last executing test programs: 3m26.533164253s ago: executing program 1 (id=753): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 3m25.049857935s ago: executing program 1 (id=761): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7ffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) symlink(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3m22.698734879s ago: executing program 1 (id=764): syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 3m19.627860624s ago: executing program 1 (id=769): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r6], 0x1c}}, 0x840) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) 3m16.240143114s ago: executing program 1 (id=779): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3m12.475866209s ago: executing program 1 (id=783): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001d80)={@initdev, 0x0}, &(0x7f0000001dc0)=0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000838ed1b905f2821733148934c0dbe9aaa53feb880260fd85c29271ff20b5ede8", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000040)="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", 0x1d9}], 0x1}, 0x9fc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local, r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x400, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_TXQLEN={0x8, 0xd, 0x3ff}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x5c}}, 0x20000840) 2m57.019111324s ago: executing program 32 (id=783): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001d80)={@initdev, 0x0}, &(0x7f0000001dc0)=0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000838ed1b905f2821733148934c0dbe9aaa53feb880260fd85c29271ff20b5ede8", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a85760", 0x1d9}], 0x1}, 0x9fc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000002e40)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6c45dc8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000000000000017b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189030000000000000064163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318292570a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa96863ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981004cbcb70000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968ff0f00006ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457910000f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558e97f1dc5eae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d35dd6a7c0955fa4be344768f2dafa7918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0656fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f44e1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1d4f9374df85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb35d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local, r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x400, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_TXQLEN={0x8, 0xd, 0x3ff}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x5c}}, 0x20000840) 2m10.204739259s ago: executing program 5 (id=813): recvmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r5) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) write$bt_hci(r3, &(0x7f0000000580)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x9, 0x6, 0x68e, 0x5}}}, 0xa) sendmmsg$sock(r2, &(0x7f0000000f00), 0x0, 0x200088d0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r6, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) 2m2.647866298s ago: executing program 5 (id=928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 2m1.673640633s ago: executing program 5 (id=930): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="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", 0x13c}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 2m0.308201913s ago: executing program 5 (id=933): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 1m54.776217394s ago: executing program 5 (id=943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x8800) 1m36.799387336s ago: executing program 33 (id=943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x8800) 8.784138112s ago: executing program 0 (id=1378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0xcc, 0x401}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 7.009182168s ago: executing program 0 (id=1382): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x8031, 0xffffffffffffffff, 0xbb461000) 7.006948738s ago: executing program 4 (id=1383): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000580)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f00000004c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="280600004552bf58ed5f1a09f359e7aa3af2244436c3ff22f8f4150f75aadb9a0f29", @ANYRES16=r3, @ANYBLOB="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"], 0x628}, 0x1, 0x0, 0x0, 0xa080}, 0x4000014) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) close(r1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000090601a1c97bb73d035c2300000000000900020073797a3100000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x6e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@local}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 6.88012365s ago: executing program 6 (id=1385): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r6], 0x1c}}, 0x840) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) 5.669833207s ago: executing program 3 (id=1389): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) mknod(&(0x7f0000000000)='./file3\x00', 0x8, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000040)='.\x02\x00', 0x88, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x309ca00, 0x0, 0x0, 0x0, 0x0) 5.46027525s ago: executing program 6 (id=1390): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='7\x00'], 0x20) 5.118924655s ago: executing program 0 (id=1391): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x2457, 0x400, 0x1000002, 0x20000}, &(0x7f0000000040), 0x0, &(0x7f0000000000)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4}, 0x10) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.990555947s ago: executing program 6 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1000) 4.540422654s ago: executing program 4 (id=1394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.342176937s ago: executing program 6 (id=1395): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.894680063s ago: executing program 2 (id=1396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 3.766332785s ago: executing program 0 (id=1397): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x2}}, 0x26) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977720a89"], 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000002c0), &(0x7f0000000640)=r7}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r7, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000008100c00000000e9ffff590b4fcbff0000bee9b2f93e7b236290fc7464c237d395ab5121fa5256fe745fda3268bf27d5c64bcf1328b37f6f6f3f179803a735e861d1570b8d2e516292bede", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x4e, 0x0, 0x4}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.672177156s ago: executing program 3 (id=1398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x2, 0x1}}}}]}, 0x44}}, 0x20040040) sendto$packet(r4, &(0x7f00000001c0)="fa", 0x1, 0x20000890, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @random="07000000900c"}, 0x14) 3.602395697s ago: executing program 2 (id=1399): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 3.585861628s ago: executing program 6 (id=1400): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) listen(r1, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0xa7, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) 3.328119341s ago: executing program 2 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [0xffffffff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {0xff}, 'pim6reg\x00', {}, 0x2f, 0x15}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x0, 0x3}, {0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x1, 0x2}, 0x30c, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) 3.222069103s ago: executing program 3 (id=1402): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3e", 0x75}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d1698", 0x7}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.144991024s ago: executing program 4 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf4}}, 0x10) 2.964108197s ago: executing program 2 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r1, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r2 = socket$inet(0x2, 0x1, 0x75) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x3, 0x33) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) unshare(0x4000400) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 2.879207928s ago: executing program 4 (id=1405): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x0, 0x1000000, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x6}]}, 0x30}}, 0x4004014) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff07000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r6, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070010000400005b77000000017efefea88ce94874f831b44798685d56c718b83a18764c1ad57c83e98c4e0875b1ba1c240fcb60eb26ee1e4f9fa954236a84eea40aba338432a25a8243966cd555dc656092ef1ed063f80905d156f0449b3bbf4997d494caeb57ef6e69380506ef38ce39ad129d753ef07fbf72069b649501d7"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r8, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)=@getpolicy={0x1dc, 0x15, 0x100, 0x70bd2a, 0x25dfdbfd, {{@in6=@remote, @in=@loopback, 0x4e24, 0x0, 0x4e22, 0x1, 0xa, 0x80, 0x20, 0x4}, 0x0, 0x2}, [@tfcpad={0x8, 0x16, 0x101}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e21, 0xd, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x4, r11}, {@in=@remote, 0x4d6, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x2, 0x8, 0x76, 0x7, 0xd6, 0xf, 0x6, 0x9}, {0x5, 0x8, 0x40, 0x8}, {0x0, 0x7fffffff, 0x200}, 0x70bd29, 0x0, 0x0, 0x2, 0x81, 0x41}}, @algo_crypt={0x96, 0x2, {{'chacha20-arm\x00'}, 0x270, "89dc7ee52a52238a43b30a35e4586454903b2d7786401eabcc4f328a5aa7c47ff89714cdaf4273687ffcc781a46febea8bcbead97455942c5c845363e16c1fbb344a5cd92e6c09a1ba897d51497e"}}, @etimer_thresh={0x8, 0xc, 0x5}]}, 0x1dc}}, 0x40000005) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYRES64=r8, @ANYRES32=r10, @ANYRES64, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYRES64=r8], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r12, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000018000010000000000100000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100ffffffd09500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c74000ff", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r15, @ANYBLOB], 0x1c}}, 0x0) 2.830762648s ago: executing program 3 (id=1406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x71f, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) 2.632882511s ago: executing program 0 (id=1407): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x2457, 0x400, 0x1000002, 0x20000}, &(0x7f0000000040), 0x0, &(0x7f0000000000)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4}, 0x10) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.503247354s ago: executing program 2 (id=1408): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) write$tun(0xffffffffffffffff, 0x0, 0x9d) clock_gettime(0x0, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x3000002, 0x11, 0xffffffffffffffff, 0x0) r2 = gettid() read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) tkill(r2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000000)={0x43, 0x1}, 0x10) 595.747012ms ago: executing program 2 (id=1409): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000210dc6431450a41d40f157e3512b4b99c026e738de5993f365a0c450b77103ed4a4ce9645d5bda31f3c7059d42c252f8bf6429ca73047cf2160668940f50a78e03514b4a241ac903d9d349a649eb2abefc56cd1ad4da51bca4e370cad9401e0899238a3ce2fbe0aab556b9ba4341a9906debdb2646298351fb5b7ae6dbf1698f4eb5cd65fab44cdf71"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) mknod(&(0x7f0000000000)='./file3\x00', 0x8, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000040)='.\x02\x00', 0x88, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x309ca00, 0x0, 0x0, 0x0, 0x0) 348.039035ms ago: executing program 4 (id=1410): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 284.245076ms ago: executing program 3 (id=1411): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 206.908217ms ago: executing program 6 (id=1412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x2, 0x1}}}}]}, 0x44}}, 0x20040040) sendto$packet(r4, &(0x7f00000001c0)="fa", 0x1, 0x20000890, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @random="07000000900c"}, 0x14) 131.286268ms ago: executing program 4 (id=1413): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20040600) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00f600", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000400018004000280"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x34, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) 41.6582ms ago: executing program 0 (id=1414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000180), 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r4, 0xfffffffffffffffd, 0x0) listen(r0, 0xffffffff) syz_emit_ethernet(0x46, &(0x7f0000000340)={@random="0100", @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1000}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r5, &(0x7f0000000800)={0x0, 0xd, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r5) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x408, 0x110, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @local, 0xffffffff, 0xff, 0xc, 0x10, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x4, 0x8000, 0x8, 0x0, 0x7fd, 'veth1_to_batadv\x00', 'caif0\x00', {}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) close(0x4) 0s ago: executing program 3 (id=1415): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) kernel console output (not intermixed with test programs): w USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.974136][ T4227] usb 3-1: Product: syz [ 194.978787][ T4227] usb 3-1: Manufacturer: syz [ 194.983439][ T4227] usb 3-1: SerialNumber: syz [ 194.995682][ T5367] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.013377][ T5367] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.065749][ T5379] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.115851][ T5379] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.186210][ T5367] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.375960][ T5367] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.429076][ T4227] usb 3-1: USB disconnect, device number 8 [ 195.552396][ T5379] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.709504][ T5379] hfsplus: request for non-existent node 33423360 in B*Tree [ 196.269678][ T150] block nbd1: Attempted send on invalid socket [ 196.276129][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.287287][ T5408] efs: cannot read volume header [ 196.484875][ T5400] lo speed is unknown, defaulting to 1000 [ 196.822703][ T150] block nbd2: Attempted send on invalid socket [ 196.829985][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.841218][ T5419] efs: cannot read volume header [ 197.385776][ T4231] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.645615][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 197.765869][ T4231] usb 3-1: config index 0 descriptor too short (expected 13362, got 27) [ 198.099505][ T4231] usb 3-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 198.554579][ T4231] usb 3-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 198.925838][ T4231] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 198.999121][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 199.148118][ T4231] usb 3-1: Product: syz [ 199.220635][ T4231] usb 3-1: Manufacturer: syz [ 199.289899][ T4231] usb 3-1: SerialNumber: syz [ 199.751000][ T4231] usb 3-1: USB disconnect, device number 9 [ 200.348063][ T150] block nbd1: Attempted send on invalid socket [ 200.354586][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 200.366806][ T5444] efs: cannot read volume header [ 202.033312][ T5460] netdevsim netdevsim0: Direct firmware load for . [ 202.033312][ T5460] failed with error -2 [ 202.043933][ T5460] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 202.043933][ T5460] [ 202.175941][ T5463] fuse: Bad value for 'fd' [ 204.030143][ T1092] block nbd1: Attempted send on invalid socket [ 204.036733][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.048893][ T5488] efs: cannot read volume header [ 204.219254][ T5493] capability: warning: `syz.0.326' uses deprecated v2 capabilities in a way that may be insecure [ 204.645894][ T5508] netdevsim netdevsim2: Direct firmware load for . [ 204.645894][ T5508] failed with error -2 [ 204.657397][ T5508] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 204.657397][ T5508] [ 207.669082][ T5527] loop4: detected capacity change from 0 to 1024 [ 207.753006][ T5531] fuse: Bad value for 'fd' [ 208.215136][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.233315][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.243202][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.259427][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.340976][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.756103][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.876578][ T5538] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.991613][ T5538] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.007251][ T5543] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.017279][ T5543] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.045387][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.061314][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.083319][ T5538] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.116457][ T5538] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.269527][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.468849][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.693552][ T5538] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.863672][ T5538] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.093271][ T5561] netlink: 80 bytes leftover after parsing attributes in process `syz.2.344'. [ 210.179737][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 211.030480][ T5527] hfsplus: request for non-existent node 33423360 in B*Tree [ 211.635343][ T1092] block nbd1: Attempted send on invalid socket [ 211.641736][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.653233][ T5570] efs: cannot read volume header [ 212.769968][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 213.057103][ T5588] fuse: Bad value for 'fd' [ 213.622455][ T150] block nbd4: Attempted send on invalid socket [ 213.628916][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.640647][ T5603] efs: cannot read volume header [ 214.039126][ T5600] loop1: detected capacity change from 0 to 1024 [ 214.155666][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.435737][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 214.556046][ T4231] usb 5-1: config index 0 descriptor too short (expected 8224, got 27) [ 214.612366][ T4231] usb 5-1: config 32 has an invalid descriptor of length 45, skipping remainder of the config [ 214.700736][ T5600] hfsplus: request for non-existent node 33423360 in B*Tree [ 214.817220][ T4231] usb 5-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 214.849712][ T5600] hfsplus: request for non-existent node 33423360 in B*Tree [ 215.078215][ T5607] hfsplus: request for non-existent node 33423360 in B*Tree [ 215.155858][ T4231] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 215.220446][ T5607] hfsplus: request for non-existent node 33423360 in B*Tree [ 215.231800][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 215.386458][ T4231] usb 5-1: Product: syz [ 215.482593][ T5600] hfsplus: request for non-existent node 33423360 in B*Tree [ 215.494184][ T4231] usb 5-1: Manufacturer: syz [ 215.593217][ T4231] usb 5-1: SerialNumber: syz [ 215.639266][ T5600] hfsplus: request for non-existent node 33423360 in B*Tree [ 217.951992][ T5607] hfsplus: request for non-existent node 33423360 in B*Tree [ 218.356674][ T4231] usb 5-1: USB disconnect, device number 6 [ 218.363692][ T5607] hfsplus: request for non-existent node 33423360 in B*Tree [ 218.562931][ T5624] binder: 5622:5624 ioctl c0306201 0 returned -14 [ 220.135775][ T5625] loop2: detected capacity change from 0 to 1024 [ 220.180752][ T5633] loop3: detected capacity change from 0 to 512 [ 220.190178][ T5629] loop4: detected capacity change from 0 to 512 [ 220.262007][ T5625] hfsplus: request for non-existent node 33423360 in B*Tree [ 221.707818][ T5625] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.377308][ T5633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 222.437139][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.444609][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.452772][ T5633] System zones: 1-20 [ 222.468981][ T5633] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,debug,lazytime,,errors=continue. Quota mode: writeback. [ 222.584795][ T5625] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.688973][ T5625] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.742609][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.773397][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.793330][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.808128][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.849165][ T5645] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.872435][ T5645] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.896931][ T5625] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.904282][ T5625] hfsplus: request for non-existent node 33423360 in B*Tree [ 222.986081][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 223.025639][ T5639] hfsplus: request for non-existent node 33423360 in B*Tree [ 223.221467][ T150] block nbd4: Attempted send on invalid socket [ 223.227883][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.240286][ T5657] efs: cannot read volume header [ 223.542819][ T5661] loop3: detected capacity change from 0 to 1024 [ 223.553015][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 223.654502][ T5668] binder: 5665:5668 ioctl c0306201 0 returned -14 [ 223.911492][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.041339][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.156182][ T5673] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.259689][ T5673] hfsplus: request for non-existent node 33423360 in B*Tree [ 225.929348][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.004030][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.054470][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.095881][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.445606][ T5673] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.615624][ T5673] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.705598][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.712949][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.981922][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.097950][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.120206][ T5694] loop1: detected capacity change from 0 to 512 [ 227.136193][ T5673] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.242692][ T5673] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.363131][ T1092] block nbd4: Attempted send on invalid socket [ 227.369697][ T1092] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.386182][ T5705] efs: cannot read volume header [ 227.438490][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.586122][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.615561][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.633417][ T5661] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.769585][ T5709] loop2: detected capacity change from 0 to 1024 [ 227.945072][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.990423][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.106225][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.198956][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 229.104079][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 229.125568][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 229.236840][ T5719] binder: 5717:5719 ioctl c0306201 0 returned -14 [ 229.244149][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 229.985773][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.072743][ T5720] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.111892][ T5720] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.127853][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 230.162778][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.186290][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.212350][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 230.240961][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.247066][ T5722] Zero length message leads to an empty skb [ 230.295286][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.326641][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.333982][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.403910][ T5720] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.421873][ T5720] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.444314][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.481983][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.507033][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 230.514379][ T5713] hfsplus: request for non-existent node 33423360 in B*Tree [ 231.249423][ T5752] loop2: detected capacity change from 0 to 1024 [ 231.331389][ T5752] hfsplus: request for non-existent node 33423360 in B*Tree [ 231.365666][ T5752] hfsplus: request for non-existent node 33423360 in B*Tree [ 231.406775][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 231.433633][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 231.772623][ T5752] hfsplus: request for non-existent node 33423360 in B*Tree [ 233.102105][ T5752] hfsplus: request for non-existent node 33423360 in B*Tree [ 233.215903][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 233.357935][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 233.985400][ T5763] hfsplus: request for non-existent node 33423360 in B*Tree [ 234.044803][ T5763] hfsplus: request for non-existent node 33423360 in B*Tree [ 234.051333][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.406'. [ 234.411371][ T5780] loop3: detected capacity change from 0 to 1024 [ 234.428500][ T5788] netlink: 240 bytes leftover after parsing attributes in process `syz.1.408'. [ 235.204513][ T5780] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.279817][ T5780] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.397433][ T5804] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.489283][ T5804] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.573771][ T5780] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.955731][ T5780] hfsplus: request for non-existent node 33423360 in B*Tree [ 237.101506][ T5804] hfsplus: request for non-existent node 33423360 in B*Tree [ 237.160075][ T5804] hfsplus: request for non-existent node 33423360 in B*Tree [ 237.351844][ T5817] xt_hashlimit: size too large, truncated to 1048576 [ 237.591125][ T5825] loop2: detected capacity change from 0 to 512 [ 237.665282][ T5829] loop3: detected capacity change from 0 to 512 [ 237.723879][ T5825] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 237.802504][ T5829] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.847764][ T5829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.920088][ T5829] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 2: comm syz.3.419: invalid block [ 237.963004][ T5829] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.419: couldn't read orphan inode 11 (err -117) [ 237.985771][ T5829] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,usrjquota=,,errors=continue. Quota mode: none. [ 239.606679][ T5866] loop2: detected capacity change from 0 to 1024 [ 239.684113][ T5866] hfsplus: request for non-existent node 33423360 in B*Tree [ 239.715615][ T5866] hfsplus: request for non-existent node 33423360 in B*Tree [ 239.776505][ T5869] hfsplus: request for non-existent node 33423360 in B*Tree [ 239.797710][ T5869] hfsplus: request for non-existent node 33423360 in B*Tree [ 239.892553][ T5866] hfsplus: request for non-existent node 33423360 in B*Tree [ 239.931944][ T5866] hfsplus: request for non-existent node 33423360 in B*Tree [ 240.155993][ T5869] hfsplus: request for non-existent node 33423360 in B*Tree [ 240.185712][ T5869] hfsplus: request for non-existent node 33423360 in B*Tree [ 240.240803][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 240.296618][ T5873] hfsplus: request for non-existent node 33423360 in B*Tree [ 240.360944][ T5873] hfsplus: request for non-existent node 33423360 in B*Tree [ 240.407413][ T5866] hfsplus: request for non-existent node 33423360 in B*Tree [ 240.414964][ T5866] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.262151][ T4807] Bluetooth: hci5: command 0x1003 tx timeout [ 242.269701][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 242.484403][ T5908] loop2: detected capacity change from 0 to 1024 [ 242.561394][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.575547][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.590313][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.600987][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.621786][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.639687][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.658421][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.671515][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.694135][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.713543][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.750129][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.769809][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.782497][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.794374][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.807460][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.815074][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.826715][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.834299][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.857158][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.864864][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.882068][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 242.892298][ T5908] hfsplus: request for non-existent node 33423360 in B*Tree [ 243.032373][ T5916] loop2: detected capacity change from 0 to 128 [ 243.148139][ T5916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 243.166385][ T5916] System zones: 1-3, 19-19, 35-36 [ 243.212500][ T5916] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 