last executing test programs: 5m0.391447427s ago: executing program 3 (id=394): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x4044090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x5, 0x884}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4m59.327965118s ago: executing program 3 (id=397): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x100, 0x89) openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, r0, 0xe8fe2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x340d675d19bb0cfe}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x72}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, @NFT_MSG_NEWSET={0x5b0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, @NFTA_SET_USERDATA={0x12, 0xd, 0x1, 0x0, "14bf02053075753b9f450a0aaf5b"}, @NFTA_SET_USERDATA={0xa6, 0xd, 0x1, 0x0, "a59f58218ed216f5253f0fb86cfdadd8a8f77e7a18317ff1b286967b4e618ade46ca0cb76d158a02d6d676874d18f02840cdba47c376c28b8cf8208d65a72f6cd58f612257828dfc67329686b75f714c90720bb8cbbc72a0670107f772dd82426aa6a1df062385495a1629ed43e223e2cfbee13249d6942dbdfe40f0248d34eba2594a47ab7b98cf15894b3e6913f45d4a3d6304ddfc372008ab452cad4db7a35ddd"}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_DESC={0x460, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x995d}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x50cd}]}]}, @NFTA_SET_DESC_CONCAT={0x124, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff085}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd86}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x160, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfef5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x938}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x535}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8175}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, @NFTA_SET_DESC_CONCAT={0xd4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x160c44a4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ae248a4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4d}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}]}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x638}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000580)={@local, @local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x7, 0x4, 0x1, 0x5, 0x64, 0x68, 0x0, 0x8, 0x11, 0x0, @multicast1, @remote, {[@generic={0x89, 0x7, "51ada00dc8"}]}}, {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "bfc3ff3fa70dcb8db473fba0759209e64d7bd077684e0884", "5496228543f134a457b7feb753ff53043e7342090855958e9a94c961a0819e48"}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x7, @loopback, 0xbff}, @ib={0x1b, 0xf, 0xffa, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x8}}}, 0x118) 4m57.911822971s ago: executing program 3 (id=399): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x20000000, 0x40, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4m51.748040944s ago: executing program 3 (id=404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x21) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4m48.012749863s ago: executing program 3 (id=409): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x100, 0x89) openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, r0, 0xe8fe2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x340d675d19bb0cfe}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x72}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, @NFT_MSG_NEWSET={0x5b0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, @NFTA_SET_USERDATA={0x12, 0xd, 0x1, 0x0, "14bf02053075753b9f450a0aaf5b"}, @NFTA_SET_USERDATA={0xa6, 0xd, 0x1, 0x0, "a59f58218ed216f5253f0fb86cfdadd8a8f77e7a18317ff1b286967b4e618ade46ca0cb76d158a02d6d676874d18f02840cdba47c376c28b8cf8208d65a72f6cd58f612257828dfc67329686b75f714c90720bb8cbbc72a0670107f772dd82426aa6a1df062385495a1629ed43e223e2cfbee13249d6942dbdfe40f0248d34eba2594a47ab7b98cf15894b3e6913f45d4a3d6304ddfc372008ab452cad4db7a35ddd"}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_DESC={0x460, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x995d}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x50cd}]}]}, @NFTA_SET_DESC_CONCAT={0x124, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff085}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd86}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x160, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfef5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x938}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x535}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8175}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, @NFTA_SET_DESC_CONCAT={0xd4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x160c44a4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ae248a4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4d}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}]}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x638}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000580)={@local, @local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x7, 0x4, 0x1, 0x5, 0x64, 0x68, 0x0, 0x8, 0x11, 0x0, @multicast1, @remote, {[@generic={0x89, 0x7, "51ada00dc8"}]}}, {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "bfc3ff3fa70dcb8db473fba0759209e64d7bd077684e0884", "5496228543f134a457b7feb753ff53043e7342090855958e9a94c961a0819e48"}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x7, @loopback, 0xbff}, @ib={0x1b, 0xf, 0xffa, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x8}}}, 0x118) 4m46.398385007s ago: executing program 3 (id=412): socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x2000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) 4m30.692152381s ago: executing program 32 (id=412): socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x2000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) 8.412924557s ago: executing program 2 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x0, 0x5, 0x9d1f, 0x5, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 7.481300615s ago: executing program 2 (id=1279): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) fchown(r0, 0x0, 0x0) 7.257039021s ago: executing program 2 (id=1280): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xa3d8, &(0x7f0000000000)=[{&(0x7f00000000c0)='\x009', 0x2}, {0x0}], 0x2, 0x0, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 7.215013083s ago: executing program 1 (id=1281): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000fc0)='htcp', 0x4) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a22d20f77d9a94bc3ae91684aaf7b7dff691de", 0x2d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)}}], 0x3, 0x46090) 7.058775982s ago: executing program 2 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001d00)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000d00)='P', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x14, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x30, 0x24004884}], 0x1, 0x4040044) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.261004066s ago: executing program 1 (id=1288): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000080)) 6.220424818s ago: executing program 1 (id=1289): syz_usb_connect(0x2, 0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000038b51140866b11c2ca2501020301090232000104000002090479030208066249090506004000fd20080725018001060009050e1040"], 0x0) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000c06050000000000a9f5dc6d0000000a050001"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 6.1789719s ago: executing program 0 (id=1290): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$netlink(r0, 0x10e, 0x2, 0x0, 0x0) 6.085019342s ago: executing program 0 (id=1291): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x4, 0x200, &(0x7f0000000880)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x4, 0x200, 0x0}) 6.003199535s ago: executing program 0 (id=1292): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000060201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 5.166859512s ago: executing program 2 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001d00)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000d00)='P', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x14, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x30, 0x24004884}], 0x1, 0x4040044) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4a8, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x45c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x370, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r8], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.692871819s ago: executing program 4 (id=1295): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") rename(&(0x7f0000000000)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 4.634002527s ago: executing program 1 (id=1296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) io_submit(0x0, 0xffffffffffffff18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x793, &(0x7f0000001040)="$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") sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r2], 0x20}, 0x1, 0xd, 0x0, 0x80c5}, 0x20000000) r5 = gettid() syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0x7, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x9, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0xc2, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x5, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x5, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x5, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) socket$caif_stream(0x25, 0x1, 0x3) 2.593055848s ago: executing program 0 (id=1299): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.464532493s ago: executing program 4 (id=1300): socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001100"/20, @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r1}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) dup(0xffffffffffffffff) r5 = msgget$private(0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000004c0)={0x3, 0x2, 0x2, 0x0, 0x6}) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc044565d, &(0x7f0000000080)=@mmap={0xfffffffc, 0x2, 0x4, 0x2, 0x0, {}, {0x1, 0x2, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x1, {}, 0x2400002}) msgrcv(r5, 0x0, 0x0, 0x2, 0x3800) 2.45088329s ago: executing program 5 (id=1301): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=ANY=[], 0x270}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000640)="d6a58e4e9382a8d845a3b3a36cd013e238a4ca3f4c5774f0c29bf009c03a18c9f2d8b879858e6ccdc133fb49847071d995d172eee8190692ea6aa75154f36a028b6cfd3a73b816b26eeb05a770d501fd17dd8936d8d3fa082507f40feb7c0fb81f1128b451b43c37e3ee2bbbe296e2991007968ea5d750040cded27e1fcd7249038e6481980079540de09a64a1506113a7f22bb9ae9740d7", 0x98}, {&(0x7f0000000700)="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", 0x553}], 0x2}}], 0x2, 0x24048080) 2.386327167s ago: executing program 0 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x3, &(0x7f0000000580)=""/210, 0xd2) 1.963553905s ago: executing program 5 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0xfffffffffffffffc, {0x4, 0x400, 0x0, 0x0, 0x1, 0x4, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(0x0, &(0x7f0000000200)='./file0/../file0/file0/../file0\x00', 0x0, 0x1804, 0x0) 1.315309967s ago: executing program 0 (id=1304): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x4044090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x5, 0x884}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.253638196s ago: executing program 1 (id=1305): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 1.056933667s ago: executing program 4 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) 1.030541352s ago: executing program 2 (id=1307): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'ip6gre0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000002580)="8adc6364fa280e2e2208a887ac9e37d116546fca1589b50ecba8ed4143c3858c8a9b05a16f7a60b4be062081a61399232f762934f2ec27855db861083a584a75b5cd5effdf972dc26ad98ee4aa25b6f849080a258b8672af9e8229ec2a2acefc830221f349b2d734c18cce117ac950547969594ccef9e7fc4b761fac1984a7dc4fa0894a587481b23a194b8160b921b1f130352991db0abaf161d1f7e8ebe66d5e3ffa2d1756b866d73f3fbc8f33ee56dc60f8a61518029eeee82d83421a5280822940c3ca3e2a8e03afa658adc088bcc21a7b449f57dd0ee424ff33d7351ec2732b769138a8e930570af4b342cb753aebbad79e7f8bbc0c3001587cd1678776b44c846698a9d242312b8fe3f94e9f30340af76a58df3a1ec48f90e1e0a695fd3ec371d64b6af0a9051e6faaa93d28799a516b9066aba6d5f0b5ccd7c502141b3170b7fdc026b775fb3a92da441a61e9dd90ce213d4cda7f6b13255488391f2821b550f979f97c601e0d5014c6a92a851cf9649fed0e3ba1b01a93066a1f22e41a293862be83122e16b26d10d43ac450d50cb7b65fc6f362ccdc7fe0c70941099b597b7fc904b4841babf8b1f41b2b8890ecbbb069705546bd60bca1e3f724a7233b091c71f45da78e16e972174d144735cbd209a7e8de2c1845f234be206f365872e512967f7671e2e0d8a6edfc5933b50b3e9374767a1b184445d60935556ca9b208e83f7f7ebe66ef71bb23cda895feb048ac89b0e50d376eca0de1cefaf4085b2dfcef5ca2e7cabd93f2706d6e14c0f2d5ff35121acde909082bfc3bdefe4fe66bde9266dd5493c274f418a0ccc9c40447e18770f391f522c04754cef6c44dd8b9dd4f6055830617b15c269f8e8ff2373e060844a16aa161d0d5a150452f268b74c453ac155b23572e2c2a9a964c180d1660e71b3c7337510bb7868a072250b509d74e8c885e3c5bc02a067d01346ba67e06053cb45307459722dbc218af8ab2e0056240a517d38c72366b344b9d117d88d81558f1a81daec303f6be2963e7bf162b7d299b194664c652eedfd160668e9b76eda03968d3b3d8c1b1765956693ac2e8645792d36ab772af3955ea2ddc525a5800d50af88b32cca2591e01411d6da79373b3d5764e2abf3e7412eab33ee9bddec778ce698bbd0f849fcd54cc6b870ccaf16b288e30e23f37840ea81e2195ebb1bc4bf67275c9b92784eb694e720d56eb3f455c9f178015496ae08b5ab324bd8506ba95f4ff2ace444311bc897e191297fd9103bb9cad53640d8a70f8eea789110c7a13c9cadf81911cdb70fa810611ef2ff32f3eb5c8bdcf0ad6869e9138aeca2b50d2e773e5b31ed74723290cf37261b0496326a623eaa7a0f7ff829cd26057595dcb054834a9ef52ce139de2dc568d1865c74adf465c2787075b8bbe973dba0eff709e7675f1718c68f5c5458e5c30e96dbae10d647aa2255513cb65cdddbe5cfba42e5fa2c63f739ab317f9e4cc2ea0ae6dd5beca125ee9ac8390058a01eabd84f692481cfbc9e0572eaf1385983d9fe32ff496364cca3e4d68e471df6781c2e5ed7ecbf984233a5cb61db3c5804cde1f7cc210c46be80cd9fcc7a76313043515315ef5f4907067eb938792e78990e90886fb41336e5f7149d7a58a69ff71d05d9f2864439c8ac5d7b0923c08b5f2c819c6ed70ae414d4f14c985e44894fc077acc04b192477930875a6f11801fc8abc0be6cfb26a779ac130b23bed6e9f2b5995a28c2a83ca0ed3e34312dfbae10356ec01db4a67a29f905ad6093bd77ecd93172ddaac662989bbe586643450000dd5eb57a76c5027acfc8c3b6ef4b0b5d64541338e713a02ff52c9babed4090f56de7ae8533c2e36b574627264d641817cbb12cf5aed3220306065a4793fc482a4ea4430cbdc64596e226bcf40202656a9e0671ca6a84d78632110141a603b3d139359526d4b626617595b4b6f2bdbd0c7eabc1d6e011068855b46c6f7b7dd9622ef470a571e0a8cf5a24c95a006050144df88c25c895ffd9e67d13c910b3f83053109523370c61e0fc9db46ddd337b2bbc82414bd9dafcb45aa60008cb40e7ab7d1dc337e43decfa9ded0c6029a7741ef37a05017eb7b02692beab04b5c292869f09fd68b332a02a47765040ac40c478f0b600dcf924a1fc2f0af5dd54c2fc2db497017db43065f4d04a8984b6152c952b907c8cc199ee0f6e429d0f454071b2814e10b430e7963d015683f509b945d82a16d600534760c5c189adbb02a3f2317d92fb0b3c0afba90b619119dfd1b7562abe43ba82af37d2fed7eb01835e324ed859e77f2fe526fcdb46dc660f83c10fcddd64f5c99af599fc29acae9bbeeb5dbbec817fa0f26fef35d94472f97c6797e625869cc16ca9882788d4dde0989ef0f77dec235b155f3e274f6284a87835bb16418e611cbb2f9c3cb2ba67335e80594b3944510f44c2098d576da76bdf441dc0ae7cb82c75ad54e630759e47b2375e2779764634ed16216f6a64366eb53363e43f3262ab50bd6601f8098c4862328d91b6a4708a3b71f011f890da25e9bf03a7819bb20ffba9957b2bb99a04d5ddd855e9fc78b269139a23792dcf1e4446274bdc77d35c6c88847c3588b0f0b7ca7a46ea348aa6ce7059cb6eea40797a90cc62f070a5d29ea3976864c8d45e011794b5df38b97f8529079bc28ddb4c8fbc96a3ec91cf93d0141c2877f2caa69f782ff67b6298b8ac054ce0234ff953c3f675f68f20d86e41a7b53c2a32446207028baee37dd6df46033df6694857a7339b924f289008885b4a6ef0ab686217421ca531f069ad25f16afe050c0f256216cd17befac7e92545417311567ccf141553ed99d4450778b08b75ff98c78556b39f3fdb34c7fc9e833374e966e587737962696f0d30ba04b665e7c0c38dee0fd3017d4a87efcc9611015b1b0c943c216ab980effbf64683878be24279f4d0525aeb7b2f628fa658cf7e1babdd6fe63049442a06fc97d0fbcc7635f1b52fba3146c62daf47caa063c14c3e0375a74563646e24d5379373e1f150ebdedf4367cbc8e87ee98b864224326bfa536d959749c6368d2fbe413de5b4a0c2b62a0e1673ab6cfb84eb78a246cc7bb6df1871c7d68ddf529d05e554490af31d394f6d01d787a8ffa92598d27480e4b4f39ad901639ae400351295db96dee8773dcd2f77d92c8ea08c4a6a174b54a131fd0ddc18cfdd9e056b104f26eb868caf17d10502f1026cc0668cdd289898b11559425d6d904d8d6c0e9e89bf0343d6fb543b720a000007dbed1e21fbc901db7f249ea96c6dbe1d9945401dd92754b96d3a5f2a55ea9d23e5f69d50dc77f826d3957ad71b4ac8a120684584ff10bc05ecd0df41532562abf07ac46398c80459be972442c170d6b751682038dc98f39b7127c2794ec6fe167d207fcd0e9f9b8cec54c764eb2c21aa1e636708b810afaf827675e58c1a5c87fc2f3fae8a4cfc5c5cb24e66be8d7b57228450713d36c0ce58cc2dd14844bab0c8bcdde6d5659f5c0800c0b94eb1ac39643a1ca175c3f076318ff1a938c728ad7c4851ea57eecbf7343f05796192aeed59dd025abd3c1fd7b1b941c75e0dccb5e0720e47fb9211dbda020d421952ca5c141c5cce0c500d236db212db80284b9b7e2ef0cec216dd099037378c12a73164f2c24144db5dd66b438ab03f22e5367986268e254f77eaeedeb37cd33b6a3e8abcb93ca5c98c026e256c5c002dcfe9087d55304222834331ef53b667b4cd87cc1afeaa7e674e2eeb1a8225125295715302d958eccfed994fb67ebcfe9bb8807f067916c650962b7dcf664998b746189dda81f30d61888f", 