last executing test programs: 17m39.326481725s ago: executing program 3 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 17m39.083800603s ago: executing program 3 (id=263): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000380)={0x1, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314241}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x7, 0x20002, 0xffbffffb}, {0x4f4ef}, {0x4, 0x7, 0x7fe}, 0x1, 0x100, 0x0, 0xd610, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}) 17m29.522509708s ago: executing program 3 (id=294): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004840, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 17m28.368599825s ago: executing program 3 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00009e3000/0x3000)=nil, 0x3000, 0xb635773f07ebbeee, 0x10, 0xffffffffffffffff, 0x9d30e000) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) 17m26.818056294s ago: executing program 3 (id=304): syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp6\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b9", 0x45c}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x624, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x11c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x10016}, [@FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 17m24.888992396s ago: executing program 3 (id=305): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000380)={0x1, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314241}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x7, 0x20002, 0xffbffffb}, {0x4f4ef}, {0x4, 0x7, 0x7fe}, 0x1, 0x100, 0x0, 0xd610, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}) 17m9.626644793s ago: executing program 32 (id=305): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000380)={0x1, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314241}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x7, 0x20002, 0xffbffffb}, {0x4f4ef}, {0x4, 0x7, 0x7fe}, 0x1, 0x100, 0x0, 0xd610, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}) 16m13.065317279s ago: executing program 0 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000072009fb329bd7000ffdbdf2507000000"], 0x18}, 0x1, 0x0, 0x0, 0x28004810}, 0x20041040) 16m12.280569964s ago: executing program 0 (id=457): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 16m1.732484501s ago: executing program 0 (id=478): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, 0x0, &(0x7f0000000740)}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x773, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) close(r0) 15m58.742350456s ago: executing program 0 (id=487): fanotify_init(0x0, 0xc0d9e5268d9d54da) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m56.248564646s ago: executing program 0 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) fstat(r0, &(0x7f0000000380)) 15m55.968477755s ago: executing program 0 (id=498): r0 = eventfd2(0x3, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r0, 0x6, 0x0, r0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/15, 0xf) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) read$alg(r5, &(0x7f0000000080)=""/47, 0x2f) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) syz_open_dev$media(&(0x7f0000000140), 0x200, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) open(&(0x7f0000000040)='./file0\x00', 0x20400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000140)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) 15m40.676577683s ago: executing program 33 (id=498): r0 = eventfd2(0x3, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r0, 0x6, 0x0, r0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/15, 0xf) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) read$alg(r5, &(0x7f0000000080)=""/47, 0x2f) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) syz_open_dev$media(&(0x7f0000000140), 0x200, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) open(&(0x7f0000000040)='./file0\x00', 0x20400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000140)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) 13m10.571334335s ago: executing program 4 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x4, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_LK(r2, 0x0, 0x0) 13m10.252495065s ago: executing program 4 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5, 0x3, 0x9, 0x9}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') pread64(r4, 0x0, 0x0, 0x800000000000000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x350c0000, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x3, 0x0, 0x4, 0x8, 0x1, 0xffffffffffffffe0, 0x10}, @jmp={0x5, 0x0, 0xd, 0xb, 0xb, 0xfffffffffffffff4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000017c0)=[r0, r3], &(0x7f0000001800)=[{0x1, 0x3, 0x8, 0x7}, {0x1, 0x3, 0xe, 0xb}, {0x2, 0x2, 0x7, 0x6}, {0x0, 0x5, 0x4, 0x4}, {0x1, 0x1, 0x2, 0x1}, {0x2, 0x3, 0x1, 0x1}], 0x10, 0x3ed}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) fchmodat(r8, &(0x7f0000000300)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(0x0, r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{r3}, &(0x7f0000000340), &(0x7f0000001940)=r5}, 0x20) 13m6.508321315s ago: executing program 4 (id=855): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x100, @empty}, {0x2, 0x4, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 13m6.150715677s ago: executing program 4 (id=856): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x1, 0x1, 0x1}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x218888, &(0x7f0000000180)) 13m5.857048866s ago: executing program 4 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 13m4.551356897s ago: executing program 4 (id=864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800001401002dbd7000fedbdf25b6010100000000000000ed3921271c067539d19bfe6e704c921c2fe3e50f5f0e843f3576a371ae46055c16bd97ea53a6b23de7dc66f8cdb8566283469352df1bc98cb5b9949fe3488d75ba94629e1ff8a990018bebb73a286eed58f3ee710d1ab64af82b949234e14323cbb02658420b091a0630efa783f719c59414dc61fc956f01d0fba5d3533355a66f1415b3b44189d958c7b21c4f"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @local}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x3, 0x7fff, 0x2}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000180)={0x0, 0x5, 0x18, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000200"}) fcntl$dupfd(r6, 0x0, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) 12m47.353331406s ago: executing program 34 (id=864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800001401002dbd7000fedbdf25b6010100000000000000ed3921271c067539d19bfe6e704c921c2fe3e50f5f0e843f3576a371ae46055c16bd97ea53a6b23de7dc66f8cdb8566283469352df1bc98cb5b9949fe3488d75ba94629e1ff8a990018bebb73a286eed58f3ee710d1ab64af82b949234e14323cbb02658420b091a0630efa783f719c59414dc61fc956f01d0fba5d3533355a66f1415b3b44189d958c7b21c4f"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @local}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x3, 0x7fff, 0x2}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000180)={0x0, 0x5, 0x18, 0x6, 0x200, &(0x7f0000000880)="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"}) fcntl$dupfd(r6, 0x0, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) 5m48.508543668s ago: executing program 6 (id=2005): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a000100"], 0x50}}, 0x4000000) 5m45.746469156s ago: executing program 6 (id=2014): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r4, &(0x7f0000000080)=""/179, 0xb3) getdents64(r4, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x101, 0x1}}]}) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE2(r5, 0x0, 0x119) 5m42.580245667s ago: executing program 7 (id=2019): epoll_create(0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000080)) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r7, 0x2f, 0x10, 0x4, @void, @value=r7, @void, @void, r8}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5}, 0x8) r9 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) dup(r5) 5m39.902992213s ago: executing program 7 (id=2022): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000007c", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r3, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000006c0), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0xee, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 5m35.620549009s ago: executing program 6 (id=2027): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @private0}, 0x0, 0x800) sendmsg$inet6(r0, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffe11, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 5m35.496530943s ago: executing program 7 (id=2029): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000000)={0x9, 0xa9d0000, 0xffff, {0xa, 0x9}, 0x9, 0x10001}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 5m33.562259425s ago: executing program 7 (id=2030): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x4, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) poll(&(0x7f0000000000)=[{r2, 0x400}], 0x1, 0x100) 5m31.770419752s ago: executing program 7 (id=2033): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 5m31.568505609s ago: executing program 6 (id=2035): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x30100, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 5m29.776661806s ago: executing program 7 (id=2038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4206, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m28.976639341s ago: executing program 6 (id=2040): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000000)={0x9, 0xa9d0000, 0xffff, {0xa, 0x9}, 0x9, 0x10001}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) listen(r7, 0xda90) accept4(r7, 0x0, 0x0, 0x0) 5m27.950678404s ago: executing program 6 (id=2041): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), 0x0) io_uring_setup(0x30aa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x208000, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000200)='immediate\x00', 0x40, 0x100, &(0x7f0000000340)={0x7ff, 0x101, 0x36e, 0xcb4}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d00", @ANYRESDEC=r0], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000030601040000000000000000020100070000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m14.549039072s ago: executing program 35 (id=2038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4206, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m12.535403966s ago: executing program 36 (id=2041): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), 0x0) io_uring_setup(0x30aa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x208000, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000200)='immediate\x00', 0x40, 0x100, &(0x7f0000000340)={0x7ff, 0x101, 0x36e, 0xcb4}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d00", @ANYRESDEC=r0], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000030601040000000000000000020100070000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11.24831171s ago: executing program 9 (id=3068): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000200)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000500)="bf48206a9407cb43093c0ec4efb853261772dac5515c0797911dbe34eb3b42e1293a577e86f97f52c5d2f8164809a7dd1262fb83e369dbc5ce512fc83ca2bacca70d2de38705b7a4ce41a6bf7a33d44cf5560246ac8e8b7dafbea8a772c414e52811a79ffc428759d6a2a82fc0a395a87c28842221d7ec3ca447c35fe9add6c4bf65c5388c7319543fbccecb2328bc88a554461612fcc8736d030bc4bb3700044612e7721514f7f68ca6a4eb0b9abe", 0xaf}, {&(0x7f00000005c0)="a78ac252dc38c1c6ddbc6f76a02abc87ce37cb46d1fa6b24ace86e0dc5634d03b397f50b56559e5dc15f72861c525823497bbaed94b4e652624926", 0x3b}, {&(0x7f0000000600)="bdef0013047c134121c929473baad2a91bf16dfd3f42772da6499377964ee1895f53d4680d87a76d4ab9dc7ed6a7a08ac80f06f2fff10d2cd89ffeaf37bba2a37bb963b9bf580df93c5879a92faf11a390", 0x51}, {&(0x7f00000006c0)="892cec11f986e39bdd4af509894e9eea1a5b66922ece0d9a4f9f23054777cc107a971e7c40144002c2b1ee3b24230400950c49893ebb7ee2850f60ec84ca332a1fdbec7c4a99469fc20d0bb1691c701d752165b1f59a032f46fcc5d7dd12a64e825d93dfd35702845ec3cbe39cf51a016a4442240be9d7bda9888c35df81ff9ce5657ef960525ebd0dc219e8380ec22ecb24dd0a4675adaf7147f51cfc4349ecb1aa19d4189c2f6cb6ffc26f8f53c66c8a856b1681dcaada", 0xb8}], 0x5) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000980)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20008841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100090e0000002cbd7040fcdbdf2505000600000000000a004e2300000007ff010000000000000000000000000001010000800000004005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000004000000020013000200000029bd700006350000"], 0x70}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x9, @empty, 0xffffff03}, @in={0x2, 0x4e20, @local}], 0x2c) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000880)="d7636b1af0c4b8980ebbe26615cba7125b876e9104883f5276857441e1be28972b8cf85f306e1d32e2e626daaa151e06d6ecbde5c1faabda0abd40d1bb52a0465ecfb196eb608b944a78a6d81551d675805f64844c17ef17c85201f1f41fe94301a6575a6a64a94526d78249eed0011b68905bd41f514903bf9e39302b3818646ac87e95b105af33821a3e94d2b4015fbe6747010ceac585bb6279541f8578430e1e1deba91f4480dc53477c04eae8a647344ab248bdcbd22567ebeb00"/199, 0xc7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 11.151796243s ago: executing program 8 (id=3069): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x9, 0xa9d0000, 0xffff, {0xa, 0x9}, 0x9, 0x10001}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) 10.996535098s ago: executing program 2 (id=3070): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 9.3761032s ago: executing program 9 (id=3071): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x3ff, 0x4) 9.313292862s ago: executing program 2 (id=3072): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b000000000000000000000004000300"/45], 0xd8}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 9.231233825s ago: executing program 8 (id=3074): r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 8.554218637s ago: executing program 8 (id=3075): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0x80000001, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 8.272437985s ago: executing program 9 (id=3076): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffff33}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010428bd70000300000000000000", @ANYRES32=r1, @ANYBLOB="80000000051c00002c0012800e00010069703665727370616e0000001800028004001200", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) 8.100827411s ago: executing program 5 (id=3077): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 7.82708988s ago: executing program 5 (id=3078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r7, 0x8, 0xfffffffc, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810) 7.713725513s ago: executing program 1 (id=3079): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x6d, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x37, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [], "fafb17c103001c"}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x128, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0x1b8}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 7.667424485s ago: executing program 9 (id=3080): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xef7, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x103}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}, {&(0x7f0000000f00)="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", 0x24b}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc6191", 0x1d}], 0x3}, 0x0) 6.531134751s ago: executing program 2 (id=3081): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4) 6.446867564s ago: executing program 1 (id=3082): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x221}}, 0x20}, 0x1, 0x0, 0x0, 0x28008000}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 6.337213227s ago: executing program 5 (id=3083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 6.236554551s ago: executing program 8 (id=3084): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x9, 0xa9d0000, 0xffff, {0xa, 0x9}, 0x9, 0x10001}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) 6.118086624s ago: executing program 9 (id=3085): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x30100, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 6.023111437s ago: executing program 1 (id=3086): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$rfkill(r3, 0x0, 0x0) write$rfkill(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="fa87c7e72022c7b864b07519029431b0f73faf3562d4199e9f31c1dd1202787cdc0dad572930535fe281583dce41f94472697f744b2aec18a02dafedcfe93533ddc8f52bf553629fad5e0e873ea442348753ce7f0b8a58a6fa", 0x59}, {&(0x7f0000000340)="0a2b131fed7c3b0ace259fcc73c7401df65ac597b979f6cc76064e5a3b452de24ce402ad11a56e85c9fe9f3c2e305933c9adbcc8576d051634f516897eb95943656f8b840b1fb922463f63432934f3dab5c65c44056b72e7ff918b9ca85191d8d7e22c1be0d7d93d7856a47685f073eaf6b24c19e5e73fdedd74dda9d44152b5df29f2349596ce5a365d9fa9fada901203e43cac955d56a9f4493c207d27df2a9d69485639b494a07538110dba4426e4b42597c59909d96869e7d77010ce3d01c737bb4712db7d", 0xc7}, {&(0x7f0000000440)="ae2917d5a4b014842a61845c01908087c19287ad5d95c4053c4acbbd1a55627bf84a05cf9d6eed5627", 0x29}, {&(0x7f0000000640)="3fd86240836c56786709aa10b4c27b60ae1dc382c772f8c8004beffbfbff60aee2e3c6af39836c9fc4dbdda40a19e1f2635d7af399581a0f70ddefce87466f1440e2c21a8773ac4f3b2d5c8bfa9451ed3be6e55b68033085556f00db59648336586bf01013a839293a8dce06f9698af2761f685737637ac4282fbef83a45127bc95758c0f7cd74cd77275225e4ff440dd513073746f42cb68a3c32e14c2e6903b2cff77d7a22d28977b8ef1650cbaf8ee0c82770aea9896ef6b2ffba68e7757498d5a8324de270c9a29579bb0443f50f6c84bdd789e89c28a3ff0f5a3cafff994cd1ff8ebcbe46589b216d", 0xeb}, {&(0x7f0000000740)="a92a26692895c48e5670e19cc646f85a75772f22ae06b576502dcae8deef2c85890ba3a489d85a850088295e495a45179795ff4e4e8560da757145dd589c53242fb40dc5641fec08c566e437445c185643ce0a048a29e0694250424da6e4f97c9ad2b4ee41d1a2c517", 0x69}, {&(0x7f00000007c0)="2b0a051fa993351ed5723dcb3ab0688eee58946e525bf73863d753c53084ff25887ff03601f9c579a49c6445c7a92bdcd09da9cbdb79699386f151003e7b33efaa92e9157902eb9c86f09f37922516c03d010650b043161320b26dfd8750d3fd", 0x60}], 0x6}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000fc0)="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", 0x123}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) 4.168047616s ago: executing program 8 (id=3087): syz_usb_connect(0x7, 0x247, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xbc, 0xc, 0xda, 0x40, 0x403, 0xff3e, 0xfcf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x235, 0x2, 0x0, 0xd, 0x10, 0x9, "", [{{0x9, 0x4, 0xd6, 0x8, 0x8, 0x1f, 0x43, 0xa4, 0x2, [@generic={0x3a, 0x2, "ad41b209966e31eff732dd6e5c7e994cbaf51af5393b4321395aa8e2208cd7abcb268a8aa9187cba9ce18157c5702f14ad9855a871c4ca95"}, @hid_hid={0x9, 0x21, 0x8, 0xa3, 0x1, {0x22, 0xad2}}], [{{0x9, 0x5, 0xd, 0x4, 0x400, 0x6, 0xe7}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x5, 0x9, 0x8, [@generic={0x22, 0x21, "db0b8148cc2a7cab97265147e3e6a35843ec16df2c884628c76b121853aea367"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x3}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xff, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x2, 0x7, 0x4}}, {{0x9, 0x5, 0x6, 0x18, 0x10, 0xda, 0xa9, 0xfd}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0xef, 0x37, 0x7, [@generic={0xd3, 