243.265733][ T5916] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.683535][ T5916] EXT4-fs (loop2): shut down requested (0) [ 244.246928][ T5932] loop4: detected capacity change from 0 to 1024 [ 244.255559][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 244.335708][ T4264] Bluetooth: hci5: command 0x1001 tx timeout [ 244.341831][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 244.372788][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.416498][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.450527][ T5940] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.465556][ T5940] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.509319][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.523844][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.551245][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.574828][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.603759][ T5940] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.637797][ T5940] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.652094][ T5944] can: request_module (can-proto-0) failed. [ 244.668982][ T5944] batman_adv: batadv0: Adding interface: dummy0 [ 244.676437][ T5944] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.704329][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.714317][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.730666][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.740654][ T5944] batman_adv: batadv0: Interface activated: dummy0 [ 244.751751][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.793960][ T5946] batadv0: mtu less than device minimum [ 244.810873][ T5940] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.947428][ T5940] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.959227][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.972366][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.984660][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.996565][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.008367][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.020163][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.031910][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.043658][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.055421][ T5946] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.148856][ T5950] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.160426][ T5950] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.190189][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.255976][ T5932] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.570422][ T5962] xt_hashlimit: size too large, truncated to 1048576 [ 246.667327][ T4807] Bluetooth: hci5: command 0x1009 tx timeout [ 248.192506][ T5976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.521565][ T5991] loop3: detected capacity change from 0 to 1024 [ 248.650574][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 248.665884][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 248.689038][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 248.727019][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 248.786196][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 248.812098][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.002668][ T5998] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.082697][ T5998] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.201876][ T5997] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.267651][ T5997] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.368375][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.437663][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.578815][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.642751][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.654493][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.661970][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.679006][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.686480][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.698044][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 249.712049][ T5991] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.146989][ T6010] sg_read: process 262 (syz.4.480) changed security contexts after opening file descriptor, this is not allowed. [ 254.031217][ T6031] netdevsim netdevsim1: Direct firmware load for . [ 254.031217][ T6031] failed with error -2 [ 254.042094][ T6031] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 254.042094][ T6031] [ 255.698101][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.704718][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.837752][ T6061] loop1: detected capacity change from 0 to 128 [ 258.450981][ T6061] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.668108][ T6061] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.783565][ T6079] netdevsim netdevsim4: Direct firmware load for . [ 260.783565][ T6079] failed with error -2 [ 260.801629][ T6079] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 260.801629][ T6079] [ 261.354684][ T150] block nbd1: Attempted send on invalid socket [ 261.361384][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.377864][ T6103] efs: cannot read volume header [ 261.472687][ T6117] loop3: detected capacity change from 0 to 512 [ 262.381780][ T6121] loop4: detected capacity change from 0 to 512 [ 262.436745][ T6117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.445833][ T1325] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 262.501558][ T6117] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.516: invalid indirect mapped block 4294967295 (level 0) [ 262.558310][ T6117] EXT4-fs (loop3): Remounting filesystem read-only [ 262.564880][ T6117] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.516: invalid indirect mapped block 4294967295 (level 1) [ 262.586820][ T6117] EXT4-fs (loop3): Remounting filesystem read-only [ 262.599109][ T6121] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 262.608547][ T6117] EXT4-fs (loop3): 1 orphan inode deleted [ 262.618567][ T6117] EXT4-fs (loop3): 1 truncate cleaned up [ 262.624284][ T6117] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,noload,. Quota mode: writeback. [ 262.655684][ T6121] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.695556][ T1325] usb 2-1: Using ep0 maxpacket: 32 [ 262.729859][ T6131] loop2: detected capacity change from 0 to 512 [ 262.815861][ T1325] usb 2-1: config index 0 descriptor too short (expected 13362, got 27) [ 262.832484][ T1325] usb 2-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 262.835987][ T6131] EXT4-fs (loop2): Ignoring removed nobh option [ 262.844356][ T1325] usb 2-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 262.897897][ T6133] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.517: iget: bad i_size value: 2533274857506816 [ 262.911285][ T6131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.000377][ T6131] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 263.032053][ T6136] loop3: detected capacity change from 0 to 256 [ 263.037341][ T1325] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 263.055680][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 263.064158][ T1325] usb 2-1: Product: syz [ 263.068460][ T1325] usb 2-1: Manufacturer: syz [ 263.073097][ T1325] usb 2-1: SerialNumber: syz [ 263.152913][ T6131] EXT4-fs (loop2): 1 truncate cleaned up [ 263.158819][ T6131] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 263.269785][ T26] audit: type=1800 audit(1782512267.001:17): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.519" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 263.621527][ T1325] usb 2-1: USB disconnect, device number 8 [ 264.188249][ T6146] netdevsim netdevsim3: Direct firmware load for . [ 264.188249][ T6146] failed with error -2 [ 264.198829][ T6146] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 264.198829][ T6146] [ 264.456377][ T6158] loop1: detected capacity change from 0 to 512 [ 264.488283][ T6158] EXT4-fs (loop1): orphan cleanup on readonly fs [ 264.495598][ T6158] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 264.504391][ T6158] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 264.526501][ T6158] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.529: attempt to clear invalid blocks 2 len 1 [ 264.555641][ T6158] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.529: invalid indirect mapped block 1819239214 (level 0) [ 265.463219][ T6158] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.529: invalid indirect mapped block 1819239214 (level 1) [ 265.514493][ T6158] EXT4-fs (loop1): 1 truncate cleaned up [ 265.522585][ T6158] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 265.597848][ T6158] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 265.689762][ T6158] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.529: Abort forced by user [ 265.740543][ T6158] EXT4-fs (loop1): Remounting filesystem read-only [ 265.783592][ T6158] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 266.892509][ T6196] loop3: detected capacity change from 0 to 1024 [ 267.060207][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 267.085591][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 268.355546][ T6208] hfsplus: request for non-existent node 33423360 in B*Tree [ 268.383093][ T6208] hfsplus: request for non-existent node 33423360 in B*Tree [ 268.544548][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.224433][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.236601][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.243967][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.253532][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.272040][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.285120][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.292741][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.302493][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.310374][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.326432][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.334047][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.355824][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.380950][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.462031][ T6224] netdevsim netdevsim1: Direct firmware load for . [ 269.462031][ T6224] failed with error -2 [ 269.480982][ T6224] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 269.480982][ T6224] [ 269.495968][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.536605][ T6196] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.663421][ T6208] hfsplus: request for non-existent node 33423360 in B*Tree [ 269.743106][ T6208] hfsplus: request for non-existent node 33423360 in B*Tree [ 270.319662][ T6232] loop4: detected capacity change from 0 to 1024 [ 270.376658][ T6232] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 270.391437][ T6232] EXT4-fs (loop4): inline encryption not supported [ 270.399759][ T6232] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 270.407938][ T6232] EXT4-fs (loop4): Ignoring removed bh option [ 270.414153][ T6232] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.557383][ T6232] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noblock_validity,nomblk_io_submit,inlinecrypt,max_batch_time=0x0000000000000025,nomblk_io_submit,noinit_itable,dioread_nolock,nombcache,bh,. Quota mode: none. [ 270.684410][ T6232] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.007119][ T26] audit: type=1800 audit(1782512274.731:18): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.549" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 275.079003][ T26] audit: type=1326 audit(1782512278.811:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 275.445644][ T26] audit: type=1326 audit(1782512278.841:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 275.525585][ T26] audit: type=1326 audit(1782512279.171:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a2cea4bc2 code=0x7ffc0000 [ 275.557510][ T26] audit: type=1326 audit(1782512279.171:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 275.588605][ T26] audit: type=1326 audit(1782512279.171:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 275.678746][ T26] audit: type=1326 audit(1782512279.221:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 275.867138][ T26] audit: type=1326 audit(1782512279.221:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 275.994936][ T26] audit: type=1326 audit(1782512279.251:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 276.042766][ T26] audit: type=1326 audit(1782512279.251:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a2cea4bc2 code=0x7ffc0000 [ 276.073129][ T26] audit: type=1326 audit(1782512279.251:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1a2cea4c57 code=0x7ffc0000 [ 276.107071][ T26] audit: type=1326 audit(1782512279.251:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1a2ce61b51 code=0x7ffc0000 [ 276.178753][ T26] audit: type=1326 audit(1782512279.251:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1a2cea5c49 code=0x7ffc0000 [ 276.281736][ T26] audit: type=1326 audit(1782512279.251:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1a2ce61bbb code=0x7ffc0000 [ 276.371199][ T26] audit: type=1326 audit(1782512279.251:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1a2ce612ac code=0x7ffc0000 [ 276.450761][ T26] audit: type=1326 audit(1782512279.251:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1a2ce6130e code=0x7ffc0000 [ 276.590903][ T26] audit: type=1326 audit(1782512279.251:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 276.673359][ T26] audit: type=1326 audit(1782512279.251:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2cea4e59 code=0x7ffc0000 [ 278.921225][ T6351] netdevsim netdevsim2: Direct firmware load for . [ 278.921225][ T6351] failed with error -2 [ 278.932336][ T6351] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 278.932336][ T6351] [ 279.075950][ T6357] loop3: detected capacity change from 0 to 164 [ 279.305132][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 279.359339][ T6365] device syzkaller0 entered promiscuous mode [ 280.475572][ T1325] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 280.510814][ T6390] loop2: detected capacity change from 0 to 7 [ 280.530153][ T4277] Dev loop2: unable to read RDB block 7 [ 280.539010][ T4277] loop2: AHDI p1 p2 p3 [ 280.543339][ T4277] loop2: partition table partially beyond EOD, truncated [ 280.553728][ T4277] loop2: p3 start 335544320 is beyond EOD, truncated [ 280.569666][ T6390] Dev loop2: unable to read RDB block 7 [ 280.591628][ T6390] loop2: AHDI p1 p2 p3 [ 280.598801][ T6390] loop2: partition table partially beyond EOD, truncated [ 280.619844][ T6390] loop2: p3 start 335544320 is beyond EOD, truncated [ 280.867843][ T6401] loop1: detected capacity change from 0 to 512 [ 280.991391][ T6401] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.258694][ T6405] netdevsim netdevsim0: Direct firmware load for . [ 281.258694][ T6405] failed with error -2 [ 281.269798][ T6405] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 281.269798][ T6405] [ 281.283220][ T6401] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.607: invalid indirect mapped block 256 (level 2) [ 281.321442][ T6413] device syzkaller0 entered promiscuous mode [ 281.379329][ T6401] EXT4-fs (loop1): 2 truncates cleaned up [ 281.498735][ T6401] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 281.605712][ T1325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.705759][ T1325] usb 3-1: no configurations [ 281.713195][ T1325] usb 3-1: can't read configurations, error -22 [ 282.163128][ T6434] loop4: detected capacity change from 0 to 1024 [ 282.189038][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.198656][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.210099][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.226169][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.250832][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 282.276640][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.284182][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.299793][ T6441] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.308104][ T6441] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.349508][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.357584][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.601053][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.659389][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.719621][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.810384][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 282.964273][ T6441] hfsplus: request for non-existent node 33423360 in B*Tree [ 283.016497][ T6441] hfsplus: request for non-existent node 33423360 in B*Tree [ 283.341666][ T6449] hfsplus: request for non-existent node 33423360 in B*Tree [ 283.359186][ T6449] hfsplus: request for non-existent node 33423360 in B*Tree [ 283.390952][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 283.406129][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 283.740993][ T6461] netdevsim netdevsim1: Direct firmware load for . [ 283.740993][ T6461] failed with error -2 [ 283.751764][ T6461] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 283.751764][ T6461] [ 285.540540][ T1325] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 286.278999][ T6483] loop1: detected capacity change from 0 to 1024 [ 286.442573][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 286.501476][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.519192][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.604716][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.638998][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.693985][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.789730][ T6506] netdevsim netdevsim3: Direct firmware load for . [ 286.789730][ T6506] failed with error -2 [ 286.800500][ T6506] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 286.800500][ T6506] [ 288.260091][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.315929][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.323355][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.507345][ T1325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.542054][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.550182][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.554053][ T6511] loop2: detected capacity change from 0 to 1024 [ 288.585638][ T1325] usb 3-1: no configurations [ 288.590388][ T1325] usb 3-1: can't read configurations, error -22 [ 288.606596][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.655065][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.685863][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.707584][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.764970][ T6520] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.900235][ T6520] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.076830][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.188315][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.237918][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.324193][ T6520] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.339835][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.462754][ T6520] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.494317][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.526132][ T6498] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.549061][ T6526] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.557006][ T6525] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.564330][ T6525] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.582834][ T6526] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.621103][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.670007][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.687229][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.695118][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.707234][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.714767][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.727249][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.734867][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.745386][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.754752][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.765676][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.774335][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.793881][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.812284][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 291.465799][ T4805] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 292.556839][ T150] block nbd3: Attempted send on invalid socket [ 292.563292][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.574809][ T6571] efs: cannot read volume header [ 292.985666][ T4805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.065683][ T4805] usb 3-1: no configurations [ 293.070359][ T4805] usb 3-1: can't read configurations, error -22 [ 295.435459][ T5773] block nbd3: Attempted send on invalid socket [ 295.441744][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.453272][ T6634] efs: cannot read volume header [ 295.945681][ T4805] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 296.205729][ T4805] usb 4-1: Using ep0 maxpacket: 32 [ 296.326338][ T4805] usb 4-1: config 0 has no interfaces? [ 297.355771][ T4805] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 297.656352][ T4805] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 297.763954][ T4805] usb 4-1: Product: syz [ 297.807034][ T4805] usb 4-1: Manufacturer: syz [ 297.934814][ T4805] usb 4-1: SerialNumber: syz [ 298.053841][ T4805] usb 4-1: config 0 descriptor?? [ 298.679905][ T4805] usb 4-1: USB disconnect, device number 10 [ 299.001266][ T6674] loop2: detected capacity change from 0 to 128 [ 299.227672][ T6674] device syzkaller0 entered promiscuous mode [ 299.779178][ T6694] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 305.380409][ T6751] netlink: 352 bytes leftover after parsing attributes in process `syz.2.710'. [ 305.385549][ C0] hrtimer: interrupt took 124775 ns [ 306.607114][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880613f1000: rx timeout, send abort [ 306.617969][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880613f1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 310.717835][ T6782] device syzkaller0 entered promiscuous mode [ 315.641883][ T6863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.749'. [ 317.166152][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.172616][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.781403][ T150] block nbd4: Attempted send on invalid socket [ 318.787724][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 318.799398][ T6900] efs: cannot read volume header [ 319.135557][ T1325] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 319.375698][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 320.965692][ T1325] usb 5-1: config index 0 descriptor too short (expected 8224, got 27) [ 321.015900][ T1325] usb 5-1: config 32 has an invalid descriptor of length 45, skipping remainder of the config [ 321.171249][ T1325] usb 5-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 321.455844][ T1325] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.638802][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 322.528041][ T1325] usb 5-1: Product: syz [ 322.532362][ T1325] usb 5-1: Manufacturer: syz [ 322.537660][ T1325] usb 5-1: SerialNumber: syz [ 324.057136][ T1325] usb 5-1: USB disconnect, device number 7 [ 324.935526][ T1325] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 327.315517][ T1325] usb 2-1: device not accepting address 9, error -71 [ 327.437867][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 327.729780][ T5773] block nbd4: Attempted send on invalid socket [ 327.737020][ T5773] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.753173][ T6959] efs: cannot read volume header [ 331.095897][ T4532] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 331.273030][ T6972] xt_hashlimit: size too large, truncated to 1048576 [ 331.386109][ T4532] usb 5-1: Using ep0 maxpacket: 32 [ 331.498693][ T6982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.787'. [ 331.679711][ T4532] usb 5-1: config index 0 descriptor too short (expected 8224, got 27) [ 334.089245][ T4532] usb 5-1: config 32 has an invalid descriptor of length 45, skipping remainder of the config [ 334.498601][ T4532] usb 5-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 334.565978][ T4532] usb 5-1: string descriptor 0 read error: -71 [ 334.573121][ T4532] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 334.583839][ T4532] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.625673][ T4532] usb 5-1: can't set config #32, error -71 [ 334.639764][ T4532] usb 5-1: USB disconnect, device number 8 [ 336.591114][ T6990] loop4: detected capacity change from 0 to 1024 [ 336.741663][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.764644][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.835349][ T6997] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.865871][ T6997] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.885287][ T6999] device syzkaller0 entered promiscuous mode [ 336.941963][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.967925][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.002912][ T6999] tipc: Enabled bearer , priority 0 [ 337.028753][ T6997] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.046213][ T6997] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.055219][ T6998] tipc: Resetting bearer [ 337.102465][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.149048][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.167211][ T6998] tipc: Disabling bearer [ 337.258011][ T6997] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.306359][ T6997] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.399661][ T7005] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.448666][ T7005] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.516142][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.523512][ T6990] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.860039][ T7015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.518355][ T150] block nbd4: Attempted send on invalid socket [ 339.524641][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.536539][ T7040] efs: cannot read volume header [ 339.663051][ T7036] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 341.665596][ T4228] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 341.925470][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 342.045653][ T4228] usb 5-1: config 0 has no interfaces? [ 342.205705][ T4228] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 342.222621][ T7047] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 342.257747][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 342.376368][ T4228] usb 5-1: Product: syz [ 342.501352][ T4228] usb 5-1: Manufacturer: syz [ 342.552206][ T4228] usb 5-1: SerialNumber: syz [ 342.660572][ T4228] usb 5-1: config 0 descriptor?? [ 343.493033][ T7053] loop3: detected capacity change from 0 to 1024 [ 343.637580][ T4264] usb 5-1: USB disconnect, device number 9 [ 343.692929][ T4349] Bluetooth: hci5: Frame reassembly failed (-84) [ 343.750743][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.821499][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.844009][ T7058] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.853321][ T7058] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.936442][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.975681][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.008789][ T7058] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.035714][ T7058] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.058503][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.195730][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.242327][ T7058] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.271488][ T7058] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.301618][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.314450][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.333055][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.343430][ T7053] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.465223][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.811'. [ 345.705528][ T4264] Bluetooth: hci5: command 0x1003 tx timeout [ 345.728665][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 348.065291][ T4805] Bluetooth: hci5: command 0x1001 tx timeout [ 348.396642][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 350.366066][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 350.416394][ T4805] Bluetooth: hci5: command 0x1009 tx timeout [ 350.452325][ T7098] netdevsim netdevsim0: Direct firmware load for . [ 350.452325][ T7098] failed with error -2 [ 350.463773][ T7098] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 350.463773][ T7098] [ 350.488590][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 350.722234][ T7103] lo speed is unknown, defaulting to 1000 [ 352.880917][ T4803] Bluetooth: hci6: command 0x0409 tx timeout [ 353.346892][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 353.415191][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 353.465243][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 353.508877][ T7127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 355.827711][ T4532] Bluetooth: hci6: command 0x041b tx timeout [ 358.032410][ T7140] net_ratelimit: 10 callbacks suppressed [ 358.032511][ T7140] netdevsim0: mtu less than device minimum [ 358.233442][ T4332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.363371][ T4332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.389491][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.397691][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.415596][ T4264] Bluetooth: hci6: command 0x040f tx timeout [ 358.430515][ T7103] device bridge_slave_0 entered promiscuous mode [ 358.635551][ T4227] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 359.069364][ T4332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.106930][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.139753][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.153903][ T7103] device bridge_slave_1 entered promiscuous mode [ 359.233179][ T4332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.277530][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.460327][ T4532] Bluetooth: hci6: command 0x0419 tx timeout [ 361.517353][ T7162] netdevsim netdevsim0: Direct firmware load for . [ 361.517353][ T7162] failed with error -2 [ 361.529411][ T7162] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 361.529411][ T7162] [ 361.641114][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.228073][ T7103] team0: Port device team_slave_0 added [ 362.236540][ T7103] team0: Port device