last executing test programs: 19m36.888684759s ago: executing program 32 (id=42): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x40, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x96}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x8, '\x00', @c}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=@bridge_newneigh={0x28, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd402, {0x2, 0x0, 0x0, r1, 0x80, 0x52, 0x2}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) 18m40.896579541s ago: executing program 33 (id=152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, 0x0) shutdown(r0, 0x1) pipe(&(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d4e9f3570a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = fanotify_init(0xf00, 0x2) fanotify_mark(r5, 0x105, 0x8971, r4, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x433b, 0x4) sendto$inet(r7, 0x0, 0x0, 0x4040, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x29, 0xd7, 0x68, 0x8, 0x15e8, 0x9100, 0x6161, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x7, 0x0, 0xb0, 0x6, [{{0x9, 0x4, 0xd5, 0xf, 0x3, 0x61, 0x51, 0x57, 0x6a, [], [{{0x9, 0x5, 0x8f, 0x2, 0x10, 0x0, 0x2, 0x7}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x80, 0x9, 0x92}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0xff, 0x8}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9d, 0x0}]}) 18m33.842015129s ago: executing program 34 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 13m55.286552678s ago: executing program 35 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x4d19, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 12m37.255128839s ago: executing program 36 (id=615): recvmsg(0xffffffffffffffff, 0x0, 0x40000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047e0ffff000040006321", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) 12m35.164633825s ago: executing program 37 (id=621): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) keyctl$read(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4a54a9179ecd7530"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a5e7c029b7837ecc6806ec77dc7b0f5b"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0x7, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9f, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0x7fffffff, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x0, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x88, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='cgroup2\x00', 0x1000040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x8, '\x00', @auto="22e83eec26da86d1f0106eb8cf384b28"}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000580)={0x2}) 11m53.609750982s ago: executing program 38 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x26020480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="050000008e9b00000004000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f0000000080), 0x0}, 0x20) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x5, 0x85}, 0x100, './file0\x00'}) 10m38.619203562s ago: executing program 39 (id=799): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) read(r1, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r1, &(0x7f0000000200)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 10m32.192753985s ago: executing program 40 (id=812): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x0, 0xc00}, 0x80) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) 9m58.936694342s ago: executing program 41 (id=888): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910bd0000000000040000000000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 9m32.103969475s ago: executing program 42 (id=946): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000c00)=""/4089, 0xff9}, {&(0x7f00000000c0)=""/172, 0xac}], 0x6}, 0x40010022) 9m29.048072298s ago: executing program 43 (id=958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230041) close(r1) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m26.7859063s ago: executing program 44 (id=965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(0x0, 0x10, 0x1) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x7) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r5, 0x0, 0x0, 0x0) 9m17.579698381s ago: executing program 45 (id=981): pipe(&(0x7f0000000080)) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 8m13.071015065s ago: executing program 46 (id=1158): unshare(0x400) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0x1e, 0x7}, {0x2}}}, 0x24}}, 0x44080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x67) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)="cb", 0x1) 8m12.594500638s ago: executing program 47 (id=1160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000000c0)}, 0x10002) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) 8m8.234021007s ago: executing program 48 (id=1182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m41.485901973s ago: executing program 49 (id=1246): openat$kvm(0xffffffffffffff9c, 0x0, 0x4f00c0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) 7m33.027374357s ago: executing program 50 (id=1268): socket$igmp(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000019ac0)={{0x7f, 0x45, 0x4c, 0x46, 0xc4, 0xff, 0x3, 0x5, 0xfe, 0x0, 0x6, 0x21dc, 0x12b, 0x38, 0x2d7, 0x2, 0x3, 0x20, 0x2, 0x7, 0xc00, 0x9}, [{0x2, 0x401, 0x5e2f, 0x7, 0x2, 0x7, 0xd, 0xffffffff}, {0x6, 0x6, 0x8, 0x80000001, 0x1, 0x0, 0x1, 0x1}], "5329dcb45aff81033af7362c76387ec9cbbcc06cb1e240349fb5a0e234c773fd2ba360444ef6c95ac4a1806dae019110101b9812592c5d40d0f32a3da52b1d6560167391cfa300a0a8e1d954611f6ab5de10e0aec9ee5af8153b7760e0b86a57bfb7022db10e49bdd8146b082cf8bfb197c806b8507ab5cf54459bf7440f2f4b86ced9e87e6ea784fd4d2697bacd2f2610ecd32ff061d8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0f) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r4 = inotify_init1(0x0) vmsplice(r4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read(r5, &(0x7f0000000180)=""/199, 0xc7) 7m30.793966557s ago: executing program 0 (id=1277): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04006c00c0023300201c07000802110000000802110000000472375b5dfeff07810200000802110000010006020202020202dd7451c62037ed5ac867ffdb1ff1"], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 7m29.924152334s ago: executing program 0 (id=1279): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000a14010025bd7000fedbdf250800150001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x8881}, 0x40084) 7m29.816382044s ago: executing program 0 (id=1280): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 7m29.529748399s ago: executing program 0 (id=1281): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xec, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(0x0, r0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2001000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 7m28.843822601s ago: executing program 0 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0x807f, 0x1000000, 0x4) 7m27.95007428s ago: executing program 0 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x850130a0}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x64, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x15}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) 7m26.783847214s ago: executing program 51 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x850130a0}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x64, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x15}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) 7m1.704153161s ago: executing program 3 (id=1334): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002200)=""/260, 0x104}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f0000002340)=""/4093, 0xffd}, {&(0x7f00000018c0)=""/142, 0x8e}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000001d80)=""/193, 0xc1}], 0x9}, 0x12000) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) 7m0.59233331s ago: executing program 3 (id=1337): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001880)={0x14, r0, 0xb0f953f98b113a4b, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 7m0.269782639s ago: executing program 3 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="010000"], 0x3c}}, 0x0) 6m59.786618493s ago: executing program 3 (id=1340): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x801) syz_emit_vhci(0x0, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 6m58.818404189s ago: executing program 3 (id=1341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="3c9fcd", 0x3}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 6m53.790691767s ago: executing program 3 (id=1352): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6m53.09514705s ago: executing program 52 (id=1352): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m46.731881212s ago: executing program 7 (id=1609): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x2bce, 0x10100, 0x1, 0x313}, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) socket$netlink(0x10, 0x3, 0x7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x6, 0x1}]}, 0x10) 4m45.682644725s ago: executing program 7 (id=1611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="010000"], 0x3c}}, 0x0) 4m42.801487822s ago: executing program 7 (id=1614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4m42.520927538s ago: executing program 7 (id=1616): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x801) syz_emit_vhci(0x0, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 4m37.396052784s ago: executing program 7 (id=1628): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000704006c000500190107000000080026006c0900005603"], 0x398}}, 0x0) 4m35.499685344s ago: executing program 7 (id=1636): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa0}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x3, 0x13a1}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x70000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(r1, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}]}, 0x10) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 4m33.053781142s ago: executing program 53 (id=1636): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa0}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x3, 0x13a1}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x70000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(r1, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}]}, 0x10) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 4m30.749415728s ago: executing program 1 (id=1654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x2e, 0x800000000005}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x21) sendfile(r5, r5, &(0x7f0000000080)=0x10000080000002, 0x2000000000007) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r6}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, 0x0, 0x0, 0x2}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x20, 0x0) open$dir(&(0x7f0000000380)='./file4\x00', 0x4625c1, 0x160) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000040)={0x84001, 0x0, 0x10}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 4m29.648683805s ago: executing program 1 (id=1658): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000704006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 4m29.161349629s ago: executing program 1 (id=1660): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 4m28.225729522s ago: executing program 1 (id=1666): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x801) syz_emit_vhci(0x0, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 4m26.419349203s ago: executing program 1 (id=1671): r0 = socket(0x2000000000000021, 0x2, 0x4002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfc, 0x80}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x40000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 4m24.747603523s ago: executing program 1 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x4, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 4m24.497464805s ago: executing program 54 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x4, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 4m22.371327984s ago: executing program 5 (id=1686): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000180)}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000007c0)="f2e6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x78}}, {{&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="7190033b54021d1220ab8013e741a86aba79713f003e4d6ac5931705df083781", 0x20}, {&(0x7f0000003040)="d00973b747692edd6cbd16591cc1b85d8f75b5a6e1edb79359a1753cbab0085f3e7a88519a2dd2f38c3de56bce3118fb92739a74b718551a61a7051f0225e8f43f3354d9268ffd49c7994de0774cd2045851643a3ac8df9b0c9d968bcac51fb04f71a1fc56c40047317065921fb273e6f61a39a0810ae511194cb97fc3b8ec4f96bb373b9567f2cb1902755c296d33a98c155be9a9a97cd8473bd3a32684b525f481bcfa89d05aa2434a4681d82af1135bfbe7ef20f7fe1f8930081b4fe3576725cd18f936b30323e21f36129b67d556593cf40204f3140c2de2765d8513e6ce3bdb5debdfeb31ff2e6f7c119525040e99c1ccea9c98236b107d92e8c1e5826ac90ab37d6bbc6f88d81ac31f213dc220cb8125b27b882c497570d9fb4abfa2179848718d06fe4d40496a1bf377a2728ffd76b21d40d16b29367ad5075988fad66015c9e3eb862c38bb5d0d7db0f6d78015611d4df4ac422bba5067bb42403cc8c1794cc102732155e4bfbae1c4e70611d8e0f1eac785e2ad2ace0bb12a04a63d9c613adeb97d0661f64b13a13ebd8c83d58c1c5e0a3cf9c9d5f0476c902a3d2eaa20a264892f0324ec222df344292730fc8e4aafc06ee8737343295eb84b4405dca08ff7a5e37bf318c111bd26402777de5170c77cb09d513c4452477c5b490add8adf4fd82b107a551dcb51d1eb5899caf99dd397e9d9b0f93a166e4876144ad3145743a3b60533808716419f7b255f69839c7f9ecf98962d7708d35e93cdc65c208442c49b34ac5c5cb18265053813579887bff7cb916446287352745183f882b234a62c17e607377bb615b676dac4cbb048ed3f967f8f25ee057f81d769a78a881964b6238aafe8d0aa837cfa9dcb3e77202eafba077bf659fb7492cc47458c60328c189a786eeb0f39d9e242ff39b136d5f2f70e986808fc6b15c727b1cbb6296643ee0885c16223d1beb8622f96800e5adc2c69cb0fc283adf8b864d976a29d8aa174c0b519e3d9d548102b313b20154110028af5953fd241d4751290bd33158d062f6f7bb654b1a17cb5af05d620387489f8550458b528c1f2d587114d1b86f427a3f28c1dfa40bbef9939897045bb03773ba2d68f6488a36525f7e34a2d817cd333a1f27bb56389a43a34e9260250228935d9a8618fd3b937954cd474efb48466aa28cbc0d4c339097778601db94f9cd03f5083f785ca6478fb38e1a4cf7f2eb4a9ae1f58a9e80e27bc43f83429af3b94ede36cff20c2ccf5421e123513af04262cfdfa50e5114c7316045c45bb3f7e735d83c3aee8c1179362dd19604f7a19c078234753c516791b0c9ea7c72dd3775aef30334012c9de13fff42bf10fccd05d504ebeafce7c6471e0bf76b25793885126566edfe7ee8bff4db768ce9c5af4fa8e08ebece153737f910195654a4f749742283850a79b1d31a6f2deaff6c29dfeb8fb7af07ae31b061bfcb70edb6536b4968c650060249e733ade3f6511d4b3a85bb795ee517645caa64c6fc19b9d48f883d0f32fbf08ab0500843fc6b1e19ffab44653fd7f5a248b23eee59e6d8d871b5084d9c4faeb32827f8cc33432109340874483037f9b0c04f320984a276bffcc8342444ccfb2bb6dba8a095454adf200302190c85cd24532fa7b3269ce9a6ffcf1be6141785964c1c49afddef7efe5ab8b448bfb2a9fd6ce0a3da2e51097685857f8b36c42ca95faf27546324f46382e7d7ae01c11bc4d5a0e9dc069682ffa7f1757c9b409caf0f63e280403138a20a0ec9ec45aef21c86d424cf01a04724deb092670f4e94c693aa643cc4c8fb09262a0c8ea9b74785ad694d6885ebe519fca67830b3c7427dbd46bf57359ac6606aa754ba548da356daf9f6c195f7b52e5b533514cd5c1924bbadc360aa2d729a37767fe8747e0618460b5055b5fff266a9750b89e0926414cf912353b002562b52b0edda1d405b6dacbbc09fd08ef3588cee25dd3e88b230131fbd76bc5cca33e326e75bdf9b05957f6a1a3b10ba4773728d9d9831f9c1609db7fceef221e52011a24bd7e3605b262dc3a25b7b72e94c024fb0e3c10c58e17d206ece171653e4b120777505d5550f2523eebaa6fe28adb2511e97900dfddb1907920d2d4196c55267c12a7afc6563d07fb9b6dbf4291fd7e24af4cad1b07b52a4a5cad3f941e33c50f507a360a626776d94e0afa20060b8293d408fd65528b59cabfc8982a8eaeef182633d9b8d899bc93e1a7caed34b82d00e32b8d376535ba66083ab5ba704d73bd1e3e2d283412ddbb729c54f24cc1e6a0a04f2ee3fe932b5393b552229d252393caa918ec414768f6ca4317665b164bb773dd01f8a32a14a9fb6f0fdda3dee486784c245ed1eda87e6a990763159cc10362a57d015b5f587be06a63ed4472eb6e2cd70379c0a12dc9656d5db0a56d519efe8179213734e269fd5ae9c8c1d548697e11bbacd1920bf29f3708dc640bce544bc3200f11bdacdd473fff1dd48a0b47a1b2d6d2240fac0bac89a06f886847e5de5320082b1702a1f87a65af283c88c2afab764df1d5c067ec42bdd7fc778abec2bdbc00a05d5aec1f815a40583588fc74f019b9b2ad9af68b2930c7250ec546e2da3da4a8cfd8e498e5ba540ed4a4cbc53d1bafffd2770757223f28075c579a2e132779926fb92188bf2c0485af61af8b3bc3a63dd42702dcf173a3c1678da79e061d40c816b35d6a24ef7d6d068b975dbbb8376553c980c25aeb62c2581236d24d0db7a98bcadf880d7030078d04c08aa985de86bc145ed740698a58dbc2a40c35fd44c6bab462056593bf65d17b2f40d28630fb02f0eb67064a1f5190b8a53c669ddfae038ee35e6504ab1b977a441244747967075f4f8e53e37654fc63e5cbc04fecdcff8f7bfbcfa8f370a38d04631458d36b07522859b0a8f9704d3797ffc0700564c3dcac485ea7fb220f7e010f1f120df3f39b45968f63e51b7e46727674cff76b4227bac95f429d1d4c8bd8ee92a094e2afca735157274c528cf85418735823652a1dd4b496b65d5bcd6ba814641d8ae10849072b82df330f084335b788a01532969fe7ca741c0152b180b3db78bef6da84a99505341223359a076fc2ebf31d6c20bad1ba78155baf36153074007542c986473d7bdc00bdf1ee2ea40fb88c8372b110a813296207af7b6e8c4d25223f8c2fb17ea51ccceed6b188ef0c42cb2a5a0facec5a76e3edfe351630f261c56ecc5681f97c65c81948dd9adce98f46d0d8bf8340baf24127e9406a90bcce3a0f8e0ac9f4e8597f4d61c2428c86dd358f084d714f8243786acfb8b6b6a9ba6c429870b67ce4513b0c07f163c9c5302f23ca9fd0e38496ad376f27c6e7254c47f407174ed4446acecb056431692b0f9accabe551c3eeb6075089db4fa8ff8fc04af925910a16716db3d5e68c2e66d165bee73cf4698886c338689805b726d14253c3cc8d2a10fa3b421018f7628d181c66c5b268417abf8920f8d966ccadde9af2f0e42711f4f9a01db807d144439c7a07b282a7d0fca8e1856c529db9e0d35fca5899b3ec9986cd246e3d220d936b66eb553f8d1ba395993af46148e5abc479317e238f6f4745d8a545106ce97dff186ef997350906ed95cfa64c9d24866f6ecc8ced1d5a80247c9903abe477c6b91300ca426cce5a7b19e51fdcf1825e0d0d3092f938d855cc62c9fb875df21d46991b46265315e1e8fd56a38136760e3aa9962b2aef5f37680c0134d30c91a8743824f496924aa3ec5d3f6e9369957e84e206d3fe0dab7396b0779dc1734e687095250ed5d2da68be6d90c353e89b4d78de58b183818af8ec6bdeb7af0b7b2cf6c8ad96ea8757895297598e9bf0e6f42eacff168f26ba99a20cdcadf12e7f3f0501001c0eb8dba8ab57fcea23afe6a861265b10fb8ad353dcdbf18daf88554280e99261f7817d60b6881fd5eff0fd855161406ffed59250b5b8cfd4fbd10bd19ee2e65138f54ae75ca188dc5b41e0e9f341e1f541d4b1e606aa87bdd4f0addd13f3e17e9d953184e32b2c147238329de8f9a02f7bc112eb266aef96a7ccfec52a3867403ee5934f39ba61ff12b74f53e2b56671c71fd07aaa0145333e5d1f06550a8256af6aa9517890f6419f64c960e284c72ebd8a7ba3233abe01b01ff072b314eb53454d90eeec017f2f53771c09d5b32d95c552b62ba3cb7482271daecb7c9ca9f782660620a524db067d9631c873ead0c4e4becbc1581d9dbdbf041cf58ffb58e468521470a0f295b7fd992d0fff50fb25ae18cf4d165f2ce2765115b70e200d9804641359161543899266ae2684d4ac5fee2191789cf89837cd527e16a1b826f3d8404f52dad5b1a93bc87ee96c91d2ca7849e94488795990ad9f857c63fbf4639c11d159c78c16da5b8ed0813ddd4b7a31892fb752079a69377fcb9e03d34ee0bd9664a785605f51df8d77c33f5bb68bd0ad2dd928deff716bfb354f6c51affea7d126be107aa891d163e38f75229770740aebcdcd1194a226162a8373e34e099a8ce4f6bc08599bf3337efd80e4a6e48c1ea35d51b5fc078d469562a3f0f953e9da339f28fa6ff5b89d2be87513c8d3e7e19e6f2da758ae120f3fa60197de66562e62b81f988c31275582a0d895ce56f213c6ab21178f562a4c029ea4255ed0f888818ebba62280ca129f8e9666d291198e5dffc5f5ccf2950e92a5ef316a97e746abe40ff5873428b347adc2a1cfb61993d9f15eb683a3d7bb0884eb6cade08254f1949c85647d3f9348e6a2bf0befee7064ad35b81ac662b0d1516ad03e42fcafe9e64071dd895934041dff44434db54fe71a6054355b22ea5e15a525acee801a95897ab0bb5ab34ce528914d46f0d259b72c6897387d827e41f68256a03405a58fcef8f92607da59b4127c1413cacbad770b61ab9f0167f1f8a936e724e5c91f6ddc17b3b50ebedd9a78180a62c173ba54dea16e2dad53d8a381f2f869783e9033160023", 