0xf, "7b7a016f1e308a73180f66e51cd7417066153f6095369191b26e3922d93c1977a5b07ba174fec56976ef5858cd67face9a77da658c74836d5cedaf6d045e19418667191481042e01c05cdd79cb5ee3b7f493a73210b740aaa0662160ff5ce9ee2bfac21c9be25f252b03ea2cff7c270325870393255decd97bb499b273355b1b1538ab19ffb14967a85b95f351e2ed8abea188e520ace90649d8b214edc2c316fd7e403a8ba10daef0daf1ff7b11bb53192164076740b1a4d50f992854a37e48f324a0408851e7e0995cc3f185943a37bf"}]}}, {{0x9, 0x5, 0x70c404166ac22d0e, 0x0, 0x3ff, 0xf, 0x5, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x89, 0x1, 0x1, [@generic={0x33, 0x10, "d319e198ac0b8d31c6f6f957e8ee996cf1a75825566e01bbbf06035f966366bc3f164f5dd15ce3562191dc261620b4be90"}]}}]}}, {{0x9, 0x4, 0x34, 0x80, 0x0, 0xd7, 0x6f, 0xbb, 0x7, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc8, 0x2, 0xe, 0xc, "d159"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x81, 0x6, 0x1, 0xf8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6a, 0x2c, "b131bcf688"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xe5, 0x1, 0x1, 0x0, "b91e8360"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x1, 0x1, 0x7, "785dce5a"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x4}]}, @uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xffff, 0x8000, 0x4b}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x63, 0x40, 0x9, 0x5}, @as_header={0x7, 0x24, 0x1, 0x71, 0x38, 0x4}]}]}}]}}]}}, 0x0) r0 = creat(0x0, 0x78) write$binfmt_elf32(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c460103070801000000000000000200030001000000a8020000380000000003000009000000050020"], 0x43a) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x14, r6, 0x201, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) 4.143302847s ago: executing program 5 (id=3088): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.964566553s ago: executing program 9 (id=3089): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) close(0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x1}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r8, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008194}, 0x8840) 3.906301805s ago: executing program 2 (id=3090): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 3.878135986s ago: executing program 5 (id=3091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xf, 0x0, &(0x7f0000000000)="e42a8ab1e75f031b9f9ee8e401eb45", 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000005c0)={r6, 0x58, &(0x7f0000000540)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x3d8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfffffeff}]}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000740)={r7, @in6={{0xa, 0x4e24, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff1}}, 0xd, 0x1, 0x4, 0xe78, 0x1, 0x7, 0xfc}, &(0x7f0000000800)=0x9c) socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x20004801}, {&(0x7f0000000080)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="84f76b54f800da27e3910b01ea9aaa2bc0eb2bbe2f197724e3e2f8c71da96678cd9bf7fe7fb7c02a6e786243d499b403ab3afb67ebe9888cec0d00cea30bb71bf7a03d2d798165d035bf15a60ced86412a72679710459d606e88b883e1a3da8c46ea89dc653cfe80398fefe14acbbe42498a6802627c3c3b3f2f1d3f59e2dfd974b643d8ef70ebcc0f3a79e31c011ea563a876e06505dfac28d51fe6387c2a4bafa1fb9f1df7f8104be671e3969a6d33d8d2b484ab299e2180a42a95019ac73f32563a437ab008b51311353924c0e4fb5bd0d705", 0xd4}], 0x1, 0x0, 0x0, 0xc880}], 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x32, 0x0, [{0x0, 0x2}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x6}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) 3.72790641s ago: executing program 1 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b000000000000000000000004000300"/45], 0xd8}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 2.891976367s ago: executing program 2 (id=3093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r7, 0x8, 0xfffffffc, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810) 1.872154619s ago: executing program 2 (id=3094): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xd, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0x80000001, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.85290301s ago: executing program 8 (id=3095): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xef7, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x103}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}, {&(0x7f0000000f00)="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", 0x24b}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc6191", 0x1d}], 0x3}, 0x0) 1.581247919s ago: executing program 5 (id=3096): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x221}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x28008000}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.142668753s ago: executing program 1 (id=3097): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x9, 0xa9d0000, 0xffff, {0xa, 0x9}, 0x9, 0x10001}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 678.534982][ T4321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.745730][ T4321] usb 8-1: config 0 descriptor?? [ 678.754345][ T4321] ldusb 8-1:0.55: Interrupt in endpoint not found [ 678.838514][T10505] autofs4:pid:10505:autofs_fill_super: called with bogus options [ 679.689149][ T4320] usb 8-1: USB disconnect, device number 4 [ 682.103335][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 682.164830][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 682.352823][ T26] audit: type=1326 audit(1778702403.080:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10526 comm="syz.2.1402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83879ce59 code=0x0 [ 684.098718][ T4321] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4321 comm: kworker/1:4) [ 684.277827][T10560] fuse: Unknown parameter 'user_i00000000000000000000' [ 684.472561][ T4320] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 685.402574][ T4320] usb 8-1: Using ep0 maxpacket: 8 [ 685.413401][ T4320] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 685.421936][ T4320] usb 8-1: config 0 has no interface number 0 [ 685.856612][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.863118][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.273992][ T4320] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 686.315155][ T4320] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 686.340747][ T4320] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 686.734473][ T4320] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 686.845130][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.896114][ T4320] usb 8-1: config 0 descriptor?? [ 686.924282][ T4320] ldusb 8-1:0.55: Interrupt in endpoint not found [ 688.333092][T10592] nfs4: Unknown parameter '&&}' [ 689.093618][T10595] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 689.265130][ T26] audit: type=1326 audit(1778702410.020:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e6819ce59 code=0x0 [ 690.275541][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1416'. [ 690.320525][ T8310] usb 8-1: USB disconnect, device number 5 [ 690.418176][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1416'. [ 690.696303][T10619] fuse: Unknown parameter 'user_i00000000000000000000' [ 690.925200][T10623] Can't find a SQUASHFS superblock on nullb0 [ 694.352678][ T4320] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 694.487869][ T26] audit: type=1326 audit(1778702415.230:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.6.1437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c1d9ce59 code=0x0 [ 694.662924][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 694.679938][ T4320] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 694.787122][ T4320] usb 3-1: config 0 has no interface number 0 [ 694.989290][ T4320] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 695.272611][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.298331][ T4320] usb 3-1: Product: syz [ 695.316891][ T4320] usb 3-1: Manufacturer: syz [ 695.319884][T10670] syz.5.1439[10670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 695.321528][ T4320] usb 3-1: SerialNumber: syz [ 695.373526][T10670] syz.5.1439[10670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 695.375639][ T4320] usb 3-1: config 0 descriptor?? [ 695.635787][ T4320] usb 3-1: USB disconnect, device number 8 [ 696.082940][ T4285] Bluetooth: hci0: command 0x0405 tx timeout [ 697.143372][T10684] Can't find a SQUASHFS superblock on nullb0 [ 698.306092][T10697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 698.376659][T10697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.397334][T10697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.420352][T10697] device bridge_slave_0 left promiscuous mode [ 698.438736][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.517974][T10697] device bridge_slave_1 left promiscuous mode [ 698.569178][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.582170][T10697] bond0: (slave bond_slave_0): Releasing backup interface [ 698.693344][ T26] audit: type=1326 audit(1778702419.450:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10709 comm="syz.5.1450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e6819ce59 code=0x0 [ 698.766587][T10697] bond0: (slave bond_slave_1): Releasing backup interface [ 699.190080][T10697] team0: Port device team_slave_0 removed [ 699.265121][T10697] team0: Port device team_slave_1 removed [ 699.300319][T10697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.405604][T10697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.510298][T10697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.565446][T10697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.771717][T10703] team0: Mode changed to "loadbalance" [ 700.059337][T10727] 9pnet_fd: Insufficient options for proto=fd [ 700.747754][T10741] Can't find a SQUASHFS superblock on nullb0 [ 702.373227][T10739] netlink: 'syz.2.1455': attribute type 11 has an invalid length. [ 704.692796][ T4357] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 704.839091][ T8310] kernel write not supported for file /bluetooth/6lowpan_control (pid: 8310 comm: kworker/1:2) [ 704.882595][ T4357] usb 6-1: Using ep0 maxpacket: 8 [ 704.890485][ T4357] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 704.939594][ T4357] usb 6-1: config 0 has no interface number 0 [ 704.981208][ T4357] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 705.015696][ T4357] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 705.058080][ T4357] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 705.107573][ T4357] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 705.147067][ T4357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.192772][ T4357] usb 6-1: config 0 descriptor?? [ 705.247600][ T4357] ldusb 6-1:0.55: Interrupt in endpoint not found [ 705.901378][ T8310] usb 6-1: USB disconnect, device number 6 [ 706.579121][T10787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 706.613338][T10787] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 706.643563][T10787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 706.661005][T10787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 706.733718][T10783] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 706.896850][T10799] Can't find a SQUASHFS superblock on nullb0 [ 708.662688][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 708.668896][ T4289] Bluetooth: hci5: command 0x0c1a tx timeout [ 708.669000][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 708.742591][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 709.877354][ T7837] kernel write not supported for file /bluetooth/6lowpan_control (pid: 7837 comm: kworker/0:0) [ 710.792661][ T7837] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 710.812709][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 710.912134][T10834] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 710.912394][T10834] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 710.914553][T10834] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.980185][ T7837] usb 8-1: Using ep0 maxpacket: 8 [ 710.982101][ T7837] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 710.982133][ T7837] usb 8-1: config 0 has no interface number 0 [ 710.982161][ T7837] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 710.982188][ T7837] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 710.982211][ T7837] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.982276][ T7837] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 710.982301][ T7837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.985019][ T7837] usb 8-1: config 0 descriptor?? [ 710.990179][ T7837] ldusb 8-1:0.55: Interrupt in endpoint not found [ 711.003100][T10834] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 711.120666][T10832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 711.304080][T10847] fuse: Bad value for 'fd' [ 711.871087][ T7837] kernel write not supported for file /bluetooth/6lowpan_control (pid: 7837 comm: kworker/0:0) [ 712.048866][T10857] Can't find a SQUASHFS superblock on nullb0 [ 712.892820][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 712.972653][T10805] Bluetooth: hci5: command 0x0c1a tx timeout [ 712.972689][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 713.052628][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 713.844388][ T4321] usb 8-1: USB disconnect, device number 6 [ 715.142581][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 715.994598][T10879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 716.023438][T10886] fuse: Unknown parameter '0xffffffffffffffff' [ 716.038376][T10879] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 716.044733][T10879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 716.050887][T10879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 716.200050][T10875] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 716.852613][ T7837] kernel write not supported for file /bluetooth/6lowpan_control (pid: 7837 comm: kworker/0:0) [ 717.152673][ T8310] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 717.205389][T10907] Can't find a SQUASHFS superblock on nullb0 [ 718.012591][T10805] Bluetooth: hci4: command 0x0c1a tx timeout [ 718.092580][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 718.098785][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 718.098897][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 718.853339][ T8310] usb 8-1: Using ep0 maxpacket: 8 [ 718.867252][ T8310] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 718.920136][ T8310] usb 8-1: config 0 has no interface number 0 [ 718.929553][ T8310] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 718.961961][ T8310] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 719.137744][ T8310] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 719.268987][ T8310] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 719.362107][ T8310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.448289][T10925] fuse: Unknown parameter '0x0000000000000003' [ 719.524350][ T8310] usb 8-1: config 0 descriptor?? [ 719.638309][ T8310] ldusb 8-1:0.55: Interrupt in endpoint not found [ 720.172599][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 721.133803][ T4899] usb 8-1: USB disconnect, device number 7 [ 721.208516][T10932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 721.238192][T10932] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 721.256097][T10932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 721.277919][T10932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 721.321116][T10931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 722.881878][ T4899] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4899 comm: kworker/1:7) [ 723.222712][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 723.292671][ T4279] Bluetooth: hci5: command 0x0c1a tx timeout [ 723.298994][T10805] Bluetooth: hci1: command 0x0c1a tx timeout [ 723.305535][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 724.686205][T10973] Can't find a SQUASHFS superblock on nullb0 [ 725.082252][T10975] fuse: Unknown parameter '0x0000000000000003' [ 725.245203][T10980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 725.301973][ T26] audit: type=1326 audit(1778702446.050:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.5.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e6819ce59 code=0x0 [ 725.337318][T10980] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 725.348936][T10980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 725.372696][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 725.387730][T10980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 725.419515][T10979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 726.262533][ T4899] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 727.131916][ T8310] kernel write not supported for file /bluetooth/6lowpan_control (pid: 8310 comm: kworker/1:2) [ 727.152788][ T4899] usb 8-1: Using ep0 maxpacket: 8 [ 727.159675][ T4899] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 727.189043][ T4899] usb 8-1: config 0 has no interface number 0 [ 727.209379][ T4899] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 727.227726][ T4899] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 727.292709][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 727.372660][T10805] Bluetooth: hci5: command 0x0c1a tx timeout [ 727.378929][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 727.452598][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 728.137747][ T4899] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 728.191589][ T4899] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 728.268611][ T4899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.314612][ T4899] usb 8-1: config 0 descriptor?? [ 728.369593][ T4899] usb 8-1: can't set config #0, error -71 [ 728.439485][ T4899] usb 8-1: USB disconnect, device number 8 [ 728.650592][T11022] Can't find a SQUASHFS superblock on nullb0 [ 729.532550][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 731.739059][T11025] fuse: Unknown parameter '0x0000000000000003' [ 732.189047][T11035] netlink: 'syz.7.1537': attribute type 10 has an invalid length. [ 733.033479][T11035] team0: Port device dummy0 added [ 733.044546][T11036] netlink: 'syz.7.1537': attribute type 10 has an invalid length. [ 733.286920][T11036] team0: Port device dummy0 removed [ 733.324881][T11036] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 733.516765][ T4899] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4899 comm: kworker/1:7) [ 733.789547][ T26] audit: type=1326 audit(1778702454.540:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.6.1540" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c1d9ce59 code=0x0 [ 734.032676][ T4899] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 734.943211][ T4899] usb 3-1: Using ep0 maxpacket: 8 [ 734.953664][ T4899] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 734.969262][ T4899] usb 3-1: config 0 has no interface number 0 [ 735.018375][ T4899] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 736.729875][ T4899] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 736.786657][ T4899] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 736.822326][T11062] Can't find a SQUASHFS superblock on nullb0 [ 736.841956][ T4899] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 736.851908][ T4899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.873332][ T4899] usb 3-1: config 0 descriptor?? [ 736.923149][ T4899] usb 3-1: can't set config #0, error -71 [ 736.944445][ T4899] usb 3-1: USB disconnect, device