0xa9a) 942.824214ms ago: executing program 5 (id=1308): openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 743.139826ms ago: executing program 1 (id=1309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 731.078643ms ago: executing program 4 (id=1310): socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x26, 0x1c, 0x67, 0x0, 0x9, 0x2, 0x0, @remote, @broadcast}, {0x11, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) 304.55294ms ago: executing program 4 (id=1311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000fc0)='htcp', 0x4) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a22d20f77d9a94bc3ae91684aaf7b7dff691de", 0x2d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)}}], 0x3, 0x46090) 271.893373ms ago: executing program 5 (id=1312): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="17437c27cf", 0x5) 148.979629ms ago: executing program 5 (id=1313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, 0x8) 86.713827ms ago: executing program 4 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 0s ago: executing program 5 (id=1315): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x8801}}], 0x1, 0x20040035) kernel console output (not intermixed with test programs): ] Bluetooth: hci2: command 0x040f tx timeout [ 64.661374][ T4265] device veth1_macvtap entered promiscuous mode [ 64.668434][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.678533][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.687605][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.699846][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.711851][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.735828][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.756032][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.780386][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.819112][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.833006][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.843739][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.855707][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.875490][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.885828][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.904108][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.924012][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.936858][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.958262][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.978008][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.992778][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.011731][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.035672][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.069949][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.078742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.087674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.100021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.112679][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.123224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.133751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.145934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.162773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.182675][ T4276] device veth0_macvtap entered promiscuous mode [ 65.199575][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.210525][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.219766][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.231933][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.248527][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.262173][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.273547][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.284708][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.299707][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.314176][ T4276] device veth1_macvtap entered promiscuous mode [ 65.325959][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.338018][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.349930][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.360797][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.371612][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.383420][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.404521][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.441227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.457036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.470358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.485066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.498666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.515517][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.527623][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.539771][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.549135][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.592618][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.607885][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.617815][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.629961][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.668812][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.689682][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.700649][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.714502][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.728559][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.739530][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.753556][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.765902][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.778580][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.805913][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.828191][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.843984][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.855889][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.866874][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.877782][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.888143][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.898746][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.908959][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.919484][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.935937][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.961831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.972321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.976498][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.994697][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.020378][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.020815][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.029594][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.047454][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.094416][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.223321][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.246476][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.259680][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.279811][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.298084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.305643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.319401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.336070][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.348499][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.382660][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.401679][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.422822][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.460100][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.498235][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.514032][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.555344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.593064][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.608093][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.627871][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.642719][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 66.649571][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 66.655842][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 66.655880][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 66.676293][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.686400][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.721190][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 66.724683][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.851144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 66.859870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.870721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.880724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.890720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.900712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.909023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.917225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.925411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.961192][ T4374] tipc: Started in network mode [ 67.966189][ T4374] tipc: Node identity ee1ca1a3fb2a, cluster identity 4711 [ 68.074898][ T4374] tipc: Enabled bearer , priority 0 [ 68.166144][ T4376] device syzkaller0 entered promiscuous mode [ 68.176407][ T4385] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 68.188046][ T4382] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 68.294152][ T4374] syzkaller0: MTU too low for tipc bearer [ 68.331731][ T4360] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.355527][ T4374] tipc: Disabling bearer [ 68.541155][ T4360] usb 3-1: Using ep0 maxpacket: 8 [ 68.550344][ T4360] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 68.606391][ T4360] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 68.636790][ T4360] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.672887][ T4360] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.725490][ T4360] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.749676][ T4360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.994813][ T4360] usb 3-1: GET_CAPABILITIES returned 0 [ 69.000551][ T4360] usbtmc 3-1:16.0: can't read capabilities [ 69.417407][ T4315] usb 3-1: USB disconnect, device number 2 [ 70.024240][ T4421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 70.473206][ T4434] kernel profiling enabled (shift: 9) [ 71.034855][ T4436] tty tty2: ldisc open failed (-12), clearing slot 1 [ 71.204536][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.212623][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.789311][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 72.825342][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 72.975290][ T4450] ceph: No mds server is up or the cluster is laggy [ 73.122986][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 73.129022][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 73.288598][ T4465] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.577243][ T4482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.27'. [ 75.024606][ T4488] 9pnet_virtio: no channels available for device syz [ 75.040582][ T4488] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.058218][ T4488] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.001383][ T4346] libceph: connect (1)[c::]:6789 error -101 [ 76.007356][ T4346] libceph: mon0 (1)[c::]:6789 connect error [ 76.141616][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 76.159675][ T4501] ceph: No mds server is up or the cluster is laggy [ 76.191095][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 76.282668][ T952] libceph: connect (1)[c::]:6789 error -101 [ 76.288693][ T952] libceph: mon0 (1)[c::]:6789 connect error [ 76.336201][ T7] cfg80211: failed to load regulatory.db [ 76.413815][ T4512] loop1: detected capacity change from 0 to 4096 [ 77.341379][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 77.359613][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 77.791597][ T4524] netlink: 64 bytes leftover after parsing attributes in process `syz.0.38'. [ 79.691542][ T4549] loop3: detected capacity change from 0 to 4096 [ 81.672410][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 81.756873][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 81.792825][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 81.829724][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 82.049917][ T4564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.53'. [ 82.111258][ T4265] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 82.131451][ T4265] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 82.472522][ T4572] loop4: detected capacity change from 0 to 4096 [ 83.421328][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 83.427874][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 83.884210][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 84.016015][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 84.537229][ T4606] loop0: detected capacity change from 0 to 4096 [ 85.564903][ T4612] netlink: 64 bytes leftover after parsing attributes in process `syz.3.69'. [ 85.636944][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 85.697023][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 87.425957][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 87.535679][ T4640] 