last executing test programs: 15m53.755255088s ago: executing program 32 (id=54): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz1\x00', {0x4e9, 0x6, 0x8, 0x3}, 0x3b, [0xfffffe00, 0x0, 0x5, 0x101, 0x8, 0x80000003, 0x8000001, 0x6, 0x7ff, 0x5, 0x1, 0xfff, 0x2b9, 0x5, 0x8, 0x8, 0xe, 0x7f, 0x0, 0x5, 0x6, 0xfe75279d, 0x0, 0x6, 0x9, 0x5, 0x7fffffff, 0xffffffb5, 0xe, 0x80000000, 0x5, 0x7fff, 0x8, 0x1, 0x2, 0x9, 0x800, 0x9, 0xea29, 0x9, 0x5d3e, 0xffffffff, 0x18, 0x6, 0xffffffff, 0x0, 0x4, 0xf, 0x9, 0x3, 0xffff, 0x7fb, 0x8, 0x6f000000, 0x5, 0x3, 0x5, 0x9, 0xff, 0xaa9, 0x10000, 0x2, 0x6, 0xf98e], [0x60, 0xffffff81, 0xfffffff0, 0x7, 0x1, 0x1000, 0x1, 0x9, 0x9bc, 0x100, 0xd, 0xed4e, 0x1, 0x8, 0x1, 0x4, 0x3ff, 0x0, 0x0, 0x6, 0x7, 0x756f, 0x76, 0x5, 0xffff, 0x4, 0x5, 0x1, 0x200, 0x3, 0x72e0, 0xffeffffd, 0x8, 0x2, 0x31c, 0x88bf, 0x10000, 0xe0f, 0x5, 0x0, 0x800, 0x9, 0x0, 0x8000, 0xfffffffd, 0x1ff, 0xd, 0x1, 0x5, 0x2, 0x5, 0x4, 0x7, 0x6db0, 0xe9f, 0xffffffff, 0xc, 0x101, 0x45e, 0xfffffd81, 0x2, 0x2, 0x2, 0x8], [0x80000001, 0x1, 0x8, 0x4, 0x8, 0xffffffff, 0x800, 0x6f02, 0x1, 0x10, 0x1, 0x165b, 0xa01d, 0x3, 0x2, 0x0, 0x0, 0x8, 0x1, 0x4, 0xf, 0xffff, 0xd, 0x9ee, 0x7, 0x9, 0xffffffff, 0x80, 0x0, 0xfffffff7, 0x3, 0xa, 0x7, 0xff, 0x400, 0x2, 0x0, 0x0, 0x1, 0x4, 0x6, 0x7, 0xb6, 0x3d51, 0xfb65, 0x570f, 0x3, 0x35cc, 0x7, 0x80000000, 0x7, 0x40, 0x7, 0x3c, 0x7fffffff, 0x4b8b, 0x5, 0x2, 0x0, 0xd79, 0x1, 0x0, 0x6, 0x5], [0x2, 0x9, 0x1, 0xfffffffe, 0x1000, 0x1, 0x9, 0x1, 0x7, 0x3ff, 0xffff, 0x80, 0xb5, 0x3ff, 0x9, 0x642, 0x9, 0x100, 0xffffff4d, 0x3, 0x4, 0x200, 0xff, 0x1, 0x401, 0x4, 0x4, 0x101, 0x401, 0x40000000, 0x2d8, 0xfa8, 0x0, 0x0, 0x9, 0xa, 0x1, 0xd8, 0x9, 0x3, 0x36, 0xfffffff9, 0x65200000, 0x8, 0x6, 0x9, 0xffffffff, 0x101, 0x3, 0x0, 0xffffffff, 0x1c, 0x7, 0x6, 0x2, 0x100, 0xd7, 0x5, 0x2, 0x80000000, 0x8000, 0x9, 0x0, 0xa]}, 0x45c) 14m22.360689567s ago: executing program 33 (id=215): syz_clone3(&(0x7f00000005c0)={0x4084c100, 0x0, 0x0, 0x0, {0xffffffff}, &(0x7f0000000000)=""/215, 0xd7, 0x0, 0x0}, 0xfdaa) io_uring_setup(0x4cda, &(0x7f0000000100)={0x0, 0xd596, 0x400, 0x3, 0x197}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x21, 0x805, 0x0) listen(r1, 0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt/encrypted_dir\x00', 0x0) 14m13.686214797s ago: executing program 2 (id=283): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="40310d000000910807b68b93031b588975"], 0x0, 0x0}) 14m11.544997743s ago: executing program 2 (id=285): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 14m6.679915194s ago: executing program 2 (id=294): syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") chmod(&(0x7f0000000080)='./file0\x00', 0x121) 14m6.322804642s ago: executing program 2 (id=297): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="b74014"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000340)={0x20, 0xd, 0x4, "176b14a3"}, 0x0, 0x0}) 14m1.616761755s ago: executing program 2 (id=305): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x67, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa") 13m58.248727901s ago: executing program 2 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000080)) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x8, 0x8, 0x209, 0x3]}, &(0x7f0000000180)=0x54) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13m41.552800199s ago: executing program 34 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000080)) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x8, 0x8, 0x209, 0x3]}, &(0x7f0000000180)=0x54) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 11m15.481458006s ago: executing program 6 (id=697): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x8, 0x0, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x28}], 0x1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 11m13.210328449s ago: executing program 6 (id=699): syz_clone3(&(0x7f00000005c0)={0x4084c100, 0x0, 0x0, 0x0, {0xffffffff}, &(0x7f0000000000)=""/215, 0xd7, 0x0, 0x0}, 0xfdaa) io_uring_setup(0x4cda, &(0x7f0000000100)={0x0, 0xd596, 0x400, 0x3, 0x197}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e01272a22fc54078fd5e64475993668980a9f95aff96492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e08893220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd000000000000000adbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef4201dbc11d36a0a0db52e84461c6fbb4aad62cf3c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec080000002b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270b36ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9aee540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b231f7ffc441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0xa4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x4, '\x00', @b}) 11m12.916591053s ago: executing program 6 (id=700): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') readv(r1, &(0x7f0000000200)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x140, 0xb, 0xd0e0011, 0x0, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x3b}, 0x0, 0x70, 0xd8, 0x2000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x101, 0x0, 0xc, 'netbios-ns\x00', 'syz1\x00', {0x27ff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000240)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '_#&'}}, 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4) sendto$inet(r5, &(0x7f0000000300)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b", 0x3a, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@usrquota}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x7fd}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") fallocate(0xffffffffffffffff, 0x0, 0xa20, 0x8000c64) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005200010000000000000000000203000008000100feffe6ff"], 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000008c0)={'syz1\x00', {0x1000, 0x7, 0x5, 0xffff}, 0x57, [0x400, 0x6, 0xb66a, 0x4, 0x2db, 0x5, 0x1, 0x803, 0x865, 0xfffffffa, 0x101, 