number 9 [ 736.967328][T11069] fuse: Unknown parameter '0x0000000000000003' [ 738.904007][ T4899] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4899 comm: kworker/1:7) [ 742.269633][ T26] audit: type=1326 audit(1778702463.020:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.1.1558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 743.519927][T11123] Can't find a SQUASHFS superblock on nullb0 [ 743.674032][ T7837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 745.433345][ T4321] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4321 comm: kworker/1:4) [ 745.442542][ T7837] usb 7-1: Using ep0 maxpacket: 8 [ 745.465146][ T7837] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 745.488393][ T7837] usb 7-1: config 0 has no interface number 0 [ 745.534310][ T7837] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 745.642512][ T7837] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 745.674391][ T7837] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 745.722950][ T7837] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 745.860186][T11139] autofs4:pid:11139:autofs_fill_super: called with bogus options [ 746.584831][ T7837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.661395][ T7837] usb 7-1: config 0 descriptor?? [ 746.697939][ T7837] usb 7-1: can't set config #0, error -71 [ 746.733196][ T7837] usb 7-1: USB disconnect, device number 3 [ 747.423556][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.429887][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.882123][ T26] audit: type=1326 audit(1778702469.630:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.6.1575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c1d9ce59 code=0x0 [ 748.992716][T11172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 749.042738][T11172] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 749.051835][T11172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 749.126205][T11172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 749.247542][T11177] Can't find a SQUASHFS superblock on nullb0 [ 749.303753][T11170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 749.320508][ T4321] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4321 comm: kworker/1:4) [ 749.682760][ T4357] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 749.742688][ T7837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 749.882718][ T4357] usb 8-1: Using ep0 maxpacket: 8 [ 749.891245][ T4357] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 749.928415][ T4357] usb 8-1: config 0 has no interface number 0 [ 749.934898][ T7837] usb 6-1: Using ep0 maxpacket: 8 [ 749.941769][ T7837] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 749.971501][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 749.982573][ T7837] usb 6-1: config 0 has no interface number 0 [ 749.988716][ T7837] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 750.004320][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 750.015513][ T7837] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 750.027184][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 750.040784][ T7837] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 750.056879][ T4357] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 750.066594][ T4357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.077672][ T7837] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 750.096567][ T4357] usb 8-1: config 0 descriptor?? [ 750.101898][ T7837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.263150][T11200] autofs4:pid:11200:autofs_fill_super: called with bogus options [ 750.834085][ T4357] ldusb 8-1:0.55: Interrupt in endpoint not found [ 750.969800][ T7837] usb 6-1: config 0 descriptor?? [ 750.974995][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 751.052590][T10805] Bluetooth: hci1: command 0x0c1a tx timeout [ 751.052618][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 751.076498][ T7837] ldusb 6-1:0.55: Interrupt in endpoint not found [ 751.132535][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 751.138308][T11208] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 751.964136][T11212] fuse: Bad value for 'fd' [ 752.350690][ T4320] usb 6-1: USB disconnect, device number 7 [ 752.837965][ T4321] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4321 comm: kworker/1:4) [ 753.212606][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 754.019583][ T4321] usb 8-1: USB disconnect, device number 9 [ 754.250982][T11247] Can't find a SQUASHFS superblock on nullb0 [ 754.876596][ T26] audit: type=1326 audit(1778702475.630:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1593" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 756.522888][T11262] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1601'. [ 757.855914][ T4363] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4363 comm: kworker/0:10) [ 758.171899][T11280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 758.287092][T11280] ªªªªª: renamed from virt_wifi0 [ 758.312765][ T4363] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 758.505532][ T4363] usb 3-1: Using ep0 maxpacket: 8 [ 758.536671][ T4363] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 758.580236][ T4363] usb 3-1: config 0 has no interface number 0 [ 758.605930][ T4363] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 758.617113][ T4320] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 758.801192][T11293] Can't find a SQUASHFS superblock on nullb0 [ 760.341288][ T4363] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 760.402571][ T4320] usb 6-1: Using ep0 maxpacket: 8 [ 760.413980][ T4320] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 760.465000][ T4320] usb 6-1: config 0 has no interface number 0 [ 760.486073][ T4363] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 760.512876][ T4320] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 760.526703][ T4363] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 760.536497][ T4320] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 760.550641][ T4363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.562572][ T4320] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 760.593178][ T4363] usb 3-1: config 0 descriptor?? [ 760.598399][ T4320] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 760.609029][ T4363] ldusb 3-1:0.55: Interrupt in endpoint not found [ 760.619766][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.660044][ T4320] usb 6-1: config 0 descriptor?? [ 760.685656][ T4320] ldusb 6-1:0.55: Interrupt in endpoint not found [ 760.872009][T11295] fuse: Bad value for 'fd' [ 761.101363][T11302] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 761.950399][ T4320] usb 3-1: USB disconnect, device number 10 [ 762.153225][ T4363] usb 6-1: USB disconnect, device number 8 [ 762.277215][ T26] audit: type=1326 audit(1778702483.030:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 762.313348][ T26] audit: type=1326 audit(1778702483.030:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 762.366332][ T26] audit: type=1326 audit(1778702483.100:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.6.1612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c1d9ce59 code=0x0 [ 762.969966][ T26] audit: type=1326 audit(1778702483.720:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 763.187660][ T26] audit: type=1326 audit(1778702483.720:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 763.264736][ T26] audit: type=1326 audit(1778702483.720:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 763.294954][ T26] audit: type=1326 audit(1778702483.720:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 763.324804][ T26] audit: type=1326 audit(1778702483.720:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 763.780110][T11319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 763.786166][ T4363] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4363 comm: kworker/0:10) [ 763.807173][ T26] audit: type=1326 audit(1778702483.720:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 763.842333][T11319] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 763.862837][T11319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 763.887128][ T26] audit: type=1326 audit(1778702483.720:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11306 comm="syz.7.1611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 764.655216][T11344] Can't find a SQUASHFS superblock on nullb0 [ 764.732851][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 765.372530][T10805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 765.372549][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout [ 765.852584][T10805] Bluetooth: hci5: command 0x0c1a tx timeout [ 765.932635][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 766.822555][ T4321] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 767.012517][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 767.028527][ T4321] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 767.119852][ T4321] usb 3-1: config 0 has no interface number 0 [ 767.126175][ T4321] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 767.137188][ T4321] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 767.148098][ T4321] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 767.309894][ T4321] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 767.355152][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.458193][ T4321] usb 3-1: config 0 descriptor?? [ 767.529321][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 767.529332][ T26] audit: type=1326 audit(1778702488.280:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 767.570178][ T4321] ldusb 3-1:0.55: Interrupt in endpoint not found [ 767.582608][ T26] audit: type=1326 audit(1778702488.280:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 767.943563][ T4320] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4320 comm: kworker/0:7) [ 768.014818][T11377] fuse: Bad value for 'fd' [ 768.128220][ T26] audit: type=1326 audit(1778702488.880:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 768.205198][ T26] audit: type=1326 audit(1778702488.880:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 768.229886][T11367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 768.241225][T11367] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 768.259369][T11367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 768.276682][T11367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 768.318409][ T26] audit: type=1326 audit(1778702488.880:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 768.517055][ T26] audit: type=1326 audit(1778702488.880:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 768.542161][ T26] audit: type=1326 audit(1778702488.880:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 768.566744][ T26] audit: type=1326 audit(1778702488.880:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 768.598415][ T4320] usb 3-1: USB disconnect, device number 11 [ 768.637304][ T26] audit: type=1326 audit(1778702488.880:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 768.646668][ T4509] tipc: Subscription rejected, illegal request [ 768.676953][ T26] audit: type=1326 audit(1778702488.880:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 769.772570][T10805] Bluetooth: hci4: command 0x0c1a tx timeout [ 770.057918][T11398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 770.126065][T11398] bond0: (slave dummy0): Releasing backup interface [ 770.266050][T10805] Bluetooth: hci5: command 0x0c1a tx timeout [ 770.340013][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 770.342618][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 770.352234][T11367] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 770.370389][T11398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 770.393190][T11398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 770.730205][T11398] device bridge_slave_0 left promiscuous mode [ 770.736743][T11398] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.816516][T11398] device bridge_slave_1 left promiscuous mode [ 770.832236][T11398] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.882319][T11398] bond0: (slave bond_slave_0): Releasing backup interface [ 770.912940][T11398] bond0: (slave bond_slave_1): Releasing backup interface [ 771.013227][T11398] team0: Port device team_slave_0 removed [ 771.056406][T11398] team0: Port device team_slave_1 removed [ 771.083880][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.092930][T11398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.103339][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.111098][T11398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.496569][T11418] Can't find a SQUASHFS superblock on nullb0 [ 772.412521][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 775.172807][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 775.172820][ T26] audit: type=1326 audit(1778702495.930:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.6.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c1d9ce59 code=0x0 [ 776.172182][T11441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 776.182642][T11441] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 776.188839][T11441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 776.195496][T11441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 776.319313][ T26] audit: type=1326 audit(1778702497.070:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.5.1643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7fc00000 [ 776.436889][T11457] fuse: Bad value for 'fd' [ 776.502799][ T4899] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 776.702896][ T4899] usb 2-1: Using ep0 maxpacket: 8 [ 776.729402][ T4899] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 776.754922][ T4899] usb 2-1: config 0 has no interface number 0 [ 776.774247][ T4899] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 776.792671][ T4899] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 776.805648][ T4899] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 776.821532][ T4899] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 776.833512][ T4899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.860184][ T4899] usb 2-1: config 0 descriptor?? [ 776.891515][ T4899] ldusb 2-1:0.55: Interrupt in endpoint not found [ 777.373400][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 777.470714][T11478] Can't find a SQUASHFS superblock on nullb0 [ 778.175888][ T4320] usb 2-1: USB disconnect, device number 6 [ 778.252571][T11441] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 778.252754][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 778.258949][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 778.264749][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 778.511535][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 778.875030][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.888016][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 779.596421][ T26] audit: type=1326 audit(1778702500.350:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.1.1660" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 780.110521][ T26] audit: type=1326 audit(1778702500.860:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 780.332548][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout [ 780.409392][T11518] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1667'. [ 780.816202][ T26] audit: type=1326 audit(1778702501.570:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 780.882624][ T26] audit: type=1326 audit(1778702501.570:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 781.058674][T11531] netlink: 'syz.2.1669': attribute type 10 has an invalid length. [ 781.134969][ T26] audit: type=1326 audit(1778702501.570:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 781.170212][T11531] team0: Failed to send options change via netlink (err -105) [ 781.192580][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 781.200924][T11531] team0: Port device dummy0 added [ 781.226703][T11534] netlink: 'syz.2.1669': attribute type 10 has an invalid length. [ 781.254712][T11534] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 781.409204][ T26] audit: type=1326 audit(1778702501.570:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 781.539556][T11534] team0: Failed to send options change via netlink (err -105) [ 781.550292][T11534] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 781.561586][T11534] team0: Port device dummy0 removed [ 781.588429][T11534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 781.900632][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 781.921971][ T4320] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 781.947907][ T26] audit: type=1326 audit(1778702501.570:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 782.411255][ T26] audit: type=1326 audit(1778702501.570:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 782.412541][ T4320] usb 2-1: config 0 has no interface number 0 [ 782.435956][ T26] audit: type=1326 audit(1778702501.570:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 782.472886][ T26] audit: type=1326 audit(1778702501.570:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 782.497951][ T26] audit: type=1326 audit(1778702501.570:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 782.522699][ T26] audit: type=1326 audit(1778702501.570:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.7.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605999ce59 code=0x7fc00000 [ 782.562163][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 782.592383][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 782.648722][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 782.672748][ T4320] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 782.719869][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.731291][T11557] binder: 11549:11557 ioctl c05c5340 200000000000 returned -22 [ 784.381948][ T4320] usb 2-1: config 0 descriptor?? [ 784.568335][ T4320] usb 2-1: can't set config #0, error -71 [ 784.588677][ T4320] usb 2-1: USB disconnect, device number 7 [ 784.611127][T11565] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1678'. [ 785.965496][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 785.965509][ T26] audit: type=1326 audit(1778702506.720:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5e39ce59 code=0x7fc00000 [ 787.164076][ T26] audit: type=1326 audit(1778702507.920:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b5e39ce59 code=0x7fc00000 [ 788.472641][ T4320] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 788.481738][T11615] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1692'. [ 788.682523][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 788.692900][ T4320] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 788.719487][ T4320] usb 2-1: config 0 has no interface number 0 [ 788.731406][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 788.830145][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 788.943225][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 789.058479][ T4320] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 789.363421][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.575784][ T26] audit: type=1326 audit(1778702509.930:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.6.