0xdc0}, {&(0x7f00000006c0)}], 0x3, 0x0, 0xe0}}], 0x5, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f00000008c0)) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 4m21.318356748s ago: executing program 5 (id=1691): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 4m20.732263911s ago: executing program 5 (id=1694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 4m20.508418671s ago: executing program 5 (id=1696): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x801) syz_emit_vhci(0x0, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 4m19.39858362s ago: executing program 5 (id=1698): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 4m17.264284661s ago: executing program 5 (id=1703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x4c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010104}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) 4m17.138382201s ago: executing program 55 (id=1703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x4c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010104}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) 11.239317967s ago: executing program 2 (id=3372): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x28008841) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x0, 0xd304}, 0x8, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x7fffffff, 0x6f0f88ae}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 8.394460471s ago: executing program 4 (id=3375): close(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x491, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp={0x44, 0x4, 0x20, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x479, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0x49f) 8.328990027s ago: executing program 2 (id=3377): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24000040) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket(0x28, 0x6, 0x0) sendto(r2, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xfff2, 0x1}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x800020000000005) accept4$llc(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 7.743494669s ago: executing program 6 (id=3383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 7.576218564s ago: executing program 8 (id=3384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r3, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) 7.539666737s ago: executing program 6 (id=3385): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0x7a) 7.488999552s ago: executing program 4 (id=3386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000002000000000000040017028500000011000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.262079892s ago: executing program 6 (id=3387): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000080002009111640b00000000950f3beaaf5a1c63318900000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x112002, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) splice(r1, 0x0, r0, 0x0, 0x1100000000f336, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x2, 0x8000}, {0xc, 0x8000, 0xd0}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x2e, 0x5f, 0x7f, 0x0, 0x2e]}}, &(0x7f0000000700)=""/236, 0x5e, 0xec, 0x0, 0x6, 0x10000}, 0x28) listen(0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r0, 0x2}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x12, &(0x7f0000000f00)=ANY=[@ANYBLOB="549902000000000018110000ec45f8ed31ebca3e7a14c97ad72c41efe35315eadc45d1ba775909d478c0b100930ae0100b06adb0818d05c79dd2c385194d6c2f670fdee81179db8cbd8713d2ca173adbad083bc187ce328184a6c13b744dd9059b66e929ddccf164c709f92375cb63", @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r6, @ANYBLOB="07f953217c1807ad0189681146dadb73b4c9addeea6351fb1ccb3e7c598a5ae2091066953c26df895b1a928c9579fd51a89c5f5132e3b22a5410db758107f99f67392db6119d8312315311a8ed7d385674b037b7f5242ccead0ed85da3738f1c937c5b79d22f2d09374a99f2480ec96687c47c6f1854bafaf970222f86a2bf143e36", @ANYRESHEX], &(0x7f00000004c0)='syzkaller\x00', 0x8d0a, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xb, 0xfffbffc0, 0x8bf}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x1, r5, r7], &(0x7f00000008c0)=[{0x0, 0x1, 0xf, 0x6}, {0x0, 0x2, 0x3, 0x1}, {0x2005, 0x4, 0xe, 0x3}, {0xfffffffe, 0x3, 0x2, 0xb}], 0x10, 0x40000002}, 0x94) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r10, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r10, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 7.202688287s ago: executing program 4 (id=3388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 7.201867327s ago: executing program 2 (id=3389): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd98a, 0x3, 0x3, 0xa08d, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1ff, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x800007, 0x7, 0x7, 0x5, 0x0, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0x7, 0x4, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x0, 0x7, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x6, 0xf5c, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x7, 0x8, 0x6, 0xe2f3, 0x4, 0x7d, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xffffec00, 0x0, 0x10004, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x3d, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x9, 0x6, 0x8, 0xe, 0xe459, 0x1, 0xc7, 0x81, 0x40, 0x0, 0x9, 0x3fe5, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x1, 0x7, 0xb, {0x7, 0x2, 0x4, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.679989041s ago: executing program 6 (id=3395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 3.570122951s ago: executing program 9 (id=3396): close(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x491, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp={0x44, 0x4, 0x20, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x479, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0x49f) 3.569659771s ago: executing program 2 (id=3397): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0x7a) 3.569413771s ago: executing program 8 (id=3398): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0xfffc, @loopback}, 0x10, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) 3.460176651s ago: executing program 4 (id=3399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xc, [{{0x9, 0x4, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0xb, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xb, 0x20}}}}}]}}]}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.432875983s ago: executing program 6 (id=3400): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24000040) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket(0x28, 0x6, 0x0) sendto(r2, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xfff2, 0x1}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x800020000000005) accept4$llc(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 2.809622749s ago: executing program 8 (id=3401): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.740028095s ago: executing program 2 (id=3402): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) 2.738654925s ago: executing program 9 (id=3403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe33, 0xffff, 0x1, 0x38, 0x6}, 0x55}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004800) 2.430052923s ago: executing program 9 (id=3404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.338529181s ago: executing program 6 (id=3405): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xb}]}, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4d2f02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0) 2.227629461s ago: executing program 9 (id=3406): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x10004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) 2.041641577s ago: executing program 8 (id=3407): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@part={'part', 0x3d, 0x500f}}, {@nodecompose}, {}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.152004537s ago: executing program 9 (id=3408): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd98a, 0x3, 0x3, 0xa08d, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1ff, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x800007, 0x7, 0x7, 0x5, 0x0, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0x7, 0x4, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x0, 0x7, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x6, 0xf5c, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x7, 0x8, 0x6, 0xe2f3, 0x4, 0x7d, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xffffec00, 0x0, 0x10004, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x3d, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x9, 0x6, 0x8, 0xe, 0xe459, 0x1, 0xc7, 0x81, 0x40, 0x0, 0x9, 0x3fe5, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x1, 0x7, 0xb, {0x7, 0x2, 0x4, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.118820979s ago: executing program 4 (id=3409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800"], 0xe0}}, 0x0) close(0x3) 979.319442ms ago: executing program 8 (id=3410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x200a, 0x6, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 492.229065ms ago: executing program 8 (id=3411): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa434", 0x40}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nodiscard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) 478.648187ms ago: executing program 4 (id=3412): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0x7a) 411.373843ms ago: executing program 2 (id=3413): close(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x491, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp={0x44, 0x4, 0x20, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x479, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0x49f) 0s ago: executing program 9 (id=3414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000680001002abd7000fddbdf25020002000000000004000b0014000600fc010000000000000000000000000001d4d7ecb7363b5fb977d02fc8c231421adfd3ce0e1b91f4d716012453b9301ecdaf13f53a49e21260200e9e6a7ec73be1fad98ee80c484a7dd6b60b2e257f"], 0x30}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@ipv4_getaddr={0x18, 0x16, 0x701, 0x70bd2c, 0x25dfdbfb, {0x2, 0x38, 0xe0}}, 0x18}}, 0x8004084) kernel console output (not intermixed with test programs): device number 7 using dummy_hcd [ 968.851430][ T4309] usb 8-1: Using ep0 maxpacket: 8 [ 968.858789][ T4309] usb 8-1: unable to get BOS descriptor or descriptor too short [ 968.909914][ T4309] usb 8-1: config 7 has an invalid interface number: 213 but max is 0 [ 968.951112][ T4309] usb 8-1: config 7 has no interface number 0 [ 968.971122][ T4309] usb 8-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 969.040372][ T4309] usb 8-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 969.052311][ T4309] usb 8-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 969.062940][ T4309] usb 8-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 969.074619][ T4309] usb 8-1: config 7 interface 213 has no altsetting 0 [ 969.111811][ T4309] usb 8-1: string descriptor 0 read error: -71 [ 969.119965][ T4309] usb 8-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 969.251139][ T4309] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.347223][ T4309] usb 8-1: can't set config #7, error -71 [ 969.385619][ T4309] usb 8-1: USB disconnect, device number 7 [ 970.367911][T12767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 970.404803][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1576'. [ 973.055042][T12798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 973.800256][T12810] loop5: detected capacity change from 0 to 256 [ 974.891311][ T9532] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 975.663648][ T9532] usb 6-1: Using ep0 maxpacket: 8 [ 975.682706][ T9532] usb 6-1: unable to get BOS descriptor or descriptor too short [ 975.763369][ T9532] usb 6-1: config 7 has an invalid interface number: 213 but max is 0 [ 975.811221][ T9532] usb 6-1: config 7 has no interface number 0 [ 975.831222][ T9532] usb 6-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 975.874415][ T9532] usb 6-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 975.926517][ T9532] usb 6-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 975.967537][ T9532] usb 6-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 976.010252][ T9532] usb 6-1: config 7 interface 213 has no altsetting 0 [ 976.076128][ T9532] usb 6-1: language id specifier not provided by device, defaulting to English [ 976.097298][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 976.107087][ T9532] usb 6-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 976.147022][ T9532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.181516][ T9532] usb 6-1: Product: syz [ 976.185725][ T9532] usb 6-1: Manufacturer: syz [ 976.216220][ T9532] usb 6-1: SerialNumber: syz [ 976.245621][T12808] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 976.288228][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 978.560199][ T9532] pegasus: probe of 6-1:7.213 failed with error -71 [ 978.622717][ T9532] usb 6-1: USB disconnect, device number 18 [ 979.260713][T12848] loop6: detected capacity change from 0 to 256 [ 980.211219][ T8470] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 980.421200][ T8470] usb 7-1: Using ep0 maxpacket: 8 [ 980.427996][ T8470] usb 7-1: unable to get BOS descriptor or descriptor too short [ 980.476507][ T8470] usb 7-1: config 7 has an invalid interface number: 213 but max is 0 [ 980.494035][ T8470] usb 7-1: config 7 has no interface number 0 [ 980.510782][ T8470] usb 7-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 980.521554][ T8470] usb 7-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 980.542942][ T8470] usb 7-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 980.564066][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 980.930044][T12869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 981.619703][ T8470] usb 7-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 981.630836][ T8470] usb 7-1: config 7 interface 213 has no altsetting 0 [ 981.658986][ T8470] usb 7-1: language id specifier not provided by device, defaulting to English [ 981.675865][ T8470] usb 7-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 981.691118][ T8470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.703546][ T8470] usb 7-1: Product: syz [ 981.710984][ T8470] usb 7-1: Manufacturer: syz [ 981.718854][ T8470] usb 7-1: SerialNumber: syz [ 982.072601][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1611'. [ 982.235208][T12875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1611'. [ 984.437222][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 984.608325][ T8470] usb 7-1: can't set config #7, error -71 [ 984.622513][ T8470] usb 7-1: USB disconnect, device number 13 [ 984.726362][T12892] loop7: detected capacity change from 0 to 2048 [ 984.841682][T12892] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 986.457299][T12925] loop5: detected capacity change from 0 to 256 [ 986.771233][ T9532] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 987.051269][ T9532] usb 6-1: Using ep0 maxpacket: 8 [ 987.062926][ T9532] usb 6-1: unable to get BOS descriptor or descriptor too short [ 987.110507][ T9532] usb 6-1: config 7 has an invalid interface number: 213 but max is 0 [ 987.151932][ T9532] usb 6-1: config 7 has no interface number 0 [ 987.196684][ T9532] usb 6-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 987.300260][ T9532] usb 6-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 987.351530][ T9532] usb 6-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 987.385096][ T9532] usb 6-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 987.452223][ T9532] usb 6-1: config 7 interface 213 has no altsetting 0 [ 987.497287][ T9532] usb 6-1: language id specifier not provided by device, defaulting to English [ 987.513810][T12932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 987.522938][ T9532] usb 6-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 987.561215][ T9532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.569645][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 987.590443][ T9532] usb 6-1: Product: syz [ 988.704628][ T9532] usb 6-1: Manufacturer: syz [ 988.972926][ T9532] usb 6-1: SerialNumber: syz [ 988.996578][ T9532] usb 6-1: can't set config #7, error -71 [ 989.058309][ T9532] usb 6-1: USB disconnect, device number 19 [ 989.654142][T11097] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 989.875957][T12899] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 990.010651][T12899] EXT4-fs (loop7): This should not happen!! Data will be lost [ 990.010651][T12899] [ 990.160650][T12899] EXT4-fs (loop7): Total free blocks count 0 [ 990.245810][T12899] EXT4-fs (loop7): Free/Dirty block details [ 990.274138][T12899] EXT4-fs (loop7): free_blocks=2415919520 [ 990.305261][T12899] EXT4-fs (loop7): dirty_blocks=1584 [ 990.351605][T12899] EXT4-fs (loop7): Block reservation details [ 990.379780][T12899] EXT4-fs (loop7): i_reserved_data_blocks=99 [ 990.433690][ T51] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 1572 with error 28 [ 990.474126][ T51] EXT4-fs (loop7): This should not happen!! Data will be lost [ 990.474126][ T51] [ 991.587280][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.841624][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.847962][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.371448][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.742322][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.154027][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.642847][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1638'. [ 994.741936][T12989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1638'. [ 995.112552][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 995.124052][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 995.132767][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 995.140449][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 995.148251][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 995.155558][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 995.274289][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1646'. [ 995.485662][T12994] lo speed is unknown, defaulting to 1000 [ 995.858783][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1648'. [ 996.245806][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1652'. [ 996.514127][T13035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1652'. [ 996.598075][T13046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 997.281729][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 997.518713][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 997.852284][T12994] chnl_net:caif_netlink_parms(): no params data found [ 998.124601][T13074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 998.702838][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'. [ 998.725865][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1663'. [ 999.044244][T13101] loop1: detected capacity change from 0 to 2048 [ 999.215581][T13101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 999.382970][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 1000.628514][T11189] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1000.770334][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.770956][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 1000.801735][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.839776][T12994] device bridge_slave_0 entered promiscuous mode [ 1000.860230][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1667'. [ 1000.900930][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1667'. [ 1000.934133][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.968849][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.018101][T12994] device bridge_slave_1 entered promiscuous mode [ 1001.193851][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.441358][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 1001.481578][ T9] device hsr_slave_0 left promiscuous mode [ 1001.503088][ T9] device hsr_slave_1 left promiscuous mode [ 1001.530874][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.578706][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.611615][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.672106][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.717029][ T9] device bridge_slave_1 left promiscuous mode [ 1001.742962][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.809744][ T9] device bridge_slave_0 left promiscuous mode [ 1001.824458][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.987630][T13121] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 1002.005457][T13121] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1002.005457][T13121] [ 1002.026814][T13121] EXT4-fs (loop1): Total free blocks count 0 [ 1002.033284][ T9] device veth1_macvtap left promiscuous mode [ 1002.046476][T13121] EXT4-fs (loop1): Free/Dirty block details [ 1002.066966][T13121] EXT4-fs (loop1): free_blocks=2415919520 [ 1002.079546][T13121] EXT4-fs (loop1): dirty_blocks=1440 [ 1002.091540][T13121] EXT4-fs (loop1): Block reservation details [ 1002.104198][T13121] EXT4-fs (loop1): i_reserved_data_blocks=90 [ 1002.133619][ T9] device veth0_macvtap left promiscuous mode [ 1002.151436][ T9] device veth1_vlan left promiscuous mode [ 1002.157285][ T9] device veth0_vlan left promiscuous mode [ 1002.243205][T13121] EXT4-fs (loop1): unmounting filesystem. [ 1002.966538][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1002.977161][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.989766][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.999881][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.019587][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1003.028782][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.288911][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1003.329469][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1003.375454][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.419045][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.521127][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 1003.710071][ T9] bond0 (unregistering): Released all slaves [ 1003.796807][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.806932][T13140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1003.814183][T13140] IPv6: NLM_F_CREATE should be set when creating new route [ 1003.821825][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1676'. [ 1003.835966][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 1003.956568][T12994] team0: Port device team_slave_0 added [ 1003.980740][T13149] lo speed is unknown, defaulting to 1000 [ 1004.002746][T12994] team0: Port device team_slave_1 added [ 1004.120264][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.184205][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.213658][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.225731][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.233243][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.261436][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.326174][T12994] device hsr_slave_0 entered promiscuous mode [ 1004.362241][T12994] device hsr_slave_1 entered promiscuous mode [ 1004.402836][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'. [ 1004.472598][T12994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1004.488162][T12994] Cannot create hsr debugfs directory [ 1004.501355][T13163] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1684'. [ 1004.585852][T13163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.593194][T13163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.786244][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'. [ 1004.938669][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1688'. [ 1005.514029][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 1005.894441][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 1006.180798][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.372596][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.397079][T13149] chnl_net:caif_netlink_parms(): no params data found [ 1006.566446][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.726952][T13192] loop5: detected capacity change from 0 to 2048 [ 1006.814322][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.833178][T13192] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1006.977818][T13197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1007.568313][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1690'. [ 1007.601138][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 1007.642057][T11682] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1008.420074][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1697'. [ 1008.452577][T13149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.502804][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.518428][T13149] device bridge_slave_0 entered promiscuous mode [ 1008.635486][T13149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.656403][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.685848][T13149] device bridge_slave_1 entered promiscuous mode [ 1008.907602][T13149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.004163][T13149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.046340][T12994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1009.113435][T12994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1009.183992][T12994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1009.219907][T13149] team0: Port device team_slave_0 added [ 1009.245459][T12994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1009.271210][T13149] team0: Port device team_slave_1 added [ 1009.394032][T13149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.408060][T13206] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 1009.445970][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.478639][T13206] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1009.478639][T13206] [ 1009.518832][T13206] EXT4-fs (loop5): Total free blocks count 0 [ 1009.540119][T13206] EXT4-fs (loop5): Free/Dirty block details [ 1009.556696][T13206] EXT4-fs (loop5): free_blocks=2415919520 [ 1009.576417][T13149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.576435][T13206] EXT4-fs (loop5): dirty_blocks=384 [ 1009.615578][T13206] EXT4-fs (loop5): Block reservation details [ 1009.636218][T13206] EXT4-fs (loop5): i_reserved_data_blocks=24 [ 1009.676823][T13206] EXT4-fs (loop5): unmounting filesystem. [ 1009.682688][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 1009.880782][T13149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.895742][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.981301][T13149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.214663][T13149] device hsr_slave_0 entered promiscuous mode [ 1010.245929][T13149] device hsr_slave_1 entered promiscuous mode [ 1010.247105][T13248] loop6: detected capacity change from 0 to 2048 [ 1010.259161][T13149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.273157][T13149] Cannot create hsr debugfs directory [ 1010.407424][T13248] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1010.514919][T12994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.276806][T13260] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1012.291533][T13260] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 1012.303697][T13260] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1012.303697][T13260] [ 1012.313333][T13260] EXT4-fs (loop6): Total free blocks count 0 [ 1012.319496][T13260] EXT4-fs (loop6): Free/Dirty block details [ 1012.325632][T13260] EXT4-fs (loop6): free_blocks=2415919504 [ 1012.331365][T13260] EXT4-fs (loop6): dirty_blocks=41216 [ 1012.336714][T13260] EXT4-fs (loop6): Block reservation details [ 1012.342682][T13260] EXT4-fs (loop6): i_reserved_data_blocks=2064 [ 1012.351124][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 1012.379041][ T4402] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 1012.502810][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1012.514103][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1012.521974][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1012.532101][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1012.542351][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1012.549617][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1012.631121][T12994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.642438][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1012.656573][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1012.750388][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1012.764802][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1012.788866][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.796099][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.839273][T13261] lo speed is unknown, defaulting to 1000 [ 1012.909532][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1012.934834][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1012.977640][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1013.021860][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.028970][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.309946][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1013.388657][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1013.417387][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1013.433656][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1013.633812][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1013.669203][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1013.679836][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1014.683317][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 1014.716288][T12994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1014.726879][T12994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1014.840905][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1014.868760][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1014.912392][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1014.947949][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1014.978472][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1015.136137][ T9] device hsr_slave_0 left promiscuous mode [ 1015.158104][ T9] device hsr_slave_1 left promiscuous mode [ 1015.181603][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.189036][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.221994][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.229750][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.269406][ T9] device bridge_slave_1 left promiscuous mode [ 1015.283624][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.293262][ T9] device bridge_slave_0 left promiscuous mode [ 1015.299482][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.417473][ T9] device veth1_macvtap left promiscuous mode [ 1015.423709][ T9] device veth0_macvtap left promiscuous mode [ 1015.429812][ T9] device veth1_vlan left promiscuous mode [ 1015.460992][ T9] device veth0_vlan left promiscuous mode [ 1016.506397][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1016.577498][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1016.652002][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.720556][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.730336][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 1017.718860][ T9] bond0 (unregistering): Released all slaves [ 1017.875055][T13297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1017.895541][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1709'. [ 1017.957062][T13149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1018.029385][T13149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1018.119895][T13149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1018.159865][T13149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1018.794939][T13261] chnl_net:caif_netlink_parms(): no params data found [ 1018.802117][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 1018.945377][T12994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.995520][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1019.029254][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1020.881903][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 1021.338195][T13355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1021.368650][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1726'. [ 1021.390349][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.428382][T13261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.463837][T13261] device bridge_slave_0 entered promiscuous mode [ 1021.485651][T13149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.523097][T13261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.535781][T13261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.553160][T13261] device bridge_slave_1 entered promiscuous mode [ 1021.583664][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1021.597888][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1021.617506][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1021.635664][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.654524][T13149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.672623][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1728'. [ 1021.700871][T12994] device veth0_vlan entered promiscuous mode [ 1021.713283][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1021.723274][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1021.732500][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1021.741640][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.750301][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.757449][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.774849][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.788950][T12994] device veth1_vlan entered promiscuous mode [ 1021.802895][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1728'. [ 1021.820047][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1021.839960][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1021.852177][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1021.868651][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1021.891937][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.912273][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.920759][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.927912][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.950001][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1021.963317][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1021.978100][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.049637][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.136728][T13383] Bluetooth: MGMT ver 1.22 [ 1022.456867][T12994] device veth0_macvtap entered promiscuous mode [ 1022.508037][T12994] device veth1_macvtap entered promiscuous mode [ 1022.536924][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.547541][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.577553][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.600505][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.615359][T12994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.645042][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.659068][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.679963][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.691800][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.708387][T12994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.720603][T12994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.734644][T12994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.746096][T12994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.775407][T12994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.979176][ T6766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.009830][ T6766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.066821][ T6766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.084722][ T6766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.339877][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1023.374147][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1023.384398][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1023.393685][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1023.401809][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1023.410242][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1023.420707][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1023.430508][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1023.439657][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1023.448774][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1023.457816][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1023.468877][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1023.478181][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1023.486909][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1023.499302][T13149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.510291][T13149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.550398][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.621267][T13391] team0 (unregistering): Port device team_slave_0 removed [ 1023.639917][T13391] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1023.649384][T13391] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1023.660514][T13391] team0 (unregistering): Port device team_slave_1 removed [ 1023.678992][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1023.687269][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1023.698281][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1023.706851][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1023.715518][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1023.724507][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1023.771801][T13261] team0: Port device team_slave_0 added [ 1023.825387][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.871638][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1023.892412][T13261] team0: Port device team_slave_1 added [ 1024.055531][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.072106][T13261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.093237][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.181133][T13261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.228771][T13261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.271135][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.361796][T13261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.529771][T13261] device hsr_slave_0 entered promiscuous mode [ 1024.547014][T13261] device hsr_slave_1 entered promiscuous mode [ 1024.570790][T13261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.604935][T13261] Cannot create hsr debugfs directory [ 1024.668974][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1024.686879][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1024.760468][T13149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.871397][T13424] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 1024.883746][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 1024.983626][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1025.002182][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1025.139967][T13149] device veth0_vlan entered promiscuous mode [ 1025.170844][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1025.180535][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1025.189353][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1025.205401][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1025.249693][T13149] device veth1_vlan entered promiscuous mode [ 1025.420764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1025.438586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1025.438659][T13445] sctp: [Deprecated]: syz.9.1753 (pid 13445) Use of int in max_burst socket option. [ 1025.438659][T13445] Use struct sctp_assoc_value instead [ 1025.481695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1025.490597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1025.519813][T13447] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1754'. [ 1025.626038][T13149] device veth0_macvtap entered promiscuous mode [ 1025.644633][T13444] lo speed is unknown, defaulting to 1000 [ 1025.651670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1025.729862][T13149] device veth1_macvtap entered promiscuous mode [ 1025.837318][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.854792][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.872295][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.883635][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.893787][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.904522][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.932056][T13149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.949589][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1756'. [ 1026.015977][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1026.024712][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1026.047987][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.070926][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.103466][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.126097][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.151203][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.167042][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.179010][T13149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.203866][T13149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.214259][T13149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.223491][T13149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.232332][T13149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.332324][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1026.352923][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1026.727874][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.729084][T13261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1026.749941][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.798511][T13261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1026.817762][T13261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1026.847758][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1026.867164][T13476] tipc: Failed to remove unknown binding: 66,0,0/0:1823276283/1823276285 [ 1026.884459][T13476] tipc: Failed to remove unknown binding: 66,0,0/0:1823276283/1823276284 [ 1026.897147][T13476] tipc: Failed to remove unknown binding: 66,0,0/0:1823276283/1823276285 [ 1026.909589][T13476] tipc: Failed to remove unknown binding: 66,0,0/0:1823276283/1823276284 [ 1026.951224][T13261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1027.029098][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.037437][T13479] netlink: 'syz.6.1768': attribute type 2 has an invalid length. [ 1027.043805][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.045574][T13479] netlink: 'syz.6.1768': attribute type 7 has an invalid length. [ 1027.060707][T13479] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1768'. [ 1027.091033][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1027.279974][T13261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.321714][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1027.335335][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1027.396127][T13261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.407430][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1027.416811][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.425401][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.432560][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.883753][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1028.037277][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1028.047229][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1028.057357][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.064476][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.151604][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1028.170678][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1028.201427][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1028.223153][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1028.254901][T13261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1028.314905][T13261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.386266][ T9] device hsr_slave_0 left promiscuous mode [ 1028.397254][ T9] device hsr_slave_1 left promiscuous mode [ 1028.422462][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.458622][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.502596][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.510031][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.537901][ T9] device bridge_slave_1 left promiscuous mode [ 1028.557649][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.566634][ T9] device bridge_slave_0 left promiscuous mode [ 1028.573906][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.680291][ T9] device veth1_macvtap left promiscuous mode [ 1028.690791][ T9] device veth0_macvtap left promiscuous mode [ 1028.707166][ T9] device veth1_vlan left promiscuous mode [ 1028.721255][ T9] device veth0_vlan left promiscuous mode [ 1029.589250][T13522] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 1030.082131][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1030.176862][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1030.270969][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.360360][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.043009][ T9] bond0 (unregistering): Released all slaves [ 1031.218439][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1031.237534][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1031.247335][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1031.301544][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1031.310969][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1031.321575][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1031.330547][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1031.340529][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1031.365762][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1777'. [ 1031.388043][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'. [ 1031.498321][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1778'. [ 1032.428179][T13545] netlink: 828 bytes leftover after parsing attributes in process `syz.9.1782'. [ 1032.545759][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1032.604422][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1032.671703][T13261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.944864][T13558] netlink: 763 bytes leftover after parsing attributes in process `syz.9.1787'. [ 1034.006542][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1791'. [ 1034.118310][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1791'. [ 1034.411920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1034.420812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1034.468262][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1034.482436][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1034.521856][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1034.548803][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1034.601493][T13261] device veth0_vlan entered promiscuous mode [ 1034.638734][T13261] device veth1_vlan entered promiscuous mode [ 1034.991922][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1035.076186][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1035.193700][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1035.253955][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1035.319759][T13261] device veth0_macvtap entered promiscuous mode [ 1035.350132][T13605] netlink: 'syz.8.1799': attribute type 1 has an invalid length. [ 1035.425203][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1799'. [ 1036.098480][T13616] netlink: 828 bytes leftover after parsing attributes in process `syz.2.1793'. [ 1038.304145][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.311635][T13605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.364374][T13261] device veth1_macvtap entered promiscuous mode [ 1038.386555][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1038.446667][T13261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.481107][T13261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.511191][T13261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.611157][T13261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.660851][T13261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.701132][T13261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.751579][T13261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.769223][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1805'. [ 1038.830022][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1038.840122][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.128976][T13656] netlink: 828 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1040.185247][T13261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.200906][T13261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.210802][T13261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.226077][T13261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.241696][T13261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.256318][T13261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.277120][T13261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.302136][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1805'. [ 1040.324609][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.357294][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.399114][T13261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.416211][T13261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.461137][T13261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.506166][T13261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.708292][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.741491][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.784491][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1042.786202][T13676] loop8: detected capacity change from 0 to 2048 [ 1042.804788][ T4567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.832505][ T4567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.852305][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1042.945581][T13676] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1044.028757][T13685] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1044.043527][T13685] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 1044.055703][T13685] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1044.055703][T13685] [ 1044.065335][T13685] EXT4-fs (loop8): Total free blocks count 0 [ 1044.071313][T13685] EXT4-fs (loop8): Free/Dirty block details [ 1044.077181][T13685] EXT4-fs (loop8): free_blocks=2415919504 [ 1044.082939][T13685] EXT4-fs (loop8): dirty_blocks=32960 [ 1044.088285][T13685] EXT4-fs (loop8): Block reservation details [ 1044.094272][T13685] EXT4-fs (loop8): i_reserved_data_blocks=2060 [ 1044.387009][ T4567] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 1045.113929][T13709] netlink: 'syz.6.1827': attribute type 72 has an invalid length. [ 1045.138504][T13709] netlink: 'syz.6.1827': attribute type 8 has an invalid length. [ 1045.336292][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'. [ 1045.379814][T13716] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1828'. [ 1049.508913][T12994] EXT4-fs: 31 callbacks suppressed [ 1049.508929][T12994] EXT4-fs (loop8): unmounting filesystem. [ 1049.737058][T13756] netlink: 763 bytes leftover after parsing attributes in process `syz.8.1823'. [ 1050.924263][T13779] netlink: 'syz.2.1844': attribute type 12 has an invalid length. [ 1051.640280][T13785] netlink: 'syz.4.1846': attribute type 13 has an invalid length. [ 1051.656956][T13785] netlink: 'syz.4.1846': attribute type 17 has an invalid length. [ 1051.823018][T13785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1051.866939][T13785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1052.933659][T13823] device syzkaller0 entered promiscuous mode [ 1054.226546][T13787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1054.251019][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.257373][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.203594][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 1056.212695][T13838] netlink: 763 bytes leftover after parsing