0x7, 0x7fff, 0x408, 0x8, 0x1, 0x3, 0x5a, 0x3, 0x4, 0x5, 0x4f, 0x1000, 0x5, 0x8001, 0x80, 0xe9b, 0x5, 0xffffb830, 0x8, 0x9e00, 0x8, 0x0, 0x1, 0x99, 0x4, 0x9, 0x8000, 0xffd, 0x8, 0xa, 0x1, 0x5, 0x5, 0x7, 0x5, 0x39fc, 0x6, 0x2, 0x5, 0x2, 0x4, 0x6, 0x8, 0x4c23, 0xc, 0x9, 0x99, 0x2a, 0x1, 0x2, 0x7, 0x8, 0x3], [0xfffeffff, 0x6, 0x3986, 0x7fff, 0x6, 0x1, 0x3, 0x6d61, 0x3, 0xff, 0x0, 0x800, 0x0, 0x101, 0x1, 0x0, 0x6, 0xffffd6e4, 0x400, 0x8, 0x1000, 0x5, 0x3, 0x7f, 0x5, 0x3, 0x6, 0x4, 0x1, 0x7, 0x80, 0x6, 0x6, 0xffffff00, 0x3, 0x100000ae, 0x10001, 0xffffff31, 0x1f9, 0xaf, 0x4, 0x100, 0x54938bf9, 0xb, 0xef4e, 0x24, 0x4, 0x100, 0x7, 0x2, 0xfff, 0x0, 0x4, 0x9fe, 0xfffffff7, 0xb, 0x0, 0x1000, 0x9, 0x3, 0x56, 0x1950, 0x0, 0x5], [0x1, 0x1000, 0x4, 0x8, 0x87, 0x40000, 0x6, 0x5, 0xfffffffb, 0x7, 0x5, 0x3ff, 0x8, 0xffffffff, 0x7, 0x0, 0x5, 0x9, 0x9, 0x5, 0x40, 0x3, 0x4, 0x0, 0x7, 0x2, 0x4, 0x2, 0x7fffffff, 0xe9, 0x0, 0x4, 0xfa, 0x10000, 0x6, 0x2b1d, 0x0, 0x0, 0x5, 0x101, 0x485f, 0xff, 0x9, 0x4, 0x5, 0x7fffffff, 0x80000000, 0xee6, 0x101, 0x1, 0x7e3e446b, 0x400009, 0x1ff, 0x80000001, 0x4, 0x6, 0x6, 0xc565, 0x1, 0x8, 0xffff, 0x9, 0x8, 0x4], [0x7fffffff, 0xfffffffa, 0x5, 0x0, 0x4, 0x1, 0x1a, 0x3, 0x40, 0x7, 0x200, 0x3, 0x5, 0xeb48, 0xa3b, 0x2, 0x3, 0x400, 0x3, 0xf4c0, 0x6, 0x4, 0xf0c, 0x5, 0x6, 0x2, 0x1, 0x2, 0x8, 0x3, 0x8005, 0x8001, 0x2, 0xfffffffe, 0x10001, 0x7, 0x8, 0x1806aad, 0xd, 0x1, 0x9, 0x3, 0x0, 0x80000001, 0x4, 0xfffffffe, 0x5, 0x87e, 0x2, 0x9, 0x6, 0x5, 0x6, 0x2, 0x802, 0x7, 0x6, 0x3, 0x6, 0x7, 0x9, 0x9, 0x7fffffff, 0x7]}, 0x45c) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x1, 0x7fff0026}]}) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x60}, {0xffffffffffffffff, 0x100}, {r7, 0x9410}, {0xffffffffffffffff, 0x4201}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x12}, {r9, 0x64ec1b353f503d93}], 0x7, 0x9) 11m11.666577135s ago: executing program 6 (id=704): r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0xe, 0x0, &(0x7f0000000500)) 11m10.538209091s ago: executing program 6 (id=708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_VENDOR(r5, 0x0, 0x8000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xd6, @mcast2, 0x8}, 0x1c, 0x0}}], 0x1, 0x4001c00) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 11m7.963064309s ago: executing program 6 (id=713): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) 10m52.573029271s ago: executing program 35 (id=713): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) 7m56.858948048s ago: executing program 1 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000480)={0x2, 0x4ea2, @multicast1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0xa, 0x88ca}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "060020", 0x0, 0x2c, 0x1, @remote, @remote}}}}}, 0xfdef) getdents64(r4, &(0x7f0000000940)=""/229, 0xe5) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000001c0)=0x1, 0x4) recvmmsg(r2, &(0x7f0000001300), 0x51, 0x20, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000100)=0x7) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) 7m55.700825005s ago: executing program 1 (id=1254): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="1648", 0x2}], 0x1}, 0x850) 7m54.859969636s ago: executing program 1 (id=1257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0xa, @mcast2, 0x200}, 0x1c) close(0x3) 7m45.10470322s ago: executing program 1 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="01000000050000000800000086"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x110, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x101, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003462000bfa30000000000001702000000feffff7a0af0ff14ffffff61a4f0ff00000000b7060000ff0800007e640200000000005502faff037a20000404000001007d60a6040000001000006a0a58fe39000f00850000003f000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81e48439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b51949b7d4b67300580d854c280206bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccffff0000360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb933d81967c4d0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794c3133bdfa17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc69a0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cb3475be3376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a4552d4550a717339bdcae1d5c2e78d0a2f550a865811c0162d6dd0b5f834b6295f2a2b0045d8b0033a878daae3db955f2689e3e13842a6219da4e38dc4a14e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) r5 = dup(r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@udp, 0x2}, 0x20) clock_adjtime(0x6, &(0x7f0000000400)={0x6, 0x65, 0x0, 0x7fffffffffffffff, 0x3, 0xe3ac, 0xe22, 0x9, 0x7, 0xea0f, 0xffffffffffff8001, 0x8, 0x8, 0x1ff, 0x9, 0x1, 0x4, 0x6, 0x4, 0x7f, 0xad, 0x3, 0x3, 0x5, 0xb09a, 0x2d}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) 7m43.908251079s ago: executing program 1 (id=1286): io_setup(0x82, &(0x7f0000000240)=0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x138) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000380)="a50366c3", 0x4, 0x3}]) 7m43.017849073s ago: executing program 1 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x40000800) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x2532, 0x0, &(0x7f0000000040), &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r6 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000002c0)=r5, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 7m26.874478863s ago: executing program 36 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x40000800) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x2532, 0x0, &(0x7f0000000040), &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r6 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000002c0)=r5, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4m22.197065554s ago: executing program 3 (id=1987): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 4m21.838600981s ago: executing program 3 (id=1991): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 4m21.610131712s ago: executing program 3 (id=1992): socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffbffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x3, 0x6361, 0x5, 0xa1, 0x800006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff, 0x76, 0x6, 0xe5, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x71b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4010844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m20.778058263s ago: executing program 3 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 4m19.893167288s ago: executing program 3 (id=2000): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x4, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) 4m19.336672215s ago: executing program 3 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfbffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$unix(0x1, 0x2, 0x0) keyctl$read(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800802, &(0x7f0000000100)={[{@dmask={'dmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_continue}, {@umask={'umask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@sys_tz}, {@fmask={'fmask', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x152e, &(0x7f0000000380)="$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") fallocate(0xffffffffffffffff, 0x0, 0x48, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x6, 0x1000009) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid}]}}) 4m4.155249167s ago: executing program 37 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfbffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$unix(0x1, 0x2, 0x0) keyctl$read(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800802, &(0x7f0000000100)={[{@dmask={'dmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_continue}, {@umask={'umask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@sys_tz}, {@fmask={'fmask', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x152e, &(0x7f0000000380)="$eJzs3AuYjtX6MPD7Xms9Y0zS2ySHYa11P7xJLJMkOSTJIUmSJMkpIWmSLQmJIaekSRJyHJLDEJLDxKRxPp8PCUnSJElITsn6LuFTu/p2+7/3f/uuPffvup7Lut/13OtZ73s/7/uu5zEz33YaVL1hjSr1iQj+JXjhn2QAiAWA/gBwDQAEAFAmvkz8+f6cEpP/tYOwf6+H0670DNiVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2capBa7lLftufP//v1/dP+3h7///IlklR3+5uuT1nQFi/moK1z974/r/1wr+yk5c/+yN659dxV7pCbD/D/D7PzvI8ac9XP/sjevPWHZ2pe8/X+kNItn7NbjS5x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsezhlL9MAcCl9pWeF2OMMcYYY4wxxv59fI4rPQPGGGOMMcYYY4z970MQIEFBADGQA2IhJ8SBAICrITdcAxG4FuLhOsgD10NeyAf5oQAkQEEoBBoMWCAIoTAUgSjcAEXhRigGN0FxKAEOSkIi3Ayl4BYoDbdCGbgNysLtUA7KQwWoCHdAJbgTKsNdUAXuhqpQDapDDbgHasK9UAvug9pwP9SBB6AuPAj14CGoDw9DA3gEGsKj0Ageg8bQBJpCM2j+P8p/EbrBS9AdekAy9IRe8DL0hj7QF/pBf3gFBsCrMBBegxR4HQbBGzAY3oQh8BYMhWEwHN6GETASRsFoGANjIRXGwXh4BybAuzARJsFkmAJpMBWmwXswHWbATHgfZsEHMBvmwFyYB+nwIcyHBZABH8FC+BgyYREshiWwFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF2+AR2wKewE3bBbvgM9sDn/2T+yb/L74yAgAIFKlQYgzEYi7EYh3GYC3NhbsyNEYxgPMZjHsyDeTEv5sf8mIAJWAgLoUGDhISFsTBGMYpFsSgWw2JYHIujQ4eJmIil8BYsjaWxDJbBslgWy2F5LI8VsSJWwkpYGStjFayCVbEqVsfqeA/egz2xFtbC2lgb62CdS7ensD7WxwbYABtiQ2yEjbAxNsam2BSbY3NsgS2wJbbE1tga22AbbIttMQmTsB22w/bYHjtgB+yIHbETdsLO2AW7ZL2YA/AlfAl7YFXRE3thL+yNKTn6Yj/sh6/gAHwVX8XXMAVfx0H4Br6Bb+IQPIFDcRgOx+FYSYzEUTgaSYzFVEzF8TgeJ+AEnIiTcBJOwTScitNwGk7HGTgD38dZ+AF+gHNwDs7DdEzH+bgAMzADF+JJzMRFuBiX4FJchktxBa7EFbga1+BqXIfrcANuwE24CbfgFtyG2/ATVAD4Ke7CXZiCe3AP7sW9uA/34X7cj1mYhQfwAB7Eg3gID+FhPIxH8Cgew6N4HI/jCTyJp/AUnsEzeBafT/i6wSc3rUoBcZ4SSsSIGBErYkWciBO5RC6RW+QWERER8SJe5BF5RF6RV+QX+UWCSBCFRCFhhBEkwhgAEFERFUVFUVFMFBPFRXHhhBOJIlGUEqVEaVFalBG3ibLidlFOlBetXEVRUVQSrV1lcZeoIqqIqqKaqC5qiBqipqgpaolaoraoLeqIOqKueFDUEz2xLz4szlemoXgdG4lB2Fg0EfLiJ1gLMQRbilaitXhSDMOh2Fa0cEniGdFOjML24m9iND4nOoqx2Em8IDqLLqKreFF0Ey1dd9FDTMSeopeYgr1FH9FX9BPTsZp4H2flrC5eEynidTFIvCHm4ZtiiHhLDBXDxHDxthghRopRYrQYI8aKVDFOjBfviAniXTFRTBKTxRSRJqaKaeI9MV3MEDPF+2KW+EDMFnPEXDFPpIsPxXyxQGSIj8RC8bHIFIvEYrFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwV28R28YnYIT4VO8UusVt8JvaIz8Ve8YXYJ74U+8VXIkt8LQ6Ib8RB8a04JL4Th8X34og4Ko6JH8Rx8aM4IU6KU+K0OCN+EmfFz+Kc8AIkSiGlVDKQMTKHjJU5ZZy8SuaSwcVX91oZL6+TeeT1Mq/MJ/PLAjJBFpSFpJZGWkkylIVlERmVN8ii8kZZTN4ki8sS0smSMlHeLEvJW2RpeassI2+TZeXtspwsLyvIivIOWUneKSFy4RhVZTVZXdaQ98hkuFfWkvfJ2vJ+WUc+IOvKB2U9+ZCsLx+WDeQjsqF8VDaSj8nGsolsKpvJ5vJx2UI+IVvKVrK1fFK2kU/JtvJpmSSfke2kv3iKPCc7yudlJ/mC7Cy7yK7yZ3lOetld9pDQE2Qv+bLsLfvIvrKf7C9fkQPkq3KgfE2myNflIPmGHCzflEPkW3KoHCaHy7flCDlSjpKj5Rg5VqbKcXK8fEdOkO/KiXKSnCynyDQ5Vfa9ONJMKf9h/jt/kD/wl6NvkBvlJrlZbpFb5Ta5XX4id8gdcqfcKXfL3XKP3CP3yr1yn9wn98v9MktmyQPygDwoD8pD8pA8LA/LI/KoPC1/kMflj/KEPClPytPyjDwjz158DUChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiCaOKqxLKqZIqUd38z+SroupGVUzd9Jv8S/NL/pP5NVfNVQvVQrVULVVr1Vq1UW1UW9VWJakk1U61U+1Ve9VBdVAdVUfVSXVS50+Irqqr6qa6qe6qu0pWyaqXeln1Vn1UX9VP9VevqAFqgBqoBqoUlaIGqUFqsBqshqghaqgaqoar4WqEGqFGqVFqjBqjUlWqGq/GqwlqgpqoJqrJarJKU2lqmpqmpqvpaqaaqWapWWq2mq3mqrkqXaWr+Wq+ylAZaqFaqDLVIrVILVFL1DK1TK1QK9QqtUqtUWvUOrVOZaqNaqParDarrWqr2q62qx1qh9qpdqrdarfao/aovWqv2qf2qf1qv8pSWSr2YhEOqUPqsDqsjqgj6pg6po6r4+qEOqFOqVPqjDqjzqqz6pw6d37ZF4hABCpQQUwQE8QGsUFcEBfkCnIFuYPcQSSIBPFBfJAnuD7IG+QL8gcFgoSgYFAo0IEJbCAuHi8a3BAUDW4MigU3BcWDEoELSgaJwc1BqeCWoHRwa1AmuC0oG9welAvKBxWCisEdQaXgzqBycFdQJbg7qBpUC6oHNYJ7gprBvUGt4L6gdnB/UCd4IKgbPBjUCx4K6gcPBw2CR4KGwaNBo+CxoHHQJGgaNAua/4XxL52Y/3h870/ke8J11z10su6pe+mXdW/dR/fV/XR//YoeoF/VA/VrOkW/rgfpN/Rg/aYeot/SQ/UwPVy/rUfokXqUHq3H6LE6VY/T4/U7eoJ+V0/Uk/RkPUWn6al6mn5PT9cz9Ez9vp6lP9Cz9Rw9V8/T6fpDPV8v0Bn6I71Qf6wz9SK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1df6J36E/1Tr1L79af6T36c71Xf6H36S/1fv2VztJf6wP6G31Qf6sP6e/0Yf29PqKP6mP6B31c/6hP6JP6lD6tz+if9FkNcE7784v781/vRhllYkyMiTWxJs7EmVwml8ltcpuIiZh4E2/ymDwmr8lr8pv8JsEkmEKmkDmPDJnCprCJmqgpaoqaYqaYKW6KG2ecSTSJppQpZUqb0qaMKWPKmrKmnClnKpgK5g5zh7nT3GnuMneZu83dppqpZmqYGqamqWlqmVqmtqlt6pg6pq6pa+qZeqa+qW8amAamoWloGplGprFpbJqapqa5aW5amBampWlpWpvWpo1pY9qatibJJJl2pp1pb9qbDqaD6Wg6mk6mk+lsOpuupqvpZrqZ7qa7STbJppfpZXqb3qav6Wv6m/5mgBlgBpqBJsWkmEFmkBlsBpshZogZaoaZ4ecXqmakGWVGmzFmrEk1qWa8GW8mmAlmoploJpvJJs2kmWlmmpluppuZZqaZZWaZ2Wa2mWvmmnSTbuab+SbDZJiFZqHJNJlmsVlslpqlZrlZblaalWa1WW3Wwlqz3qw3G81Gs9lsNlvNVrPdbDc7zA6z0+w0u81us8fsMXvNXrPP7DP7zX6TZbLMAXPAHDQHzSFzyBw2h80Rc8QcM8fMcXPcnDAnzClzypwx+S5+X3oTa3PaOHuVzWWvtrntNfbv4/y2gE2wBW0hq21em+83sbHWFrM32eK2hHW2pE20N/8uLmfL2wq2or3DVrJ32sq/i2vae20te5+tbe+3New9v4nr2AdsXfuorYcIYJvYBraZbWgftY3sY7axbWKb2ma2jX3KtrVP2yT7jG1nn/1dPN8usCvtKrvarrE77S57yp62B+239oz9yXa3PWx/+4odYF+1A+1rNsW+/rt4uH3bjrAj7Sg72o6xY38XT7ZTbJqdaqfZ9+x0O+N3cbr90M6yGXa2nWPn2nm/xOfnlGE/sgvtxzbTBrDYLrFL7TK73K74v3NdYtfZ9XaD3WE/tZvtFrvVbrPbLy2E7S67235m99jP7QH7jd1nv7T77SGbZb/+JT7//A7Z7+xh+709Yo/aY/YHe9z+qH7JHdkbwP5kf7A/23PWWyAkIEmKAoqhHBRLOSmOrqJcdDXlpmsoQtdSPF1Heeh6ykv5KD8VoAQqSIVIkyFLRCEVpiIUpRvo0vSKUwlyVJIS6WYqRbdQabqVytBtVJZup3JUnipQRbqDKtGdVJnuoip0N1WlalSdatA9VJPupVp0H9Wm+6kOPUB16UGqRw9RfXqYGtAj1JAepUb0GDWmJtSUmlFzepxa0BPUklpRa3qS2tBT1JaepiR6htrRs9Se/kYd6DnqSM9TJ3qBOlMX6kovUjd6ibpTD0qmntSLXqbe1If6Uj/qT6/QAHqVBtJrlEKv0yB6gwbTmzSE3qKhNIyG09s0gkbSKBpNY2gspdI4Gk/v0AR6lybSJJpMUyiNptI0eo+m0wyaSe/TLPqAZtMcmkvzKJ0+pPm0gDLoI1pIH1MmLaLFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOn9AO+pR20i7aTZ/RHvqc9tIXtI++pP30FWXR13SAvqGD9C0dou98D/qejtBROkY/0HH6kU7QSTpFp+kM/URn6Wc6R54gxFCEMlRhEMaEOcLYMGcYF14V5gqvDnOH14SR8NowPrwuzBNeH+YN84X5wwJhQlgwLBTq0IQ2pDAMC4dFwmh4Q1g0vDEsFmJYPCwRurBkmBjeHJYKbwlLh7eGZcLbwrLh7WG5sHz46P0VwzvCSuGdYeXwrrBKeHdYNawWVg9rhPeENcN7w1rhfWHt8P6wdPhAWDd8MKwXPhTWDx8OG4SPhA3DR8NG4WNh47BJ2DRsFjYPHw9bhE+ELcNWYevwybBN+FTYNnw6TAqfCduFz/7S/8CCP+9PDnuGvcKXw5dD7++Tc6PzounRD6PzowuiGdGPogujH0czo4uii6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbot7XyAEOnXDSKRe4GJfDxbqcLs5d5XK5q11ud42LuGtdvLvO5XHXu7wun8vvCrgEV9AVctoZZx250BV2RVzU3eCKuhtdMXeTK+5KOOdKukTXzDV3zV0L94Rr6Vq51u5J96R7yj3lnnZPu2dcO/esa+/+5jq451xH97x73r3gOrsurqt70XVz43JfeE8mu16ul+vteru+rq/r7/q7AW6AG+gGuhSX4ga5QW6wG+yGuCFuqBvqhrvhboQb4Ua5UW6MG+NSXaob78a7CW6Cm+gmuslusktzaW6am+amu+mu0owLR5ntZru5bq5Ld+luvju/ZsxwC91Cl+ky3WK32C11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XA73E5/zYVB3R631+11+9w+t9995bLc1+6A+8YddN+6Q+47d9h97464o+6Y+8Eddz+6E+6kO+VOuzPuJ3fW/ezOOe9SI+Mi4yPvRCZE3o1MjEyKTI5MiaRFpkamRd6LTI/MiMyMvB+ZFfkgMjsyJzI3Mi+SHvkwMj+yIJIR+SiyMPJxJDOyKLI4siSyNLIs4n3BzaEv7Iv4qL/BF/U3+mL+Jl/cl/DOl/SJ/mZfyt/iS/tbfRl/my/rb/flfHlfwT/mG/smvqlv5pv7x30L/4Rv6Vv51v5J38Y/5dv6p32Sf8a388/69v5vvoN/znf0z/tO/gXf2XfxXf2Lvpt/yXf3PXyy7+l7+Zd9b9/H9/X9fH//ih/gX/UD/Wu/XAgP8m/4wf5NP8S/5Yf6YX54zNt+xKVLZBjrU/04P96/4yf4d/1EP8lP9lN8mp/qp/n3/HQ/w8/07/tZ/gM/28/xc/08n+4/9PP9Ap/hP/IL/cc+0y+6dFPZL/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/gd/lO/0+/yu/1nfo//3O/1X/h9/ku/33/ls/zX/oD/xh/03/pD/jt/2H/vj/ij/pj/wR/3P/oT/qQ/5U/7M/4nf9b/7M/x76wxxhhjjP0l4y43xW97Ltw17fkHOeJXO/cCgKu3FMj6df/5FeXavBfafURCmwgAPNOj08OXtqpVk5OTL+6bKSEoMgfg0v8EnRcDl+NF0BqegiRoBaX+cP59RJcz9A/Gj94GEPernFi4HF8e/wsATP6D8R9/cvj8suGp+P/H+HMAihW5nJMTLseLoPUv91daQek/mX++Fr+ef+zvx8/5ZSpAy1/l5ILL8eX5J8IT8Cwk/WZPxhhjjDHGGGPsgj6iQodL15+XfuLzj67PE9TlnBxwOf5H1+eMMcYYY4wxxhi78p7r0vXpx5OSWnX45xuV/0dZf7nRCP63RubGHza8B7j0iAKAf3FAgPMN+Z98Fpv+I8dKufjW+fuupad9AFe+lGn/pnGu8AcTY4wxxhhj7N/u8qL/t4+rKzUhxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/pP/FmyK/0cGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsSvt/wQAAP//tuf5PQ==") fallocate(0xffffffffffffffff, 0x0, 0x48, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x6, 0x1000009) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid}]}}) 2m7.713119686s ago: executing program 7 (id=2463): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400)={0x1f, @none}, 0x8) listen(r0, 0xc) listen(0xffffffffffffffff, 0x0) 2m6.604781761s ago: executing program 7 (id=2467): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x8000) 2m5.551626423s ago: executing program 7 (id=2473): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) prctl$PR_SET_SECUREBITS(0x1c, 0xc) setresuid(0x0, 0xee00, 0x0) r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) 2m5.313932394s ago: executing program 7 (id=2478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 2m3.915790064s ago: executing program 7 (id=2481): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.044784877s ago: executing program 7 (id=2494): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x3) 1m46.059345856s ago: executing program 38 (id=2494): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x3) 9.491151311s ago: executing program 9 (id=2969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.048107653s ago: executing program 9 (id=2970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001fc0)="ffc29b91fb89a07aacf9b528eac3bf70d8225fe87a9d26a936e7532901b902e194110f", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c40)="a46724d8c08280b739e11be89f924cba360ec6e076e3b6666f6509186ce70b8e987128", 0x23}], 0x1, &(0x7f0000002fc0)=ANY=[@ANYBLOB="1400000000000000000000000100000007000000000000001400000000000000000000000200000002000000000000006c"], 0xa0}}], 0x2, 0x48045) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0xc, 0x1, 0x5, 0x0, 0x9, 0x0, 0x7f, 0x4}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.020723414s ago: executing program 9 (id=2978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.350153957s ago: executing program 5 (id=2983): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 6.036821152s ago: executing program 5 (id=2989): capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x94}) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000313"], 0x0, 0x0}, 0x0) 4.387047963s ago: executing program 8 (id=2994): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f00000002c0)) 4.180605764s ago: executing program 8 (id=2995): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000004, @private0, 0x7}, 0x1c) timer_create(0x3, 0x0, &(0x7f0000000300)) setrlimit(0xf, &(0x7f0000000000)={0x2, 0x439eda03}) socket$kcm(0x2, 0x3, 0x84) close(0x3) 3.084816518s ago: executing program 8 (id=2997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x1047, 