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 789.624663][ T4320] usb 2-1: config 0 descriptor?? [ 789.693743][ T26] audit: type=1326 audit(1778702510.450:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.7.1695" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f605999ce59 code=0x0 [ 789.702684][ T4320] ldusb 2-1:0.55: Interrupt in endpoint not found [ 789.807156][ T26] audit: type=1326 audit(1778702510.560:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.6.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 789.862053][ T26] audit: type=1326 audit(1778702510.560:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.6.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 789.899299][ T26] audit: type=1326 audit(1778702510.560:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.6.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 789.937190][ T26] audit: type=1326 audit(1778702510.560:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.6.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 789.965505][ T26] audit: type=1326 audit(1778702510.560:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.6.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 789.993173][ T26] audit: type=1326 audit(1778702510.560:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.6.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 790.381393][ T4320] usb 2-1: USB disconnect, device number 8 [ 790.684226][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1702'. [ 791.107845][T11665] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1706'. [ 792.904799][T10805] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 793.971220][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 793.971260][ T26] audit: type=1326 audit(1778702514.720:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 794.410080][T11683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 794.519380][T11683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 794.641743][T11683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 794.694398][T11683] device bridge_slave_0 left promiscuous mode [ 794.700887][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.720544][T11683] device bridge_slave_1 left promiscuous mode [ 794.729392][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.758182][T11683] bond0: (slave bond_slave_0): Releasing backup interface [ 794.829758][T11683] bond0: (slave bond_slave_1): Releasing backup interface [ 794.969043][T11683] team0: Port device team_slave_0 removed [ 795.000484][T11683] team0: Port device team_slave_1 removed [ 795.007736][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.018647][T11683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.030470][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.038853][T11683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.097669][ T26] audit: type=1326 audit(1778702515.850:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.121792][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.238536][ T8310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 795.248481][ T26] audit: type=1326 audit(1778702515.850:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.283907][ T26] audit: type=1326 audit(1778702515.850:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.328719][ T26] audit: type=1326 audit(1778702515.850:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.356649][ T26] audit: type=1326 audit(1778702515.850:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.382147][ T26] audit: type=1326 audit(1778702515.850:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.412548][ T26] audit: type=1326 audit(1778702515.850:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.453886][ T26] audit: type=1326 audit(1778702515.850:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.482578][ T8310] usb 2-1: Using ep0 maxpacket: 8 [ 795.503877][ T26] audit: type=1326 audit(1778702515.850:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.6.1710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 795.504351][ T8310] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 795.562701][ T4357] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 795.600494][ T8310] usb 2-1: config 0 has no interface number 0 [ 795.618556][ T8310] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 795.640440][ T8310] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 795.662493][ T8310] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 795.684072][ T8310] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 795.697498][ T8310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.735850][ T8310] usb 2-1: config 0 descriptor?? [ 795.759742][ T8310] ldusb 2-1:0.55: Interrupt in endpoint not found [ 795.762547][ T4357] usb 8-1: Using ep0 maxpacket: 8 [ 795.790004][ T4357] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 795.810563][ T4357] usb 8-1: config 0 has no interface number 0 [ 796.656246][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 796.702714][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 796.852579][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 796.882745][ T8310] usb 2-1: USB disconnect, device number 9 [ 796.915678][ T4357] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 796.942667][ T4357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.982939][T10805] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 796.995379][T10805] Bluetooth: hci1: Injecting HCI hardware error event [ 797.006368][T10805] Bluetooth: hci1: hardware error 0x00 [ 797.028189][ T4357] usb 8-1: config 0 descriptor?? [ 797.047747][ T4357] ldusb 8-1:0.55: Interrupt in endpoint not found [ 797.565885][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.597215][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.653552][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.688639][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.749196][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.803073][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.833050][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.867459][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 797.973010][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 798.449511][ T4357] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4357 comm: kworker/0:8) [ 798.467423][T11717] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1720'. [ 798.549307][ T4357] usb 8-1: USB disconnect, device number 10 [ 798.908446][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 798.920250][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 798.946880][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 798.961706][T11739] device bridge_slave_0 left promiscuous mode [ 798.968290][T11739] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.984069][T11739] device bridge_slave_1 left promiscuous mode [ 799.005060][T11739] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.037359][T11739] bond0: (slave bond_slave_0): Releasing backup interface [ 799.051101][T11739] bond0: (slave bond_slave_1): Releasing backup interface [ 799.067424][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 799.067436][ T26] audit: type=1326 audit(1778702519.820:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 799.133098][T10805] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 799.252474][T11739] team0: Port device team_slave_0 removed [ 799.308743][T11739] team0: Port device team_slave_1 removed [ 799.343170][T11739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.382378][T11739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.421390][T11739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.430233][T11739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.537259][T11755] autofs4:pid:11755:autofs_fill_super: called with bogus options [ 799.767069][ T26] audit: type=1326 audit(1778702520.520:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.1.1729" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 800.382760][ T26] audit: type=1326 audit(1778702521.120:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 800.478174][ T26] audit: type=1326 audit(1778702521.120:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 800.595745][ T26] audit: type=1326 audit(1778702521.120:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 800.636930][ T26] audit: type=1326 audit(1778702521.120:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 800.664643][ T26] audit: type=1326 audit(1778702521.120:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 800.690061][ T26] audit: type=1326 audit(1778702521.120:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 800.719055][ T26] audit: type=1326 audit(1778702521.120:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 800.746798][ T26] audit: type=1326 audit(1778702521.120:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83879ce59 code=0x7fc00000 [ 801.882914][ T4321] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 802.095717][T11784] overlayfs: failed to resolve './file2': -2 [ 802.162664][ T4321] usb 8-1: Using ep0 maxpacket: 16 [ 802.189152][ T4357] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4357 comm: kworker/0:8) [ 802.335032][ T4321] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 802.347778][ T4321] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 802.357992][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.366420][ T4321] usb 8-1: Product: syz [ 802.370907][ T4321] usb 8-1: Manufacturer: syz [ 802.401251][ T4321] usb 8-1: SerialNumber: syz [ 802.428045][ T4321] usb 8-1: config 0 descriptor?? [ 802.464257][ T4321] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 802.505353][ T4321] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 802.752510][ T4357] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 802.962624][ T4357] usb 2-1: Using ep0 maxpacket: 8 [ 802.969958][ T4357] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 802.988353][ T4357] usb 2-1: config 0 has no interface number 0 [ 803.000358][ T4357] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 803.024282][ T4357] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 803.042706][ T4357] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 803.043681][ T4321] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 803.061222][ T4357] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 803.097638][ T4357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.137053][ T4357] usb 2-1: config 0 descriptor?? [ 803.174864][ T4357] ldusb 2-1:0.55: Interrupt in endpoint not found [ 803.528431][ T4321] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 803.553996][ T4321] em28xx 8-1:0.0: board has no eeprom [ 803.898404][ T4357] usb 2-1: USB disconnect, device number 10 [ 803.932926][ T4321] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 803.968037][ T4321] em28xx 8-1:0.0: dvb set to bulk mode. [ 804.008748][ T8310] em28xx 8-1:0.0: Binding DVB extension [ 804.618618][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 804.618633][ T26] audit: type=1326 audit(1778702525.370:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 805.135282][T11772] em28xx 8-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 805.566528][ T26] audit: type=1326 audit(1778702526.320:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c1d9ce59 code=0x7fc00000 [ 805.574333][ T8310] em28xx 8-1:0.0: Registering input extension [ 805.705623][ T4357] usb 8-1: USB disconnect, device number 11 [ 805.711922][ T4357] em28xx 8-1:0.0: Disconnecting em28xx [ 805.746768][ T4357] em28xx 8-1:0.0: Closing input extension [ 805.834872][ T4357] em28xx 8-1:0.0: Freeing device [ 806.215615][T11842] 9pnet_fd: Insufficient options for proto=fd [ 807.462533][ T8310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 807.642492][ T8310] usb 3-1: Using ep0 maxpacket: 8 [ 807.644084][ T8310] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 807.644112][ T8310] usb 3-1: config 0 has no interface number 0 [ 807.644151][ T8310] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 807.644176][ T8310] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 807.644198][ T8310] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 807.644234][ T8310] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 807.644258][ T8310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.646223][ T8310] usb 3-1: config 0 descriptor?? [ 807.649707][ T8310] ldusb 3-1:0.55: Interrupt in endpoint not found [ 807.956807][T11861] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 808.412585][ T4357] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 808.499349][ T4320] usb 3-1: USB disconnect, device number 12 [ 808.612546][ T4357] usb 6-1: Using ep0 maxpacket: 8 [ 808.631261][ T4357] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 808.659480][ T4357] usb 6-1: config 0 has no interface number 0 [ 808.692850][ T4357] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 808.745871][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.752237][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.768557][ T4357] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 808.811427][ T4357] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 808.896374][ T4357] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 808.972813][ T4357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.019836][ T4357] usb 6-1: config 0 descriptor?? [ 809.043865][ T4357] ldusb 6-1:0.55: Interrupt in endpoint not found [ 809.343877][ T26] audit: type=1326 audit(1778702530.100:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.6.1760" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c1d9ce59 code=0x0 [ 810.242896][ T8310] usb 6-1: USB disconnect, device number 9 [ 810.821900][T11891] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 812.862693][ T4363] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4363 comm: kworker/0:10) [ 813.205201][ T4363] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 813.682589][ T4363] usb 6-1: Using ep0 maxpacket: 8 [ 814.047850][ T4363] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 814.087025][ T4363] usb 6-1: config 0 has no interface number 0 [ 814.119141][ T4363] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 814.174210][ T4363] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 814.349411][ T4363] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 814.349464][ T4363] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 814.349488][ T4363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.371275][ T4363] usb 6-1: config 0 descriptor?? [ 814.374827][ T4363] ldusb 6-1:0.55: Interrupt in endpoint not found [ 814.387442][ T26] audit: type=1326 audit(1778702535.140:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83879ce59 code=0x0 [ 814.608355][T11936] __nla_validate_parse: 17 callbacks suppressed [ 814.608377][T11936] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1778'. [ 814.611282][T11936] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1778'. [ 814.688075][T11939] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 815.184589][ T4363] usb 6-1: USB disconnect, device number 10 [ 815.552577][ T4357] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 815.752507][ T4357] usb 7-1: Using ep0 maxpacket: 8 [ 815.759496][ T4357] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 815.792622][ T4357] usb 7-1: config 0 has no interface number 0 [ 815.798844][ T4357] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 815.847617][ T4357] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 815.858671][ T4357] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 815.884274][ T4357] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 815.899904][ T4357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.837092][ T4357] usb 7-1: config 0 descriptor?? [ 816.859827][ T4357] ldusb 7-1:0.55: Interrupt in endpoint not found [ 817.395453][ T4321] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4321 comm: kworker/1:4) [ 817.601841][ T4357] usb 7-1: USB disconnect, device number 4 [ 817.655275][T11983] device syzkaller0 entered promiscuous mode [ 818.141422][T11993] binder: 11989:11993 ioctl c05c5340 200000000000 returned -22 [ 819.039748][ T26] audit: type=1326 audit(1778702539.790:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.1.1793" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 821.340354][ T4357] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4357 comm: kworker/0:8) [ 824.511326][ T26] audit: type=1326 audit(1778702545.260:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.5.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e6819ce59 code=0x0 [ 824.534864][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.564981][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 824.585082][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 824.833682][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 825.282663][ T8310] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 825.661468][ T4320] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4320 comm: kworker/0:7) [ 825.852475][ T8310] usb 7-1: Using ep0 maxpacket: 8 [ 825.859314][ T8310] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 825.868059][ T8310] usb 7-1: config 0 has no interface number 0 [ 825.874978][ T8310] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 825.886223][ T8310] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 825.898060][ T8310] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 825.916044][ T8310] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 825.925600][ T8310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.952975][ T8310] usb 7-1: config 0 descriptor?? [ 825.980792][ T8310] ldusb 7-1:0.55: Interrupt in endpoint not found [ 826.463638][ T8310] usb 7-1: USB disconnect, device number 5 [ 827.934370][ T4357] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 828.145268][ T4357] usb 8-1: Using ep0 maxpacket: 8 [ 828.152131][ T4357] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 828.161371][T12092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 828.173044][ T4357] usb 8-1: config 0 has no interface number 0 [ 828.220756][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 828.241272][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 828.425806][ T4357] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 828.425841][ T4357] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 828.425855][ T4357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.427815][T12092] bond0: (slave dummy0): Releasing backup interface [ 828.430898][T12092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 828.430988][T12092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 828.440946][ T4357] usb 8-1: config 0 descriptor?? [ 828.449942][ T4357] ldusb 8-1:0.55: Interrupt in endpoint not found [ 828.735157][T12100] fuse: Bad value for 'fd' [ 829.117375][T12100] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 829.125019][ T4357] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4357 comm: kworker/0:8) [ 829.563940][ T4357] usb 8-1: USB disconnect, device number 12 [ 830.840050][T12128] fuse: Bad value for 'fd' [ 831.005463][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.026393][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 831.049508][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 831.405239][T12141] 9pnet_fd: Insufficient options for proto=fd [ 831.742362][ T8310] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 831.932593][ T8310] usb 3-1: Using ep0 maxpacket: 8 [ 831.939609][ T8310] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 