attributes in process `syz.9.1853'. [ 1056.222157][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 1056.231792][T13839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1056.239014][T13839] IPv6: NLM_F_CREATE should be set when creating new route [ 1056.251038][T13854] device ipvlan1 entered promiscuous mode [ 1056.312115][T13854] device ipvlan1 left promiscuous mode [ 1056.439649][T13856] lo speed is unknown, defaulting to 1000 [ 1057.996924][T13876] lo speed is unknown, defaulting to 1000 [ 1058.339150][T13894] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1058.418725][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1870'. [ 1058.966557][T13913] syz.9.1875[13913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1058.966687][T13913] syz.9.1875[13913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1059.177069][T13919] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.200097][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1878'. [ 1059.775216][T13919] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.841476][T13930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1876'. [ 1060.563305][T13939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1061.285145][T13967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1888'. [ 1062.770041][T13994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1063.265878][T13980] lo speed is unknown, defaulting to 1000 [ 1063.438868][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 1063.478386][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 1063.508986][T14004] netlink: 'syz.4.1897': attribute type 11 has an invalid length. [ 1063.568942][T14004] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.578538][T14004] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.587309][T14004] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.596069][T14004] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.612884][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 1063.688874][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 1063.756417][T14004] netlink: 'syz.4.1897': attribute type 11 has an invalid length. [ 1063.969129][T14017] netdevsim netdevsim6: Direct firmware load for - [ 1063.969129][T14017] failed with error -2 [ 1064.020294][T14017] netdevsim netdevsim6: Falling back to sysfs fallback for: - [ 1064.020294][T14017] [ 1064.834699][T14032] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1904'. [ 1065.903758][T14061] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1065.971025][T14061] device syzkaller0 entered promiscuous mode [ 1066.486541][T14093] xt_cgroup: invalid path, errno=-2 [ 1067.303313][T14122] netlink: 'syz.6.1933': attribute type 12 has an invalid length. [ 1067.501799][T14128] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1067.521332][T14128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1067.730591][T14135] device syzkaller0 entered promiscuous mode [ 1068.350635][T14162] Bluetooth: MGMT ver 1.22 [ 1068.567916][T14168] netlink: 'syz.8.1949': attribute type 12 has an invalid length. [ 1068.752804][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 1068.891005][T14177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1068.898343][T14177] IPv6: NLM_F_CREATE should be set when creating new route [ 1069.903812][T14205] netlink: 'syz.2.1962': attribute type 12 has an invalid length. [ 1070.137546][T14214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1964'. [ 1070.367422][T14220] loop8: detected capacity change from 0 to 256 [ 1070.671200][ T8470] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1070.871127][ T8470] usb 9-1: Using ep0 maxpacket: 8 [ 1070.878983][ T8470] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1070.922386][ T8470] usb 9-1: config 7 has an invalid interface number: 213 but max is 0 [ 1070.941739][ T8470] usb 9-1: config 7 has no interface number 0 [ 1070.947902][ T8470] usb 9-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1070.999747][ T8470] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1071.069521][ T8470] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1071.108641][ T8470] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1071.132994][ T8470] usb 9-1: config 7 interface 213 has no altsetting 0 [ 1071.157870][ T8470] usb 9-1: language id specifier not provided by device, defaulting to English [ 1071.187413][ T8470] usb 9-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1071.208685][ T8470] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.226856][ T8470] usb 9-1: Product: syz [ 1071.234041][ T8470] usb 9-1: Manufacturer: syz [ 1071.238662][ T8470] usb 9-1: SerialNumber: syz [ 1071.254428][T14220] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1071.263602][T14231] device syzkaller0 entered promiscuous mode [ 1072.057513][T14251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.112110][T14067] Set syz1 is full, maxelem 65536 reached [ 1072.338296][T14262] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1072.539929][ T8470] pegasus: probe of 9-1:7.213 failed with error -71 [ 1072.572702][ T8470] usb 9-1: USB disconnect, device number 3 [ 1072.876527][T14270] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1976'. [ 1073.654805][T14301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.976264][T14315] device syzkaller0 entered promiscuous mode [ 1074.798181][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1997'. [ 1074.950366][T14357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1998'. [ 1075.121517][T14363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.168301][T14356] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.221626][T14361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1075.359769][T14356] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.504171][T14356] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.688507][T14356] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.946869][T14356] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.016557][T14356] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.067924][T14356] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.152705][T14356] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.380684][T14413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.390847][T14406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1077.355948][T14458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1077.363248][T14458] IPv6: NLM_F_CREATE should be set when creating new route [ 1077.641310][T14471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.685213][T14475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.526347][T14504] lo speed is unknown, defaulting to 1000 [ 1078.823548][T14518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1079.184919][T14533] ieee802154 phy1 wpan1: encryption failed: -22 [ 1079.252899][T14533] ieee802154 phy1 wpan1: encryption failed: -22 [ 1079.303081][T14533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2054'. [ 1079.367635][T14536] device syzkaller0 entered promiscuous mode [ 1080.066228][T14564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1080.816892][T14573] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2062'. [ 1081.129918][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 1081.139400][T14587] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2067'. [ 1081.149142][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2067'. [ 1081.525899][T14604] lo speed is unknown, defaulting to 1000 [ 1081.567387][T14608] device syzkaller0 entered promiscuous mode [ 1081.780482][T14614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1082.704259][T14626] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1082.753964][T14626] device syzkaller0 entered promiscuous mode [ 1082.818333][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2081'. [ 1082.977947][T14634] device ip6gretap1 left promiscuous mode [ 1083.299426][T14647] netlink: 'syz.2.2088': attribute type 12 has an invalid length. [ 1083.452517][T14651] device syzkaller0 entered promiscuous mode [ 1083.469140][T14654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1083.832779][ T4270] Bluetooth: hci0: command 0x0c1a tx timeout [ 1083.838970][ T4275] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1084.453864][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2095'. [ 1084.550097][T14678] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1084.587449][T14678] device syzkaller0 entered promiscuous mode [ 1084.692699][T14686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2098'. [ 1084.837707][T14692] tipc: Started in network mode [ 1084.857402][T14692] tipc: Node identity 4, cluster identity 4711 [ 1084.887712][T14692] tipc: Node number set to 4 [ 1084.934731][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2103'. [ 1085.349443][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 1085.533146][T14726] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1085.582963][T14726] device syzkaller0 entered promiscuous mode [ 1085.834639][T14737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2119'. [ 1086.981899][T14761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.010158][T14763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1087.041650][T14763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2127'. [ 1087.093718][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 1087.336591][T14777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2131'. [ 1087.908462][T14805] netlink: 'syz.2.2142': attribute type 29 has an invalid length. [ 1087.925129][T14805] netlink: 'syz.2.2142': attribute type 29 has an invalid length. [ 1088.645419][T14817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2145'. [ 1089.251265][T14827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.164300][T14861] loop8: detected capacity change from 0 to 256 [ 1090.491619][T13174] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1090.776866][T14862] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2159'. [ 1090.791234][T13174] usb 9-1: Using ep0 maxpacket: 8 [ 1090.798283][T13174] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1090.841742][T13174] usb 9-1: config 7 has an invalid interface number: 213 but max is 0 [ 1090.871473][T13174] usb 9-1: config 7 has no interface number 0 [ 1090.888647][T13174] usb 9-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1090.929256][T13174] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1090.993915][T13174] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1091.031412][T13174] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1091.072937][T13174] usb 9-1: config 7 interface 213 has no altsetting 0 [ 1091.104641][T13174] usb 9-1: language id specifier not provided by device, defaulting to English [ 1091.124791][T13174] usb 9-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1091.158015][T13174] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.177773][T13174] usb 9-1: Product: syz [ 1091.191375][T13174] usb 9-1: Manufacturer: syz [ 1091.199127][T13174] usb 9-1: SerialNumber: syz [ 1091.357243][T14861] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1091.391181][T14884] ieee802154 phy1 wpan1: encryption failed: -22 [ 1091.510362][T14885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1092.138581][T14892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1092.151583][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2169'. [ 1092.791163][T14917] ieee802154 phy1 wpan1: encryption failed: -22 [ 1092.918875][T13174] pegasus: probe of 9-1:7.213 failed with error -71 [ 1092.988077][T13174] usb 9-1: USB disconnect, device number 4 [ 1093.415643][T14940] lo speed is unknown, defaulting to 1000 [ 1093.448916][T14945] device dummy0 entered promiscuous mode [ 1093.478386][T14945] device macsec1 entered promiscuous mode [ 1093.506675][T14945] device dummy0 left promiscuous mode [ 1093.566923][T14950] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2189'. [ 1093.716806][T14959] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.755938][T14962] tipc: Failed to remove unknown binding: 66,0,0/0:851561162/851561163 [ 1094.430663][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.437843][T14996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.607742][T15004] ieee802154 phy1 wpan1: encryption failed: -22 [ 1094.659188][T15008] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2207'. [ 1095.017460][T15018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.843706][T15037] lo speed is unknown, defaulting to 1000 [ 1096.253779][T15060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2222'. [ 1096.756741][T15078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2226'. [ 1096.778880][T15077] lo speed is unknown, defaulting to 1000 [ 1097.026486][T15090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1097.033806][T15090] IPv6: NLM_F_CREATE should be set when creating new route [ 1097.121696][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1098.681316][T15124] ieee802154 phy1 wpan1: encryption failed: -22 [ 1099.110179][T15136] lo speed is unknown, defaulting to 1000 [ 1099.748160][T15152] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1100.148917][T15168] ieee802154 phy1 wpan1: encryption failed: -22 [ 1100.200055][T15165] device syzkaller0 entered promiscuous mode [ 1100.506841][T15178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1103.400036][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2243'. [ 1103.415457][T15201] tipc: Enabled bearer , priority 0 [ 1103.424062][T15206] device syzkaller0 entered promiscuous mode [ 1103.469159][T15212] tipc: Resetting bearer [ 1103.577391][T15195] tipc: Resetting bearer [ 1103.598993][T15227] ieee802154 phy1 wpan1: encryption failed: -22 [ 1103.638089][T15195] tipc: Disabling bearer [ 1104.044818][T15246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.052138][T15246] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.151576][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2276'. [ 1104.258193][T15251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1105.858472][T15299] netlink: 'syz.4.2291': attribute type 12 has an invalid length. [ 1105.875819][T15299] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2291'. [ 1105.950395][T15297] lo speed is unknown, defaulting to 1000 [ 1106.110654][T15313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.422281][T15323] netlink: 'syz.2.2299': attribute type 12 has an invalid length. [ 1106.960208][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2303'. [ 1107.648036][T15363] tipc: Enabled bearer , priority 0 [ 1107.673587][T15363] device syzkaller0 entered promiscuous mode [ 1107.701568][T15367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.720778][T15363] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1107.845449][T15363] tipc: Resetting bearer [ 1107.863001][T15361] tipc: Resetting bearer [ 1107.956865][T15361] tipc: Disabling bearer [ 1107.988696][T15376] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2318'. [ 1108.020727][T15383] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1108.286689][T15388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.350180][T15386] loop4: detected capacity change from 0 to 256 [ 1108.631173][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1108.831327][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 1108.838826][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1108.872790][ T126] usb 5-1: config 7 has an invalid interface number: 213 but max is 0 [ 1108.881024][ T126] usb 5-1: config 7 has no interface number 0 [ 1108.917083][ T126] usb 5-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1108.965169][ T126] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1109.011171][ T126] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1109.047398][ T126] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1109.089556][ T126] usb 5-1: config 7 interface 213 has no altsetting 0 [ 1109.134370][ T126] usb 5-1: language id specifier not provided by device, defaulting to English [ 1109.187883][ T126] usb 5-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1109.203546][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.221136][ T126] usb 5-1: Product: syz [ 1109.229849][T15422] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2333'. [ 1109.231642][ T126] usb 5-1: Manufacturer: syz [ 1109.263861][ T126] usb 5-1: SerialNumber: syz [ 1109.290270][T15386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1109.514532][ T126] pegasus: probe of 5-1:7.213 failed with error -71 [ 1109.557623][ T126] usb 5-1: USB disconnect, device number 6 [ 1109.750738][T15434] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1111.861781][T15473] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2348'. [ 1113.835468][T15502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1114.102851][T15526] device vlan3 entered promiscuous mode [ 1114.132935][T15526] device bond0 entered promiscuous mode [ 1114.138562][T15526] device bond_slave_0 entered promiscuous mode [ 1114.181502][T15526] device bond_slave_1 entered promiscuous mode [ 1114.331851][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2368'. [ 1114.978912][T15564] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1115.014330][T15564] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1115.684208][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.769708][T15592] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1116.609603][T15630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.649631][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2400'. [ 1116.720679][T15633] device gretap0 entered promiscuous mode [ 1116.794403][T15633] device vlan2 entered promiscuous mode [ 1117.012833][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2408'. [ 1117.116814][T15653] device syzkaller0 entered promiscuous mode [ 1117.211954][T15655] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2405'. [ 1117.761948][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 1118.789037][T15691] device vlan2 entered promiscuous mode [ 1119.097020][T15702] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2424'. [ 