team_slave_1 added [ 362.259103][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.266302][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.293586][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.307239][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.314225][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.341796][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.506085][ T4214] Bluetooth: hci0: Frame reassembly failed (-84) [ 362.605674][ T4227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.696250][ T4227] usb 5-1: no configurations [ 362.716894][ T4227] usb 5-1: can't read configurations, error -22 [ 362.782082][ T7103] device hsr_slave_0 entered promiscuous mode [ 362.831256][ T7103] device hsr_slave_1 entered promiscuous mode [ 362.869605][ T7103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.907615][ T7103] Cannot create hsr debugfs directory [ 363.062746][ T7188] device syzkaller0 entered promiscuous mode [ 364.524861][ T4803] Bluetooth: hci0: command 0x1003 tx timeout [ 364.583189][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 366.657594][ T4805] Bluetooth: hci0: command 0x1001 tx timeout [ 366.784153][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 367.147746][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.815961][ T4803] Bluetooth: hci0: command 0x1009 tx timeout [ 369.495912][ T7215] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 373.239640][ T7103] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.317599][ T7103] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.368961][ T7224] netdevsim netdevsim4: Direct firmware load for . [ 373.368961][ T7224] failed with error -2 [ 373.401762][ T7224] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 373.401762][ T7224] [ 373.465512][ T4231] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 373.518918][ T7103] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.668640][ T7103] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.460483][ T5773] block nbd4: Attempted send on invalid socket [ 374.469855][ T5773] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.487516][ T7252] efs: cannot read volume header [ 376.825510][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.269882][ T4231] usb 4-1: no configurations [ 377.274802][ T4231] usb 4-1: can't read configurations, error -22 [ 378.596766][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.604117][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.076022][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.138419][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.217476][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.376413][ T4358] Bluetooth: hci0: Frame reassembly failed (-84) [ 379.520947][ T7103] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.823588][ T7288] netdevsim netdevsim2: Direct firmware load for . [ 379.823588][ T7288] failed with error -2 [ 379.835511][ T7288] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 379.835511][ T7288] [ 381.362100][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 381.371229][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.380004][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.387236][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.394847][ T4809] Bluetooth: hci0: command 0x1003 tx timeout [ 381.399893][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.469819][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 381.522177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.560914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.970278][ T5773] block nbd3: Attempted send on invalid socket [ 381.977853][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.993022][ T7299] efs: cannot read volume header [ 382.108874][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.116262][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.137034][ T4332] device hsr_slave_0 left promiscuous mode [ 382.169568][ T4332] device hsr_slave_1 left promiscuous mode [ 382.177537][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.185186][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.210661][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.218410][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.229037][ T4332] device bridge_slave_1 left promiscuous mode [ 382.237563][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.337848][ T4332] device bridge_slave_0 left promiscuous mode [ 382.345282][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.549017][ T4332] device veth1_macvtap left promiscuous mode [ 382.559101][ T4332] device veth0_macvtap left promiscuous mode [ 382.575268][ T4332] device veth1_vlan left promiscuous mode [ 382.590262][ T4332] device veth0_vlan left promiscuous mode [ 382.729752][ T7314] loop3: detected capacity change from 0 to 512 [ 382.765677][ T7314] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 382.829842][ T7314] EXT4-fs (loop3): 1 truncate cleaned up [ 382.843628][ T7314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.546406][ T4532] Bluetooth: hci0: command 0x1001 tx timeout [ 383.555512][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 383.588260][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 383.614169][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 383.648068][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.718640][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.963912][ T4332] bond0 (unregistering): Released all slaves [ 384.091932][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.107309][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.133002][ T1325] lo speed is unknown, defaulting to 1000 [ 384.190196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.233131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.260382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.289449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.344466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.379488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.408485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.450302][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.461732][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.520258][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.576075][ T7340] netdevsim netdevsim0: Direct firmware load for . [ 384.576075][ T7340] failed with error -2 [ 384.586827][ T7340] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 384.586827][ T7340] [ 385.647613][ T4232] Bluetooth: hci0: command 0x1009 tx timeout [ 387.378674][ T5773] block nbd3: Attempted send on invalid socket [ 387.385662][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.572918][ T7361] efs: cannot read volume header [ 388.029197][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.052397][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.122123][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.090880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.120159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.322444][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.346429][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.378535][ T7103] device veth0_vlan entered promiscuous mode [ 389.413911][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.443772][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.531104][ T7103] device veth1_vlan entered promiscuous mode [ 389.727124][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.317659][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.331520][ T5773] block nbd3: Attempted send on invalid socket [ 390.339713][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.522114][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.531112][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.550947][ T7437] efs: cannot read volume header [ 390.562383][ T7103] device veth0_macvtap entered promiscuous mode [ 390.671813][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.702469][ T7103] device veth1_macvtap entered promiscuous mode [ 391.066779][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.339691][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.611414][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.622973][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.633471][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.644273][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.658455][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.670877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.730190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.939322][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.985474][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.032792][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.116025][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.177237][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.202519][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.223392][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.242408][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.258726][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.352579][ T7103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.378005][ T7103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.404443][ T7103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.446882][ T7103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.736309][ T4592] Bluetooth: hci0: Frame reassembly failed (-84) [ 393.039197][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.086439][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.130152][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.206209][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.217226][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.284933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 394.082124][ T5773] block nbd4: Attempted send on invalid socket [ 394.089487][ T5773] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.104639][ T7506] efs: cannot read volume header [ 394.745727][ T4803] Bluetooth: hci0: command 0x1003 tx timeout [ 394.752869][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 396.126458][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 396.345525][ T23] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 396.388274][ T7551] batman_adv: batadv0: Interface deactivated: dummy0 [ 396.404458][ T7551] batman_adv: batadv0: Removing interface: dummy0 [ 396.420590][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.464718][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.533950][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.545453][ T23] usb 5-1: device descriptor read/64, error -71 [ 396.566064][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.826823][ T7] Bluetooth: hci0: command 0x1001 tx timeout [ 396.835459][ T23] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 396.925842][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 397.180762][ T5773] block nbd3: Attempted send on invalid socket [ 397.188658][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.201015][ T7558] efs: cannot read volume header [ 399.043318][ T7] Bluetooth: hci0: command 0x1009 tx timeout [ 399.105479][ T23] usb 5-1: device descriptor read/64, error -71 [ 400.519517][ T23] usb usb5-port1: attempt power cycle [ 400.742259][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'. [ 400.815636][ T4227] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 401.070136][ T7571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.145499][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 401.265743][ T4227] usb 4-1: config 0 has no interfaces? [ 401.435746][ T4227] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 401.451836][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 401.489387][ T4227] usb 4-1: Product: syz [ 401.501643][ T4227] usb 4-1: Manufacturer: syz [ 401.520179][ T4227] usb 4-1: SerialNumber: syz [ 401.638742][ T4227] usb 4-1: config 0 descriptor?? [ 401.750422][ T7585] netdevsim netdevsim0: Direct firmware load for . [ 401.750422][ T7585] failed with error -2 [ 401.785651][ T7585] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 401.785651][ T7585] [ 406.795695][ T4227] usb 4-1: can't set config #0, error -71 [ 406.805824][ T4227] usb 4-1: USB disconnect, device number 13 [ 407.516938][ T7627] netlink: 200 bytes leftover after parsing attributes in process `syz.2.937'. [ 407.585491][ T4227] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 408.238229][ T5773] block nbd3: Attempted send on invalid socket [ 408.247012][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.262967][ T7629] efs: cannot read volume header [ 408.516285][ T4227] usb 5-1: device descriptor read/64, error -71 [ 408.789955][ T4227] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 409.025590][ T4227] usb 5-1: device descriptor read/64, error -71 [ 409.074447][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 409.122405][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.155593][ T4227] usb usb5-port1: attempt power cycle [ 409.177615][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.292485][ T7659] netlink: 'syz.3.945': attribute type 12 has an invalid length. [ 409.565519][ T4227] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 409.585949][ T7672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 409.655590][ T4227] usb 5-1: device descriptor read/8, error -71 [ 409.925557][ T4227] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 410.165619][ T4227] usb 5-1: device not accepting address 18, error -71 [ 410.191118][ T4227] usb usb5-port1: unable to enumerate USB device [ 410.210584][ T7687] tun0: tun_chr_ioctl cmd 2148553947 [ 413.045933][ T7722] netdevsim netdevsim0: Direct firmware load for . [ 413.045933][ T7722] failed with error -2 [ 413.057654][ T7722] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 413.057654][ T7722] [ 413.139734][ T7726] loop4: detected capacity change from 0 to 1024 [ 413.313311][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.361030][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.401666][ T7736] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.447973][ T7736] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.524096][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.541259][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.554824][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.563181][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.622591][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.655983][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.704876][ T7736] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.804697][ T7736] hfsplus: request for non-existent node 33423360 in B*Tree [ 413.936204][ T7746] hfsplus: request for non-existent node 33423360 in B*Tree [ 414.005536][ T4803] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 414.017229][ T7746] hfsplus: request for non-existent node 33423360 in B*Tree [ 414.074156][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 414.125002][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 414.174424][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 414.192706][ T7726] hfsplus: request for non-existent node 33423360 in B*Tree [ 414.215515][ T4803] usb 4-1: device descriptor read/64, error -71 [ 414.530433][ T4803] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 414.778295][ T4803] usb 4-1: device descriptor read/64, error -71 [ 414.935837][ T4803] usb usb4-port1: attempt power cycle [ 415.399681][ T4803] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 415.549966][ T4803] usb 4-1: device descriptor read/8, error -71 [ 415.556252][ T7772] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 417.605500][ T4803] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 419.855686][ T4803] usb 4-1: device descriptor read/8, error -71 [ 419.975942][ T4803] usb usb4-port1: unable to enumerate USB device [ 420.260030][ T7802] loop4: detected capacity change from 0 to 1024 [ 420.664278][ T7802] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.709910][ T7802] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.890311][ T7802] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.957076][ T7802] hfsplus: request for non-existent node 33423360 in B*Tree [ 421.010450][ T7818] hfsplus: request for non-existent node 33423360 in B*Tree [ 421.145505][ T7818] hfsplus: request for non-existent node 33423360 in B*Tree [ 421.304115][ T425] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.420076][ T7820] hfsplus: request for non-existent node 33423360 in B*Tree [ 421.459086][ T7820] hfsplus: request for non-existent node 33423360 in B*Tree [ 421.479052][ T7829] device syzkaller0 entered promiscuous mode [ 421.585526][ T7802] hfsplus: request for non-existent node 33423360 in B*Tree [ 421.593720][ T7802] hfsplus: request for non-existent node 33423360 in B*Tree [ 422.305609][ T1325] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 422.535749][ T1325] usb 5-1: device descriptor read/64, error -71 [ 422.825780][ T1325] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 423.015558][ T1325] usb 5-1: device descriptor read/64, error -71 [ 423.083424][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 423.145923][ T1325] usb usb5-port1: attempt power cycle [ 423.360395][ T7875] device syzkaller0 entered promiscuous mode [ 423.375522][ T7] Bluetooth: hci0: command 0x1003 tx timeout [ 423.383420][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 423.555513][ T1325] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 423.615333][ T7882] netlink: 'syz.2.998': attribute type 21 has an invalid length. [ 423.642272][ T7882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.998'. [ 423.657578][ T7882] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 423.691414][ T1325] usb 5-1: device descriptor read/8, error -71 [ 423.975441][ T1325] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 425.873418][ T7] Bluetooth: hci0: command 0x1001 tx timeout [ 426.068031][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 426.936162][ T1325] usb 5-1: device descriptor read/8, error -71 [ 427.065856][ T1325] usb usb5-port1: unable to enumerate USB device [ 428.095567][ T4809] Bluetooth: hci0: command 0x1009 tx timeout [ 428.443909][ T7925] device syzkaller0 entered promiscuous mode [ 429.018679][ T7931] tipc: Enabling of bearer rejected, failed to enable media [ 429.555074][ T7905] chnl_net:caif_netlink_parms(): no params data found [ 429.668879][ T7954] device bond0 entered promiscuous mode [ 429.681659][ T7954] device bond_slave_0 entered promiscuous mode [ 429.701550][ T7954] device bond_slave_1 entered promiscuous mode [ 429.782166][ T7954] device bond0 left promiscuous mode [ 429.805635][ T7954] device bond_slave_0 left promiscuous mode [ 429.848236][ T7954] device bond_slave_1 left promiscuous mode [ 429.913154][ T7953] device bond0 entered promiscuous mode [ 429.945615][ T7953] device bond_slave_0 entered promiscuous mode [ 429.968032][ T7953] device bond_slave_1 entered promiscuous mode [ 430.001030][ T7953] device bond0 left promiscuous mode [ 430.015514][ T4809] Bluetooth: hci5: command 0x0409 tx timeout [ 430.066183][ T7953] device bond_slave_0 left promiscuous mode [ 430.084896][ T7953] device bond_slave_1 left promiscuous mode [ 430.475722][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.491776][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.502036][ T7905] device bridge_slave_0 entered promiscuous mode [ 430.513156][ T7976] device syzkaller0 entered promiscuous mode [ 430.543167][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.561117][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.584030][ T7905] device bridge_slave_1 entered promiscuous mode [ 430.606926][ T7984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.795722][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.803380][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.114368][ T4809] Bluetooth: hci5: command 0x041b tx timeout [ 435.724417][ T4532] Bluetooth: hci5: command 0x040f tx timeout [ 436.727055][ T7984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.790907][ T7984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.370832][ T7984] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.380479][ T7984] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.390351][ T7984] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.400128][ T7984] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.530126][ T7905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.672013][ T7905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.743498][ T8032] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 437.785655][ T4809] Bluetooth: hci5: command 0x0419 tx timeout [ 437.893695][ T7905] team0: Port device team_slave_0 added [ 437.977960][ T8040] device syzkaller0 entered promiscuous mode [ 438.001601][ T7905] team0: Port device team_slave_1 added [ 438.029747][ T425] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.013516][ T5773] block nbd3: Attempted send on invalid socket [ 439.023709][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.042943][ T8048] efs: cannot read volume header [ 440.022341][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.040848][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.210383][ T4351] Bluetooth: hci0: Frame reassembly failed (-84) [ 442.310335][ T425] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.332096][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.379435][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.435936][ T7905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.452385][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.460445][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.489806][ T4232] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 442.498685][ T7905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.579956][ T425] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.724038][ T425] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.772968][ T7905] device hsr_slave_0 entered promiscuous mode [ 442.806390][ T7905] device hsr_slave_1 entered promiscuous mode [ 442.855543][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 442.965716][ T7] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 443.075745][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 443.098138][ T4232] usb 4-1: can't read configurations, error -71 [ 443.163435][ T7] usb 3-1: device descriptor read/64, error -71 [ 443.445784][ T7] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 443.635649][ T7] usb 3-1: device descriptor read/64, error -71 [ 443.755940][ T7] usb usb3-port1: attempt power cycle [ 443.771578][ T7905] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 443.832236][ T7905] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 443.890335][ T7905] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 443.919041][ T7905] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 444.175708][ T4232] Bluetooth: hci0: command 0x1003 tx timeout [ 444.185544][ T7] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 444.221668][ T4197] Bluetooth: hci0: sending frame failed (-49) [ 444.271556][ T425] device hsr_slave_0 left promiscuous mode [ 444.295840][ T7] usb 3-1: device descriptor read/8, error -71 [ 444.327331][ T425] device hsr_slave_1 left promiscuous mode [ 444.378019][ T425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.387785][ T425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.402344][ T425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.416465][ T425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.474990][ T425] device bridge_slave_1 left promiscuous mode [ 444.492522][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.528101][ T425] device bridge_slave_0 left promiscuous mode [ 444.545803][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.565661][ T7] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 444.598752][ T425] device veth1_macvtap left promiscuous mode [ 444.624425][ T425] device veth0_macvtap left promiscuous mode [ 444.644006][ T425] device veth1_vlan left promiscuous mode [ 444.657684][ T425] device veth0_vlan left promiscuous mode [ 444.665605][ T7] usb 3-1: device descriptor read/8, error -71 [ 444.785858][ T7] usb usb3-port1: unable to enumerate USB device [ 444.850093][ T8123] netlink: 'syz.3.1041': attribute type 11 has an invalid length. [ 445.062252][ T425] team0 (unregistering): Port device team_slave_1 removed [ 445.082212][ T425] team0 (unregistering): Port device team_slave_0 removed [ 445.099245][ T425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.123151][ T425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.262397][ T425] bond0 (unregistering): Released all slaves [ 445.318123][ T7905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.335031][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'. [ 445.466672][ T7905] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.514976][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.533754][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.595143][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'. [ 445.639861][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.662819][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.687607][ T8130] xt_connbytes: Forcing CT accounting to be enabled [ 445.716007][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.723917][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.743459][ T8130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.795322][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.818248][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.829369][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.863638][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.871699][ T4592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.945335][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.968689][ T8143] loop3: detected capacity change from 0 to 128 [ 445.993078][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.031911][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.078406][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.090273][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.113925][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.135094][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.144528][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.156233][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.187138][ T7905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.218719][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.229863][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.242083][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.263501][ T4228] Bluetooth: hci0: command 0x1001 tx timeout [ 446.291139][ T4197] Bluetooth: hci0: sending frame failed (-49) [ 446.620727][ T8155] device bridge1 entered promiscuous mode [ 446.680906][ T8155] team0: Port device bridge1 added [ 446.731194][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 446.788629][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1047'. [ 446.845639][ T8157] bridge0: port 3(team0) entered blocking state [ 446.852368][ T8157] bridge0: port 3(team0) entered disabled state [ 446.926124][ T8157] device team0 entered promiscuous mode [ 446.946220][ T8157] device team_slave_0 entered promiscuous mode [ 446.969133][ T8157] device team_slave_1 entered promiscuous mode [ 447.002780][ T8157] bridge0: port 3(team0) entered blocking state [ 447.010219][ T8157] bridge0: port 3(team0) entered forwarding state [ 447.095740][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.122668][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.179837][ T8168] netlink: 'syz.3.1050': attribute type 153 has an invalid length. [ 447.225972][ T7905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.595290][ T8189] loop3: detected capacity change from 0 to 128 [ 447.695716][ T4228] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 447.775139][ T8189] device syzkaller0 entered promiscuous mode [ 447.911190][ T4228] usb 3-1: device descriptor read/64, error -71 [ 448.125692][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.144643][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.205777][ T4228] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 448.244223][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.273564][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.335632][ T1325] Bluetooth: hci0: command 0x1009 tx timeout [ 448.346293][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.405624][ T4228] usb 3-1: device descriptor read/64, error -71 [ 448.413220][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.454322][ T7905] device veth0_vlan entered promiscuous mode [ 448.490707][ T7905] device veth1_vlan entered promiscuous mode [ 448.525617][ T4228] usb usb3-port1: attempt power cycle [ 448.656217][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.670205][ T8211] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.686985][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.718397][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.743440][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.757778][ T7905] device veth0_macvtap entered promiscuous mode [ 448.786493][ T7905] device veth1_macvtap entered promiscuous mode [ 448.858558][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.884736][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.920221][ T7905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.945526][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 448.953421][ T4228] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 448.969253][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 448.996863][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.027699][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.056086][ T4228] usb 3-1: device descriptor read/8, error -71 [ 449.074868][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.105246][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.153404][ T7905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.183442][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.207483][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.241766][ T7905] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.269879][ T7905] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.306358][ T7905] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.342576][ T7905] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.369095][ T4228] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 449.495682][ T4228] usb 3-1: device descriptor read/8, error -71 [ 449.625711][ T4228] usb usb3-port1: unable to enumerate USB device [ 449.670811][ T8238] netlink: 'syz.3.1068': attribute type 21 has an invalid length. [ 449.711602][ T8238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1068'. [ 449.762065][ T8238] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 