832.090451][ T8310] usb 3-1: config 0 has no interface number 0 [ 832.152498][ T8310] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 832.206353][ T8310] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 832.254924][ T8310] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 832.290073][T12163] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 832.308026][T12163] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 832.309138][ T8310] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 832.335222][T12163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 832.348311][ T8310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.368618][T12162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 832.388964][ T8310] usb 3-1: config 0 descriptor?? [ 832.413363][ T8310] ldusb 3-1:0.55: Interrupt in endpoint not found [ 832.812978][ T8310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 833.672522][ T8310] usb 2-1: Using ep0 maxpacket: 8 [ 833.679245][ T8310] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 833.728619][ T8310] usb 2-1: config 0 has no interface number 0 [ 833.748938][ T8310] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 833.800550][ T8310] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 833.851671][ T8310] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 833.871468][ T8310] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 833.898751][ T8310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.332561][T10805] Bluetooth: hci5: command 0x0c1a tx timeout [ 834.332945][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 834.412457][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 834.778487][ T8310] usb 2-1: config 0 descriptor?? [ 834.840026][ T5112] usb 3-1: USB disconnect, device number 13 [ 834.856875][ T8310] ldusb 2-1:0.55: Interrupt in endpoint not found [ 835.095716][T12188] fuse: Bad value for 'fd' [ 835.166086][T12189] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 835.282977][T12191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 835.300194][T12191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 835.316906][T12191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.518575][ T4357] usb 2-1: USB disconnect, device number 11 [ 835.575477][T12202] 9pnet_fd: Insufficient options for proto=fd [ 836.492455][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 837.614549][ T26] audit: type=1326 audit(1778702558.370:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.1853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 837.638021][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.921570][T12251] 9pnet_fd: Insufficient options for proto=fd [ 842.632533][ T4320] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 842.673888][ T5112] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 842.834353][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 843.546048][ T4320] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 843.622872][ T5112] usb 6-1: Using ep0 maxpacket: 8 [ 843.630142][ T5112] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 843.653103][ T5112] usb 6-1: config 0 has no interface number 0 [ 843.653371][ T4320] usb 2-1: config 0 has no interface number 0 [ 843.659277][ T5112] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 843.659309][ T5112] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 843.687458][ T5112] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 843.716036][ T5112] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 843.722466][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 843.732478][ T5112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.741805][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 843.758708][ T4320] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 843.772038][ T5112] usb 6-1: config 0 descriptor?? [ 843.777255][ T4320] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 843.792280][ T5112] ldusb 6-1:0.55: Interrupt in endpoint not found [ 843.801864][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.823581][ T4320] usb 2-1: config 0 descriptor?? [ 843.836297][ T4320] ldusb 2-1:0.55: Interrupt in endpoint not found [ 843.923913][T12275] binder: 12269:12275 ioctl c05c5340 200000000000 returned -22 [ 845.658435][ T4363] usb 6-1: USB disconnect, device number 11 [ 845.673948][T12283] fuse: Bad value for 'fd' [ 845.731586][T12284] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 845.816110][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 845.833593][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 845.849456][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 845.942092][ T4320] usb 2-1: USB disconnect, device number 12 [ 846.406279][T12295] 9pnet_fd: Insufficient options for proto=fd [ 846.638009][ T26] audit: type=1326 audit(1778702567.380:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.1875" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e6819ce59 code=0x0 [ 846.885736][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 848.102327][T12312] nfs4: Unknown parameter '&&}' [ 848.815467][T12329] binder: 12322:12329 ioctl c05c5340 200000000000 returned -22 [ 849.063270][ T4363] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 850.682670][ T4363] usb 8-1: Using ep0 maxpacket: 8 [ 850.689349][ T4363] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 850.742640][ T4363] usb 8-1: config 0 has no interface number 0 [ 850.843365][ T4363] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 850.918505][ T4363] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 851.002630][ T56] tipc: Subscription rejected, illegal request [ 851.040771][ T4363] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 851.066061][T12339] 9pnet_fd: Insufficient options for proto=fd [ 851.113632][ T4363] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 851.132880][ T4363] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.157616][ T4363] usb 8-1: config 0 descriptor?? [ 851.199628][ T4363] ldusb 8-1:0.55: Interrupt in endpoint not found [ 851.240059][ T26] audit: type=1326 audit(1778702571.990:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.1.1890" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 851.561476][ T5112] usb 8-1: USB disconnect, device number 13 [ 852.863054][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1892'. [ 854.902975][ T5112] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 855.076344][T12379] binder: 12375:12379 ioctl c05c5340 200000000000 returned -22 [ 855.152669][ T5112] usb 3-1: Using ep0 maxpacket: 8 [ 855.808703][ T5112] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 855.810790][T12383] 9pnet_fd: Insufficient options for proto=fd [ 856.185558][ T5112] usb 3-1: config 0 has no interface number 0 [ 856.195745][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 856.206843][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 856.232517][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 856.282541][ T5112] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 856.291677][ T5112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.337333][ T5112] usb 3-1: config 0 descriptor?? [ 856.348692][ T5112] ldusb 3-1:0.55: Interrupt in endpoint not found [ 857.449608][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1905'. [ 857.595029][ T5112] usb 3-1: USB disconnect, device number 14 [ 859.040772][ T26] audit: type=1326 audit(1778702579.790:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.7.1907" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f605999ce59 code=0x0 [ 860.359832][ T5112] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 860.572794][ T5112] usb 3-1: Using ep0 maxpacket: 8 [ 860.580162][ T5112] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 860.609996][ T5112] usb 3-1: config 0 has no interface number 0 [ 860.618757][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 860.644322][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 860.657682][T12448] binder: 12446:12448 ioctl c05c5340 200000000000 returned -22 [ 860.701911][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 860.727830][ T5112] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 860.740031][ T5112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.779757][ T5112] usb 3-1: config 0 descriptor?? [ 860.803501][ T5112] ldusb 3-1:0.55: Interrupt in endpoint not found [ 861.142689][ T5112] usb 3-1: USB disconnect, device number 15 [ 861.575597][T12454] autofs4:pid:12454:autofs_fill_super: called with bogus options [ 861.689235][T12460] fuse: Bad value for 'fd' [ 864.841487][ T26] audit: type=1326 audit(1778702585.590:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12468 comm="syz.1.1927" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e39ce59 code=0x0 [ 866.109377][T12494] binder: 12491:12494 ioctl c05c5340 200000000000 returned -22 [ 866.332584][ T4279] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 866.338186][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 866.634256][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 866.729788][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 870.172976][ T4279] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 870.179963][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 870.186696][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.198407][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.624888][T12525] fuse: Bad value for 'fd' [ 870.917234][T12531] nfs4: Unknown parameter '&&}' [ 870.987425][ T5112] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 871.182892][ T5112] usb 2-1: Using ep0 maxpacket: 8 [ 871.797618][ T5112] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 871.892508][ T5112] usb 2-1: config 0 has no interface number 0 [ 871.934409][ T5112] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 871.950257][ T5112] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 871.984487][ T5112] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 873.171740][ T5112] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 873.185912][ T5112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.207525][ T5112] usb 2-1: config 0 descriptor?? [ 873.291791][ T5112] ldusb 2-1:0.55: Interrupt in endpoint not found [ 873.399614][T12558] binder: 12555:12558 ioctl c05c5340 200000000000 returned -22 [ 873.538112][ T5112] usb 2-1: USB disconnect, device number 13 [ 875.132811][T10805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 875.142523][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 876.349943][T12578] nfs4: Unknown parameter '&&}' [ 876.504951][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1955'. [ 876.527596][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1955'. [ 880.202710][ T5112] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 880.419172][ T5112] usb 3-1: Using ep0 maxpacket: 8 [ 880.431131][ T5112] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 880.459760][ T5112] usb 3-1: config 0 has no interface number 0 [ 880.466826][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 880.525655][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 880.546782][ T5112] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 880.616694][ T5112] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 880.626774][ T5112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.744986][ T5112] usb 3-1: config 0 descriptor?? [ 880.762139][ T5112] ldusb 3-1:0.55: Interrupt in endpoint not found [ 881.021504][ T4363] usb 3-1: USB disconnect, device number 16 [ 881.241093][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1964'. [ 881.292753][T10805] Bluetooth: hci0: command 0x0c1a tx timeout [ 881.298852][ T4279] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 886.279755][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1978'. [ 886.291922][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 886.355162][T12687] nfs4: Unknown parameter '&&}' [ 886.667694][T12701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1990'. [ 887.020144][T12711] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1991'. [ 887.063949][T12711] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1991'. [ 887.109188][T12711] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1991'. [ 887.173173][T12711] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1991'. [ 887.224187][T12711] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1991'. [ 887.312128][T12711] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1991'. [ 887.381668][T12711] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1991'. [ 888.357050][T12721] Can't find a SQUASHFS superblock on nullb0 [ 890.286725][T12752] fuse: Bad value for 'fd' [ 890.542445][ T4320] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 890.742509][ T4320] usb 8-1: Using ep0 maxpacket: 8 [ 890.749966][ T4320] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 890.779319][ T4320] usb 8-1: config 0 has no interface number 0 [ 890.791255][ T4320] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 890.805734][ T4320] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 890.820994][ T4320] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 890.852654][ T4320] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 890.863231][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.886556][ T4320] usb 8-1: config 0 descriptor?? [ 890.943581][ T4320] ldusb 8-1:0.55: Interrupt in endpoint not found [ 891.628199][ T8310] usb 8-1: USB disconnect, device number 14 [ 893.740023][T12796] autofs4:pid:12796:autofs_fill_super: called with bogus options [ 896.151577][T12804] fuse: Bad value for 'fd' [ 897.352850][T12819] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 897.361073][T12819] overlayfs: overlapping lowerdir path [ 899.949770][T12839] binder: 12837:12839 ioctl c05c5340 200000000000 returned -22 [ 901.182699][T12846] nfs4: Unknown parameter '&&}' [ 903.199522][T12829] __nla_validate_parse: 23 callbacks suppressed [ 903.199539][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2022'. [ 903.550323][T12858] binder: 12855:12858 ioctl c05c5340 200000000000 returned -22 [ 905.341281][T12862] fuse: Bad value for 'fd' [ 907.007549][T12864] Can't find a SQUASHFS superblock on nullb0 [ 907.833987][T12884] nfs4: Unknown parameter '&&}' [ 909.727383][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2039'. [ 909.999619][T12901] binder: 12898:12901 ioctl c05c5340 200000000000 returned -22 [ 911.195133][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2041'. [ 913.548345][T12926] Can't find a SQUASHFS superblock on nullb0 [ 914.655138][T12934] nfs4: Unknown parameter '&&}' [ 916.836727][T12947] binder: 12945:12947 ioctl c05c5340 200000000000 returned -22 [ 919.022764][T12959] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 920.276817][T12969] Can't find a SQUASHFS superblock on nullb0 [ 923.922636][T12981] nfs4: Unknown parameter '&&}' [ 925.421547][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 925.438043][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 925.456012][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 925.465467][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 925.475844][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 925.488416][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 925.521560][T12998] binder: 12995:12998 ioctl c05c5340 200000000000 returned -22 [ 926.678691][T13004] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 926.909948][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2041'. [ 926.973945][T12909] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2041'. [ 927.532453][T10805] Bluetooth: hci2: command 0x0409 tx timeout [ 927.870067][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2061'. [ 927.915387][ T4289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 927.926280][ T4289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 927.942790][ T4289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 927.953071][ T4289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 927.960710][ T4289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 927.968911][ T4289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 928.377755][T13017] Can't find a SQUASHFS superblock on nullb0 [ 929.612471][T10805] Bluetooth: hci2: command 0x041b tx timeout [ 930.012501][T10805] Bluetooth: hci6: command 0x0409 tx timeout [ 930.301094][T12994] chnl_net:caif_netlink_parms(): no params data found [ 930.584478][T13009] chnl_net:caif_netlink_parms(): no params data found [ 930.604446][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.611576][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.627745][T12994] device bridge_slave_0 entered promiscuous mode [ 930.643203][T13039] netlink: 'syz.1.2076': attribute type 10 has an invalid length. [ 930.651104][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2076'. [ 930.660909][T13039] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 930.670953][T13039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 930.693857][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.701178][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.709557][T12994] device bridge_slave_1 entered promiscuous mode [ 930.717295][T13043] binder: 13040:13043 ioctl c05c5340 200000000000 returned -22 [ 931.571986][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.593721][T13039] lo speed is unknown, defaulting to 1000 [ 931.599538][T13039] lo speed is unknown, defaulting to 1000 [ 931.605774][T13039] lo speed is unknown, defaulting to 1000 [ 931.615463][T13039] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 931.630985][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.633650][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.656110][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.673071][T13039] lo speed is unknown, defaulting to 1000 [ 931.679424][T13039] lo speed is unknown, defaulting to 1000 [ 931.685815][T13039] lo speed is unknown, defaulting to 1000 [ 931.692146][T13039] lo speed is unknown, defaulting to 1000 [ 931.698546][T13039] lo speed is unknown, defaulting to 1000 [ 931.704850][T13039] lo speed is unknown, defaulting to 1000 [ 931.711158][T13039] lo speed is unknown, defaulting to 1000 [ 931.728612][T10805] Bluetooth: hci2: command 0x040f tx timeout [ 932.092413][T10805] Bluetooth: hci6: command 0x041b tx timeout [ 932.611784][T12994] team0: Port device team_slave_0 added [ 932.629880][T13009] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.640686][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.662562][T13009] device bridge_slave_0 entered promiscuous mode [ 932.709732][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2080'. [ 932.767340][T12994] team0: Port device team_slave_1 added [ 932.774402][T13009] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.782000][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.798183][T13009] device bridge_slave_1 entered promiscuous mode [ 932.857743][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.866402][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.894286][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.920423][T13009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.934073][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.946049][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.971993][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.978691][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.998093][T13009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.096892][T12994] device