9pnet_virtio: no channels available for device syz [ 87.548749][ T4640] siw: device registration error -23 [ 88.143925][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 88.195630][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 88.800709][ C0] sched: RT throttling activated [ 89.060826][ T4648] loop4: detected capacity change from 0 to 4096 [ 90.202376][ T4643] device hsr_slave_1 left promiscuous mode [ 90.248042][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 90.256712][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 90.559454][ T4660] loop1: detected capacity change from 0 to 4096 [ 91.314446][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 91.320987][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.506607][ T4664] device syzkaller0 entered promiscuous mode [ 91.676820][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 91.758146][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 91.980821][ T4681] 9pnet_virtio: no channels available for device syz [ 91.992124][ T4681] siw: device registration error -23 [ 94.390310][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 94.402055][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 94.758368][ T4698] loop4: detected capacity change from 0 to 4096 [ 95.586016][ T4692] device hsr_slave_1 left promiscuous mode [ 95.620942][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 95.629289][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 95.636844][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 95.754104][ T4715] netlink: 56 bytes leftover after parsing attributes in process `syz.4.102'. [ 95.970489][ T4717] device syzkaller0 entered promiscuous mode [ 96.157534][ T4727] 9pnet_virtio: no channels available for device syz [ 96.169464][ T4727] siw: device registration error -23 [ 98.166116][ T4745] loop1: detected capacity change from 0 to 4096 [ 99.173931][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 99.180464][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 99.197686][ T4759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.119'. [ 99.307114][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.367424][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 99.618191][ T4771] 9pnet_virtio: no channels available for device syz [ 99.627871][ T4771] siw: device registration error -23 [ 101.112070][ T4794] loop0: detected capacity change from 0 to 4096 [ 101.941950][ T4797] device syzkaller0 entered promiscuous mode [ 102.026294][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 102.151180][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 102.479228][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 102.544303][ T4811] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 102.674728][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 102.934630][ T4808] device hsr_slave_1 left promiscuous mode [ 103.041008][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 103.898290][ T4825] siw: device registration error -23 [ 105.742534][ T4806] Process accounting resumed [ 105.749880][ T4853] device syzkaller0 entered promiscuous mode [ 107.486062][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 107.495103][ T4861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 107.509676][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 107.526397][ T4873] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 108.671079][ T4883] 9pnet_virtio: no channels available for device syz [ 108.678380][ T4883] siw: device registration error -23 [ 109.574892][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 109.606280][ T4908] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 109.686567][ T4903] device syzkaller0 entered promiscuous mode [ 111.313340][ T4922] 9pnet_virtio: no channels available for device syz [ 113.124489][ T4901] Process accounting resumed [ 114.437139][ T4950] 9pnet_virtio: no channels available for device syz [ 114.444509][ T4950] siw: device registration error -23 [ 115.564052][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 115.573139][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 117.047851][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 117.059019][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 117.240097][ T4992] device hsr_slave_1 left promiscuous mode [ 117.369026][ T4996] device syzkaller0 entered promiscuous mode [ 117.461911][ T5003] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 118.459197][ T4999] Process accounting resumed [ 119.925176][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 120.338057][ T5022] loop4: detected capacity change from 0 to 4096 [ 121.336321][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 122.819403][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 122.836075][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 122.842628][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 123.384812][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 123.752611][ T5068] loop0: detected capacity change from 0 to 4096 [ 124.741150][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 124.747628][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 126.164842][ T5094] loop4: detected capacity change from 0 to 4096 [ 127.422286][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 127.428797][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 127.719150][ T5111] loop1: detected capacity change from 0 to 4096 [ 128.688517][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 128.695825][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 128.728045][ T5116] device syzkaller0 entered promiscuous mode [ 130.176011][ T5139] loop2: detected capacity change from 0 to 4096 [ 131.160011][ T4268] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 131.166924][ T4268] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 131.248854][ T5144] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 132.645039][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.658600][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.274170][ T5161] loop4: detected capacity change from 0 to 4096 [ 136.791914][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 136.801282][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 138.061810][ T5184] device syzkaller0 entered promiscuous mode [ 138.942923][ T5198] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 142.172805][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 142.215126][ T5211] bridge0: port 3(vlan2) entered blocking state [ 142.286686][ T5211] bridge0: port 3(vlan2) entered disabled state [ 142.322965][ T5211] device vlan2 entered promiscuous mode [ 142.354435][ T5211] device dummy0 entered promiscuous mode [ 142.694052][ T5225] loop0: detected capacity change from 0 to 4096 [ 143.567740][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 143.599988][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 144.325725][ T5248] device syzkaller0 entered promiscuous mode [ 146.214531][ T5271] loop1: detected capacity change from 0 to 4096 [ 146.993705][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 147.005847][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 147.581630][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 148.735922][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 148.977329][ T5286] device hsr_slave_1 left promiscuous mode [ 149.278636][ T5299] loop0: detected capacity change from 0 to 4096 [ 150.200659][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 150.251450][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 150.605658][ T5308] device syzkaller0 entered promiscuous mode [ 150.787901][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 150.865382][ T5318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 154.630520][ T5320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 154.905501][ T5342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 155.087164][ T5346] loop1: detected capacity change from 0 to 4096 [ 156.683642][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 156.698783][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 157.075836][ T5363] loop0: detected capacity change from 0 to 4096 [ 157.285623][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 157.678770][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 158.231574][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 158.260119][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 158.436317][ T5383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.307'. [ 158.542415][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.307'. [ 161.112118][ T5394] loop3: detected capacity change from 0 to 4096 [ 161.770862][ T4265] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 161.778053][ T4265] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.803924][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 162.456077][ T5422] syz.0.315 uses obsolete (PF_INET,SOCK_PACKET) [ 165.549360][ T5429] loop1: detected capacity change from 0 to 4096 [ 166.558079][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 166.746325][ T5438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.320'. [ 166.776895][ T5438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.320'. [ 167.028378][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 167.042668][ T5444] device syzkaller0 entered promiscuous mode [ 169.342095][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 169.924713][ T5490] loop4: detected capacity change from 0 to 4096 [ 170.995043][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 171.382778][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 171.402370][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 171.598320][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 171.653601][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 171.795365][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 172.483793][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 172.840552][ T5523] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 174.870833][ T5544] process 'syz.2.343' launched './file1' with NULL argv: empty string added [ 177.375220][ T5549] loop3: detected capacity change from 0 to 4096 [ 178.166482][ T4265] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 178.182966][ T4265] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 178.254245][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 178.303457][ T5551] bridge0: port 3(vlan2) entered blocking state [ 178.328502][ T5551] bridge0: port 3(vlan2) entered disabled state [ 178.342542][ T5551] device vlan2 entered promiscuous mode [ 178.363523][ T5551] device dummy0 entered promiscuous mode [ 178.706340][ T5562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'. [ 178.760935][ T5563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'. [ 178.898351][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 179.986913][ T5580] netlink: 96 bytes leftover after parsing attributes in process `syz.0.353'. [ 180.029077][ T27] audit: type=1326 audit(1773148744.408:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.113775][ T27] audit: type=1326 audit(1773148744.438:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.235180][ T27] audit: type=1326 audit(1773148744.438:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.318900][ T27] audit: type=1326 audit(1773148744.438:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.395884][ T27] audit: type=1326 audit(1773148744.438:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.465210][ T27] audit: type=1326 audit(1773148744.438:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.542125][ T27] audit: type=1326 audit(1773148744.438:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.649229][ T27] audit: type=1326 audit(1773148744.438:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.735376][ T27] audit: type=1326 audit(1773148744.748:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 180.800862][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 180.807045][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 180.807055][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 180.813085][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 180.813112][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 180.890804][ T27] audit: type=1326 audit(1773148744.748:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecad9c799 code=0x7ffc0000 [ 181.648623][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 181.703608][ T5602] bridge0: port 3(vlan2) entered blocking state [ 181.756503][ T5602] bridge0: port 3(vlan2) entered disabled state [ 181.831991][ T5602] device vlan2 entered promiscuous mode [ 181.852124][ T5602] device dummy0 entered promiscuous mode [ 183.287852][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 185.881668][ T5632] 9pnet_virtio: no channels available for device syz [ 185.969847][ T5634] Zero length message leads to an empty skb [ 185.978135][ T5634] ======================================================= [ 185.978135][ T5634] WARNING: The mand mount option has been deprecated and [ 185.978135][ T5634] and is ignored by this kernel. Remove the mand [ 185.978135][ T5634] option from the mount to silence this warning. [ 185.978135][ T5634] ======================================================= [ 186.013036][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.037763][ T5634] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.120222][ T5634] overlayfs: failed to look up (tracing) for ino (-66) [ 186.819026][ T5644] netlink: 220 bytes leftover after parsing attributes in process `syz.0.370'. [ 186.840918][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 187.048278][ T5649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 188.681522][ T5649] bridge2: port 1(vlan2) entered blocking state [ 188.688020][ T5649] bridge2: port 1(vlan2) entered disabled state [ 188.696024][ T5649] device vlan2 entered promiscuous mode [ 188.708579][ T4285] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 188.722152][ T5649] device vlan0 entered promiscuous mode [ 189.120538][ T5663] 9pnet_virtio: no channels available for device syz [ 190.953545][ T5679] overlayfs: failed to resolve './file0': -2 [ 192.990097][ T5707] 9pnet_virtio: no channels available for device syz [ 193.109298][ T5708] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 193.178680][ T5708] overlayfs: failed to look up (tracing) for ino (-66) [ 194.194580][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280797][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.304997][ T5730] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 197.317639][ T5732] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 197.536527][ T5735] loop0: detected capacity change from 0 to 4096 [ 198.428029][ T5739] random: crng reseeded on system resumption [ 198.585351][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 198.606455][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 198.937580][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 201.711089][ T5756] 9pnet_virtio: no channels available for device syz [ 205.288384][ T5773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'. [ 206.100909][ T5784] 9pnet_virtio: no channels available for device syz [ 206.340863][ T5784] siw: device registration error -23 [ 208.983315][ T5799] loop4: detected capacity change from 0 to 4096 [ 