0x4) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 2.945327015s ago: executing program 9 (id=2998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2f, 0xe, [@mic={0x8c, 0x18, {0xfac, '\x00', @long="322e981dd4e9e4dccdb2eceabeb57bc8"}}, @random={0x4, 0xf, "7e7f1500fab9062d0c04e5ed72122c"}]}]}, 0x4c}}, 0x4000000) 2.711682616s ago: executing program 9 (id=3000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002900)={0x1, [{0x1, 0x338, 0x7, &(0x7f0000000000)="7b815e27e139bce8d3efcc81057cae73b6971a1bbc84343ba976e453598887de6e54d17a5daab92c3e0a1f2d603bcdb2f89cd7f0ccc2771c2c81e7a09e1303de1118afc3d02c4f6356384786c38b03666c02c892443ac38b9d0e0833391484bb3c9e135d78b976"}, {0x1, 0x100, 0x3, &(0x7f0000000140)="c0f9524cc0d9826b5aa7c5c9b22c43675765551248cd4de23ed29485389294b0"}, {0x2, 0x0, 0xdd7, 0x0}, {0x1, 0x0, 0x1, &(0x7f00000001c0)}, {0x1, 0x3080, 0x6, &(0x7f00000003c0)="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"}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x8001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x30, 0x3, &(0x7f0000001500)="e45ade7db86a"}, {0x3, 0x0, 0x1, 0x0}, {0x5, 0x0, 0x101, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xe2fb, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x83, 0x0}, {0x0, 0x0, 0x2, 0x0}]}) 2.560664044s ago: executing program 4 (id=3002): ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r7, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value, r6}, 0x20) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r4, 0x1a, 0x0, 0x0, @void, @value=r8, @void, @void, r6}, 0x20) r9 = socket$caif_seqpacket(0x25, 0x5, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="1a000000200000000000000037f50ac8dc6e691cc4516e96a6fc96abd27b75f99c432f3d7a49a148bf48478835595d883fd970440cac0e85941a23f6da30bd682940f0205ba0544e94fdb4a6034c421d6bbf0b53322b77b4d48ce08ccacb2413c2deb7aa02e06be2393ce9e348132e2923781a79adaa087c6cbff6f5e7fe43f3085880e32c3cfd30b8e0f36e4b7abc2ac578d2d92f39c1c7c8e01ab9e4", @ANYRES32=r10, @ANYRES64=r6], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000200), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$kcm(0x29, 0xbec95ba3382697ee, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/108) 2.43940642s ago: executing program 0 (id=3003): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/207) 2.43586797s ago: executing program 9 (id=3004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) pipe2(&(0x7f0000003ec0), 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x80000000, 0x7fffffffffffffff}, 0x0) getpid() sync() sync() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) sync() sync() sync() sync() sync() sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000005c0)="908bd5b39a195f2fa20863c0f1cbe1339c7e91cb05e4a6a8bc1805466d9ae203ef8e3c98fce6baf155a6dedb6bff29f588d660f6632dfa63efee5408db13c3e25feaba452d6c55836fe64d35a0e6072a36e11f58b64ee23a891093b363898ad8d875889622b7ed7f20fda67db1b9d33ad6b5a13bdf6143b20fae44bc78ea8c3d514dcc5389ea86b880a2ef4c06f52f2d24aff68266b9233c0b9970f112920fd5d4b190cb48c7a2c398cfdb21032a8844b32d44f85454c6c26551beefe0f0e7159cbe8c6c601a056682336aa746be698e161be9ad8ddd2cf2944a885c", 0xdc}, {&(0x7f00000006c0)="43522ba7a8ab681ffa814f3470ed7e212eb9dfae139566b3cdbf89850b0721bcca3b0a743ec6e865231a38dce443c1672ba8b3946289eae115f23b83cbbc1b2dab9a2429586d134a3c24d7d8ce761e237afe61091015099ca90ffad5a034996bd639d8a3a2a250360fb20df963027463dd18de7861ee59a230e93a1e2c6f9a2d38e5b6e2c4c4111d2e4c9270b43188485d5a8f633671d34df6ebb7e6f87df9a2b3d2b4b5c0004533dbadd4f57ec88225f50744e6aa138bb35eaae902bc0563805cacbba00b667d9c9ad95128cf8289013484ae75c691a64f6a1b46be5aacacba369ff332f55ae0c815d294d80d65585d42bdf9ab39089f6e924d1aaee59b895dee761c04829dad09d2a935db5c519cedca23362362403b5d08d8956ffa18ef20d0d190bfb4b45afe98547d5b22b8c00554fc226573272a76dbc5b57318d6ae356c8d5ee5a502479603711a0f25d7e7976230f18edb9d6e34a87b34b1cddbc883f1c15439d9482a8c1b9e4a124408210d5666c4ad563cbbb066b2ba70ba55ce56967a96704367d2004aec01406599097c302774f37bc0aacc0f83f2714b2030b23ee630ef599a9eceb1e5da0cefd490bd8412bd6ffaee6c9ab74a93222a1eae8a4f2ce8633f61626deee7ba7cb51f8fee59342143362d1d6b1bbad6f8a5813c5d3c0b3950b1a6f2e90179c98b7bd39639f888edc0857e44678095758424145b888b666df02da0c1c3aa9ee78aa0f82d9832c228accfcb654fcc6a7911fd607b24317e507b1bb695021f6e2a535eda08d7356c8f1c2b14cf60641b87e703697729936a170c1301055768700f3ecf8617f40ab433b8c5ce552eae193adf446b132ae98dd7993944bd69b5f8afa59f4bfcf73dd16f67ce40fcf74ca524551965c5ec4860db02743ea1dfcb9f8f9eb47bbdf9fe4a0ef9f92d48e8f3866fccfc80c7b5165550cc608f0be7f0e65cc1e76943abb09ff04105623748ddabbb7b41893f66f75db65f114b257c4cc444f7259f818ca32ea44a52990392572806e6ec504dc7d40f17e608484a4bb7ad2b8a292ec99ab8cc6e70c184f3e8d5b960c2087576490bad3dadc0cbb21f14558af34ca739518fcf4d1803b9541f6d93a0a49004798a44ee6333124c68ff291e9348948662b0a9e0f4170cc105001d652c85000b953f76299e85760cdde433f9f3954c5bc6b9e78d165114b26f98a5831ff4d958e3056b27b8b65673d728d8e4f49730e059de4e20b039da75a1c6424b67aabd8f6ccdc9cd90241b293e954cc900470ed96b19e86bc64f2a9fb57da58012a77563b02a875d2fb4fb41c34b5a0d9695a4e31829e508e32c6acfc3b4622598299cafed356c04d8ca8a2fef52e728bdff83639696cdbb0b0c9bcdfc8b2e0735fe4df3f51806399fe8b125994d7e58696b80f5cc7def480392a7b21459cfa91e76ab5ae10880e9bbc80b5f53a4ceb0c650969832fa5cc81c379b2d65696aa877b512fb31897d78338c7966274207281056c41ff3d2be6532996130b883baff1639c9d1e49ebbe230a5bdffab077ae7f1a85896448ec764e92404bb745e7aa87d18aaa8e45220547d44f1d57619368d0dc0ed07f116c793d38882bbc3a49351f6f1f7ac058a5c9f9bccf07078c0346c9fc685c666a13958eabc39ea89a2b0d4b004b08503fe84ff77d9502ff71eeeb4bee22e8c57bbdeba15f482516f726494ecda01b70e02b7bca11d70273979ac12ca377599a72a06dc6ca70a87273bf80b7ed665494fdff6a8be804b3dacc72bbda6e97a0becf46215329815f90d8dd4ee2565ec48aae3d240156422b39905402c6b06e0ee0591a7702ac02a42a83050892b07dad6ff295812282e83c0a9b22dafa09c549487d4b722c386257cf87e6b0e0ffca612e6c7e1d54c3ae2ac7b6f31e58a4068936b9c6a2953f12