1119.931278][T15729] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.962755][T15729] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.035543][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2434'. [ 1120.085152][T15737] tipc: Enabling of bearer rejected, failed to enable media [ 1120.578159][T15746] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1120.731984][T15754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2437'. [ 1123.048437][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1124.965929][T15924] tipc: Enabling of bearer rejected, failed to enable media [ 1125.137848][T15932] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.280917][T15941] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.325828][T15941] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.997119][T15972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1126.934356][T16005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1127.352490][T16022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1127.584877][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2530'. [ 1128.065801][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 1129.860282][T16079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1130.103468][T16084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2546'. [ 1132.160796][T16115] tipc: Enabling of bearer rejected, failed to enable media [ 1132.928581][T16144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1133.719926][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'. [ 1135.081413][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2580'. [ 1135.149029][T16209] device syzkaller1 entered promiscuous mode [ 1135.487293][T16211] device bond_slave_0 entered promiscuous mode [ 1135.494192][T16211] device bond_slave_1 entered promiscuous mode [ 1135.509467][T16211] device vlan2 entered promiscuous mode [ 1135.521927][T16211] device bond0 entered promiscuous mode [ 1135.887106][T16236] ieee802154 phy1 wpan1: encryption failed: -22 [ 1135.948461][T16236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2589'. [ 1136.155113][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2593'. [ 1136.618183][T16264] device syzkaller0 entered promiscuous mode [ 1136.687845][T16266] device bond_slave_0 entered promiscuous mode [ 1136.694134][T16266] device bond_slave_1 entered promiscuous mode [ 1136.720926][T16266] device vlan2 entered promiscuous mode [ 1136.740988][T16266] device bond0 entered promiscuous mode [ 1136.768921][T16272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1136.831561][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2603'. [ 1137.096446][T16285] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2607'. [ 1137.141003][T16285] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2607'. [ 1137.598093][T16308] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2616'. [ 1137.619441][T16311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1137.701773][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2617'. [ 1137.832344][T16316] device bond_slave_0 entered promiscuous mode [ 1137.838569][T16316] device bond_slave_1 entered promiscuous mode [ 1137.892205][T16316] device vlan2 entered promiscuous mode [ 1137.908015][T16316] device bond0 entered promiscuous mode [ 1137.977540][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 1139.093482][T16370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2637'. [ 1139.131471][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2637'. [ 1139.928391][T16400] tipc: Started in network mode [ 1139.961271][T16400] tipc: Node identity 5e900496f9b4, cluster identity 4711 [ 1139.985724][T16400] tipc: Enabled bearer , priority 0 [ 1140.026509][T16403] device syzkaller0 entered promiscuous mode [ 1140.126977][T16400] tipc: Resetting bearer [ 1140.135002][T16408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2652'. [ 1140.154154][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'. [ 1140.177684][T16399] tipc: Resetting bearer [ 1140.261974][T16399] tipc: Disabling bearer [ 1140.477964][ T4275] Bluetooth: hci3: link tx timeout [ 1140.484191][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1140.866826][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2664'. [ 1140.987075][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2666'. [ 1141.020813][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2666'. [ 1141.104132][T16448] tipc: Enabled bearer , priority 0 [ 1141.119253][T16448] device syzkaller0 entered promiscuous mode [ 1141.137243][T16448] tipc: Resetting bearer [ 1141.147062][T16447] tipc: Resetting bearer [ 1141.202605][T16447] tipc: Disabling bearer [ 1141.376734][T16457] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1141.401878][ T4275] Bluetooth: hci3: link tx timeout [ 1141.407059][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1141.826242][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 1142.083111][T16479] tipc: Enabling of bearer rejected, failed to enable media [ 1142.095555][T16488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2679'. [ 1142.149645][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2679'. [ 1142.561537][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 1142.698662][T16508] tipc: Started in network mode [ 1142.721723][T16508] tipc: Node identity baae905d806f, cluster identity 4711 [ 1142.756750][T16508] tipc: Enabled bearer , priority 0 [ 1142.789789][T16512] device syzkaller0 entered promiscuous mode [ 1142.848543][T16508] tipc: Resetting bearer [ 1142.935295][T16507] tipc: Resetting bearer [ 1143.008236][T16507] tipc: Disabling bearer [ 1144.598830][ T4275] Bluetooth: hci3: link tx timeout [ 1144.601442][T16548] device syzkaller0 entered promiscuous mode [ 1144.604165][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1145.005415][T16559] device vlan2 entered promiscuous mode [ 1145.458554][T16568] __nla_validate_parse: 1 callbacks suppressed [ 1145.458572][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2704'. [ 1146.006243][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2709'. [ 1146.162137][ T4275] Bluetooth: hci3: link tx timeout [ 1146.167294][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1146.734975][T16603] device syzkaller0 entered promiscuous mode [ 1147.268242][ T4275] Bluetooth: hci3: link tx timeout [ 1147.273569][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1147.665807][T16650] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1148.028054][T16662] device vlan2 entered promiscuous mode [ 1148.061965][ T4275] Bluetooth: hci3: link tx timeout [ 1148.067153][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1149.044497][T16713] syz.8.2751 (16713) used obsolete PPPIOCDETACH ioctl [ 1149.134636][T16718] loop4: detected capacity change from 0 to 256 [ 1149.514940][ T9532] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1149.731251][ T9532] usb 5-1: Using ep0 maxpacket: 8 [ 1149.752162][ T9532] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1149.792695][ T9532] usb 5-1: config 7 has an invalid interface number: 213 but max is 0 [ 1149.823290][ T9532] usb 5-1: config 7 has no interface number 0 [ 1149.840439][ T9532] usb 5-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1149.881832][ T9532] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1149.884393][T16743] tipc: Started in network mode [ 1149.923460][T16743] tipc: Node identity f2f290cf6739, cluster identity 4711 [ 1149.930066][ T9532] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1149.955150][T16743] tipc: Enabled bearer , priority 0 [ 1149.959381][ T9532] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1149.986644][T16747] device syzkaller0 entered promiscuous mode [ 1150.010652][ T9532] usb 5-1: config 7 interface 213 has no altsetting 0 [ 1150.040756][ T9532] usb 5-1: language id specifier not provided by device, defaulting to English [ 1150.058123][ T9532] usb 5-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1150.061710][T16743] tipc: Resetting bearer [ 1150.067840][ T9532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.097380][ T9532] usb 5-1: Product: syz [ 1150.117460][ T9532] usb 5-1: Manufacturer: syz [ 1150.122770][ T9532] usb 5-1: SerialNumber: syz [ 1150.133427][T16742] tipc: Resetting bearer [ 1150.141915][T16718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1150.231936][T16742] tipc: Disabling bearer [ 1150.267215][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2761'. [ 1150.749513][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2766'. [ 1151.321005][T16788] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2773'. [ 1151.439022][T16797] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1151.564115][T16801] tipc: Enabling of bearer rejected, failed to enable media [ 1152.162528][ T9532] pegasus: probe of 5-1:7.213 failed with error -71 [ 1152.192035][T16818] device vlan2 entered promiscuous mode [ 1152.200390][ T9532] usb 5-1: USB disconnect, device number 7 [ 1152.391687][T16826] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1152.480537][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2784'. [ 1152.522295][T16830] device syzkaller0 entered promiscuous mode [ 1153.285798][T16867] netlink: 'syz.4.2796': attribute type 12 has an invalid length. [ 1153.328147][T16867] netlink: 'syz.4.2796': attribute type 29 has an invalid length. [ 1153.376994][T16867] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2796'. [ 1153.412524][T16867] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2796'. [ 1154.987314][T16900] tipc: Enabled bearer , priority 0 [ 1155.047715][T16905] device syzkaller0 entered promiscuous mode [ 1155.252614][T16899] tipc: Resetting bearer [ 1155.429651][T16899] tipc: Disabling bearer [ 1156.693098][T16949] device syzkaller0 entered promiscuous mode [ 1156.712723][T16950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1156.804967][T16952] tipc: Enabled bearer , priority 0 [ 1156.821664][T16960] device syzkaller0 entered promiscuous mode [ 1156.921331][T16948] tipc: Resetting bearer [ 1157.017263][T16948] tipc: Disabling bearer [ 1157.873700][T17002] tipc: Enabled bearer , priority 0 [ 1157.907385][T17002] device syzkaller0 entered promiscuous mode [ 1157.914299][T17005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2835'. [ 1157.967117][T17002] tipc: Resetting bearer [ 1158.006639][T17001] tipc: Resetting bearer [ 1158.144994][T17001] tipc: Disabling bearer [ 1158.325983][T17019] loop2: detected capacity change from 0 to 256 [ 1158.644888][ T1186] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1158.841345][ T1186] usb 3-1: Using ep0 maxpacket: 8 [ 1158.849186][ T1186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1158.882853][ T1186] usb 3-1: config 7 has an invalid interface number: 213 but max is 0 [ 1158.923817][ T1186] usb 3-1: config 7 has no interface number 0 [ 1158.956022][ T1186] usb 3-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1159.000838][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1159.050893][T17047] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2850'. [ 1159.059397][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1159.116775][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1159.166307][ T1186] usb 3-1: config 7 interface 213 has no altsetting 0 [ 1159.207900][ T1186] usb 3-1: language id specifier not provided by device, defaulting to English [ 1159.288979][ T1186] usb 3-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1159.329592][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.339148][T17055] tipc: Enabled bearer , priority 0 [ 1159.356076][ T1186] usb 3-1: Product: syz [ 1159.360327][ T1186] usb 3-1: Manufacturer: syz [ 1159.370486][T17055] device syzkaller0 entered promiscuous mode [ 1159.385103][ T1186] usb 3-1: SerialNumber: syz [ 1159.423139][T17019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1159.449904][T17055] tipc: Resetting bearer [ 1159.477630][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2855'. [ 1159.499546][T17054] tipc: Resetting bearer [ 1159.570558][T17054] tipc: Disabling bearer [ 1159.758290][T17069] tipc: Enabling of bearer rejected, failed to enable media [ 1160.690569][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2865'. [ 1160.950816][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2868'. [ 1161.289791][ T1186] pegasus: probe of 3-1:7.213 failed with error -71 [ 1161.320484][ T1186] usb 3-1: USB disconnect, device number 17 [ 1162.657383][T17145] device syzkaller0 entered promiscuous mode [ 1162.968752][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2881'. [ 1163.867577][T17194] loop8: detected capacity change from 0 to 256 [ 1164.162280][ T7] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1164.238237][T17200] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2893'. [ 1164.263899][T17200] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1164.455660][ T7] usb 9-1: Using ep0 maxpacket: 8 [ 1164.469376][ T7] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1164.490085][ T7] usb 9-1: config 7 has an invalid interface number: 213 but max is 0 [ 1164.528731][ T7] usb 9-1: config 7 has no interface number 0 [ 1164.551728][ T7] usb 9-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1164.593004][ T7] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1164.638170][ T7] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1164.671775][ T7] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1164.718137][ T7] usb 9-1: config 7 interface 213 has no altsetting 0 [ 1164.758769][ T7] usb 9-1: language id specifier not provided by device, defaulting to English [ 1164.809248][ T7] usb 9-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1164.857233][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.905813][ T7] usb 9-1: Product: syz [ 1164.920404][ T7] usb 9-1: Manufacturer: syz [ 1164.950851][ T7] usb 9-1: SerialNumber: syz [ 1164.988194][T17194] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1166.396713][ T7] pegasus: probe of 9-1:7.213 failed with error -71 [ 1166.431443][ T7] usb 9-1: USB disconnect, device number 5 [ 1174.412258][T17364] device syzkaller1 entered promiscuous mode [ 1174.826931][T17405] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1175.436716][T17434] loop2: detected capacity change from 0 to 256 [ 1175.861764][ T4316] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1176.121155][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 1176.130655][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1176.198124][ T4316] usb 3-1: config 7 has an invalid interface number: 213 but max is 0 [ 1176.281631][ T4316] usb 3-1: config 7 has no interface number 0 [ 1176.287799][ T4316] usb 3-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1176.361198][ T4316] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1176.411420][ T4316] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1176.453179][ T4316] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1176.506116][ T4316] usb 3-1: config 7 interface 213 has no altsetting 0 [ 1176.537338][ T4316] usb 3-1: language id specifier not provided by device, defaulting to English [ 1176.598841][ T4316] usb 3-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1176.628583][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.667487][ T4316] usb 3-1: Product: syz [ 1176.690149][ T4316] usb 3-1: Manufacturer: syz [ 1176.710511][ T4316] usb 3-1: SerialNumber: syz [ 1176.737523][T17434] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1177.125272][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.179431][ T4316] pegasus: probe of 3-1:7.213 failed with error -71 [ 1178.191594][ T4316] usb 3-1: USB disconnect, device number 18 [ 1179.579472][T17485] device vlan2 entered promiscuous mode [ 1180.133976][T17517] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1180.337220][T17522] loop8: detected capacity change from 0 to 256 [ 1180.641470][ T126] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1180.871277][ T126] usb 9-1: Using ep0 maxpacket: 8 [ 1180.931699][ T126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1180.965318][ T126] usb 9-1: config 7 has an invalid interface number: 213 but max is 0 [ 1180.989277][ T126] usb 9-1: config 7 has no interface number 0 [ 1181.002796][ T126] usb 9-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1181.016769][ T126] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1181.073667][ T126] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1181.130324][ T126] usb 9-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1181.192481][ T126] usb 9-1: config 7 interface 213 has no altsetting 0 [ 1181.235117][ T126] usb 9-1: language id specifier not provided by device, defaulting to English [ 1181.252577][ T4275] Bluetooth: hci3: link tx timeout [ 1181.257747][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1181.277141][ T126] usb 9-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1181.346085][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.371513][ T126] usb 9-1: Product: syz [ 1181.375737][ T126] usb 9-1: Manufacturer: syz [ 1181.380356][ T126] usb 9-1: SerialNumber: syz [ 1181.442700][T17522] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1183.121007][ T126] pegasus: probe of 9-1:7.213 failed with error -71 [ 1183.156782][ T126] usb 9-1: USB disconnect, device number 6 [ 1184.817795][ T4275] Bluetooth: hci3: link tx timeout [ 1184.823197][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1185.829576][T17625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3004'. [ 1188.822182][T17666] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3012'. [ 1188.896272][T17666] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3012'. [ 1189.042323][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3015'. [ 1189.070536][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3015'. [ 1189.141991][T17675] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1189.155454][T17679] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3017'. [ 1189.195208][T17677] device syzkaller0 entered promiscuous mode [ 1189.554013][T17697] loop6: detected capacity change from 0 to 256 [ 1189.881491][ T1186] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1190.151303][ T1186] usb 7-1: Using ep0 maxpacket: 8 [ 1190.169043][ T1186] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1190.249192][ T1186] usb 7-1: config 7 has an invalid interface number: 213 but max is 0 [ 1190.335459][ T1186] usb 7-1: config 7 has no interface number 0 [ 1190.357722][ T1186] usb 7-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1190.402350][ T1186] usb 7-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1190.461283][ T1186] usb 7-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1190.479983][ T1186] usb 7-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1190.510821][ T1186] usb 7-1: config 7 interface 213 has no altsetting 0 [ 1190.555498][ T1186] usb 7-1: language id specifier not provided by device, defaulting to English [ 1190.578210][ T1186] usb 7-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1190.599307][ T1186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.614263][ T1186] usb 7-1: Product: syz [ 1190.637877][ T1186] usb 7-1: Manufacturer: syz [ 1190.650399][ T1186] usb 7-1: SerialNumber: syz [ 1190.671314][T17697] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1190.960227][T17723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1190.984314][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1191.275568][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 1191.316582][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 1191.394899][T17732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3030'. [ 1191.757169][T17748] tipc: Enabled bearer , priority 0 [ 1191.804145][T17748] device syzkaller0 entered promiscuous mode [ 1191.948835][T17754] tipc: Resetting bearer [ 1192.020749][T17747] tipc: Resetting bearer [ 1192.124448][T17747] tipc: Disabling bearer [ 1192.361406][ T1186] pegasus: probe of 7-1:7.213 failed with error -71 [ 1192.380080][ T1186] usb 7-1: USB disconnect, device number 14 [ 1192.585794][T17774] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3039'. [ 1192.627097][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3039'. [ 1192.821323][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3043'. [ 1192.912827][T17786] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3044'. [ 1193.609070][T17813] loop4: detected capacity change from 0 to 256 [ 1194.001341][ T1186] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1194.251241][ T1186] usb 5-1: Using ep0 maxpacket: 8 [ 1194.258526][ T1186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1194.289067][ T1186] usb 5-1: config 7 has an invalid interface number: 213 but max is 0 [ 1194.341809][ T1186] usb 5-1: config 7 has no interface number 0 [ 1194.368279][ T1186] usb 5-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1194.405266][ T1186] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1194.451440][ T1186] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1194.482055][ T1186] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1194.531182][ T1186] usb 5-1: config 7 interface 213 has no altsetting 0 [ 1194.531849][T17824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3054'. [ 1194.568315][ T1186] usb 5-1: language id specifier not provided by device, defaulting to English [ 1194.607812][ T1186] usb 5-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1194.627493][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.646131][ T1186] usb 5-1: Product: syz [ 1194.661462][ T1186] usb 5-1: Manufacturer: syz [ 1194.676525][ T1186] usb 5-1: SerialNumber: syz [ 1194.723190][T17813] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1195.124129][T17853] device bridge0 entered promiscuous mode [ 1195.189898][T17853] device vlan2 entered promiscuous mode [ 1196.089041][T17878] __nla_validate_parse: 3 callbacks suppressed [ 1196.089059][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3069'. [ 1196.138757][T17879] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3068'. [ 1196.165231][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3068'. [ 1196.330407][ T1186] pegasus: probe of 5-1:7.213 failed with error -71 [ 1196.379784][ T1186] usb 5-1: USB disconnect, device number 8 [ 1196.544164][ T4275] Bluetooth: hci3: link tx timeout [ 1196.549388][ T4275] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1196.557671][ T4275] Bluetooth: hci3: link tx timeout [ 1196.562875][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.873058][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1196.885806][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1196.897871][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1196.907934][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1196.915581][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1196.923005][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1197.192340][T17900] lo speed is unknown, defaulting to 1000 [ 1197.362599][T17903] device syzkaller0 entered promiscuous mode [ 1197.489316][T17914] device syzkaller0 entered promiscuous mode [ 1198.655099][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 1198.892159][T17959] loop4: detected capacity change from 0 to 256 [ 1198.962715][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 1199.203819][ T1186] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1199.422223][ T1186] usb 5-1: Using ep0 maxpacket: 8 [ 1199.436164][ T1186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1199.455226][ T1186] usb 5-1: config 7 has an invalid interface number: 213 but max is 0 [ 1199.478828][ T1186] usb 5-1: config 7 has no interface number 0 [ 1199.499106][ T1186] usb 5-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1199.515704][ T1186] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1199.529558][ T1186] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1199.550195][ T1186] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1199.570532][ T1186] usb 5-1: config 7 interface 213 has no altsetting 0 [ 1199.610111][ T1186] usb 5-1: language id specifier not provided by device, defaulting to English [ 1199.651774][ T1186] usb 5-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1199.667521][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.676238][ T1186] usb 5-1: Product: syz [ 1199.680428][ T1186] usb 5-1: Manufacturer: syz [ 1199.685744][ T1186] usb 5-1: SerialNumber: syz [ 1199.694265][T17959] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1201.051213][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 1201.519779][T17938] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3080'. [ 1201.554800][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3080'. [ 1201.630595][ T1186] pegasus: probe of 5-1:7.213 failed with error -71 [ 1201.683113][ T1186] usb 5-1: USB disconnect, device number 9 [ 1201.885618][T17975] device syzkaller0 entered promiscuous mode [ 1202.003612][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 1202.536822][T18007] loop2: detected capacity change from 0 to 256 [ 1202.831406][ T1186] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1203.041277][ T1186] usb 3-1: Using ep0 maxpacket: 8 [ 1203.048868][ T1186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1203.072249][ T1186] usb 3-1: config 7 has an invalid interface number: 213 but max is 0 [ 1203.080570][ T1186] usb 3-1: config 7 has no interface number 0 [ 1203.106288][ T1186] usb 3-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1203.118109][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1203.133358][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 1203.139669][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1203.153324][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1203.172542][ T1186] usb 3-1: config 7 interface 213 has no altsetting 0 [ 1203.185021][ T1186] usb 3-1: language id specifier not provided by device, defaulting to English [ 1203.202090][ T1186] usb 3-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1203.211434][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.219504][ T1186] usb 3-1: Product: syz [ 1203.224096][ T1186] usb 3-1: Manufacturer: syz [ 1203.228717][ T1186] usb 3-1: SerialNumber: syz [ 1203.244099][T18007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1205.211262][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 1205.298950][ T1186] pegasus: probe of 3-1:7.213 failed with error -71 [ 1205.329437][ T1186] usb 3-1: USB disconnect, device number 19 [ 1205.740961][T18037] device vlan2 entered promiscuous mode [ 1205.819198][T18039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3091'. [ 1205.952733][T18045] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3093'. [ 1205.991827][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3093'. [ 1206.265262][T17900] chnl_net:caif_netlink_parms(): no params data found [ 1206.290439][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3097'. [ 1206.636148][T18066] loop2: detected capacity change from 0 to 256 [ 1207.061460][ T1186] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1207.123892][T18078] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3106'. [ 1207.140215][T17900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.147793][T17900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.158207][T17900] device bridge_slave_0 entered promiscuous mode [ 1207.171348][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3106'. [ 1207.211313][T17900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.218679][T17900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.241195][ T1186] usb 3-1: Using ep0 maxpacket: 8 [ 1207.252646][T17900] device bridge_slave_1 entered promiscuous mode [ 1207.258054][ T1186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1207.290605][ T1186] usb 3-1: config 7 has an invalid interface number: 213 but max is 0 [ 1207.324197][ T1186] usb 3-1: config 7 has no interface number 0 [ 1207.345400][ T1186] usb 3-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 1207.351403][T17900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.361255][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 1207.398562][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 1207.416068][ T1186] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1207.428496][ T1186] usb 3-1: config 7 interface 213 has no altsetting 0 [ 1207.445313][ T1186] usb 3-1: language id specifier not provided by device, defaulting to English [ 1207.463314][ T1186] usb 3-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 1207.480726][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.489882][ T1186] usb 3-1: Product: syz [ 1207.519094][ T1186] usb 3-1: Manufacturer: syz [ 1207.520307][T17900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.530712][ T1186] usb 3-1: SerialNumber: syz [ 1207.573822][T18066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1207.611447][T18082] device syzkaller0 entered promiscuous mode [ 1207.769025][T17900] team0: Port device team_slave_0 added [ 1207.783804][T17900] team0: Port device team_slave_1 added [ 1209.409846][ T1186] pegasus: probe of 3-1:7.213 failed with error -71 [ 1209.436061][ T1186] usb 3-1: USB disconnect, device number 20 [ 1210.361209][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'. [ 1210.394319][T17900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.421154][T17900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.465895][T17900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.498323][T17900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.523527][T17900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.610374][T17900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.646888][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'. [ 1210.820661][T17900] device hsr_slave_0 entered promiscuous mode [ 1210.840233][T17900] device hsr_slave_1 entered promiscuous mode [ 1211.175938][T18136] device syzkaller0 entered promiscuous mode [ 1214.019476][T18144] device syzkaller0 entered promiscuous mode [ 1216.974696][T18199] tipc: Enabled bearer , priority 0 [ 1216.989724][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3143'. [ 1217.020392][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3143'. [ 1217.062687][ T4403] device hsr_slave_0 left promiscuous mode [ 1217.084713][ T4403] device hsr_slave_1 left promiscuous mode [ 1217.114806][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.134165][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.169620][ T4403] device bridge_slave_1 left promiscuous mode [ 1217.179502][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.546971][ T4403] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1217.709944][ T4403] bond1 (unregistering): Released all slaves [ 1218.228247][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 1218.282185][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 1218.329748][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.338918][ T4403] device bond_slave_1 left promiscuous mode [ 1218.392604][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.401974][ T4403] device bond_slave_0 left promiscuous mode [ 1218.729451][ T4403] bond0 (unregistering): Released all slaves [ 1218.836538][T18213] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1218.859813][T18219] tipc: Resetting bearer [ 1218.928756][T18197] tipc: Disabling bearer [ 1218.938975][ T1186] tipc: Node number set to 985763933 [ 1218.948197][T18198] lo speed is unknown, defaulting to 1000 [ 1218.980664][T18223] netlink: 'syz.6.3147': attribute type 10 has an invalid length. [ 1219.359765][T18229] tipc: Enabling of bearer rejected, failed to enable media [ 1219.469852][T17900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1219.507483][T17900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1219.561020][T17900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1219.589768][T17900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1219.906971][T18250] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1219.956255][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1219.969030][T17900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.004011][T18253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1220.047389][T17900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.103889][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1220.124328][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1220.137130][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1220.148503][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1220.163299][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.170428][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.184541][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1220.196622][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1220.215394][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.222616][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.238259][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1220.247812][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1220.282472][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1220.293743][T18262] tipc: Enabled bearer , priority 0 [ 1220.335675][T18255] device syzkaller0 entered promiscuous mode [ 1220.353005][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1220.407705][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1220.418460][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1220.427892][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1220.436562][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1220.444987][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1220.453631][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1220.462341][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1220.473259][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1220.492581][T18255] tipc: Resetting bearer [ 1220.511719][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1220.529601][T18254] tipc: Resetting bearer [ 1220.557756][T18254] tipc: Disabling bearer [ 1220.606177][T18268] tipc: Enabled bearer , priority 0 [ 1220.650575][T18267] tipc: Resetting bearer [ 1220.777494][T18266] tipc: Disabling bearer [ 1221.062856][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1221.070395][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1221.105863][T17900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.732901][T18302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1221.787103][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1222.034952][T18314] tipc: Enabled bearer , priority 0 [ 1222.066930][T18314] tipc: Resetting bearer [ 1222.141675][T18313] tipc: Disabling bearer [ 1222.177510][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1222.212344][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1222.278586][T16149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1222.291940][T16149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1222.333944][T17900] device veth0_vlan entered promiscuous mode [ 1222.377226][T16149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1222.392047][T16149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1222.418727][T17900] device veth1_vlan entered promiscuous mode [ 1222.543022][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1222.565806][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1222.586997][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1222.608143][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1222.633684][T17900] device veth0_macvtap entered promiscuous mode [ 1222.669101][T17900] device veth1_macvtap entered promiscuous mode [ 