hsr_slave_0 entered promiscuous mode [ 933.109419][T12994] device hsr_slave_1 entered promiscuous mode [ 933.122053][T12994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.157275][T12994] Cannot create hsr debugfs directory [ 933.179880][T13009] team0: Port device team_slave_0 added [ 933.772470][T10805] Bluetooth: hci2: command 0x0419 tx timeout [ 934.049404][T13009] team0: Port device team_slave_1 added [ 934.172601][T10805] Bluetooth: hci6: command 0x040f tx timeout [ 934.217349][T13009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.262716][T13009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.290001][T13009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.400032][T13009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.422827][T13009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.470010][T13009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.326527][T13084] binder: 13079:13084 ioctl c05c5340 200000000000 returned -22 [ 936.252655][T10805] Bluetooth: hci6: command 0x0419 tx timeout [ 937.055521][T13009] device hsr_slave_0 entered promiscuous mode [ 937.139734][T13009] device hsr_slave_1 entered promiscuous mode [ 937.177621][T13009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 937.265058][T13009] Cannot create hsr debugfs directory [ 937.586710][T12994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 938.417936][T12994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 938.470075][T12994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 938.553143][T12994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 939.590857][T13009] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 939.710550][T13009] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 939.786773][T12994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.829200][T13009] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 939.854061][T13009] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 939.919909][T12994] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.929440][T13124] binder: 13119:13124 ioctl c05c5340 200000000000 returned -22 [ 940.308692][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 940.394616][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 940.625149][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 940.688453][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 940.755473][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.762685][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.772704][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 941.657306][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 941.667952][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 941.677484][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.684628][T10666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.740928][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 941.817502][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 943.528295][T13009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.566231][T13144] binder_alloc: 13140: binder_alloc_buf, no vma [ 943.592309][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 943.687359][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 943.719498][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 943.741057][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 944.303578][T13009] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.606189][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 944.614982][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 944.623680][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 944.635584][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 944.644495][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 944.684023][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 944.733024][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 944.808556][T12994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 944.838146][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 944.865808][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 944.894124][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.901290][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.928877][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 944.948276][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 944.978894][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.986080][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.021599][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2109'. [ 945.060848][T13009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 945.117376][T13009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 945.143900][T13167] binder: 13162:13167 ioctl c05c5340 200000000000 returned -22 [ 946.715840][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 946.768237][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 946.850862][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 946.946220][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 947.101765][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 947.123285][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 947.131896][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 947.141652][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 947.150174][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 947.159744][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 947.169269][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.073850][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.082006][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 949.248369][T13179] loop1: detected capacity change from 0 to 32768 [ 949.330111][T13179] loop1: p1 p2 p3 < p5 > [ 949.356097][T13179] loop1: p1 size 242222080 extends beyond EOD, truncated [ 949.364646][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.372264][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.421601][T12994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.430290][T13193] binder: BINDER_SET_CONTEXT_MGR already set [ 949.456905][T13179] loop1: p2 start 16777215 is beyond EOD, truncated [ 949.456990][T13193] binder: 13192:13193 ioctl 4018620d 200000004a80 returned -16 [ 949.711390][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.735844][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.759293][T13009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.768256][T13204] binder: 13200:13204 ioctl c05c5340 200000000000 returned -22 [ 950.753048][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2125'. [ 950.761211][ T7785] udevd[7785]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 950.765413][ T8783] udevd[8783]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 950.779520][ T7794] udevd[7794]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 950.968554][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 950.983192][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 950.996013][T13222] loop1: detected capacity change from 0 to 128 [ 951.006763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.023267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.052133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.064289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.073853][T12994] device veth0_vlan entered promiscuous mode [ 951.097907][T12994] device veth1_vlan entered promiscuous mode [ 951.177798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 951.203056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 951.225493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 951.267288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 951.284896][T12994] device veth0_macvtap entered promiscuous mode [ 951.307048][T12994] device veth1_macvtap entered promiscuous mode [ 951.358672][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.373681][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.385313][T12994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.399896][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 951.408382][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 951.417305][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 951.426587][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 951.440685][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.451670][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.467774][T12994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.479245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 951.489497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 951.498905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 951.508032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 951.583900][T12994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.594759][T12994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.605277][T12994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.629229][T12994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.674977][T13009] device veth0_vlan entered promiscuous mode [ 951.682887][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.691343][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.709109][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.832800][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.493345][T13009] device veth1_vlan entered promiscuous mode [ 952.643609][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 952.682934][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 952.711942][T13009] device veth0_macvtap entered promiscuous mode [ 952.761746][ T7026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.779397][T13009] device veth1_macvtap entered promiscuous mode [ 952.786630][ T7026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.853693][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 952.864202][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 952.879339][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 952.902102][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.924503][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.939518][T13245] binder_alloc: 13244: binder_alloc_buf, no vma [ 952.946183][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.960021][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.980333][T13009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.992764][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 953.008685][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.043395][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.045239][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.058101][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.068544][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.080394][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.100118][T13249] binder: 13246:13249 ioctl c05c5340 200000000000 returned -22 [ 953.108806][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.206938][T13009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.291933][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 953.334465][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 953.427932][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 953.673612][T13009] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.774046][T13009] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.891066][T13009] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.969626][T13009] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.319741][ T26] audit: type=1326 audit(1778702675.070:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7ffc0000 [ 954.332018][T13258] syz.5.2136 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 954.365763][ T6724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.373971][ T6724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.381862][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 954.383256][T13259] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 954.442717][ T26] audit: type=1326 audit(1778702675.070:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7ffc0000 [ 954.467481][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2137'. [ 954.468133][T10666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.502432][T13259] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 954.530417][T10666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.583253][T10666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 954.598823][ T26] audit: type=1326 audit(1778702675.070:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7ffc0000 [ 954.624241][ T26] audit: type=1326 audit(1778702675.070:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f0e6819ce59 code=0x7ffc0000 [ 954.649898][ T26] audit: type=1326 audit(1778702675.160:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7ffc0000 [ 954.770448][ T26] audit: type=1326 audit(1778702675.160:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7ffc0000 [ 954.815783][ T26] audit: type=1326 audit(1778702675.160:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6819ce59 code=0x7ffc0000 [ 955.753411][ T26] audit: type=1326 audit(1778702675.160:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e6819cbc2 code=0x7ffc0000 [ 955.946507][ T26] audit: type=1326 audit(1778702675.160:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0e6819cc57 code=0x7ffc0000 [ 956.318145][ T26] audit: type=1326 audit(1778702675.160:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0e68159b51 code=0x7ffc0000 [ 956.806425][T13260] qfq: no options [ 956.910182][T13291] binder: 13288:13291 ioctl c05c5340 200000000000 returned -22 [ 960.072568][T13317] Can't find a SQUASHFS superblock on nullb0 [ 960.216250][ T4480] tipc: Subscription rejected, illegal request [ 962.629695][T13343] binder: 13340:13343 ioctl c05c5340 200000000000 returned -22 [ 965.620482][T13365] Can't find a SQUASHFS superblock on nullb0 [ 966.573701][ T4298] tipc: Subscription rejected, illegal request [ 967.266062][T13394] loop5: detected capacity change from 0 to 16 [ 967.292592][T13394] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 967.305627][T13394] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 968.484595][T13407] Can't find a SQUASHFS superblock on nullb0 [ 969.897072][T13422] fuse: Bad value for 'group_id' [ 970.505012][T13426] loop5: detected capacity change from 0 to 736 [ 970.655389][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2187'. [ 971.807885][T13436] binder: BINDER_SET_CONTEXT_MGR already set [ 971.814023][T13436] binder: 13435:13436 ioctl 4018620d 200000004a80 returned -16 [ 971.944507][ T8704] tipc: Subscription rejected, illegal request [ 972.178965][T13399] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.187849][T13399] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.198490][T13399] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.207564][T13399] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.465219][T13448] Can't find a SQUASHFS superblock on nullb0 [ 973.323183][T13450] fuse: Bad value for 'group_id' [ 973.371167][T13454] fuse: Bad value for 'group_id' [ 974.487670][T13472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2203'. [ 974.800970][T13482] Can't find a SQUASHFS superblock on nullb0 [ 975.676404][ T4509] tipc: Subscription rejected, illegal request [ 975.686871][T13490] binder: BINDER_SET_CONTEXT_MGR already set [ 975.693548][T13490] binder: 13488:13490 ioctl 4018620d 200000004a80 returned -16 [ 975.694412][T13492] fuse: Bad value for 'group_id' [ 975.810962][T13495] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 977.001531][T13515] fuse: Unknown parameter 'group_id00000000000000000000' [ 977.297131][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2215'. [ 978.255122][T13524] loop1: detected capacity change from 0 to 128 [ 978.406142][T13526] Can't find a SQUASHFS superblock on nullb0 [ 979.291417][ T26] kauditd_printk_skb: 125 callbacks suppressed [ 979.291433][ T26] audit: type=1804 audit(1778702700.040:742): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2216" name="/newroot/484/file0/bus" dev="loop1" ino=1048610 res=1 errno=0 [ 979.381060][ T26] audit: type=1804 audit(1778702700.120:743): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2216" name="/newroot/484/file0/bus" dev="loop1" ino=1048610 res=1 errno=0 [ 979.490258][ T26] audit: type=1804 audit(1778702700.120:744): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2216" name="/newroot/484/file0/bus" dev="loop1" ino=1048610 res=1 errno=0 [ 979.586490][ T6724] tipc: Subscription rejected, illegal request [ 982.149621][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2228'. [ 982.195808][T13555] ieee802154 phy0 wpan0: encryption failed: -22 [ 982.197000][T13557] loop1: detected capacity change from 0 to 16 [ 982.266007][T13557] erofs: (device loop1): mounted with root inode @ nid 36. [ 982.370727][ T26] audit: type=1800 audit(1778702703.120:745): pid=13557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2226" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 982.535847][T13568] Can't find a SQUASHFS superblock on nullb0 [ 984.616308][T13579] xt_hashlimit: size too large, truncated to 1048576 [ 985.270168][ T26] audit: type=1800 audit(1778702706.030:746): pid=13596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2239" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 985.323423][ T8683] tipc: Subscription rejected, illegal request [ 986.966205][T13603] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2241'. [ 987.356426][T13615] Can't find a SQUASHFS superblock on nullb0 [ 988.132731][T13619] netlink: 'syz.5.2247': attribute type 1 has an invalid length. [ 988.283545][T13619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 988.346903][T13622] bond1: (slave ip6gretap1): making interface the new active one [ 988.405146][T13622] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 988.452255][T13626] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.462642][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 988.761501][ T6905] tipc: Subscription rejected, illegal request [ 990.136392][T13656] Can't find a SQUASHFS superblock on nullb0 [ 990.493231][ T5112] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 990.735321][ T5112] usb 2-1: Using ep0 maxpacket: 8 [ 990.768163][ T5112] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 990.866324][ T5112] usb 2-1: config 0 has no interface number 0 [ 990.976204][ T5112] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 991.139049][ T5112] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 991.328876][ T5112] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 991.510550][ T5112] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 991.599556][ T5112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.735809][ T5112] usb 2-1: config 0 descriptor?? [ 991.848658][ T5112] ldusb 2-1:0.55: Interrupt in endpoint not found [ 992.318459][T13664] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.350578][ T7837] usb 2-1: USB disconnect, device number 14 [ 993.103240][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.116894][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.769677][ T32] tipc: Subscription rejected, illegal request [ 993.887785][T13688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2271'. [ 994.237434][T13692] loop9: detected capacity change from 0 to 8192 [ 994.347474][T13701] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.988564][ T4509] tipc: Subscription rejected, illegal request [ 