ab0e880c1daaaf91dcee0503b0412aaefb6db89b3059ccabfe3f973226d6c81fd45f5e3add6329dc4669135052ac7e6d5eabbecc2269a8b78595cae6a50b6a88ef570962661f19fd11b05ddcbd8dd61c916cfbd9ba469fd60773fea8b9a518b8cbfc79ca10ea9983b1292c3e397706c68597a4857592b1dbb5a955c2268f67c9212ee7bc513bd88c6e16670f8970087d1481c7304f9538cb0d062384bbcf7e91f00bb51473e651c4d2b35745192c92edad945689a6a83c94905718febb66c7f34e567fc2bd85507b6cd237296803ab4f019958f590d89af6b706ccce5631fc4fb7f4cd7ba63adee8f4aad8e0e560a74abbfca76d6d47a8ff2738fd610e568f3edf7064b19505c359a499ceb8626f15e517d55b730872b40924fc93d19573cadd7552045312abaafc5f16d77ec55fae6e72488fc0bbe2cf6bcb738509b37c429168d6d75ebd960635c5df817919af573a739fceb7d17094a3615a9cc42b5fde11c3d74496519bd14a544c9603f09de426102d9fd2aaece969f2c285a56b61ff2272bfd0d994e4b22cac1e4f2fbbe34e6ed0bd323e765da424e2d83a0c9e35339725aebcc48b5fd0312b3cfe738c2964818161eaa06062193a8a5e7142f67874c804a4ca9fc874585815707294c8dd3dda76d5f130ff60fcba15df82a4f0228453b17558d9bd7e4eef8bb506375a4e36a02a7467895604c28f97c3e10a441ef206eb94c9e65fc3a67d79d56621625498aa687fd467784563c24a0da445cb0e71ca1f9aea5405c8f0517917921504185bf6e80084ef5d2c70f434dc62599afdb2062dfa2f30a1bbbd308a37f1a25e772a7d592fc9e5b761ac8f7c7fa6341e58b1f2490babec5281126191766e4d1545fec98f8c6284e01e37cf79eb8ebceac8adb8856e687d45c4b93fc31622d841e9cf5dce318c03433d9c47c276f4f42b266c2db5da1f984d905ab5e540b4e79a7451d5042178671b1b25d7b529e5b81894e2207e0b3c0b9af9e5ca63b68caaca0d3efa5fa92a30328a500df17b42a91430966ef96e82527cc7ed6ac08cdf1c24f8af98d588b5986ee6494bf5bf39b206d8d036bbef98eb7fa7c9a532ff18fa26e6fcafab321e709e8c5836c492d411983a57d700d83281ecd8b0c0a481371c49765d736368807b3ca0bfb76835e5f846f06813fbb58c2b1a3c05659f1dbd57ba42387df2d5679c785aaad46987a8fff8edb5f9edbdd15efb8abb51193b3808a3244dc9d7947eb45f168a376e2547f3c0d023742b93df85209b1a86e6515a441c89272001053f2450053084a3481fd654947b3824a59039a94973521753e01e938250efcd8481e118e243bc107204d037688625ac48b7da02ec557a145b2de6460ccb025e1dddd6e88463e88ce95bf80cc93fb1ba3072bf14e4a6fc1c409b0e8c529f671c2b9d08a010fcd0430a996d51689fd547825d30e84f276488e422b5eb6b5a6198a68ff95d88e253f3a4320f729baef15465d1e6e4e6d46db747279cfed614debd021921e2e982d6903726273eddca1ef8bc424df97b803b6c6e7d30468da08288634ee23fecbb9d3980180166bc592402bccbb7501ec824a9dfb91b5491981e79b21559945f5cf56ebd81031714fe5d64b1e8847d5f68034f004a4c1c2cd70b84a0833ca1a18f4f6358aaf541de8f552a3035d0d00d45bacca4fa7e5d7f01c457fe9b579b45c8efd1bd880e675584a9eb6960e4622b43d5327ecf2a16363215a21ecda7f83abbdf65930808bef3c54060b68b239ba1b436feafc1add1dc170de33633c5fca12c79631134c624f88055413bc3daa8fad6d210f7e223d1a33d93f6cff9685c1e16dc9e7e9c4b5add9bd86cd4a22af33343461a804f0c1ca195feaa7e96046134e4d5d909f03bcd85451e4d4f5485f9c05453537f535b2fee669f97ae54b12432c785fa9620741916b46c62214ebe8a0991ee9c427a3ee8636bf456112d5a43b8559cb77df15155bc7898f6ac340222552ff17695d9da79649851c5e53d25252d06c04924f8914c7430c2c110dbad68a7072e6d10a065478a4c823a81dcae3b8ae1bf4265a4e35c1378ff82395d86d25696e22b19c62b22b52f5c3e5a1dc00afc62b20a7a729ffa39aa5db98193fe3302c19220cfe72491e613c6459feaeb38cc36678f0e8616424d044ba3837fdd1f600343cd533fd84885d84de9d32cecccecb6e75415d8299c67c8e9ecae99fc44b1983b27bc64d24815dff9f64aab9aaf571bd03f66785bc54c63403f2d3dbaf91831011664088c9e6cfc6139da47f4a6e6a0975dececa4b3cfb3ae21e4df3cf04ba7406a1d5c1bef73885d02f21aac377c6d8582de51fcda8764b05a3808123128160cd3ef1ae0276a9b259b1fde26ebb53bc038acbd08a83373810e08332690b568633eb6653f1eecf6c9360ff30b8a144440ae7512071190ae4f4ef6492cccf3af9b8f0b70f984e431e2b19782e1e62f5bf5afbc1cdd401102841e26ee9b1f630fb1b254c68eccd1453efe3cbe359fb25224eadbb538f3214b3e068b70baf87e86f30c798ce39544116c3a4edb0b12d85fd5015551a72ddd2fb3b74ac78f1800c1e966133ffe6fce8d6af8ba4682370090fdde3fc513c61d5630a0716e473c638e1a8ff1144a27ec4a567662e32a6c2581a4224b3a3d751ec23d9d0db4f0ef7db8b19f4010ce47e163aa7e1b5d3b5b071835cf0668b6e97b4be531b51d1ddf8ab27805d1da6eae60860f2ef04c6957260dff16d41ae8656c78d864ffa5c7f730088f3f8bf7ece70ed31b3f52b95759583b53095f2a7e55d34958ea84be7d151bf2e08328b40a6a8d8504606c409ce512806719705cc6b5fd8d289ef599b5470620c29b79868631d872d8795b4c03b8263348d6bae603030da4064fd9da16eca6e0bf459b310cb34fa375cfd339ac35da2dd968b16cd8f70e43a3a587c5ad61b9ca8afec770845c5d396e1dd51ac28b7ac2dc53d8b33a281a1c36fc8cb87994f892c1cdb55456f9e9e3abd09b6c971362cb0d29161756973c27fdd9e64ff28a7f695f07521382c35d6cac10b9ea71dda6650cd76769ad2610db50590817a1ece3424fe223e8a0ccb965423fdd4fbc64fb5ae1ee7e2dafab01a0b52c6cab3571983714531f50a95561cdb2b2bce44cbe97d7567c2c20bbacaabd04f01e9fb9a300a8a570657b09e1de205c5b0520f5f972a185bee5158e81df3ddf3c688e81c4fb2f644624507431512328386d1c856a72d6697f58722ec9b55970d0ac71ecb9208961ff4bfa04eff9d6da1632d5642b30f78f246792529d619ee26c190ff6afe575acd4e9aae1cd28e0f54b2879bbdcbdbf6a370b94b0a56ed15784fc603a259b2c85211a67701b7d491a73aac2583be72d8d9d82fe57883517ea27414655159a65d786a5f9acaab898623ca4f162daea546aa45909415fe30113f6d849028", 0xed9}], 0x3}}, {{&(0x7f00000016c0)=@sco, 0x80, &(0x7f0000001800)}}, {{&(0x7f0000001980)=@caif=@util={0x25, "436b715e86e6bb4421b117143a32cc7e"}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001b00)}, {&(0x7f0000002b00)="126ae364a0b54c1c0ee94a709bd7f9f3c2ed482d0c5f7376da073c7d072cb7fa8ac19756da4ed3bb5d100f", 0x2b}, {&(0x7f0000002b40)="f2a64cb31bc9c2fbf15580b6695fec5366ae6fb2c2737a5dedd68a5fecec4d60217ddbd390575b9245b0c6eea09e47017b798ec9f439872091f67b6eafb43d666a8d1bdcf1e554d27a5a461de129fcadd80b48b12ec5305a1c51cb69b3763879c5c53dc496966e9943bc07d6de503f90b9b81448640126f499b477575ff8c42c919023e3", 0x84}], 0x3, &(0x7f0000002c40)=[{0x10, 0x74, 0x2}, {0x98, 0x0, 0x9, "d3487ac87fb45ed965d1c6f02a4cb2e3757a51bfed236012b07a58c1c4a1e8255bac91d9ed343657e343ff52ece0555f509fdedd8a423e618430271445daaf324be6fc8750c786c15d136e3063769d90dd7a474e98c19dfed3e9dbda7179015c6a0ed4965ac4b47fbdac16f2700b19e6d15ede5381737aa5de3b129a8331a604fdb45287"}, {0x10, 0x117, 0x2}], 0xb8}}], 0x3, 