449.843706][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.863254][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.916147][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 450.020160][ T4592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.034214][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.404367][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 450.924628][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1000'. [ 451.055550][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1000'. [ 451.092514][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1000'. [ 451.241912][ T8266] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.252471][ T8266] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.262230][ T8266] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.271805][ T8266] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.803743][ T8266] device syzkaller0 entered promiscuous mode [ 451.834201][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 451.896894][ T8295] device vlan2 entered promiscuous mode [ 451.915779][ T8295] device syz_tun entered promiscuous mode [ 452.315665][ T4227] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 452.525569][ T4227] usb 4-1: device descriptor read/64, error -71 [ 452.805434][ T4227] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 453.025768][ T4227] usb 4-1: device descriptor read/64, error -71 [ 453.048124][ T8318] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1082'. [ 453.156046][ T4227] usb usb4-port1: attempt power cycle [ 453.306685][ T8318] netlink: 'syz.2.1082': attribute type 9 has an invalid length. [ 453.761426][ T5773] block nbd6: Attempted send on invalid socket [ 453.770212][ T5773] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.786334][ T8327] efs: cannot read volume header [ 454.146284][ T8318] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1082'. [ 454.525486][ T4227] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 457.310733][ T8341] syz.0.1086 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 457.385630][ T4227] usb 4-1: device descriptor read/8, error -71 [ 457.785190][ T150] block nbd3: Attempted send on invalid socket [ 457.791930][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 457.804119][ T8358] efs: cannot read volume header [ 458.443926][ T4349] Bluetooth: hci0: Frame reassembly failed (-84) [ 458.645163][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1094'. [ 458.829996][ T8382] tipc: Started in network mode [ 458.875942][ T8382] tipc: Node identity , cluster identity 4711 [ 459.515399][ T8382] tipc: Failed to set node id, please configure manually [ 460.339313][ T8382] tipc: Enabling of bearer rejected, failed to enable media [ 460.528116][ T4806] Bluetooth: hci0: command 0x1003 tx timeout [ 460.674392][ T4197] Bluetooth: hci0: sending frame failed (-49) [ 461.113117][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 461.365485][ T23] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 462.825561][ T4806] Bluetooth: hci0: command 0x1001 tx timeout [ 463.213218][ T4197] Bluetooth: hci0: sending frame failed (-49) [ 463.645449][ T23] usb 7-1: device descriptor read/64, error -71 [ 463.945488][ T23] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 464.280602][ T5773] block nbd3: Attempted send on invalid socket [ 464.288038][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 464.304588][ T8410] efs: cannot read volume header [ 465.303966][ T8432] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.342110][ T4806] Bluetooth: hci0: command 0x1009 tx timeout [ 466.411866][ T150] block nbd6: Attempted send on invalid socket [ 466.418289][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.429866][ T8439] efs: cannot read volume header [ 466.859668][ T8460] loop3: detected capacity change from 0 to 128 [ 467.131828][ T8469] device syzkaller0 entered promiscuous mode [ 469.756323][ T5773] block nbd4: Attempted send on invalid socket [ 469.764321][ T5773] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 469.780777][ T8523] efs: cannot read volume header [ 470.230423][ T8533] loop6: detected capacity change from 0 to 128 [ 470.308070][ T8522] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.803855][ T8533] device syzkaller0 entered promiscuous mode [ 471.154128][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 471.192714][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 471.499152][ T8571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 471.652339][ T5773] block nbd4: Attempted send on invalid socket [ 471.659388][ T5773] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.675671][ T8580] efs: cannot read volume header [ 472.133734][ T8590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.139295][ T4232] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 472.465599][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 472.625797][ T4232] usb 5-1: config index 0 descriptor too short (expected 8224, got 27) [ 472.635012][ T4232] usb 5-1: config 32 has an invalid descriptor of length 32, skipping remainder of the config [ 472.666443][ T4232] usb 5-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 472.920932][ T4232] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 472.945542][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 472.988289][ T4232] usb 5-1: Product: syz [ 472.992792][ T4232] usb 5-1: Manufacturer: syz [ 472.997687][ T8614] loop3: detected capacity change from 0 to 128 [ 473.058097][ T4232] usb 5-1: SerialNumber: syz [ 473.716194][ T4232] usb 5-1: USB disconnect, device number 23 [ 475.940003][ T5773] block nbd4: Attempted send on invalid socket [ 475.947069][ T5773] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.961687][ T8653] efs: cannot read volume header [ 476.247400][ T8659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.435566][ T4809] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 476.716393][ T4809] usb 5-1: Using ep0 maxpacket: 32 [ 477.067052][ T8683] device syzkaller0 entered promiscuous mode [ 477.075838][ T4809] usb 5-1: config index 0 descriptor too short (expected 8224, got 27) [ 477.125446][ T4809] usb 5-1: config 32 has an invalid descriptor of length 32, skipping remainder of the config [ 477.265240][ T4809] usb 5-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 477.406840][ T5773] block nbd6: Attempted send on invalid socket [ 477.413909][ T5773] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.427510][ T8693] efs: cannot read volume header [ 477.555768][ T4809] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 477.568393][ T4809] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 477.578388][ T4809] usb 5-1: Product: syz [ 477.585791][ T4809] usb 5-1: Manufacturer: syz [ 477.591126][ T4809] usb 5-1: SerialNumber: syz [ 477.764375][ T8702] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 477.813111][ T4806] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 477.997330][ T150] block nbd3: Attempted send on invalid socket [ 478.003930][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.015249][ T8704] efs: cannot read volume header [ 478.186963][ T4809] usb 5-1: USB disconnect, device number 24 [ 478.416473][ T4806] usb 7-1: Using ep0 maxpacket: 32 [ 478.575899][ T4806] usb 7-1: config index 0 descriptor too short (expected 13362, got 27) [ 478.585180][ T4806] usb 7-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 478.624633][ T4806] usb 7-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 478.876005][ T4806] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 478.895597][ T4806] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 478.919685][ T4806] usb 7-1: Product: syz [ 478.924229][ T4806] usb 7-1: Manufacturer: syz [ 478.983058][ T4806] usb 7-1: SerialNumber: syz [ 479.052474][ T8724] netlink: 'syz.2.1176': attribute type 21 has an invalid length. [ 479.062875][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1176'. [ 479.096697][ T8724] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 479.154596][ T8725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.338401][ T4806] usb 7-1: USB disconnect, device number 4 [ 479.430859][ T8740] loop2: detected capacity change from 0 to 128 [ 479.463715][ T8730] can: request_module (can-proto-0) failed. [ 479.616700][ T8730] batman_adv: batadv0: Adding interface: dummy0 [ 479.638812][ T8730] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.722885][ T8730] batman_adv: batadv0: Interface activated: dummy0 [ 479.770312][ T8738] batadv0: mtu less than device minimum [ 479.814515][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.827357][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.840406][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.853146][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.866093][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.878850][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.891487][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.904247][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.917096][ T8738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.278906][ T8754] device ip6tnl1 entered promiscuous mode [ 480.841457][ T8767] loop2: detected capacity change from 0 to 1024 [ 480.953618][ T5773] block nbd6: Attempted send on invalid socket [ 480.960879][ T5773] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.982800][ T8769] efs: cannot read volume header [ 481.091233][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.165856][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.292331][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.321218][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.349601][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.362917][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 481.411992][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.479203][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.511771][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.556283][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.564565][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.603592][ T8784] netlink: 'syz.3.1190': attribute type 21 has an invalid length. [ 481.626477][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 481.635255][ T8779] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.672582][ T8784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1190'. [ 481.684077][ T8779] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.702294][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.720117][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.732764][ T8784] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 481.770008][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.778056][ T23] usb 7-1: config index 0 descriptor too short (expected 13362, got 27) [ 481.789874][ T23] usb 7-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 481.797590][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.823160][ T23] usb 7-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 481.856699][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.874419][ T8773] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.916905][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.924273][ T8767] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.005137][ T8788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.055685][ T23] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 482.077174][ T23] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 482.106839][ T150] block nbd3: Attempted send on invalid socket [ 482.113137][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 482.125306][ T8792] efs: cannot read volume header [ 482.130893][ T23] usb 7-1: Product: syz [ 482.135099][ T23] usb 7-1: Manufacturer: syz [ 482.139954][ T23] usb 7-1: SerialNumber: syz [ 482.475519][ T1111] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 482.497273][ T23] usb 7-1: USB disconnect, device number 5 [ 482.725543][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 482.762756][ T8807] loop4: detected capacity change from 0 to 128 [ 482.845793][ T1111] usb 4-1: config index 0 descriptor too short (expected 13362, got 27) [ 482.873962][ T1111] usb 4-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 482.946994][ T1111] usb 4-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 483.036934][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1197'. [ 483.186344][ T1111] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 483.242529][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 483.296909][ T1111] usb 4-1: Product: syz [ 483.301243][ T1111] usb 4-1: Manufacturer: syz [ 483.564332][ T1111] usb 4-1: SerialNumber: syz [ 483.668577][ T8827] netlink: 'syz.2.1203': attribute type 21 has an invalid length. [ 483.721060][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1203'. [ 483.783917][ T8827] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 483.908590][ T1111] usb 4-1: USB disconnect, device number 24 [ 484.379120][ T8846] device syzkaller0 entered promiscuous mode [ 484.750045][ T8856] loop2: detected capacity change from 0 to 128 [ 485.702375][ T5773] block nbd3: Attempted send on invalid socket [ 485.709310][ T5773] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.722494][ T8883] efs: cannot read volume header [ 486.114856][ T150] block nbd4: Attempted send on invalid socket [ 486.121349][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 486.151727][ T8893] efs: cannot read volume header [ 486.195541][ T4232] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 486.455598][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 486.575892][ T4232] usb 4-1: config index 0 descriptor too short (expected 13362, got 27) [ 486.585444][ T23] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 486.597241][ T8905] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 486.625774][ T4232] usb 4-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 486.649363][ T4232] usb 4-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 486.825662][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 486.845976][ T4232] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 486.865509][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 486.892377][ T4232] usb 4-1: Product: syz [ 486.908008][ T4232] usb 4-1: Manufacturer: syz [ 486.922266][ T4232] usb 4-1: SerialNumber: syz [ 486.966222][ T23] usb 5-1: config 0 has no interfaces? [ 487.145920][ T23] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 487.165738][ T23] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 487.174108][ T23] usb 5-1: Product: syz [ 487.219565][ T4232] usb 4-1: USB disconnect, device number 25 [ 487.257752][ T8924] device syzkaller1 entered promiscuous mode [ 487.283169][ T23] usb 5-1: Manufacturer: syz [ 487.295804][ T23] usb 5-1: SerialNumber: syz [ 487.302047][ T8924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 487.366144][ T23] usb 5-1: config 0 descriptor?? [ 487.642243][ T1325] usb 5-1: USB disconnect, device number 25 [ 488.032817][ T8946] device syzkaller0 entered promiscuous mode [ 489.810801][ T8993] device syzkaller0 entered promiscuous mode [ 489.887767][ T150] block nbd4: Attempted send on invalid socket [ 489.894084][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 489.919866][ T8990] efs: cannot read volume header [ 490.425522][ T1325] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 490.665460][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 490.739494][ T9029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.785774][ T1325] usb 5-1: config 0 has no interfaces? [ 490.979410][ T1325] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.999277][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 491.038552][ T1325] usb 5-1: Product: syz [ 491.055032][ T1325] usb 5-1: Manufacturer: syz [ 491.066796][ T1325] usb 5-1: SerialNumber: syz [ 491.093561][ T1325] usb 5-1: config 0 descriptor?? [ 491.109611][ T9039] device syzkaller0 entered promiscuous mode [ 491.855995][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.965553][ T21] usb 5-1: USB disconnect, device number 26 [ 494.588295][ T9052] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 495.028204][ T9052] bond3: (slave gretap1): making interface the new active one [ 495.142412][ T9052] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 495.192722][ T9052] syz.3.1266 (9052) used greatest stack depth: 20208 bytes left [ 495.474102][ T9090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.594502][ T9095] device syzkaller0 entered promiscuous mode [ 495.637457][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.644761][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.755959][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.763861][ T9098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.772253][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.780179][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.787888][ T9104] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 495.832833][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 495.966436][ T9098] device bridge0 entered promiscuous mode [ 496.079944][ T9108] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 496.110573][ T9108] (unnamed net_device) (uninitialized): peer notification delay (49189) is not a multiple of miimon (100), value rounded to 49100 ms [ 500.617148][ T9139] tipc: Invalid UDP bearer configuration [ 500.617193][ T9139] tipc: Enabling of bearer rejected, failed to enable media [ 501.079910][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 501.106249][ T9162] 8021q: VLANs not supported on vxcan0 [ 501.140671][ T9160] device syzkaller0 entered promiscuous mode [ 501.324518][ T9169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.462511][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.522059][ T9183] netlink: 'syz.3.1295': attribute type 21 has an invalid length. [ 501.562107][ T9183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1295'. [ 501.574554][ T9183] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 501.751630][ T9189] device veth0_macvtap left promiscuous mode [ 502.916308][ T9211] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1304'. [ 502.941539][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'. [ 503.282994][ T9226] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 504.022195][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1315'. [ 504.052112][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1315'. [ 504.379514][ T9279] netlink: 'syz.0.1321': attribute type 21 has an invalid length. [ 504.486537][ T9279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1321'. [ 504.637594][ T9279] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 506.012092][ T9334] netlink: 'syz.3.1336': attribute type 21 has an invalid length. [ 506.044053][ T9334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1336'. [ 506.098282][ T9334] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 509.236092][ T150] block nbd3: Attempted send on invalid socket [ 509.242367][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 509.264443][ T9357] efs: cannot read volume header [ 509.755615][ T21] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 510.005619][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 510.145652][ T21] usb 4-1: config 0 has no interfaces? [ 510.196205][ T9394] netlink: 'syz.2.1350': attribute type 21 has an invalid length. [ 510.365555][ T21] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 510.694001][ T9394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1350'. [ 510.700455][ T21] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 510.711849][ T21] usb 4-1: Product: syz [ 510.716309][ T21] usb 4-1: Manufacturer: syz [ 510.721043][ T21] usb 4-1: SerialNumber: syz [ 510.737581][ T21] usb 4-1: config 0 descriptor?? [ 510.860118][ T9394] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 511.012920][ T4227] usb 4-1: USB disconnect, device number 26 [ 511.137042][ T9404] device syzkaller0 entered promiscuous mode [ 511.926860][ T5773] block nbd6: Attempted send on invalid socket [ 511.933798][ T5773] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 511.946461][ T9421] efs: cannot read volume header [ 512.008534][ T9431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 512.385586][ T4227] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 512.622315][ T9445] tipc: Enabling of bearer rejected, failed to enable media [ 512.645827][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.665472][ T4227] usb 7-1: Using ep0 maxpacket: 32 [ 512.785590][ T4227] usb 7-1: config index 0 descriptor too short (expected 13362, got 27) [ 512.802210][ T4227] usb 7-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 512.906617][ T4227] usb 7-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 513.125799][ T4227] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 513.139648][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 513.213000][ T4227] usb 7-1: Product: syz [ 513.232929][ T4227] usb 7-1: Manufacturer: syz [ 513.253355][ T4227] usb 7-1: SerialNumber: syz [ 513.433565][ T9468] loop3: detected capacity change from 0 to 1024 [ 513.496209][ T3853] device veth0_macvtap entered promiscuous mode [ 513.592998][ T4227] usb 7-1: USB disconnect, device number 6 [ 513.641574][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 513.692064][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 513.793447][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 513.853644][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 513.906675][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 513.944555][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 513.987921][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.051438][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.098003][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.108361][ T9484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.138217][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.175896][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.205920][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.249604][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.271843][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.308354][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.338570][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.370843][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.433596][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.522411][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.560363][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.597805][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 514.643840][ T9476] hfsplus: request for non-existent node 33423360 in B*Tree [ 516.391365][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 516.400497][ T9520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1379'. [ 516.410390][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 516.946665][ T9520] team0: Port device team_slave_0 removed [ 516.966557][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 517.221573][ T9527] device syzkaller1 entered promiscuous mode [ 517.350319][ T150] block nbd6: Attempted send on invalid socket [ 517.356987][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.371278][ T9546] efs: cannot read volume header [ 518.273400][ T9607] loop3: detected capacity change from 0 to 1024 [ 518.597938][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 518.661450][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 518.689756][ T9622] hfsplus: request for non-existent node 33423360 in B*Tree [ 518.765624][ T9622] hfsplus: request for non-existent node 33423360 in B*Tree [ 518.890887][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 518.905162][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 518.978151][ T9622] hfsplus: request for non-existent node 33423360 in B*Tree [ 519.290242][ T9622] hfsplus: request for non-existent node 33423360 in B*Tree [ 520.163762][ T9656] netlink: 'syz.6.1400': attribute type 3 has an invalid length. [ 520.348643][ T9661] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 520.574269][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 520.920909][ T9678] netlink: 'syz.4.1405': attribute type 21 has an invalid length. [ 520.929650][ T9678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1405'. [ 520.940571][ T9678] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 523.057318][ T9704] loop2: detected capacity change from 0 to 1024 [ 523.114777][ T9656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.203546][ T9704] hfsplus: request for non-existent node 33423360 in B*Tree [ 523.294291][ T9704] hfsplus: request for non-existent node 33423360 in B*Tree [ 523.414915][ T9704] hfsplus: request for non-existent node 33423360 in B*Tree [ 523.497736][ T9704] hfsplus: request for non-existent node 33423360 in B*Tree [ 523.691260][ T9717] ------------[ cut here ]------------ [ 523.697580][ T9717] kernel BUG at net/netfilter/nf_conntrack_core.c:570! [ 523.704518][ T9717] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 523.710807][ T9717] CPU: 1 PID: 9717 Comm: syz.0.1414 Not tainted syzkaller #0 [ 523.718221][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.728405][ T9717] RIP: 0010:__nf_conntrack_confirm+0x1186/0x1190 [ 523.734881][ T9717] Code: e9 97 fc ff ff e8 ca f5 56 f9 48 c7 c7 50 2a 85 8d 48 c7 c6 00 40 24 8b 48 89 ea e8 94 04 dd fb e9 0d f1 ff ff e8 aa f5 56 f9 <0f> 0b 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 48 89 [ 523.754657][ T9717] RSP: 0018:ffffc9000339f470 EFLAGS: 00010287 [ 523.760825][ T9717] RAX: ffffffff8821fcf6 RBX: ffffe8ffffc26240 RCX: 0000000000080000 [ 523.768834][ T9717] RDX: ffffc90003d03000 RSI: 000000000000032a RDI: 000000000000032b [ 523.776845][ T9717] RBP: ffff88805a9da000 R08: 0000000000000003 R09: 0000000000000004 [ 523.784847][ T9717] R10: dffffc0000000000 R11: fffff52000673e7c R12: 000000000003a594 [ 523.792852][ T9717] R13: ffff88805a9da0c0 R14: 0000000000000000 R15: 0000000000000000 [ 523.800855][ T9717] FS: 00007f21e4e526c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 523.809822][ T9717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.816535][ T9717] CR2: 000000110c2feaed CR3: 0000000067e6f000 CR4: 00000000003506e0 [ 523.824548][ T9717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.832548][ T9717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.840991][ T9717] Call Trace: [ 523.844366][ T9717] [ 523.847412][ T9717] nf_confirm+0x381/0x4b0 [ 523.851820][ T9717] ? ipv4_conntrack_local+0x200/0x200 [ 523.857221][ T9717] nf_hook_slow+0xb9/0x200 [ 523.861668][ T9717] ? NF_HOOK+0x390/0x390 [ 523.865947][ T9717] NF_HOOK+0x1f2/0x390 [ 523.870046][ T9717] ? NF_HOOK+0x390/0x390 [ 523.874332][ T9717] ? ip_local_deliver+0x180/0x180 [ 523.879481][ T9717] ? NF_HOOK+0x390/0x390 [ 523.883764][ T9717] ? ip_local_deliver+0x107/0x180 [ 523.888813][ T9717] ? ip_rcv_core+0xb30/0xb30 [ 523.893434][ T9717] NF_HOOK+0x303/0x390 [ 523.897528][ T9717] ? ip_rcv_core+0xb30/0xb30 [ 523.902145][ T9717] ? ip_local_deliver+0x180/0x180 [ 523.907204][ T9717] ? sock_wfree+0x18c/0x1f0 [ 523.911735][ T9717] ? ip_rcv_core+0xb30/0xb30 [ 523.916349][ T9717] ? ip_rcv_core+0x6a0/0xb30 [ 523.921060][ T9717] ? ip_local_deliver_finish+0x320/0x320 [ 523.926727][ T9717] ? ip_local_deliver_finish+0x320/0x320 [ 523.932385][ T9717] __netif_receive_skb+0xcc/0x290 [ 523.937457][ T9717] ? ktime_get_with_offset+0x2d7/0x320 [ 523.943046][ T9717] netif_receive_skb+0x19e/0x700 [ 523.948015][ T9717] ? __bpf_trace_softirq+0x10/0x10 [ 523.953157][ T9717] ? netif_receive_skb_core+0x210/0x210 [ 523.958730][ T9717] tun_rx_batched+0x606/0x760 [ 523.963437][ T9717] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 523.969475][ T9717] ? local_bh_enable+0x20/0x20 [ 523.974300][ T9717] ? __local_bh_enable_ip+0x136/0x1c0 [ 523.979703][ T9717] ? read_lock_is_recursive+0x10/0x10 [ 523.985111][ T9717] ? __local_bh_enable_ip+0x136/0x1c0 [ 523.990639][ T9717] ? _local_bh_enable+0xa0/0xa0 [ 523.995573][ T9717] ? skb_set_owner_w+0x213/0x340 [ 524.000639][ T9717] tun_get_user+0x25bf/0x3b40 [ 524.005354][ T9717] ? tun_ring_recv+0xc90/0xc90 [ 524.010157][ T9717] ? rcu_lock_release+0x5/0x20 [ 524.014963][ T9717] ? __lock_acquire+0x7b50/0x7b50 [ 524.020263][ T9717] tun_chr_write_iter+0x112/0x1e0 [ 524.025336][ T9717] vfs_write+0x748/0xd70 [ 524.030233][ T9717] ? file_end_write+0x250/0x250 [ 524.035124][ T9717] ? __fget_files+0x402/0x470 [ 524.039873][ T9717] ? __fdget_pos+0x1e2/0x370 [ 524.044516][ T9717] ? ksys_write+0x70/0x260 [ 524.048964][ T9717] ksys_write+0x153/0x260 [ 524.053334][ T9717] ? __ia32_sys_read+0x80/0x80 [ 524.058124][ T9717] ? lockdep_hardirqs_on+0x94/0x140 [ 524.063371][ T9717] do_syscall_64+0x4c/0xa0 [ 524.067822][ T9717] ? clear_bhb_loop+0x30/0x80 [ 524.072642][ T9717] ? clear_bhb_loop+0x30/0x80 [ 524.077350][ T9717] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.083282][ T9717] RIP: 0033:0x7f21e6bb968e [ 524.087724][ T9717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 524.107362][ T9717] RSP: 002b:00007f21e4e51fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.115821][ T9717] RAX: ffffffffffffffda RBX: 00007f21e4e526c0 RCX: 00007f21e6bb968e [ 524.123824][ T9717] RDX: 0000000000000046 RSI: 0000200000000340 RDI: 00000000000000c8 [ 524.132264][ T9717] RBP: 00007f21e6c8ee6f R08: 0000000000000000 R09: 0000000000000000 [ 524.140269][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.148455][ T9717] R13: 00007f21e6e72038 R14: 00007f21e6e71fa0 R15: 00007ffe3c080598 [ 524.156636][ T9717] [ 524.159689][ T9717] Modules linked in: [ 524.163765][ T9717] ---[ end trace fce4297a9e6aeb0e ]--- [ 524.169272][ T9717] RIP: 0010:__nf_conntrack_confirm+0x1186/0x1190 [ 524.175874][ T9717] Code: e9 97 fc ff ff e8 ca f5 56 f9 48 c7 c7 50 2a 85 8d 48 c7 c6 00 40 24 8b 48 89 ea e8 94 04 dd fb e9 0d f1 ff ff e8 aa f5 56 f9 <0f> 0b 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 48 89 [ 524.195712][ T9717] RSP: 0018:ffffc9000339f470 EFLAGS: 00010287 [ 524.201817][ T9717] RAX: ffffffff8821fcf6 RBX: ffffe8ffffc26240 RCX: 0000000000080000 [ 524.209852][ T9717] RDX: ffffc90003d03000 RSI: 000000000000032a RDI: 000000000000032b [ 524.217883][ T9717] RBP: ffff88805a9da000 R08: 0000000000000003 R09: 0000000000000004 [ 524.225907][ T9717] R10: dffffc0000000000 R11: fffff52000673e7c R12: 000000000003a594 [ 524.233909][ T9717] R13: ffff88805a9da0c0 R14: 0000000000000000 R15: 0000000000000000 [ 524.241938][ T9717] FS: 00007f21e4e526c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 524.250926][ T9717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.257558][ T9717] CR2: 000000110c2feaed CR3: 0000000067e6f000 CR4: 00000000003506e0 [ 524.265586][ T9717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 524.273668][ T9717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 524.281714][ T9717] Kernel panic - not syncing: Fatal exception in interrupt [ 524.289257][ T9717] Kernel Offset: disabled [ 524.293594][ T9717] Rebooting in 86400 seconds..