210.636220][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 210.651010][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 210.947664][ T5819] loop0: detected capacity change from 0 to 4096 [ 212.413558][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 212.420052][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 215.586179][ T5839] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 217.845080][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 218.590984][ T5858] loop2: detected capacity change from 0 to 4096 [ 220.381122][ T4268] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 220.387616][ T4268] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 221.922853][ T5876] netlink: 200 bytes leftover after parsing attributes in process `syz.1.427'. [ 222.221505][ T5883] netlink: 72 bytes leftover after parsing attributes in process `syz.0.428'. [ 227.221386][ T5917] tipc: Started in network mode [ 227.226322][ T5917] tipc: Node identity 4, cluster identity 4711 [ 227.313384][ T5917] tipc: Node number set to 4 [ 227.674731][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.687830][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.696211][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.704540][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.713236][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 227.721651][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.158584][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 229.367525][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.489898][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.531438][ T5922] device bridge_slave_0 entered promiscuous mode [ 229.605034][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.663916][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.694981][ T5922] device bridge_slave_1 entered promiscuous mode [ 229.760903][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 229.850229][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.047575][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.494008][ T5922] team0: Port device team_slave_0 added [ 231.840837][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 232.644984][ T5922] team0: Port device team_slave_1 added [ 232.857180][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.876956][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.094855][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.190800][ T4315] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 233.275129][ T4495] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.352170][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.367248][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.433990][ T4315] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 233.513604][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.514193][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 233.858885][ T4315] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.904585][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.916532][ T4315] usb 3-1: Product: syz [ 233.920937][ T4315] usb 3-1: Manufacturer: syz [ 233.921012][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 233.925597][ T4315] usb 3-1: SerialNumber: syz [ 233.948516][ T4495] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.019231][ T4315] usb 3-1: config 0 descriptor?? [ 234.155183][ T4315] usb 3-1: selecting invalid altsetting 0 [ 234.270370][ T5922] device hsr_slave_0 entered promiscuous mode [ 234.327097][ T4315] usb 3-1: USB disconnect, device number 3 [ 234.353756][ T5922] device hsr_slave_1 entered promiscuous mode [ 234.399805][ T5922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.460892][ T5922] Cannot create hsr debugfs directory [ 234.574643][ T4495] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.724717][ T4495] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.979578][ T5988] loop2: detected capacity change from 0 to 4096 [ 236.000868][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 236.987697][ T4268] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 237.000148][ T4268] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 237.080911][ T4315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 237.360988][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 237.383949][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.416527][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.619650][ T4315] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.630253][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.640545][ T4315] usb 5-1: config 0 descriptor?? [ 237.654760][ T5922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.678176][ T4315] hub 5-1:0.0: USB hub found [ 237.804501][ T5922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.839097][ T5922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.856552][ T4315] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 237.980180][ T5922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.944522][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.236771][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.310846][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.321482][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.616758][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.655960][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.699732][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.707939][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.746083][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.782381][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.832451][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.839571][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.882679][ T4315] usbhid 5-1:0.0: can't add hid device: -32 [ 242.888727][ T4315] usbhid: probe of 5-1:0.0 failed with error -32 [ 242.911213][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.086062][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.111280][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.211027][ T7] usb 5-1: USB disconnect, device number 2 [ 243.496065][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.528377][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.577841][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.659665][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.682459][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.880379][ T4495] device hsr_slave_0 left promiscuous mode [ 243.913378][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.035675][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.144772][ T6058] ubi31: attaching mtd0 [ 244.173478][ T6058] ubi31: scanning is finished [ 244.178296][ T6058] ubi31: empty MTD device detected [ 244.289940][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.508057][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.553799][ T4495] device bridge_slave_1 left promiscuous mode [ 244.597782][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.741640][ T6058] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 244.759764][ T4495] device bridge_slave_0 left promiscuous mode [ 244.774987][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.085270][ T4495] device veth1_macvtap left promiscuous mode [ 245.130449][ T4495] device veth0_macvtap left promiscuous mode [ 245.170992][ T4495] device veth1_vlan left promiscuous mode [ 245.192385][ T4495] device veth0_vlan left promiscuous mode [ 245.319302][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.465'. [ 247.970931][ T6103] 9pnet_virtio: no channels available for device syz [ 251.518091][ T6110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.876794][ T4495] team0 (unregistering): Port device team_slave_1 removed [ 253.040261][ T4495] team0 (unregistering): Port device team_slave_0 removed [ 253.138444][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.265738][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.327556][ T4495] bond0 (unregistering): Released all slaves [ 254.500380][ T5922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.530938][ T5922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.568854][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.580556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.621335][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.632624][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.642456][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.667133][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 254.725029][ T6122] netlink: 3 bytes leftover after parsing attributes in process `syz.1.474'. [ 254.797444][ T6109] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.096429][ T6131] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 255.269332][ T6131] team0: Port device dummy0 added [ 255.318086][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 255.524023][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530365][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.873386][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.946425][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.980527][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.766978][ T6172] device syzkaller1 entered promiscuous mode [ 257.121345][ T6181] 9pnet_virtio: no channels available for device syz [ 258.681264][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.708153][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.830631][ T5922] device veth0_vlan entered promiscuous mode [ 258.865573][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.894230][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.958307][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.001223][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.031900][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 259.057162][ T5922] device veth1_vlan entered promiscuous mode [ 259.121990][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.150520][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.254515][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.276631][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.316643][ T6211] netlink: 'syz.1.491': attribute type 10 has an invalid length. [ 259.451652][ T6211] bridge0: port 3(vlan2) entered blocking state [ 259.458768][ T6211] bridge0: port 3(vlan2) entered forwarding state [ 259.517811][ T6211] team0: Port device dummy0 added [ 259.537670][ T5922] device veth0_macvtap entered promiscuous mode [ 259.589114][ T5922] device veth1_macvtap entered promiscuous mode [ 259.605405][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.621337][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.641533][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.641650][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.641663][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.641674][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.641682][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.698664][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.712513][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.720371][ T6211] syz.1.491 (6211) used greatest stack depth: 20752 bytes left [ 259.736967][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.748429][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 259.758800][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.768382][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.891592][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.920041][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.976760][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.036112][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.077209][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.107907][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.144929][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.156669][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.170485][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.190212][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.219904][ T6230] netlink: 52 bytes leftover after parsing attributes in process `syz.1.494'. [ 260.251429][ T6230] tipc: Invalid UDP bearer configuration [ 260.251461][ T6230] tipc: Enabling of bearer rejected, failed to enable media [ 260.270926][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.296591][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.347895][ T5922] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.386088][ T5922] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.446684][ T5922] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.477087][ T5922] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.777154][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.820084][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.940453][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.029955][ T6243] netlink: 'syz.1.498': attribute type 4 has an invalid length. [ 261.191809][ T4495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.239076][ T4495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.276804][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.699218][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'. [ 261.988587][ T4285] Bluetooth: hci5: Invalid connection link type handle 0x00c9 [ 262.154575][ T6267] netlink: 'syz.1.503': attribute type 10 has an invalid length. [ 262.289378][ T6267] bridge0: port 3(vlan2) entered disabled state [ 264.517525][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 266.393183][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.512'. [ 267.493859][ T4285] Bluetooth: hci5: Invalid connection link type handle 0x00c9 [ 267.546245][ T6323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 267.720326][ T6323] overlayfs: failed to look up (tracing) for ino (-66) [ 268.414079][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 268.455616][ T6340] bridge0: port 3(vlan3) entered blocking state [ 268.480044][ T6340] bridge0: port 3(vlan3) entered disabled state [ 268.504548][ T6340] device vlan3 entered promiscuous mode [ 268.525105][ T6340] device dummy0 entered promiscuous mode [ 268.573965][ T6344] netlink: 'syz.4.519': attribute type 10 has an invalid length. [ 268.642737][ T4285] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 268.652334][ T4285] Bluetooth: hci4: Injecting HCI hardware error event [ 268.660595][ T4283] Bluetooth: hci4: hardware error 0x00 [ 268.936246][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.979451][ T6349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.039350][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 269.293909][ T6361] 9pnet_virtio: no channels available for device syz [ 270.309342][ T6365] loop4: detected capacity change from 0 to 4096 [ 270.758851][ T4283] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 271.777129][ T6369] ubi31: attaching mtd0 [ 271.782497][ T6369] ubi31: scanning is finished [ 271.885079][ T6369] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 271.910810][ T6369] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 271.918160][ T6369] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 271.925740][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 271.950746][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 272.036856][ T6369] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 272.111919][ T6369] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 272.171205][ T6369] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 272.211361][ T6369] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2044890872 [ 272.271336][ T6369] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 272.332173][ T6370] ubi31: background thread "ubi_bgt31d" started, PID 6370 [ 273.871093][ T6396] 9pnet_virtio: no channels available for device syz [ 274.412854][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.533'. [ 274.971322][ T6392] bridge0: port 3(vlan2) entered blocking state [ 275.001213][ T6392] bridge0: port 3(vlan2) entered disabled state [ 275.008583][ T6392] device vlan2 entered promiscuous mode [ 275.046383][ T6392] device dummy0 entered promiscuous mode [ 275.066896][ T6400] netlink: 'syz.5.533': attribute type 10 has an invalid length. [ 275.134155][ T6400] bridge0: port 3(vlan2) entered blocking state [ 275.140902][ T6400] bridge0: port 3(vlan2) entered forwarding state [ 275.185839][ T6400] team0: Port device dummy0 added [ 275.208413][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 276.643309][ T6435] netlink: 'syz.5.540': attribute type 1 has an invalid length. [ 276.672461][ T6435] netlink: 'syz.5.540': attribute type 2 has an invalid length. [ 276.808342][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.540'. [ 277.170415][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.243580][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.315984][ T6444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.868844][ T6465] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 277.877799][ T6465] netlink: 'syz.2.546': attribute type 2 has an invalid length. [ 277.891699][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 277.929818][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.938875][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.061286][ T6465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.542495][ T6517] program syz.2.