0x20000004) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) personality(0x5400004) remap_file_pages(&(0x7f0000d94000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x2000) 2.417035051s ago: executing program 5 (id=3005): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001b40)=""/4078, 0xfee}, {&(0x7f0000004980)=""/202, 0xca}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000840)=""/87, 0x57}, {&(0x7f0000005580)=""/4094, 0xffe}, {&(0x7f0000000180)=""/268, 0x10c}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f0000000600)=""/104, 0x68}], 0xb}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x0, 0x0) 2.290067517s ago: executing program 0 (id=3006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)={@void, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x205}}, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x250, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x3, 0x1a, "6c5a25478732e2616ac86911f0ec555102ca613245c9875dd19746d848c6d1ba975d8d47dc505eaa8e31372d70f8c2e52f430e516c7f88c010f0ffba6509e3703c6a36191e522138decbf95ee54345cd2088c2d1dbca4bef3059a36c74407352d3803ca336759fc88239b032cf8fa1bb71ad05344cfc33826c6d5597ea404db0d7e61b7b41f01b36c7bdf326ffd43cf7065ca1c033bc6b72afbf67a78c441361d2b8f66f763afb8975953ad0ffb5efbea36680cf7934681db3435dc6767adaf2a6dfaf9cc70804a0cb7421e96d0f58f29b4a1b8f"}, {0x19, 0x14, "ea6e0639458f127b5ffbf90f8cdc37264b5ed6ed0f4974aed0f1e34d123ea45468e8239d82c685b3b5d70513003987721fbcefed602f11dbe62f981b7f0726e93f1d9db7752969e74897d147a925f062588537b467dc59272ff41c2f4436c831bf272aaff3dca697fca18f90cf306c7513e6155c8e65a9513fdb19350fdb36c6d801a0fdb592327b55cbc936f827be69e85f21423f3c873ea082034c950466e6b4"}, {0xe, 0x3, "77f0f88fb2fd9bbd2c4597ee75a9a672ec7df6ff751e5e731dae73"}, {0xe, 0x7, "dfa311dac03f69ba37738f70c0e84d2f3ddd78142e1dc844cdb09343aa1a85ca7e8f7df1df78b4a7b7c16861673cc51621c038cf81f16bd7"}, {0x1, 0xd, "ec4823f89e9ffd92cd859854ba0b638aa7072810ef16450280f8730892f2454cfae6823ae1ef21d02f0c54ce89c3dfa20e427211684ddd81dff0739ea0518cafed2eaead501a577578123b633c041ff415ce6ab7ca9a1c306d3a1439b5784439b1dad5d0806bf1f1e4fe"}]}}}}}}}, 0x28a) 2.289413317s ago: executing program 4 (id=3007): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000004, @private0, 0x7}, 0x1c) timer_create(0x3, 0x0, &(0x7f0000000300)) setrlimit(0xf, &(0x7f0000000000)={0x2, 0x439eda03}) socket$kcm(0x2, 0x3, 0x84) close(0x3) 2.208728781s ago: executing program 5 (id=3008): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x20040011) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = open$dir(&(0x7f0000000440)='./file0\x00', 0x42000, 0x4) fchmodat(r3, &(0x7f0000000480)='./file0\x00', 0x81) r4 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r4, 0x0, 0x0) 2.048016089s ago: executing program 8 (id=3009): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.177153722s ago: executing program 8 (id=3010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1.064757527s ago: executing program 4 (id=3011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xd4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.00823023s ago: executing program 0 (id=3012): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 907.937685ms ago: executing program 5 (id=3013): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000240)='?', 0x1, 0x0, 0x0, 0x0) 632.757609ms ago: executing program 5 (id=3014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 630.068919ms ago: executing program 0 (id=3015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 507.786586ms ago: executing program 4 (id=3016): socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000140002800800", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xc, 0xfff1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xc4ff}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d4}, 0x4000880) 346.708283ms ago: executing program 8 (id=3017): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0xffffffff, 0xaa}) 329.423414ms ago: executing program 0 (id=3018): ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r7, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value, r6}, 0x20) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r4, 0x1a, 0x0, 0x0, @void, @value=r8, @void, @void, r6}, 0x20) r9 = socket$caif_seqpacket(0x25, 0x5, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="1a000000200000000000000037f50ac8dc6e691cc4516e96a6fc96abd27b75f99c432f3d7a49a148bf48478835595d883fd970440cac0e85941a23f6da30bd682940f0205ba0544e94fdb4a6034c421d6bbf0b53322b77b4d48ce08ccacb2413c2deb7aa02e06be2393ce9e348132e2923781a79adaa087c6cbff6f5e7fe43f3085880e32c3cfd30b8e0f36e4b7abc2ac578d2d92f39c1c7c8e01ab9e4", @ANYRES32=r10, @ANYRES64=r6], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000200), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$kcm(0x29, 0xbec95ba3382697ee, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/108) 168.970572ms ago: executing program 4 (id=3019): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003042000"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00'], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 163.135402ms ago: executing program 0 (id=3020): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=3021): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000004, @private0, 0x7}, 0x1c) timer_create(0x3, 0x0, &(0x7f0000000300)) setrlimit(0xf, &(0x7f0000000000)={0x2, 0x439eda03}) socket$kcm(0x2, 0x3, 0x84) close(0x3) kernel console output (not intermixed with test programs): _device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 723.241717][ T22] smsc95xx: probe of 8-1:0.67 failed with error -32 [ 723.668305][ T9394] usb 8-1: USB disconnect, device number 26 [ 724.423017][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 726.845398][T11715] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.854408][T11715] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.233553][ T4350] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 727.423575][ T4350] usb 8-1: Using ep0 maxpacket: 32 [ 