996.060268][T13725] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2284'. [ 999.320648][T13764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2300'. [ 999.426295][ T8704] tipc: Subscription rejected, illegal request [ 999.682627][ T4320] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1000.603790][ T4320] usb 10-1: Using ep0 maxpacket: 8 [ 1000.613266][T13779] fuse: Unknown parameter 'grou00000000000000000000' [ 1000.617731][ T4320] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1000.676039][ T4320] usb 10-1: config 0 has no interface number 0 [ 1000.709344][ T4320] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1000.720971][ T4320] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1000.737671][ T4320] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1000.753369][ T4320] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1000.766319][ T4320] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.899540][T13786] autofs4:pid:13786:autofs_fill_super: called with bogus options [ 1001.594415][ T4320] usb 10-1: config 0 descriptor?? [ 1001.750331][ T4320] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1004.382803][T13807] binder: 13805:13807 ioctl c05c5340 200000000000 returned -22 [ 1005.284900][T13814] loop5: detected capacity change from 0 to 128 [ 1006.630168][T13834] fuse: Unknown parameter 'group_i00000000000000000000' [ 1006.930108][T13362] usb 10-1: USB disconnect, device number 2 [ 1008.262208][T13861] binder: 13857:13861 ioctl c05c5340 200000000000 returned -22 [ 1008.615700][T13869] netlink: 408 bytes leftover after parsing attributes in process `syz.1.2327'. [ 1009.521668][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2330'. [ 1010.884065][T13883] binder: 13876:13883 ioctl c05c5340 200000000000 returned -22 [ 1012.618400][ T56] tipc: Subscription rejected, illegal request [ 1013.777462][T13905] fuse: Unknown parameter 'group_i00000000000000000000' [ 1014.810988][T13912] binder: 13906:13912 ioctl c05c5340 200000000000 returned -22 [ 1016.366104][T13926] autofs4:pid:13926:autofs_fill_super: called with bogus options [ 1017.857499][T13932] ipt_CLUSTERIP: Please specify destination IP [ 1017.880231][T13946] xt_hashlimit: size too large, truncated to 1048576 [ 1018.210628][T13951] fuse: Unknown parameter 'group_i00000000000000000000' [ 1020.419164][T13964] binder: 13962:13964 ioctl c05c5340 200000000000 returned -22 [ 1022.935906][T13975] autofs4:pid:13975:autofs_fill_super: called with bogus options [ 1023.761265][T13981] binder: 13978:13981 ioctl c05c5340 200000000000 returned -22 [ 1024.355492][ T32] tipc: Subscription rejected, illegal request [ 1025.750877][T14006] loop5: detected capacity change from 0 to 128 [ 1025.760803][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 1025.854682][T14013] fuse: Unknown parameter 'group_id00000000000000000000' [ 1025.890898][ T26] audit: type=1804 audit(1778702746.640:747): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2364" name="/newroot/437/file0/bus" dev="loop5" ino=1048613 res=1 errno=0 [ 1025.969989][ T26] audit: type=1804 audit(1778702746.640:748): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2364" name="/newroot/437/file0/bus" dev="loop5" ino=1048613 res=1 errno=0 [ 1026.030118][ T26] audit: type=1804 audit(1778702746.640:749): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2364" name="/newroot/437/file0/bus" dev="loop5" ino=1048613 res=1 errno=0 [ 1026.070697][T14015] syz.5.2364: attempt to access beyond end of device [ 1026.070697][T14015] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1027.314459][T14015] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1027.369801][T14015] syz.5.2364: attempt to access beyond end of device [ 1027.369801][T14015] loop5: rw=2049, sector=129, nr_sectors = 2 limit=128 [ 1027.470624][T14006] syz.5.2364: attempt to access beyond end of device [ 1027.470624][T14006] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1027.718933][T14006] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1028.476273][T14028] binder: 14026:14028 ioctl c05c5340 200000000000 returned -22 [ 1031.015257][T14042] lo speed is unknown, defaulting to 1000 [ 1032.193016][T14056] device veth1_macvtap left promiscuous mode [ 1032.273679][T14056] device macsec0 entered promiscuous mode [ 1033.168482][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2381'. [ 1033.264552][T14069] binder: 14065:14069 ioctl c05c5340 200000000000 returned -22 [ 1035.408567][T14085] device syzkaller0 entered promiscuous mode [ 1035.737755][ T6724] tipc: Subscription rejected, illegal request [ 1037.875282][T14109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2394'. [ 1038.900291][T14125] binder: 14119:14125 ioctl c05c5340 200000000000 returned -22 [ 1041.455162][ T4298] tipc: Subscription rejected, illegal request [ 1041.520534][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 1041.593757][T14155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2407'. [ 1044.415195][T14188] binder: 14181:14188 ioctl c05c5340 200000000000 returned -22 [ 1044.698624][T14187] autofs4:pid:14187:autofs_fill_super: called with bogus options [ 1044.903787][ T4347] tipc: Subscription rejected, illegal request [ 1045.862632][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'. [ 1047.465593][T14234] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2431'. [ 1047.741292][T14243] binder: 14237:14243 ioctl c05c5340 200000000000 returned -22 [ 1047.997644][T14252] autofs4:pid:14252:autofs_fill_super: called with bogus options [ 1048.137532][ T4327] tipc: Subscription rejected, illegal request [ 1048.817901][T14269] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1048.872917][T14271] binder: 14270:14271 ioctl 4018620d 0 returned -22 [ 1050.226669][T14290] autofs4:pid:14290:autofs_fill_super: called with bogus options [ 1050.366453][T14295] fuse: Invalid rootmode [ 1050.430387][T14299] binder: 14293:14299 ioctl c05c5340 200000000000 returned -22 [ 1050.744258][T14302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1050.793132][T14308] device syzkaller0 entered promiscuous mode [ 1051.452507][T10805] Bluetooth: hci2: command 0x0406 tx timeout [ 1051.458830][T10805] Bluetooth: hci6: command 0x0406 tx timeout [ 1051.475030][ T4327] tipc: Subscription rejected, illegal request [ 1051.519584][T14320] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1052.739408][T14334] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.810029][T14334] binder: 14333:14334 ioctl 4018620d 200000004a80 returned -16 [ 1052.898846][T14337] fuse: Invalid rootmode [ 1052.951410][T14339] autofs4:pid:14339:autofs_fill_super: called with bogus options [ 1053.190664][T14343] netlink: 'syz.9.2463': attribute type 10 has an invalid length. [ 1053.260108][T14343] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 1053.335146][T14345] device syzkaller0 entered promiscuous mode [ 1053.368118][T14350] binder: 14347:14350 ioctl c05c5340 200000000000 returned -22 [ 1054.504797][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.511170][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.246234][T14372] fuse: Invalid rootmode [ 1055.493502][T14380] fuse: Invalid rootmode [ 1055.634080][T13235] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1055.852588][T13235] usb 2-1: Using ep0 maxpacket: 8 [ 1055.870453][T13235] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1055.890662][T13235] usb 2-1: config 0 has no interface number 0 [ 1055.920095][T13235] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1055.958824][T14391] device syzkaller0 entered promiscuous mode [ 1055.970691][T13235] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1055.999780][T13235] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1056.018829][T13235] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1056.028812][T13235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.091401][T13235] usb 2-1: config 0 descriptor?? [ 1056.172018][T13235] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1056.992934][ T4320] usb 2-1: USB disconnect, device number 15 [ 1057.153721][T14398] binder: 14396:14398 ioctl c05c5340 200000000000 returned -22 [ 1057.278460][T14401] netlink: 'syz.9.2485': attribute type 1 has an invalid length. [ 1057.348363][T14401] bond1: (slave gretap1): making interface the new active one [ 1057.364346][T14401] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1057.513738][T14404] fuse: Bad value for 'rootmode' [ 1058.874555][T14414] fuse: Invalid rootmode [ 1059.092614][T14416] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2491'. [ 1059.129091][T14423] device syzkaller0 entered promiscuous mode [ 1060.061717][T14431] fuse: Bad value for 'rootmode' [ 1060.223899][T14442] Illegal XDP return value 4294900224 on prog (id 58) dev syz_tun, expect packet loss! [ 1060.489543][T14454] binder: 14449:14454 ioctl c05c5340 200000000000 returned -22 [ 1060.642500][ T4320] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1061.572797][ T4320] usb 10-1: Using ep0 maxpacket: 8 [ 1061.589979][ T4320] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1061.656934][ T4320] usb 10-1: config 0 has no interface number 0 [ 1061.690531][T14461] fuse: Unknown parameter 'user_id00000000000000000000' [ 1061.698449][ T4320] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1061.713950][ T4320] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1061.748072][ T4320] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1061.752098][T14463] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1061.798115][ T4320] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1061.827000][ T4320] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.878344][ T4320] usb 10-1: config 0 descriptor?? [ 1061.908907][ T4320] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1062.014729][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1062.069567][T14470] device syzkaller0 entered promiscuous mode [ 1062.158359][ T4320] usb 10-1: USB disconnect, device number 3 [ 1065.823285][T14513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2524'. [ 1065.901339][T14516] binder: 14514:14516 ioctl c0306201 0 returned -14 [ 1069.924746][T14535] device syzkaller1 entered promiscuous mode [ 1071.039142][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2534'. [ 1071.165064][T14552] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2534'. [ 1071.312800][ T46] tipc: Subscription rejected, illegal request [ 1074.683969][T14590] autofs4:pid:14590:autofs_fill_super: called with bogus options [ 1077.566976][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2557'. [ 1081.186739][ T46] tipc: Subscription rejected, illegal request [ 1081.384903][T14667] device syzkaller0 entered promiscuous mode [ 1085.722905][T14697] fuse: Unknown parameter 'user_i00000000000000000000' [ 1085.750177][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'. [ 1085.933253][T14696] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2578'. [ 1086.160989][T14711] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1087.138338][T14718] device syzkaller0 entered promiscuous mode [ 1092.054989][T14750] fuse: Unknown parameter 'user_i00000000000000000000' [ 1096.199957][T14770] device syzkaller0 entered promiscuous mode [ 1098.316687][T14784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1099.454128][T14810] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1099.941610][T14830] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1099.951254][T14830] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1099.960243][T14830] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1099.969033][T14830] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.097846][T14843] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1103.246938][T14866] fuse: Unknown parameter 'user_id00000000000000000000' [ 1103.596504][T14870] device syzkaller0 entered promiscuous mode [ 1105.503824][T14893] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1105.608363][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802eb69c00: rx timeout, send abort [ 1105.619894][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802eb69c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1108.533379][T14913] fuse: Bad value for 'fd' [ 1110.221503][T14942] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1110.662143][T14958] fuse: Bad value for 'fd' [ 1111.893224][T14990] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1114.156124][T15029] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1115.072867][T15036] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1116.109865][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.534445][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.664110][T15078] netlink: 'syz.8.2700': attribute type 2 has an invalid length. [ 1119.722652][T15078] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2700'. [ 1121.759272][T15084] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1121.807505][T15089] fuse: Unknown parameter '0x0000000000000003' [ 1121.894544][T15092] lo speed is unknown, defaulting to 1000 [ 1125.239267][ T26] audit: type=1800 audit(1778702845.990:750): pid=15115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2712" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1125.303131][T15115] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1125.312572][T15115] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1125.322147][T15115] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1125.655265][T15139] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1125.700954][T15144] fuse: Unknown parameter '0x0000000000000003' [ 1125.788670][T15137] lo speed is unknown, defaulting to 1000 [ 1128.484842][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2730'. [ 1129.665756][T15190] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1129.999514][T15196] fuse: Unknown parameter '0x0000000000000003' [ 1130.155950][T15204] netlink: 'syz.1.2738': attribute type 1 has an invalid length. [ 1131.102015][T15210] bond2: (slave dummy0): making interface the new active one [ 1131.154303][T15210] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1131.196320][T15214] device bond2 entered promiscuous mode [ 1131.201950][T15214] device dummy0 entered promiscuous mode [ 1132.819161][T15214] device bond2 left promiscuous mode [ 1132.825147][T15214] device dummy0 left promiscuous mode [ 1132.844891][T15228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1132.855068][T15228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1132.863340][T15228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1132.957348][T15232] fuse: Unknown parameter 'use00000000000000000000' [ 1132.987147][T15228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1133.066158][T15228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1133.133647][T15228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1133.701347][T15252] fuse: Unknown parameter '0x0000000000000003' [ 1134.354806][T15256] device syzkaller0 entered promiscuous mode [ 1135.111140][T15269] fuse: Unknown parameter 'use00000000000000000000' [ 1138.868614][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2758'. [ 1139.057054][T15292] fuse: Unknown parameter '0x0000000000000003' [ 1139.893268][T15301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1140.354805][T15317] fuse: Unknown parameter 'use00000000000000000000' [ 1140.690547][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2774'. [ 1141.850101][T15342] fuse: Unknown parameter 'fd0x0000000000000003' [ 1142.654124][T15364] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1142.683630][T15363] fuse: Unknown parameter 'user_i00000000000000000000' [ 1142.917026][T15366] device syzkaller0 entered promiscuous mode [ 1143.009775][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'. [ 1143.133364][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1143.207409][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1143.631315][T15387] fuse: Unknown parameter 'fd0x0000000000000003' [ 1144.504075][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1144.516997][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1144.529927][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1144.539747][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1144.547555][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1144.566864][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1144.835934][T15395] lo speed is unknown, defaulting to 1000 [ 1144.863276][T15405] fuse: Unknown parameter 'user_i00000000000000000000' [ 1145.352416][T15395] chnl_net:caif_netlink_parms(): no params data found [ 1146.274444][T15395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.301208][T15395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.315896][T15395] device bridge_slave_0 entered promiscuous mode [ 1146.343349][T15395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.370059][T15395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.413966][T15395] device bridge_slave_1 entered promiscuous mode [ 1146.551335][T15432] fuse: Unknown parameter 'fd0x0000000000000003' [ 1146.578604][T15395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.636606][T15395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.653484][T10805] Bluetooth: hci0: command 0x0409 tx timeout [ 1146.836765][T15395] team0: Port device team_slave_0 added [ 1146.861592][T15395] team0: Port device team_slave_1 added [ 1146.991885][T15395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.020359][T15395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.128712][T15395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.197841][T15395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.228566][T15395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.321594][T15395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.231135][T15395] device hsr_slave_0 entered promiscuous mode [ 1148.248766][T15395] device hsr_slave_1 entered promiscuous mode [ 1148.255928][T15395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1148.263634][T15395] Cannot create hsr debugfs directory [ 1148.754047][T10805] Bluetooth: hci0: command 0x041b tx timeout [ 1148.824752][T15395] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.089703][T15395] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.136493][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2808'. [ 1149.151288][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2808'. [ 1149.385537][T15395] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.577308][T15395] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.340317][T15395] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1150.423467][T15395] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1150.513185][T15395] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1150.547999][T15395] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1150.732839][T15510] autofs4:pid:15510:autofs_fill_super: called with bogus options [ 1150.812798][T10805] Bluetooth: hci0: command 0x040f tx timeout [ 1152.173137][T15513] binder: 15506:15513 ioctl c05c5340 200000000000 returned -22 [ 1152.796981][T15395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.817775][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1152.892828][T10805] Bluetooth: hci0: command 0x0419 tx timeout [ 