1222.739570][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.781178][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.828390][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.853481][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.887873][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.906352][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.919685][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.945394][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.957111][T17900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.974308][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1222.982795][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1222.992377][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1223.004013][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1223.016291][T18346] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1223.027219][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.083373][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.111192][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.130708][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.142228][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.158997][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.172534][T17900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.188594][T17900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.217343][T17900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.238346][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1223.251797][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1223.263581][T17900] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.278108][T17900] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.288946][T17900] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.298023][T17900] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.489870][ T6766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.540205][ T6766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.605054][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1223.642972][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.690245][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.723019][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1223.889733][T18368] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1223.907961][T18371] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1225.779551][T18434] device vlan2 entered promiscuous mode [ 1231.703655][T18514] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1231.772692][T18514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1232.156175][T18536] tipc: Enabling of bearer rejected, failed to enable media [ 1232.319497][T18538] device syzkaller0 entered promiscuous mode [ 1238.158503][T18605] 8021q: VLANs not supported on vcan0 [ 1238.165196][T18616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3255'. [ 1238.469186][T18630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1238.501361][T18630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1238.560127][T18630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1238.575824][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.581792][T18631] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3261'. [ 1238.611664][T18632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1238.827943][T18643] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3266'. [ 1238.889656][T18650] 8021q: VLANs not supported on vcan0 [ 1239.018637][T18655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3269'. [ 1240.051939][T18723] 8021q: VLANs not supported on vcan0 [ 1240.516438][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3283'. [ 1240.696779][T18736] netlink: 'syz.9.3282': attribute type 10 has an invalid length. [ 1240.975411][T18736] team0 (unregistering): Port device team_slave_0 removed [ 1241.033919][T18736] team0 (unregistering): Port device team_slave_1 removed [ 1241.080073][T18755] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1241.526372][T18770] device vlan2 entered promiscuous mode [ 1241.684168][T18777] tipc: Enabling of bearer rejected, failed to enable media [ 1241.779627][T18776] device syzkaller0 entered promiscuous mode [ 1245.712870][ T4270] Bluetooth: hci4: link tx timeout [ 1245.719125][ T4270] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1246.138041][T18846] lo speed is unknown, defaulting to 1000 [ 1246.248305][T18852] device syzkaller0 entered promiscuous mode [ 1246.724565][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3324'. [ 1247.761316][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 1249.227999][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3323'. [ 1249.264075][T18877] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3323'. [ 1250.200746][T18916] device syzkaller0 entered promiscuous mode [ 1250.273200][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3339'. [ 1250.313888][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3341'. [ 1250.331855][T18922] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3339'. [ 1254.214897][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3353'. [ 1254.270476][T18981] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3353'. [ 1254.860772][T19007] device syzkaller1 entered promiscuous mode [ 1255.141001][T19012] device syzkaller0 entered promiscuous mode [ 1258.716023][T19061] device bond_slave_0 entered promiscuous mode [ 1258.722328][T19061] device bond_slave_1 entered promiscuous mode [ 1258.761841][T19061] device vlan2 entered promiscuous mode [ 1258.802347][T19061] device bond0 entered promiscuous mode [ 1259.261471][T19089] tipc: Started in network mode [ 1259.276303][T19089] tipc: Node identity 9eacac0d6194, cluster identity 4711 [ 1259.304276][T19089] tipc: Enabled bearer , priority 0 [ 1259.321325][T19071] device syzkaller1 entered promiscuous mode [ 1259.414524][T19091] device syzkaller0 entered promiscuous mode [ 1259.580571][T19091] tipc: Resetting bearer [ 1259.722889][T19098] device syzkaller0 entered promiscuous mode [ 1259.752514][T19088] tipc: Resetting bearer [ 1259.834758][T19088] tipc: Disabling bearer [ 1260.110618][T19127] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3390'. [ 1263.296690][T19119] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1263.558658][T19164] device syzkaller1 entered promiscuous mode [ 1263.751143][T19175] netlink: 34 bytes leftover after parsing attributes in process `syz.8.3398'. [ 1263.971188][ T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1264.162254][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 1264.169954][ T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1264.211168][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.251147][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1264.284802][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1264.318358][ T22] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1264.358598][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.380481][ T22] usb 5-1: config 0 descriptor?? [ 1264.707840][T19189] device vlan2 entered promiscuous mode [ 1264.816624][ T22] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 1264.859276][ T22] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 1264.901231][ T22] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 1264.911406][ T22] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 1264.918505][ T22] uclogic 0003:5543:0003.0002: unknown main item tag 0x0 [ 1264.955898][ T22] uclogic 0003:5543:0003.0002: No inputs registered, leaving [ 1264.992012][ T22] uclogic 0003:5543:0003.0002: hidraw0: USB HID v0.0b Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 1265.055186][ T22] usb 5-1: USB disconnect, device number 10 [ 1265.810109][T19204] loop8: detected capacity change from 0 to 1024 [ 1266.005728][T19181] loop2: detected capacity change from 0 to 32768 [ 1266.139521][T19207] fido_id[19207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1266.244362][T19181] XFS (loop2): Mounting V5 Filesystem [ 1266.356936][T19181] XFS (loop2): Ending clean mount [ 1266.638866][T13149] XFS (loop2): Unmounting Filesystem [ 1266.750886][T19240] loop8: detected capacity change from 0 to 512 [ 1266.786601][T19240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1267.053612][T19240] [ 1267.055996][T19240] ====================================================== [ 1267.063022][T19240] WARNING: possible circular locking dependency detected [ 1267.070109][T19240] syzkaller #0 Not tainted [ 1267.074534][T19240] ------------------------------------------------------ [ 1267.081554][T19240] syz.8.3411/19240 is trying to acquire lock: [ 1267.087623][T19240] ffff8880760beb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 1267.097765][T19240] [ 1267.097765][T19240] but task is already holding lock: [ 1267.105139][T19240] ffff88803d314700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 1267.115025][T19240] [ 1267.115025][T19240] which lock already depends on the new lock. [ 1267.115025][T19240] [ 1267.125434][T19240] [ 1267.125434][T19240] the existing dependency chain (in reverse order) is: [ 1267.134434][T19240] [ 1267.134434][T19240] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1267.141980][T19240] down_write+0x36/0x60 [ 1267.146649][T19240] ext4_destroy_inline_data+0x24/0xe0 [ 1267.152533][T19240] ext4_writepages+0x670/0x2f40 [ 1267.157899][T19240] do_writepages+0x3ba/0x640 [ 1267.163028][T19240] filemap_fdatawrite_wbc+0x11e/0x180 [ 1267.168928][T19240] __filemap_fdatawrite_range+0xf2/0x160 [ 1267.175079][T19240] generic_fadvise+0x31e/0x720 [ 1267.180356][T19240] __x64_sys_fadvise64+0x139/0x180 [ 1267.185981][T19240] do_syscall_64+0x4c/0xa0 [ 1267.190915][T19240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.197328][T19240] [ 1267.197328][T19240] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 1267.205754][T19240] __lock_acquire+0x2d07/0x7d10 [ 1267.211132][T19240] lock_acquire+0x1bb/0x4a0 [ 1267.216154][T19240] percpu_down_read+0x44/0x1a0 [ 1267.221433][T19240] ext4_writepages+0x20f/0x2f40 [ 1267.226801][T19240] do_writepages+0x3ba/0x640 [ 1267.231908][T19240] __writeback_single_inode+0x156/0x1160 [ 1267.238064][T19240] writeback_single_inode+0x3cb/0x8e0 [ 1267.243961][T19240] write_inode_now+0x17f/0x210 [ 1267.249246][T19240] iput+0x613/0x980 [ 1267.253570][T19240] ext4_xattr_block_set+0x273b/0x32b0 [ 1267.259467][T19240] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 1267.265884][T19240] __ext4_expand_extra_isize+0x301/0x3e0 [ 1267.272035][T19240] __ext4_mark_inode_dirty+0x47f/0x770 [ 1267.278021][T19240] ext4_evict_inode+0xa7f/0x1110 [ 1267.283482][T19240] evict+0x4c9/0x8d0 [ 1267.287901][T19240] ext4_orphan_cleanup+0xbeb/0x1420 [ 1267.293631][T19240] ext4_fill_super+0x7829/0x7dc0 [ 1267.299088][T19240] get_tree_bdev+0x3f1/0x610 [ 1267.304201][T19240] vfs_get_tree+0x88/0x270 [ 1267.309133][T19240] do_new_mount+0x24a/0xa40 [ 1267.314153][T19240] __se_sys_mount+0x2e3/0x3d0 [ 1267.319348][T19240] do_syscall_64+0x4c/0xa0 [ 1267.324305][T19240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.330740][T19240] [ 1267.330740][T19240] other info that might help us debug this: [ 1267.330740][T19240] [ 1267.340977][T19240] Possible unsafe locking scenario: [ 1267.340977][T19240] [ 1267.348427][T19240] CPU0 CPU1 [ 1267.353783][T19240] ---- ---- [ 1267.359140][T19240] lock(&ei->xattr_sem); [ 1267.363471][T19240] lock(&sbi->s_writepages_rwsem); [ 1267.371181][T19240] lock(&ei->xattr_sem); [ 1267.378021][T19240] lock(&sbi->s_writepages_rwsem); [ 1267.383212][T19240] [ 1267.383212][T19240] *** DEADLOCK *** [ 1267.383212][T19240] [ 1267.391344][T19240] 3 locks held by syz.8.3411/19240: [ 1267.396537][T19240] #0: ffff88805017a0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 1267.406641][T19240] #1: ffff88805017a650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x43c/0x1110 [ 1267.416130][T19240] #2: ffff88803d314700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 1267.426491][T19240] [ 1267.426491][T19240] stack backtrace: [ 1267.432384][T19240] CPU: 0 PID: 19240 Comm: syz.8.3411 Not tainted syzkaller #0 [ 1267.439834][T19240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1267.449915][T19240] Call Trace: [ 1267.453204][T19240] [ 1267.456137][T19240] dump_stack_lvl+0x188/0x24e [ 1267.460822][T19240] ? load_image+0x400/0x400 [ 1267.465327][T19240] ? show_regs_print_info+0x12/0x12 [ 1267.470529][T19240] ? print_circular_bug+0x12b/0x1a0 [ 1267.475741][T19240] check_noncircular+0x296/0x330 [ 1267.480684][T19240] ? look_up_lock_class+0x75/0x140 [ 1267.485789][T19240] ? add_chain_block+0x940/0x940 [ 1267.490726][T19240] ? lockdep_lock+0xf1/0x1f0 [ 1267.495320][T19240] ? _find_first_zero_bit+0xcf/0x100 [ 1267.500601][T19240] __lock_acquire+0x2d07/0x7d10 [ 1267.505468][T19240] ? verify_lock_unused+0x140/0x140 [ 1267.510668][T19240] ? mark_lock+0x94/0x320 [ 1267.514999][T19240] ? __lock_acquire+0x13cf/0x7d10 [ 1267.520028][T19240] lock_acquire+0x1bb/0x4a0 [ 1267.524545][T19240] ? ext4_writepages+0x20f/0x2f40 [ 1267.529587][T19240] ? __might_sleep+0xd0/0xd0 [ 1267.534179][T19240] ? read_lock_is_recursive+0x10/0x10 [ 1267.539545][T19240] ? __lock_acquire+0x12f4/0x7d10 [ 1267.544568][T19240] ? mark_lock+0x94/0x320 [ 1267.548900][T19240] percpu_down_read+0x44/0x1a0 [ 1267.553659][T19240] ? ext4_writepages+0x20f/0x2f40 [ 1267.558678][T19240] ext4_writepages+0x20f/0x2f40 [ 1267.563523][T19240] ? __lock_acquire+0x13cf/0x7d10 [ 1267.568553][T19240] ? verify_lock_unused+0x140/0x140 [ 1267.573752][T19240] ? mark_lock+0x94/0x320 [ 1267.578081][T19240] ? ext4_read_folio+0x370/0x370 [ 1267.583016][T19240] ? __lock_acquire+0x13cf/0x7d10 [ 1267.588050][T19240] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1267.593936][T19240] ? lockdep_hardirqs_on+0x94/0x140 [ 1267.599131][T19240] ? ext4_read_folio+0x370/0x370 [ 1267.604062][T19240] do_writepages+0x3ba/0x640 [ 1267.608661][T19240] ? __writepage+0x130/0x130 [ 1267.613249][T19240] ? writeback_single_inode+0x3c0/0x8e0 [ 1267.618821][T19240] ? __lock_acquire+0x7d10/0x7d10 [ 1267.623867][T19240] ? do_raw_spin_lock+0x128/0x2f0 [ 1267.628890][T19240] __writeback_single_inode+0x156/0x1160 [ 1267.634526][T19240] writeback_single_inode+0x3cb/0x8e0 [ 1267.639897][T19240] ? write_inode_now+0x210/0x210 [ 1267.644841][T19240] write_inode_now+0x17f/0x210 [ 1267.649630][T19240] ? bdi_split_work_to_wbs+0x910/0x910 [ 1267.655092][T19240] ? rcu_is_watching+0x11/0xa0 [ 1267.659864][T19240] ? do_raw_spin_unlock+0x11d/0x230 [ 1267.665056][T19240] iput+0x613/0x980 [ 1267.668868][T19240] ext4_xattr_block_set+0x273b/0x32b0 [ 1267.674244][T19240] ? __might_sleep+0xd0/0xd0 [ 1267.678841][T19240] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 1267.684305][T19240] ? ext4_xattr_block_find+0x241/0x2b0 [ 1267.689767][T19240] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 1267.695672][T19240] __ext4_expand_extra_isize+0x301/0x3e0 [ 1267.701304][T19240] __ext4_mark_inode_dirty+0x47f/0x770 [ 1267.706768][T19240] ext4_evict_inode+0xa7f/0x1110 [ 1267.711711][T19240] ? _raw_spin_unlock+0x24/0x40 [ 1267.716580][T19240] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1267.722494][T19240] ? do_raw_spin_unlock+0x11d/0x230 [ 1267.727699][T19240] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1267.733596][T19240] evict+0x4c9/0x8d0 [ 1267.737492][T19240] ? proc_nr_inodes+0x2f0/0x2f0 [ 1267.742340][T19240] ? do_raw_spin_unlock+0x11d/0x230 [ 1267.747534][T19240] ? _raw_spin_unlock+0x24/0x40 [ 1267.752381][T19240] ? iput+0x768/0x980 [ 1267.756361][T19240] ext4_orphan_cleanup+0xbeb/0x1420 [ 1267.761566][T19240] ? ext4_orphan_del+0xbf0/0xbf0 [ 1267.766506][T19240] ? errseq_check_and_advance+0x62/0x120 [ 1267.772142][T19240] ext4_fill_super+0x7829/0x7dc0 [ 1267.777079][T19240] ? bdev_name+0x2c1/0x3f0 [ 1267.781499][T19240] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1267.787745][T19240] ? set_blocksize+0x1d0/0x470 [ 1267.792511][T19240] ? sb_set_blocksize+0xa5/0xe0 [ 1267.797380][T19240] get_tree_bdev+0x3f1/0x610 [ 1267.801987][T19240] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1267.808235][T19240] vfs_get_tree+0x88/0x270 [ 1267.812650][T19240] do_new_mount+0x24a/0xa40 [ 1267.817150][T19240] __se_sys_mount+0x2e3/0x3d0 [ 1267.821830][T19240] ? __x64_sys_mount+0xc0/0xc0 [ 1267.826592][T19240] ? lockdep_hardirqs_on+0x94/0x140 [ 1267.831787][T19240] ? __x64_sys_mount+0x1c/0xc0 [ 1267.836547][T19240] do_syscall_64+0x4c/0xa0 [ 1267.840962][T19240] ? clear_bhb_loop+0x60/0xb0 [ 1267.845637][T19240] ? clear_bhb_loop+0x60/0xb0 [ 1267.850312][T19240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.856202][T19240] RIP: 0033:0x7fde4619d8ca [ 1267.860621][T19240] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.880226][T19240] RSP: 002b:00007fde4702de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1267.888636][T19240] RAX: ffffffffffffffda RBX: 00007fde4702dee0 RCX: 00007fde4619d8ca [ 1267.896607][T19240] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007fde4702dea0 [ 1267.904575][T19240] RBP: 0000200000000180 R08: 00007fde4702dee0 R09: 0000000000800700 [ 1267.912543][T19240] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000080 [ 1267.920508][T19240] R13: 00007fde4702dea0 R14: 000000000000047a R15: 00002000000000c0 [ 1267.928484][T19240] [ 1268.009283][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.3411: iget: bad extra_isize 90 (inode size 256) [ 1268.138367][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3411: error while reading EA inode 11 err=-117 [ 1268.570233][T19240] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1268.594340][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.3411: iget: bad extra_isize 90 (inode size 256) [ 1268.608475][T19254] device syzkaller1 entered promiscuous mode [ 1268.629572][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3411: error while reading EA inode 11 err=-117 [ 1268.658635][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.3411: iget: bad extra_isize 90 (inode size 256) [ 1268.701311][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3411: error while reading EA inode 18 err=-117 [ 1268.730939][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.3411: iget: bad extra_isize 90 (inode size 256) [ 1268.793262][T19240] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3411: error while reading EA inode 18 err=-117 [ 1268.821391][T19240] EXT4-fs (loop8): 1 orphan inode deleted [ 1268.827272][T19240] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1268.895839][T12994] EXT4-fs (loop8): unmounting filesystem. [ 1269.875995][T19199] Set syz1 is full, maxelem 65536 reached