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.316395][ T6540] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 282.420774][ T6540] bridge0: port 3(vlan3) entered blocking state [ 282.427161][ T6540] bridge0: port 3(vlan3) entered forwarding state [ 282.677922][ T6540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.800498][ T46] bridge0: port 3(vlan3) entered disabled state [ 285.605104][ T6540] syz.4.560 (6540) used greatest stack depth: 20016 bytes left [ 289.609828][ T4315] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 291.544848][ T6632] PKCS8: Unsupported PKCS#8 version [ 291.968074][ T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 292.223288][ T7] usb 3-1: config 0 has no interfaces? [ 292.228858][ T7] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 292.311876][ T6633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.583'. [ 292.331079][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.383961][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 292.383972][ T27] audit: type=1326 audit(1773148856.768:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.413714][ T6654] syz.0.588 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 292.455214][ T7] usb 3-1: config 0 descriptor?? [ 292.486009][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.589'. [ 292.627773][ T27] audit: type=1326 audit(1773148856.798:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627809][ T27] audit: type=1326 audit(1773148856.798:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627836][ T27] audit: type=1326 audit(1773148856.798:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627862][ T27] audit: type=1326 audit(1773148856.908:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627886][ T27] audit: type=1326 audit(1773148856.908:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627911][ T27] audit: type=1326 audit(1773148856.908:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627937][ T27] audit: type=1326 audit(1773148856.908:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627963][ T27] audit: type=1326 audit(1773148856.908:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.627989][ T27] audit: type=1326 audit(1773148856.908:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 292.837885][ T6658] device hsr_slave_1 left promiscuous mode [ 292.875845][ T7] usb 3-1: USB disconnect, device number 4 [ 293.852674][ T6688] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 294.457089][ T6697] loop2: detected capacity change from 0 to 8192 [ 294.497511][ T6697] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.538855][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539078][ T6697] FAT-fs (loop2): Filesystem has been set read-only [ 294.539158][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539171][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539183][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539193][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539204][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539215][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539226][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539237][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 294.539250][ T6697] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 295.972035][ T6656] tty tty21: ldisc open failed (-12), clearing slot 20 [ 296.212455][ T6683] tty tty3: ldisc open failed (-12), clearing slot 2 [ 296.699167][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 297.298982][ T6724] netlink: 'syz.1.603': attribute type 10 has an invalid length. [ 297.691417][ T6741] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 297.821075][ T6741] random: crng reseeded on system resumption [ 298.349824][ T6766] fuse: Bad value for 'fd' [ 298.881634][ T6775] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 303.262963][ T6837] 9pnet_virtio: no channels available for device syz [ 303.272206][ T6837] siw: device registration error -23 [ 306.142554][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 307.759954][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 307.830268][ T6908] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 308.062457][ T6908] bridge0: port 3(vlan2) entered blocking state [ 308.069283][ T6908] bridge0: port 3(vlan2) entered forwarding state [ 308.254247][ T6908] team0: Port device dummy0 added [ 309.651777][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 309.651791][ T27] audit: type=1326 audit(1773148874.038:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 310.656681][ T27] audit: type=1326 audit(1773148874.068:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 310.793753][ T27] audit: type=1326 audit(1773148874.068:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 310.896156][ T27] audit: type=1326 audit(1773148874.098:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 310.929107][ T27] audit: type=1326 audit(1773148874.108:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 311.072433][ T27] audit: type=1326 audit(1773148874.138:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 311.126502][ T27] audit: type=1326 audit(1773148874.138:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f300419c502 code=0x7ffc0000 [ 311.256381][ T27] audit: type=1326 audit(1773148875.018:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f300419c502 code=0x7ffc0000 [ 311.348591][ T27] audit: type=1326 audit(1773148875.218:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 311.398774][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 311.499097][ T27] audit: type=1326 audit(1773148875.308:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f300419c799 code=0x7ffc0000 [ 311.574511][ T6834] Set syz1 is full, maxelem 65536 reached [ 312.356129][ T6995] 9pnet_virtio: no channels available for device syz [ 312.368523][ T6995] siw: device registration error -23 [ 316.968224][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.982209][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.310827][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 317.512186][ T26] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.536218][ T26] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 317.620771][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.658387][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 317.674698][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 317.739476][ T26] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.869552][ T26] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.917905][ T26] usb 3-1: Product: syz [ 317.944643][ T26] usb 3-1: Manufacturer: syz [ 318.008628][ T26] cdc_wdm 3-1:1.0: skipping garbage [ 318.148226][ T26] cdc_wdm 3-1:1.0: skipping garbage [ 318.170253][ T26] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 318.176381][ T26] cdc_wdm 3-1:1.0: Unknown control protocol [ 320.167805][ T26] usb 3-1: USB disconnect, device number 5 [ 320.730998][ T4346] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 320.920876][ T4346] usb 1-1: Using ep0 maxpacket: 32 [ 320.929713][ T4346] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 320.979659][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.030866][ T4346] usb 1-1: Product: syz [ 321.054537][ T4346] usb 1-1: Manufacturer: syz [ 321.075367][ T4346] usb 1-1: SerialNumber: syz [ 321.099412][ T4346] usb 1-1: config 0 descriptor?? [ 321.536060][ T4346] airspy 1-1:0.0: Board ID: 00 [ 321.541265][ T4346] airspy 1-1:0.0: Firmware version: [ 321.742757][ T4346] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 322.100938][ T7104] 9pnet_virtio: no channels available for device syz [ 323.031136][ T4346] airspy 1-1:0.0: Registered as swradio24 [ 323.047192][ T4346] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 323.503445][ T4346] usb 1-1: USB disconnect, device number 2 [ 325.022966][ T4346] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 325.528428][ T4346] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.541229][ T4346] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 325.570839][ T4278] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 325.597848][ T4346] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.627702][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 325.645765][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 325.777611][ T4346] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.788580][ T4278] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.806329][ T4278] usb 5-1: config 0 has no interface number 0 [ 325.849682][ T4278] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 325.877116][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.959025][ T4346] usb 1-1: Product: syz [ 326.075996][ T4278] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 326.098008][ T4346] usb 1-1: Manufacturer: syz [ 326.137338][ T4346] cdc_wdm 1-1:1.0: skipping garbage [ 326.143288][ T4278] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.166177][ T4346] cdc_wdm 1-1:1.0: skipping garbage [ 326.202466][ T4278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.218943][ T4346] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 326.295657][ T4346] cdc_wdm 1-1:1.0: Unknown control protocol [ 326.303046][ T4278] usb 5-1: config 0 descriptor?? [ 326.309975][ T7131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 326.402705][ T4346] usb 1-1: USB disconnect, device number 3 [ 326.502475][ T4278] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 326.652675][ T4278] usb 5-1: USB disconnect, device number 3 [ 327.014462][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 327.115904][ T7160] netlink: 'syz.1.703': attribute type 10 has an invalid length. [ 329.547394][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 329.617269][ T7194] IPVS: sh: TCP [::]:0 - no destination available [ 329.875575][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 329.900196][ T7200] netlink: 'syz.0.717': attribute type 10 has an invalid length. [ 329.983288][ T7200] bridge0: port 3(vlan2) entered disabled state [ 330.010999][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'. [ 333.625243][ T7238] loop1: detected capacity change from 0 to 4096 [ 333.767081][ T7238] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 333.864610][ T7238] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 334.295471][ T7244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.303351][ T7244] IPv6: NLM_F_CREATE should be set when creating new route [ 334.593034][ T7248] loop1: detected capacity change from 0 to 128 [ 334.626972][ T7248] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 334.649925][ T7248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.411399][ T7250] netlink: 'syz.2.734': attribute type 17 has an invalid length. [ 335.495185][ T7250] netlink: 148 bytes leftover after parsing attributes in process `syz.2.734'. [ 335.800973][ T7258] loop1: detected capacity change from 0 to 2048 [ 335.822203][ T7258] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 335.837565][ T7258] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 337.539121][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop1 [ 337.861244][ T7270] 9pnet_virtio: no channels available for device syz [ 338.919778][ T7267] loop4: detected capacity change from 0 to 1024 [ 339.135113][ T7267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 339.303169][ T7267] overlayfs: missing 'lowerdir' [ 339.453153][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 341.631272][ T7319] 9pnet_virtio: no channels available for device syz [ 343.121487][ T7321] loop5: detected capacity change from 0 to 32768 [ 343.128906][ T7321] xfs: Unknown parameter 'appraise' [ 343.287504][ T6617] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.687218][ T7337] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 344.714426][ T7337] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 344.853988][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 344.999632][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.026651][ T7337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.855930][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 347.956935][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 347.992162][ T7380] netlink: 'syz.4.773': attribute type 10 has an invalid length. [ 348.081000][ T7380] bridge0: port 3(vlan3) entered disabled state [ 348.140931][ T4278] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 348.181671][ T7385] loop2: detected capacity change from 0 to 1024 [ 348.242066][ T7385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 348.251528][ T7385] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.279908][ T7385] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.774: lblock 0 mapped to illegal pblock 0 (length 1) [ 348.332412][ T4278] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 348.342641][ T4278] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 348.363666][ T4278] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.373115][ T4278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 348.385485][ T4278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 348.412489][ T7385] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm syz.2.774: lblock 8 mapped to illegal pblock 8 (length 8) [ 348.428262][ T4278] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.428985][ T7391] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.774: lblock 0 mapped to illegal pblock 0 (length 1) [ 348.451332][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.463840][ T7385] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.774: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 348.493137][ T4278] usb 2-1: Product: syz [ 348.504143][ T4278] usb 2-1: Manufacturer: syz [ 348.518432][ T4278] cdc_wdm 2-1:1.0: skipping garbage [ 348.526336][ T4278] cdc_wdm 2-1:1.0: skipping garbage [ 348.535541][ T4278] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 348.542300][ T4278] cdc_wdm 2-1:1.0: Unknown control protocol [ 348.658943][ T7391] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 348.671554][ T7388] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 348.752615][ T7391] EXT4-fs (loop2): This should not happen!! Data will be lost [ 348.752615][ T7391] [ 348.886423][ T4550] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 4: comm kworker/u4:13: lblock 4 mapped to illegal pblock 4 (length 1) [ 348.907779][ T4550] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 348.921620][ T4550] EXT4-fs (loop2): This should not happen!! Data will be lost [ 348.921620][ T4550] [ 348.947902][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 349.010774][ T4278] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 349.210856][ T4278] usb 1-1: Using ep0 maxpacket: 32 [ 349.255691][ T4278] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 349.284111][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.300824][ T4278] usb 1-1: Product: syz [ 349.305347][ T4278] usb 1-1: Manufacturer: syz [ 349.309987][ T4278] usb 1-1: SerialNumber: syz [ 349.332248][ T4278] usb 1-1: config 0 descriptor?? [ 349.353991][ T4278] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 349.363374][ T4278] dvb-usb: bulk message failed: -22 (4/0) [ 349.370577][ T4278] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.382104][ T4278] dvb-usb: bulk message failed: -22 (5/0) [ 349.388227][ T4278] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.454702][ T4278] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.471369][ T4278] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 349.482734][ T4278] usb 1-1: media controller created [ 349.515254][ T4278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.550654][ T7398] dvb-usb: bulk message failed: -22 (8/0) [ 349.562233][ T7398] ttusb2: there might have been an error during control message transfer. (rlen = 22, was 0) [ 349.606125][ T7398] ttusb2: i2c transfer failed. [ 349.611572][ T4278] usb 1-1: selecting invalid altsetting 3 [ 349.624553][ T4278] ttusb2: set interface to alts=3 failed [ 349.640329][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 349.780061][ T4278] DVB: Unable to find symbol tda10086_attach() [ 349.789685][ T4278] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 349.809870][ T4278] dvb-usb: bulk message failed: -22 (4/0) [ 349.817592][ T4278] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.835694][ T4278] dvb-usb: bulk message failed: -22 (5/0) [ 349.844521][ T4278] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.867177][ T4278] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 349.899591][ T4278] usb 1-1: USB disconnect, device number 4 [ 349.978770][ T4278] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 350.980450][ T4278] usb 2-1: USB disconnect, device number 3 [ 350.985553][ T7436] loop4: detected capacity change from 0 to 8 [ 351.930926][ T4269] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 352.130783][ T4269] usb 2-1: Using ep0 maxpacket: 8 [ 352.138980][ T4269] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.177556][ T4269] usb 2-1: config 179 has no interface number 0 [ 352.233001][ T4269] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.245864][ T4269] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.257496][ T4269] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.328192][ T4269] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 352.372785][ T4269] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.395121][ T4269] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.405551][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.440198][ T7450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 352.684395][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.721701][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.974484][ T4278] usb 2-1: USB disconnect, device number 4 [ 352.974495][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 352.989864][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 353.324214][ T7465] loop5: detected capacity change from 0 to 2048 [ 353.349688][ T7465] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 353.369813][ T7465] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 354.015053][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop5 [ 354.440953][ T4269] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 354.880858][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 355.219853][ T7482] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 355.372561][ T4269] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.399239][ T4269] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 355.428180][ T4269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.446870][ T4269] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 355.458282][ T4269] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 355.471404][ T4269] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 355.548201][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 355.575131][ T4269] usb 2-1: Product: syz [ 355.598830][ T4269] usb 2-1: Manufacturer: syz [ 355.657724][ T4269] cdc_wdm 2-1:1.0: skipping garbage [ 355.681386][ T4269] cdc_wdm 2-1:1.0: skipping garbage [ 355.732152][ T4269] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 355.785660][ T4269] cdc_wdm 2-1:1.0: Unknown control protocol [ 357.146179][ T7521] loop5: detected capacity change from 0 to 2048 [ 357.228949][ T7521] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 357.244221][ T7521] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 357.262232][ T4360] usb 2-1: USB disconnect, device number 5 [ 358.951027][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop5 [ 359.164553][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.820'. [ 360.279666][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 360.322826][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 360.370446][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 360.408405][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 360.450574][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 360.501786][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 361.840839][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 362.072230][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.089437][ T7] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 362.157765][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.207297][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 362.256051][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 362.306841][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.316937][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.327918][ T7] usb 1-1: Product: syz [ 362.333403][ T7] usb 1-1: Manufacturer: syz [ 362.362826][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 362.383704][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 362.420119][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 362.463515][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 363.795416][ T7594] netlink: 'syz.5.835': attribute type 4 has an invalid length. [ 363.996421][ T7509] Set syz1 is full, maxelem 65536 reached [ 364.018174][ T7599] capability: warning: `syz.1.838' uses deprecated v2 capabilities in a way that may be insecure [ 364.075471][ T7598] loop5: detected capacity change from 0 to 4096 [ 364.092503][ T7598] ntfs3: Unknown parameter 'windows_names' [ 364.296962][ T7606] tipc: Enabling of bearer rejected, failed to enable media [ 364.515677][ T26] usb 1-1: USB disconnect, device number 5 [ 367.965346][ T7641] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.044505][ T7641] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.377441][ T7641] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 368.385694][ T7641] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 368.395197][ T7641] overlayfs: d_ino too big (195, ino=9223372036854776842, xinobits=3) [ 368.403624][ T7641] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 368.412426][ T7641] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 368.421310][ T7641] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 368.429524][ T7641] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 368.438145][ T7641] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 368.446489][ T7641] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 368.455328][ T7641] overlayfs: d_ino too big (kernel, ino=4611686018427389230, xinobits=3) [ 369.095686][ T7648] loop5: detected capacity change from 0 to 2048 [ 369.147101][ T7648] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 369.161391][ T7648] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 370.596145][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop5 [ 370.632342][ T7650] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 371.557769][ T7656] Process accounting resumed [ 372.186262][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.866'. [ 372.369545][ T7683] device syzkaller0 entered promiscuous mode [ 372.670318][ T7688] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 374.490884][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 374.701767][ T7] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.715109][ T7] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 374.725731][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.753810][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 374.774361][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 374.788034][ T7] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.804287][ T7] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.814884][ T7] usb 6-1: Product: syz [ 374.826484][ T7] usb 6-1: Manufacturer: syz [ 374.863285][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 376.401219][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 376.431644][ T7] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 376.438026][ T7] cdc_wdm 6-1:1.0: Unknown control protocol [ 376.464043][ T7] usb 6-1: USB disconnect, device number 2 [ 378.125051][ T4360] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 378.322132][ T4360] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 378.338538][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.358637][ T4360] usb 5-1: config 0 descriptor?? [ 378.384781][ T4360] cp210x 5-1:0.0: cp210x converter detected [ 378.412605][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.418942][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.997690][ T4360] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 379.011013][ T4360] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 379.037991][ T4360] usb 5-1: cp210x converter now attached to ttyUSB0 [ 379.065715][ T4360] usb 5-1: USB disconnect, device number 4 [ 379.085412][ T4360] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 379.094726][ T4360] cp210x 5-1:0.0: device disconnected [ 379.704621][ T7736] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 379.986654][ T7746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.890'. [ 380.720870][ T7748] siw: device registration error -23 [ 381.641071][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 381.829863][ T7752] loop4: detected capacity change from 0 to 64 [ 381.967265][ T7740] Process accounting resumed [ 384.060835][ T4314] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 384.094975][ T7776] binder_alloc: 7773: binder_alloc_buf, no vma [ 384.252568][ T4314] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.295867][ T7778] loop0: detected capacity change from 0 to 2048 [ 384.315388][ T7778] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 384.329399][ T7778] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 385.816104][ T4314] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 385.826906][ T4314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.836127][ T4314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 385.867015][ T4314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 385.907245][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop0 [ 385.930380][ T4314] usb 6-1: string descriptor 0 read error: -71 [ 385.940368][ T4314] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 386.079860][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 386.106959][ T4314] usb 6-1: can't set config #1, error -71 [ 386.117396][ T4314] usb 6-1: USB disconnect, device number 3 [ 387.065117][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop0 [ 387.122529][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 387.142408][ T7791] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 387.227928][ T7791] bridge0: port 3(vlan2) entered blocking state [ 387.234691][ T7791] bridge0: port 3(vlan2) entered forwarding state [ 387.259105][ T7791] team0: Port device dummy0 added [ 388.126734][ T7795] netlink: 48 bytes leftover after parsing attributes in process `syz.5.903'. [ 388.167383][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 392.090786][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 392.292133][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 392.323128][ T7] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 392.366472][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 392.452128][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 392.473393][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 392.528118][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 392.598355][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 392.627860][ T7] usb 2-1: Product: syz [ 392.633671][ T7] usb 2-1: Manufacturer: syz [ 392.683703][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 392.703240][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 392.714870][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 392.724755][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 394.435704][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.925'. [ 394.673467][ T4269] usb 2-1: USB disconnect, device number 6 [ 396.596211][ T7880] loop5: detected capacity change from 0 to 64 [ 396.742341][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 396.764614][ T7885] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 396.925524][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'. [ 397.103034][ T7896] tipc: Enabling of bearer rejected, failed to enable media [ 397.179391][ T7903] fuse: Bad value for 'fd' [ 398.933117][ T7910] loop0: detected capacity change from 0 to 64 [ 399.267224][ T7918] loop2: detected capacity change from 0 to 2048 [ 399.278425][ T7918] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 399.292539][ T7918] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 400.803350][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop2 [ 400.821265][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 