1152.903444][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1152.922577][T15395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.964263][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1152.987699][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.034782][T14662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.041985][T14662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.092851][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1153.276456][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1153.285553][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1153.294981][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.302210][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.313004][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1153.321753][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1153.330792][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1153.359131][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1153.396660][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1153.419756][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1153.443249][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2822'. [ 1153.461020][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1153.489380][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1153.527804][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1153.581319][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1153.649616][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1153.723473][T15395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1153.902498][T15544] binder: 15543:15544 ioctl c0306201 0 returned -14 [ 1154.389806][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1154.429632][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1154.470256][T15395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.560724][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1154.578942][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1154.646305][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1154.670625][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1154.720026][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1154.757493][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.790877][T15395] device veth0_vlan entered promiscuous mode [ 1154.825320][T15395] device veth1_vlan entered promiscuous mode [ 1154.851289][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1154.930228][T15570] binder: 15566:15570 ioctl c05c5340 200000000000 returned -22 [ 1156.699965][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1156.709326][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1156.733548][T15395] device veth0_macvtap entered promiscuous mode [ 1156.782646][T15395] device veth1_macvtap entered promiscuous mode [ 1156.889972][T15395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.952356][T15395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.015253][T15395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.026341][T15395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.037365][T15395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.053052][T15395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.084019][T15395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.135781][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1157.159249][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1157.193235][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1158.044690][T15395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.118593][T15395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.128809][T15395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.139454][T15395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.149660][T15395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.160455][T15395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.173816][T15395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.187600][T14098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1158.223933][T14098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1158.264627][T15395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.290945][T15395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.309379][T15395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.328163][T15395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.932416][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.940357][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.973034][T10610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1163.033817][T10610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.041698][T10610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.079270][T10610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1163.088811][T15639] binder: 15634:15639 ioctl c05c5340 200000000000 returned -22 [ 1165.949716][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 1165.991225][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2845'. [ 1166.509666][T15677] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1167.888627][T15703] binder: 15701:15703 ioctl c05c5340 200000000000 returned -22 [ 1167.897689][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2857'. [ 1169.774951][T15716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1169.782274][T15716] IPv6: NLM_F_CREATE should be set when creating new route [ 1169.849065][T15716] device hsr0 entered promiscuous mode [ 1169.988678][T15727] autofs4:pid:15727:autofs_fill_super: called with bogus options [ 1172.583878][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1172.594086][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1173.138871][T15769] netem: change failed [ 1174.991016][T10805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1175.050806][T10805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1175.062856][T10805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1175.072071][T10805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1175.079883][T10805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1175.097447][T10805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.238539][T15789] lo speed is unknown, defaulting to 1000 [ 1175.848434][T15789] chnl_net:caif_netlink_parms(): no params data found [ 1176.553396][T15789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.602029][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.621300][T15789] device bridge_slave_0 entered promiscuous mode [ 1176.640540][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1176.660403][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1176.670838][T15789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.682054][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.696262][T15789] device bridge_slave_1 entered promiscuous mode [ 1176.774916][T15789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.844252][T15789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.976585][T15789] team0: Port device team_slave_0 added [ 1177.026909][T15789] team0: Port device team_slave_1 added [ 1177.132395][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 1177.149908][T15789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.218727][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.288650][T15789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.336011][T15789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.375294][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.381643][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.402320][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.519437][T15789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.563141][T15838] netlink: 'syz.8.2895': attribute type 1 has an invalid length. [ 1177.610578][T15838] netlink: 'syz.8.2895': attribute type 2 has an invalid length. [ 1177.678437][T15789] device hsr_slave_0 entered promiscuous mode [ 1177.709105][T15789] device hsr_slave_1 entered promiscuous mode [ 1177.723933][T15789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1177.738265][T15789] Cannot create hsr debugfs directory [ 1179.014150][T15789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1179.054663][T15789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1179.084608][T15789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1179.123707][T15789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1179.212324][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 1179.770978][T15870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2904'. [ 1179.785695][T15870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2904'. [ 1179.797831][T15866] netlink: 'syz.5.2901': attribute type 13 has an invalid length. [ 1179.822773][T15866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1179.875573][T15866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1179.904162][T15866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1180.171754][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2901'. [ 1180.315410][T15789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.368078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1180.396834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1180.439197][T15789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.467163][T15889] device syzkaller0 entered promiscuous mode [ 1180.530778][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1180.560649][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1180.593597][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.600718][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.623257][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1180.666626][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1180.687957][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.695176][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.795312][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.041394][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.148450][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.302312][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 1181.543240][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.566600][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.606201][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.641261][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.660889][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.670005][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.681925][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.715739][T15909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2914'. [ 1181.765343][T15907] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2914'. [ 1181.812988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.833904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1181.890583][T15789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1183.302058][T14098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1183.319926][T14098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1183.375904][T15789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.382544][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 1184.279862][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1184.346754][ T7026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1184.521484][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1184.536670][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1184.562089][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1184.580763][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1184.600669][T15789] device veth0_vlan entered promiscuous mode [ 1184.653230][T15942] device syzkaller0 entered promiscuous mode [ 1184.681330][T15789] device veth1_vlan entered promiscuous mode [ 1184.861930][T15789] device veth0_macvtap entered promiscuous mode [ 1184.906267][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1184.932887][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1184.960678][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1185.007855][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1185.033182][T15789] device veth1_macvtap entered promiscuous mode [ 1185.061474][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1185.376050][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1185.646434][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.672385][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.694373][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.720951][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.735463][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.757299][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.889298][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.921662][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.944166][T15789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.988297][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1186.011111][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1186.104408][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.168868][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.218811][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.261027][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.271526][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.282410][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.300374][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.330521][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.411392][T15789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.418625][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1186.420150][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1186.425369][T15789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.425462][T15789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.425488][T15789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.425514][T15789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.604865][T15980] device syzkaller0 entered promiscuous mode [ 1186.784736][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.784757][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.785013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1187.393516][ T4509] tipc: Subscription rejected, illegal request [ 1192.738518][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.752954][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.754990][T16020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2948'. [ 1192.815299][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2948'. [ 1192.858446][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1193.624102][T16045] binder: 16040:16045 ioctl c05c5340 200000000000 returned -22 [ 1194.415453][T16063] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1195.395544][ T56] tipc: Subscription rejected, illegal request [ 1195.419570][T16074] device syzkaller0 entered promiscuous mode [ 1195.595806][T16077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1195.628379][T16077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1198.399167][T16098] lo speed is unknown, defaulting to 1000 [ 1198.527394][T16108] autofs4:pid:16108:autofs_fill_super: called with bogus options [ 1199.986038][T16125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2974'. [ 1200.007867][T16125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2974'. [ 1201.670917][T16167] autofs4:pid:16167:autofs_fill_super: called with bogus options [ 1202.286799][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2987'. [ 1202.551163][T16170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2987'. [ 1202.974521][ T4279] Bluetooth: hci1: command 0x0405 tx timeout [ 1205.490234][T16195] fuse: Bad value for 'fd' [ 1205.975208][T16219] lo speed is unknown, defaulting to 1000 [ 1206.197666][T16226] device syzkaller0 entered promiscuous mode [ 1207.633309][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1208.606707][T16277] device syzkaller0 entered promiscuous mode [ 1209.833983][T16294] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1211.282729][T16332] device syzkaller0 entered promiscuous mode [ 1212.970511][T16344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3033'. [ 1213.749469][T16345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.760776][T16345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.843073][T16345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.906362][T16345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.353453][T16345] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.362517][T16345] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.371414][T16345] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.380696][T16345] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.246528][ T32] tipc: Subscription rejected, illegal request [ 1219.451265][T16466] binder: 16459:16466 ioctl c05c5340 200000000000 returned -22 [ 1221.150128][T16473] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3057'. [ 1221.285990][T16464] device syzkaller0 entered promiscuous mode Stopping sshd: stopped /usr/sbin/sshd (pid 4027) OK Stopping crond: stopped /usr/sbin/crond (pid 4011) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3931) Stopping network: [ 1226.143353][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3058'. [ 1226.153703][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3058'. [ 1227.930101][T10666] tipc: Subscription rejected, illegal request [ 1228.047432][T16533] binder: 16531:16533 ioctl c05c5340 200000000000 returned -22 OK Stopping iptables: [ 1230.713253][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3076'. [ 1230.829366][T16563] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3076'. OK Stopping system message bus: [ 1232.780627][T16597] binder: 16596:16597 ioctl c05c5340 200000000000 returned -22 [ 1235.618172][T16614] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.632384][T16614] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.821922][T16614] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.898554][T16614] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 done [ 1236.881705][T16614] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.002338][T16614] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.210689][T16643] device syzkaller0 entered promiscuous mode [ 1237.371743][T16614] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.406525][T16614] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.799782][T16664] binder: 16663:16664 ioctl c05c5340 200000000000 returned -22 [ 1238.819317][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.826137][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3619) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.206 closed by remote host. [ 1243.465296][T16614] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.510230][T16614] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.583773][T16614] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.592033][T16614] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.664594][T16614] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.712268][T16614] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.765772][T16614] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.792357][T16614] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 1245.218461][ T4346] device hsr_slave_0 left promiscuous mode [ 1245.225156][ T4346] device hsr_slave_1 left promiscuous mode [ 1245.226902][T16690] kvm: exiting hardware virtualization [ 1245.284598][T16690] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1245.352456][T16690] ACPI: PM: Preparing to enter system sleep state S5 [ 1245.375627][T16690] reboot: Power down serialport: VM disconnected.