208769][T16727] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1168.208769][T16727] [ 1168.223138][T16727] Possible unsafe locking scenario: [ 1168.223138][T16727] [ 1168.230697][T16727] CPU0 CPU1 [ 1168.236078][T16727] ---- ---- [ 1168.241455][T16727] lock(&nbd->config_lock); [ 1168.246071][T16727] lock(&disk->open_mutex); [ 1168.253291][T16727] lock(&nbd->config_lock); [ 1168.260528][T16727] lock(&set->update_nr_hwq_lock); [ 1168.265765][T16727] [ 1168.265765][T16727] *** DEADLOCK *** [ 1168.265765][T16727] [ 1168.274105][T16727] 3 locks held by syz.2.2973/16727: [ 1168.279425][T16727] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1168.287667][T16727] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1168.296766][T16727] #2: ffff8881427b0a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 1168.306816][T16727] [ 1168.306816][T16727] stack backtrace: [ 1168.312745][T16727] CPU: 1 UID: 0 PID: 16727 Comm: syz.2.2973 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1168.312778][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.312794][T16727] Call Trace: [ 1168.312805][T16727] [ 1168.312814][T16727] dump_stack_lvl+0x189/0x250 [ 1168.312841][T16727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.312860][T16727] ? __pfx__printk+0x10/0x10 [ 1168.312884][T16727] ? print_lock_name+0xde/0x100 [ 1168.312907][T16727] print_circular_bug+0x2ee/0x310 [ 1168.313026][T16727] check_noncircular+0x134/0x160 [ 1168.313056][T16727] validate_chain+0xb9b/0x2140 [ 1168.313086][T16727] __lock_acquire+0xab9/0xd20 [ 1168.313106][T16727] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1168.313132][T16727] lock_acquire+0x120/0x360 [ 1168.313147][T16727] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1168.313174][T16727] ? kernfs_add_one+0xf0/0x520 [ 1168.313199][T16727] down_write+0x96/0x1f0 [ 1168.313224][T16727] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1168.313250][T16727] ? __pfx_down_write+0x10/0x10 [ 1168.313272][T16727] ? kernfs_add_one+0xf0/0x520 [ 1168.313296][T16727] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1168.313322][T16727] ? sysfs_add_file_mode_ns+0x238/0x300 [ 1168.313339][T16727] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1168.313360][T16727] nbd_start_device+0x16c/0xac0 [ 1168.313385][T16727] ? device_create_file+0xf4/0x1c0 [ 1168.313413][T16727] nbd_genl_connect+0x135b/0x18f0 [ 1168.313438][T16727] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1168.313461][T16727] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1168.313486][T16727] ? __nla_parse+0x40/0x60 [ 1168.313509][T16727] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1168.313533][T16727] genl_family_rcv_msg_doit+0x215/0x300 [ 1168.313555][T16727] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1168.313584][T16727] genl_rcv_msg+0x60e/0x790 [ 1168.313604][T16727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.313623][T16727] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1168.313651][T16727] netlink_rcv_skb+0x205/0x470 [ 1168.313676][T16727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.313695][T16727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1168.313728][T16727] ? down_read+0x1ad/0x2e0 [ 1168.313749][T16727] genl_rcv+0x28/0x40 [ 1168.313766][T16727] netlink_unicast+0x75c/0x8e0 [ 1168.313793][T16727] netlink_sendmsg+0x805/0xb30 [ 1168.313822][T16727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.313852][T16727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1168.313870][T16727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.313897][T16727] __sock_sendmsg+0x21c/0x270 [ 1168.313920][T16727] ____sys_sendmsg+0x505/0x830 [ 1168.313951][T16727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.313991][T16727] ? import_iovec+0x74/0xa0 [ 1168.314017][T16727] ___sys_sendmsg+0x21f/0x2a0 [ 1168.314046][T16727] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.314089][T16727] ? __fget_files+0x2a/0x420 [ 1168.314118][T16727] ? __fget_files+0x3a0/0x420 [ 1168.314147][T16727] __x64_sys_sendmsg+0x19b/0x260 [ 1168.314176][T16727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1168.314211][T16727] ? rcu_is_watching+0x15/0xb0 [ 1168.314235][T16727] ? do_syscall_64+0xbe/0x3b0 [ 1168.314258][T16727] do_syscall_64+0xfa/0x3b0 [ 1168.314278][T16727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.314296][T16727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.314315][T16727] ? clear_bhb_loop+0x60/0xb0 [ 1168.314335][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.314354][T16727] RIP: 0033:0x7f995658ebe9 [ 1168.314371][T16727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.314393][T16727] RSP: 002b:00007f9957327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.314420][T16727] RAX: ffffffffffffffda RBX: 00007f99567b5fa0 RCX: 00007f995658ebe9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1168.314435][T16727] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 1168.314446][T16727] RBP: 00007f9956611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1168.314458][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.314468][T16727] R13: 00007f99567b6038 R14: 00007f99567b5fa0 R15: 00007ffc026b6488 [ 1168.314489][T16727] [ 1169.281823][T16701] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1169.296728][T12181] lo