400.851477][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.948'. [ 400.920092][ T7928] netlink: 'syz.5.948': attribute type 10 has an invalid length. [ 400.959116][ T7928] bridge0: port 3(vlan2) entered disabled state [ 401.130499][ T7935] tipc: Enabling of bearer rejected, failed to enable media [ 402.394006][ T7956] loop0: detected capacity change from 0 to 64 [ 402.399665][ T7954] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 402.435113][ T7954] netlink: 'syz.1.960': attribute type 2 has an invalid length. [ 403.400442][ T7969] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 403.558123][ T7973] tipc: Enabling of bearer rejected, failed to enable media [ 405.702773][ T7984] random: crng reseeded on system resumption [ 406.443112][ T7994] loop2: detected capacity change from 0 to 64 [ 406.648011][ T7962] Process accounting resumed [ 407.470914][ T8008] 9pnet_virtio: no channels available for device syz [ 409.258609][ T8025] loop0: detected capacity change from 0 to 2048 [ 409.270216][ T8025] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 409.284684][ T8025] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 410.782137][ T8031] loop5: detected capacity change from 0 to 64 [ 410.834007][ T8033] IPVS: sh: TCP [::]:0 - no destination available [ 412.050955][ T4269] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 413.248102][ T8059] ubi: mtd0 is already attached to ubi31 [ 413.872069][ T4269] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 413.900994][ T4269] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 413.960779][ T4269] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.977453][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1000'. [ 413.986682][ T4269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 413.986716][ T4269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 413.994398][ T4269] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.037686][ T8065] loop2: detected capacity change from 0 to 64 [ 414.101531][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.124310][ T4269] usb 5-1: Product: syz [ 414.130920][ T4269] usb 5-1: Manufacturer: syz [ 414.171603][ T4269] cdc_wdm 5-1:1.0: skipping garbage [ 414.176842][ T4269] cdc_wdm 5-1:1.0: skipping garbage [ 414.201944][ T4269] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 414.207875][ T4269] cdc_wdm 5-1:1.0: Unknown control protocol [ 414.465617][ T8075] loop0: detected capacity change from 0 to 2048 [ 414.477109][ T8075] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 414.491716][ T8075] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 414.563478][ T4269] usb 5-1: USB disconnect, device number 5 [ 415.736928][ T8088] ubi: mtd0 is already attached to ubi31 [ 416.902277][ T8097] loop0: detected capacity change from 0 to 64 [ 417.470839][ T4315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 417.540021][ T8115] loop0: detected capacity change from 0 to 2048 [ 417.553517][ T8115] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 417.567885][ T8115] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 419.046909][ T8117] loop5: detected capacity change from 0 to 64 [ 419.067220][ T8117] hfs: keylen 1794 too large [ 419.073746][ T8117] hfs: keylen 1794 too large [ 419.114436][ T8117] hfs: keylen 1794 too large [ 419.126229][ T4315] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 419.153127][ T4315] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 419.232265][ T4315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.231742][ T8124] ubi: mtd0 is already attached to ubi31 [ 420.871459][ T4315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 420.920143][ T4315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 421.144494][ T4315] usb 5-1: string descriptor 0 read error: -71 [ 421.157377][ T4841] hfs: keylen 1794 too large [ 421.163272][ T4315] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.172846][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.188828][ T4315] usb 5-1: can't set config #1, error -71 [ 421.237344][ T4315] usb 5-1: USB disconnect, device number 6 [ 422.810855][ T8160] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 423.101228][ T8173] loop4: detected capacity change from 0 to 512 [ 423.126900][ T8173] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 423.180602][ T8173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 423.198744][ T8173] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.320096][ T8179] EXT4-fs error (device loop4): __ext4_new_inode:1285: comm syz.4.1033: failed to insert inode 16: doubly allocated? [ 423.644115][ T8181] ubi: mtd0 is already attached to ubi31 [ 424.361699][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 424.810842][ T4315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 425.022418][ T4315] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.040847][ T4315] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 425.098085][ T4315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.125465][ T4315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 425.154321][ T4315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 425.183844][ T4315] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.203150][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.227004][ T4315] usb 5-1: Product: syz [ 425.252965][ T4315] usb 5-1: Manufacturer: syz [ 425.285173][ T4315] cdc_wdm 5-1:1.0: skipping garbage [ 425.314990][ T4315] cdc_wdm 5-1:1.0: skipping garbage [ 425.371101][ T4315] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 425.377051][ T4315] cdc_wdm 5-1:1.0: Unknown control protocol [ 425.461931][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 425.479333][ T8208] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 425.513815][ T4315] usb 5-1: USB disconnect, device number 7 [ 425.665486][ T8214] loop5: detected capacity change from 0 to 8 [ 425.929919][ T8217] ubi: mtd0 is already attached to ubi31 [ 429.180847][ T4269] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 429.373854][ T4269] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.394726][ T4269] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 429.404112][ T4269] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.404209][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 429.420576][ T4269] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.438162][ T8239] loop2: detected capacity change from 0 to 2048 [ 429.439388][ T8252] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 429.466014][ T4269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.499858][ T4269] usb 6-1: Product: syz [ 429.505364][ T4269] usb 6-1: Manufacturer: syz [ 429.510206][ T4269] usb 6-1: SerialNumber: syz [ 429.913060][ T8259] ubi: mtd0 is already attached to ubi31 [ 430.548535][ T4269] usb 6-1: USB disconnect, device number 4 [ 430.714557][ T8265] loop4: detected capacity change from 0 to 2048 [ 432.181965][ T8265] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 432.196001][ T8265] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 432.222653][ T6665] udevd[6665]: incorrect ext4 checksum on /dev/loop4 [ 433.137150][ T8239] EXT4-fs: error -4 creating inode table initialization thread [ 433.145718][ T8239] EXT4-fs (loop2): mount failed [ 433.636546][ T8281] loop5: detected capacity change from 0 to 8 [ 434.652789][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 434.702303][ T8292] netlink: 'syz.5.1070': attribute type 10 has an invalid length. [ 434.770240][ T8295] loop1: detected capacity change from 0 to 4096 [ 435.241484][ T8301] loop1: detected capacity change from 0 to 2048 [ 435.264504][ T8301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.300926][ T4278] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 435.501019][ T8305] loop2: detected capacity change from 0 to 2048 [ 435.519198][ T8305] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 435.533713][ T4278] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 435.544715][ T8305] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 436.992060][ T4278] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 437.034132][ T6614] udevd[6614]: incorrect ext4 checksum on /dev/loop2 [ 437.040956][ T4278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.059402][ T4278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 437.136953][ T4278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 437.158556][ T4278] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.267252][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.279478][ T4278] usb 1-1: Product: syz [ 437.283752][ T4278] usb 1-1: Manufacturer: syz [ 437.318225][ T4278] cdc_wdm 1-1:1.0: skipping garbage [ 437.356498][ T4278] cdc_wdm 1-1:1.0: skipping garbage [ 437.370037][ T6614] udevd[6614]: incorrect ext4 checksum on /dev/loop2 [ 437.452324][ T4278] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 437.511588][ T4278] cdc_wdm 1-1:1.0: Unknown control protocol [ 437.578030][ T4278] usb 1-1: USB disconnect, device number 6 [ 437.669569][ T8316] loop5: detected capacity change from 0 to 8 [ 437.674219][ T8315] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1077'. [ 438.143020][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 438.158275][ T8328] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 438.222865][ T8328] bridge0: port 3(vlan2) entered disabled state [ 439.842799][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.849113][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.472314][ T8363] loop2: detected capacity change from 0 to 2048 [ 440.538224][ T8363] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 440.552334][ T8363] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 441.567738][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop2 [ 441.813213][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1095'. [ 441.950796][ T8374] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 442.031594][ T8376] random: crng reseeded on system resumption [ 442.213940][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 442.243326][ T8385] netlink: 'syz.5.1098': attribute type 10 has an invalid length. [ 442.429571][ T4283] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 443.710912][ T8404] 9pnet_virtio: no channels available for device syz [ 444.060918][ T8404] siw: device registration error -23 [ 445.033019][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1108'. [ 445.647080][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 445.647103][ T27] audit: type=1804 audit(2000000095.909:130): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1113" name="/newroot/241/file0/file1" dev="overlay" ino=1294 res=1 errno=0 [ 446.005168][ T8431] loop1: detected capacity change from 0 to 64 [ 447.410908][ T8444] 9pnet_virtio: no channels available for device syz [ 447.520868][ T8444] siw: device registration error -23 [ 448.037006][ T8447] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 448.610002][ T8448] random: crng reseeded on system resumption [ 449.463195][ T8464] loop1: detected capacity change from 0 to 512 [ 449.510030][ T8464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 449.662655][ T8464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 449.704152][ T8464] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.006692][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 450.307254][ T8482] loop5: detected capacity change from 0 to 64 [ 451.032029][ T8498] 9pnet_virtio: no channels available for device syz [ 451.044990][ T8498] siw: device registration error -23 [ 452.677757][ T8496] team0 (unregistering): Port device team_slave_0 removed [ 452.789575][ T8496] team0 (unregistering): Port device team_slave_1 removed [ 452.878590][ T8496] team0 (unregistering): Port device dummy0 removed [ 453.210996][ T4283] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 453.219686][ T4283] Bluetooth: hci1: Injecting HCI hardware error event [ 453.228271][ T4285] Bluetooth: hci1: hardware error 0x00 [ 453.230949][ T4269] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 453.338059][ T8529] loop5: detected capacity change from 0 to 512 [ 453.393293][ T8529] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 453.447875][ T4269] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 453.476378][ T4269] usb 2-1: config 0 has no interface number 0 [ 453.486498][ T8529] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 453.516140][ T4269] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 453.527693][ T8529] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.613020][ T4269] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 453.641945][ T4269] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 453.699536][ T4269] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 453.773098][ T4269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 453.807621][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.856969][ T4269] usb 2-1: config 0 descriptor?? [ 453.886466][ T8523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 453.911933][ T5922] EXT4-fs (loop5): unmounting filesystem. [ 453.917949][ T8523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 453.959817][ T4269] ldusb 2-1:0.55: Interrupt in endpoint not found [ 454.142689][ T8543] loop0: detected capacity change from 0 to 64 [ 455.352558][ T4269] usb 2-1: USB disconnect, device number 7 [ 455.360836][ T4285] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 457.173152][ T8580] loop1: detected capacity change from 0 to 64 [ 457.338698][ T8586] device syzkaller0 entered promiscuous mode [ 457.370778][ T4315] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 457.621083][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 457.628119][ T4315] usb 5-1: config 250 has an invalid interface number: 230 but max is 0 [ 457.637760][ T4315] usb 5-1: config 250 has no interface number 0 [ 457.644952][ T4315] usb 5-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 457.675176][ T4315] usb 5-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 457.726859][ T4315] usb 5-1: config 250 interface 230 has no altsetting 0 [ 457.747098][ T4315] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 457.756324][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.764985][ T4315] usb 5-1: Product: syz [ 457.769267][ T4315] usb 5-1: Manufacturer: syz [ 457.774444][ T4315] usb 5-1: SerialNumber: syz [ 457.988165][ T4315] ums-usbat 5-1:250.230: USB Mass Storage device detected [ 458.010358][ T4315] ums-usbat 5-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 458.048003][ T4315] ums-usbat: probe of 5-1:250.230 failed with error -5 [ 458.068968][ T4315] usb 5-1: USB disconnect, device number 8 [ 458.371233][ T8604] futex_wake_op: syz.5.1163 tries to shift op by -1; fix this program [ 459.009463][ T8617] loop1: detected capacity change from 0 to 32768 [ 459.032579][ T8617] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1168 (8617) [ 459.058087][ T8617] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 459.068562][ T8617] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 459.077240][ T8617] BTRFS info (device loop1): setting nodatacow, compression disabled [ 459.085376][ T8617] BTRFS info (device loop1): force clearing of disk cache [ 459.092495][ T8617] BTRFS info (device loop1): turning off barriers [ 459.098895][ T8617] BTRFS info (device loop1): use no compression [ 459.105227][ T8617] BTRFS