speed is unknown, defaulting to 1000 [ 1169.312005][T12181] infiniband syz0: ib_query_port failed (-19) [ 1170.313391][T15471] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.368270][T15471] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.417698][T15471] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.467849][T15471] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.556948][T15471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.608468][T15471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.678525][T15471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.728965][T15471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.789061][T15471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.829558][T15471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.879249][T15471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.986845][T15471] bridge_slave_1: left allmulticast mode [ 1170.992547][T15471] bridge_slave_1: left promiscuous mode [ 1170.998548][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.007260][T15471] bridge_slave_0: left allmulticast mode [ 1171.013013][T15471] bridge_slave_0: left promiscuous mode [ 1171.018992][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.028427][T15471] bridge_slave_1: left allmulticast mode [ 1171.034405][T15471] bridge_slave_1: left promiscuous mode [ 1171.040181][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.049651][T15471] bridge_slave_0: left allmulticast mode [ 1171.056010][T15471] bridge_slave_0: left promiscuous mode [ 1171.061814][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.071142][T15471] bridge_slave_1: left allmulticast mode [ 1171.078357][T15471] bridge_slave_1: left promiscuous mode [ 1171.084646][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.092975][T15471] bridge_slave_0: left allmulticast mode [ 1171.098800][T15471] bridge_slave_0: left promiscuous mode [ 1171.105456][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.310646][T15471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.321080][T15471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.330828][T15471] bond0 (unregistering): Released all slaves [ 1171.451574][T15471] bond1 (unregistering): Released all slaves [ 1171.491465][T15471] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1171.550513][T15471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.562291][T15471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.573137][T15471] bond0 (unregistering): Released all slaves [ 1171.587023][T15471] bond1 (unregistering): Released all slaves [ 1171.635650][T15471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.645666][T15471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.655853][T15471] bond0 (unregistering): Released all slaves [ 1171.755359][T15471] bond0 (unregistering): (slave geneve3): Releasing active interface [ 1171.937904][T15471] bond0 (unregistering): Released all slaves [ 1172.056362][T15471] bond1 (unregistering): Released all slaves [ 1172.146262][T15471] : left promiscuous mode [ 1172.640369][T15471] hsr_slave_0: left promiscuous mode [ 1172.648831][T15471] hsr_slave_1: left promiscuous mode [ 1172.654918][T15471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.662352][T15471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.674008][T15471] hsr_slave_0: left promiscuous mode [ 1172.679995][T15471] hsr_slave_1: left promiscuous mode [ 1172.686676][T15471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.694250][T15471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.701992][T15471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.709937][T15471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.722442][T15471] hsr_slave_0: left promiscuous mode [ 1172.728699][T15471] hsr_slave_1: left promiscuous mode [ 1172.742496][T15471] dummy0: left allmulticast mode [ 1172.747800][T15471] veth1_macvtap: left promiscuous mode [ 1172.754222][T15471] veth0_macvtap: left allmulticast mode [ 1172.759821][T15471] veth0_macvtap: left promiscuous mode [ 1172.766232][T15471] veth0_vlan: left promiscuous mode [ 1172.772255][T15471] dummy0: left allmulticast mode [ 1172.777693][T15471] veth1_macvtap: left promiscuous mode [ 1172.783456][T15471] veth0_macvtap: left promiscuous mode [ 1172.789122][T15471] veth1_vlan: left promiscuous mode [ 1172.794917][T15471] veth0_vlan: left promiscuous mode [ 1172.801071][T15471] dummy0: left allmulticast mode [ 1172.806930][T15471] veth0_macvtap: left allmulticast mode [ 1172.812653][T15471] veth1_macvtap: left promiscuous mode [ 1172.818309][T15471] veth0_macvtap: left promiscuous mode [ 1172.824140][T15471] veth1_vlan: left promiscuous mode [ 1172.962943][T15471] pimreg (unregistering): left allmulticast mode [ 1173.138419][T15471] team0 (unregistering): Port device team_slave_1 removed [ 1173.173022][T15471] team0 (unregistering): Port device team_slave_0 removed [ 1173.524839][T15471] team0 (unregistering): Port device team_slave_1 removed [ 1173.536651][T15471] team0 (unregistering): Port device team_slave_0 removed [ 1173.971818][T12183] lo speed is unknown, defaulting to 1000 [ 1173.978135][T12183] infiniband syz2: ib_query_port failed (-19) [ 1174.861810][T15471] IPVS: stop unused estimator thread 0...