info (device loop1): disabling free space tree [ 459.112093][ T8617] BTRFS info (device loop1): enabling ssd optimizations [ 459.119009][ T8617] BTRFS info (device loop1): using spread ssd allocation scheme [ 459.126748][ T8617] BTRFS info (device loop1): not using ssd optimizations [ 459.133779][ T8617] BTRFS info (device loop1): not using spread ssd allocation scheme [ 459.835023][ T8617] BTRFS info (device loop1): rebuilding free space tree [ 459.885000][ T8617] BTRFS info (device loop1): disabling free space tree [ 459.892855][ T8617] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 459.902973][ T8617] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 459.937569][ T8617] BTRFS info (device loop1): checking UUID tree [ 460.379051][ T8652] kernel read not supported for file /#>b@ (pid: 8652 comm: syz.0.1174) [ 460.421311][ T27] audit: type=1800 audit(2000000110.689:131): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1174" name="#>b@" dev="mqueue" ino=53413 res=0 errno=0 [ 460.498355][ T4267] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 460.513778][ T4360] kernel read not supported for file /#>b@ (pid: 4360 comm: kworker/0:10) [ 462.898903][ T8715] binder: 8713:8715 ioctl 4018620d 0 returned -22 [ 464.880915][ T8671] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 465.080925][ T8671] usb 5-1: Using ep0 maxpacket: 8 [ 465.088874][ T8671] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 465.115978][ T8671] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 465.127246][ T8671] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.145375][ T8671] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 465.170162][ T8671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.188418][ T8671] usb 5-1: Product: syz [ 465.201706][ T8671] usb 5-1: Manufacturer: syz [ 465.215361][ T8671] usb 5-1: SerialNumber: syz [ 465.231910][ T8671] usb 5-1: config 0 descriptor?? [ 466.060858][ T8752] ubi: mtd0 is already attached to ubi31 [ 466.687245][ T8767] device syzkaller0 entered promiscuous mode [ 467.057824][ T4269] usb 5-1: USB disconnect, device number 9 [ 467.477346][ T8782] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 467.601233][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 467.632106][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 467.741804][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 469.862416][ T8802] ubi: mtd0 is already attached to ubi31 [ 470.242967][ T8820] loop5: detected capacity change from 0 to 2048 [ 470.263568][ T8820] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 470.277970][ T8820] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 471.718487][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1224'. [ 471.728161][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1224'. [ 471.851835][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1224'. [ 471.861657][ T6617] udevd[6617]: incorrect ext4 checksum on /dev/loop5 [ 472.760928][ T8838] 9pnet_virtio: no channels available for device syz [ 474.170834][ T8672] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 474.330901][ T8672] usb 6-1: device descriptor read/64, error -71 [ 474.502342][ T8859] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 475.053090][ T8867] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 475.119610][ T8867] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 475.687177][ T8672] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 476.441233][ T8882] 9pnet_virtio: no channels available for device syz [ 476.730858][ T8881] siw: device registration error -23 [ 479.570748][ T4269] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 479.762558][ T4269] usb 5-1: config 4 has an invalid interface number: 121 but max is 0 [ 479.789791][ T4269] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 479.830236][ T4269] usb 5-1: config 4 has no interface number 0 [ 479.844802][ T4269] usb 5-1: config 4 interface 121 has no altsetting 0 [ 479.878793][ T4269] usb 5-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 479.883411][ T8900] loop0: detected capacity change from 0 to 512 [ 479.894174][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.914402][ T4269] usb 5-1: Product: syz [ 479.918590][ T4269] usb 5-1: Manufacturer: syz [ 479.926228][ T8900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 479.966183][ T4269] usb 5-1: SerialNumber: syz [ 480.066395][ T8900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 480.132438][ T8900] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.685121][ T8906] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 480.763923][ T8906] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 481.434547][ T4269] usb 5-1: USB disconnect, device number 10 [ 481.537882][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 483.345259][ T8672] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 483.891640][ T8939] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 483.941782][ T8939] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 484.770760][ T8672] usb 5-1: Using ep0 maxpacket: 8 [ 484.777471][ T8672] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 484.815714][ T8672] usb 5-1: config 179 has no interface number 0 [ 484.850462][ T8672] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 484.878552][ T8672] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 484.894670][ T8672] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 484.910941][ T8672] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 484.952995][ T8672] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 484.997351][ T8672] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 485.031759][ T8672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.059101][ T8930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 485.498761][ T8674] usb 5-1: USB disconnect, device number 11 [ 485.504793][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 485.504818][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 485.904482][ T8965] loop2: detected capacity change from 0 to 1024 [ 485.932319][ T8963] loop1: detected capacity change from 0 to 4096 [ 485.982443][ T8963] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 486.030944][ T8672] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 486.082260][ T8963] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 486.154589][ T8963] ntfs3: loop1: mft corrupted [ 486.159376][ T8963] ntfs3: loop1: Failed to load $Extend. [ 486.172048][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 486.224771][ T8968] hfsplus: bad catalog file entry [ 486.232179][ T8672] usb 6-1: config 4 has an invalid interface number: 121 but max is 0 [ 486.254768][ T8672] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 486.255979][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 486.347248][ T8672] usb 6-1: config 4 has no interface number 0 [ 486.393197][ T8672] usb 6-1: config 4 interface 121 has no altsetting 0 [ 486.427449][ T5140] hfsplus: b-tree write err: -5, ino 3 [ 486.439724][ T8672] usb 6-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 486.470128][ T5140] hfsplus: bad catalog file entry [ 486.480131][ T8672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.524815][ T8672] usb 6-1: Product: syz [ 486.529075][ T8672] usb 6-1: Manufacturer: syz [ 486.564196][ T8672] usb 6-1: SerialNumber: syz [ 486.733654][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1268'. [ 487.864767][ T8961] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1262'. [ 487.885246][ T8979] loop4: detected capacity change from 0 to 1024 [ 487.925121][ T8672] usb 6-1: USB disconnect, device number 7 [ 488.920900][ T4315] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 488.940931][ T4269] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 489.110854][ T4315] usb 6-1: Using ep0 maxpacket: 8 [ 489.117711][ T4315] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 489.130766][ T4315] usb 6-1: config 179 has no interface number 0 [ 489.138236][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 489.157016][ T4269] usb 5-1: Using ep0 maxpacket: 16 [ 489.164346][ T27] audit: type=1326 audit(2000000139.429:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc219c799 code=0x7ffc0000 [ 489.182257][ T4269] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 489.217089][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 489.235981][ T4269] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 489.268414][ T27] audit: type=1326 audit(2000000139.459:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8dc219c799 code=0x7ffc0000 [ 489.277044][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.307083][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.314921][ T27] audit: type=1326 audit(2000000139.459:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc219c799 code=0x7ffc0000 [ 489.349991][ T4269] usb 5-1: Product: syz [ 489.355847][ T4269] usb 5-1: Manufacturer: syz [ 489.360539][ T4269] usb 5-1: SerialNumber: syz [ 489.389690][ T4269] usb 5-1: config 0 descriptor?? [ 489.395996][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 489.418532][ T4315] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 489.472758][ T4315] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 489.482655][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.509367][ T9000] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 489.697998][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1283'. [ 489.992016][ T8674] usb 6-1: USB disconnect, device number 8 [ 489.992074][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 490.008420][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 490.570779][ T4315] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 490.764979][ T4315] usb 2-1: config 4 has an invalid interface number: 121 but max is 0 [ 490.783699][ T4315] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 490.799307][ T4315] usb 2-1: config 4 has no interface number 0 [ 490.813994][ T4315] usb 2-1: config 4 interface 121 has no altsetting 0 [ 490.855189][ T4315] usb 2-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 490.864591][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.874873][ T4315] usb 2-1: Product: syz [ 490.880308][ T4315] usb 2-1: Manufacturer: syz [ 490.888315][ T4315] usb 2-1: SerialNumber: syz [ 491.113209][ T9030] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1289'. [ 491.136510][ T4315] usb 2-1: USB disconnect, device number 8 [ 491.655375][ T4315] usb 5-1: USB disconnect, device number 12 [ 492.056971][ T9053] loop4: detected capacity change from 0 to 512 [ 492.078948][ T9053] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 492.357493][ T9060] loop1: detected capacity change from 0 to 2048 [ 492.371872][ T9060] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 492.385607][ T9060] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 493.818292][ T9053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 493.859617][ T9053] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.009616][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 494.209199][ T6614] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.401055][ T8674] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 496.546261][ T4617] [ 496.548633][ T4617] ============================================ [ 496.554766][ T4617] WARNING: possible recursive locking detected [ 496.560926][ T4617] syzkaller #0 Not tainted [ 496.565334][ T4617] -------------------------------------------- [ 496.571466][ T4617] kworker/u4:15/4617 is trying to acquire lock: [ 496.577684][ T4617] ffff88807c70a1e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x15a/0x550 [ 496.586818][ T4617] [ 496.586818][ T4617] but task is already holding lock: [ 496.594163][ T4617] ffff88807c70b9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 496.603189][ T4617] [ 496.603189][ T4617] other info that might help us debug this: [ 496.611225][ T4617] Possible unsafe locking scenario: [ 496.611225][ T4617] [ 496.618653][ T4617] CPU0 [ 496.621910][ T4617] ---- [ 496.625172][ T4617] lock(rlock-AF_UNIX); [ 496.629397][ T4617] lock(rlock-AF_UNIX); [ 496.633618][ T4617] [ 496.633618][ T4617] *** DEADLOCK *** [ 496.633618][ T4617] [ 496.641739][ T4617] May be due to missing lock nesting notation [ 496.641739][ T4617] [ 496.650036][ T4617] 4 locks held by kworker/u4:15/4617: [ 496.655387][ T4617] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 496.666413][ T4617] #1: ffffc90004b7fd00 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 496.675954][ T4617] #2: ffffffff8de47178 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xc4/0x19b0 [ 496.684797][ T4617] #3: ffff88807c70b9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 496.694269][ T4617] [ 496.694269][ T4617] stack backtrace: [ 496.700144][ T4617] CPU: 0 PID: 4617 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 496.707757][ T4617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.717794][ T4617] Workqueue: events_unbound __unix_gc [ 496.723161][ T4617] Call Trace: [ 496.726429][ T4617] [ 496.729342][ T4617] dump_stack_lvl+0x188/0x24e [ 496.734004][ T4617] ? show_regs_print_info+0x12/0x12 [ 496.739187][ T4617] ? load_image+0x400/0x400 [ 496.743678][ T4617] __lock_acquire+0x123e/0x7d10 [ 496.748514][ T4617] ? lockdep_lock+0x1f0/0x1f0 [ 496.753179][ T4617] ? verify_lock_unused+0x140/0x140 [ 496.758365][ T4617] ? lockdep_unlock+0x142/0x2e0 [ 496.763198][ T4617] ? lockdep_lock+0x1f0/0x1f0 [ 496.767869][ T4617] lock_acquire+0x1bb/0x4a0 [ 496.772364][ T4617] ? unix_collect_skb+0x15a/0x550 [ 496.777371][ T4617] ? read_lock_is_recursive+0x10/0x10 [ 496.782723][ T4617] ? do_raw_spin_lock+0x128/0x2f0 [ 496.787725][ T4617] ? __rwlock_init+0x140/0x140 [ 496.792471][ T4617] _raw_spin_lock+0x2a/0x40 [ 496.796954][ T4617] ? unix_collect_skb+0x15a/0x550 [ 496.801974][ T4617] unix_collect_skb+0x15a/0x550 [ 496.806840][ T4617] __unix_gc+0x1107/0x19b0 [ 496.811257][ T4617] ? wait_for_unix_gc+0x190/0x190 [ 496.816263][ T4617] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 496.822226][ T4617] ? _raw_spin_unlock_irq+0x1f/0x40 [ 496.827405][ T4617] ? process_one_work+0x7b0/0x1160 [ 496.832499][ T4617] process_one_work+0x8a2/0x1160 [ 496.837428][ T4617] ? worker_detach_from_pool+0x240/0x240 [ 496.843042][ T4617] ? _raw_spin_lock_irq+0xb7/0xf0 [ 496.848046][ T4617] ? _raw_spin_lock_irqsave+0x100/0x100 [ 496.853572][ T4617] ? kthread_data+0x4b/0xc0 [ 496.858060][ T4617] worker_thread+0xaa2/0x1270 [ 496.862724][ T4617] kthread+0x29d/0x330 [ 496.866775][ T4617] ? worker_clr_flags+0x1a0/0x1a0 [ 496.871786][ T4617] ? kthread_blkcg+0xd0/0xd0 [ 496.876355][ T4617] ret_from_fork+0x1f/0x30 [ 496.880759][ T4617] [ 496.910876][ T8674] usb 2-1: Using ep0 maxpacket: 16 [ 496.917953][ T8674] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 496.959269][ T8674] usb 2-1: config 0 has no interface number 0 [ 496.965779][ T8674] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.978225][ T8674] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.993322][ T8674] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 497.008018][ T8674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.089884][ T8674] usb 2-1: config 0 descriptor?? [ 497.716276][ T4314] usb 2-1: USB disconnect, device number 9 [ 501.282611][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.288907][ T1267] ieee802154 phy1 wpan1: encryption failed: -22