727.431429][ T4350] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 727.457979][ T4350] usb 8-1: config 0 has no interface number 0 [ 727.478479][ T4350] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 727.502406][ T4350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.518443][ T4350] usb 8-1: Product: syz [ 727.527178][ T4350] usb 8-1: Manufacturer: syz [ 727.539589][ T4350] usb 8-1: SerialNumber: syz [ 727.551982][ T4350] usb 8-1: config 0 descriptor?? [ 727.567062][ T4350] smsc95xx v2.0.0 [ 727.809016][T11715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.854439][T11715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.973002][ T4350] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 727.991535][ T4350] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 728.468994][T11715] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.478146][T11715] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.487503][T11715] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.496742][T11715] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.931120][T11755] xt_hashlimit: size too large, truncated to 1048576 [ 729.215322][ T4350] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 729.247302][ T4350] smsc95xx: probe of 8-1:0.67 failed with error -32 [ 729.691935][T11779] autofs4:pid:11779:autofs_fill_super: called with bogus options [ 730.543912][ T4350] usb 8-1: USB disconnect, device number 27 [ 731.322323][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1705'. [ 731.367247][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1705'. [ 733.886854][T11824] autofs4:pid:11824:autofs_fill_super: called with bogus options [ 734.296620][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1713'. [ 734.306606][ T9454] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 734.503715][ T9454] usb 4-1: Using ep0 maxpacket: 32 [ 734.511149][ T9454] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 734.703999][ T9454] usb 4-1: config 0 has no interface number 0 [ 734.791572][ T9454] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 734.800894][ T9454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.809877][ T9454] usb 4-1: Product: syz [ 734.814500][ T9454] usb 4-1: Manufacturer: syz [ 734.819135][ T9454] usb 4-1: SerialNumber: syz [ 734.870557][ T9454] usb 4-1: config 0 descriptor?? [ 734.900471][ T9454] smsc95xx v2.0.0 [ 735.808666][ T9454] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 735.821277][ T9454] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 736.339980][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1725'. [ 736.369386][T11867] device team_slave_0 entered promiscuous mode [ 736.376251][T11867] device team_slave_1 entered promiscuous mode [ 736.397378][T11867] device macvtap1 entered promiscuous mode [ 736.403612][T11867] device team0 entered promiscuous mode [ 736.525458][T11867] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 737.378393][ T9454] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 737.433678][ T9454] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 737.452597][T11879] device vlan1 entered promiscuous mode [ 738.422279][ T3597] usb 4-1: USB disconnect, device number 39 [ 738.709263][ T7] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 739.494747][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 739.901899][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 739.916128][ T7] usb 8-1: config 8 has an invalid interface number: 203 but max is 0 [ 739.927838][ T7] usb 8-1: config 8 has no interface number 0 [ 739.936902][ T7] usb 8-1: config 8 interface 203 has no altsetting 0 [ 739.949610][ T7] usb 8-1: string descriptor 0 read error: -22 [ 739.959877][ T7] usb 8-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=1f.29 [ 739.969342][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.101752][ T7] snd-usb-audio: probe of 8-1:8.203 failed with error -2 [ 740.172584][T11826] udevd[11826]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.203/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.276388][ T7] usb 8-1: USB disconnect, device number 28 [ 740.325669][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'. [ 740.335509][T11917] 8021q: VLANs not supported on caif0 [ 741.908915][T11931] tipc: Started in network mode [ 741.939672][T11931] tipc: Node identity def5cb1e089d, cluster identity 4711 [ 741.963608][ T8993] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 741.984035][T11931] tipc: Enabled bearer , priority 0 [ 742.004065][T11937] device syzkaller0 entered promiscuous mode [ 742.010936][T11933] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1750'. [ 742.020666][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1750'. [ 742.097392][T11931] tipc: Resetting bearer [ 742.121519][T11930] tipc: Resetting bearer [ 742.163775][ T8993] usb 5-1: Using ep0 maxpacket: 32 [ 742.176457][ T8993] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 742.193489][ T8993] usb 5-1: config 0 has no interface number 0 [ 742.202294][ T8993] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 742.223675][ T8993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.231732][ T8993] usb 5-1: Product: syz [ 742.246364][ T8993] usb 5-1: Manufacturer: syz [ 742.251023][ T8993] usb 5-1: SerialNumber: syz [ 742.268488][T11930] tipc: Disabling bearer [ 742.298077][ T8993] usb 5-1: config 0 descriptor?? [ 742.331150][ T8993] smsc95xx v2.0.0 [ 742.414930][T11944] autofs4:pid:11944:autofs_fill_super: called with bogus options [ 742.834929][ T8993] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 742.914366][ T8993] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 744.352703][ T8993] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 744.394208][ T8993] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 746.065573][ T8993] usb 5-1: USB disconnect, device number 39 [ 746.370669][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1764'. [ 746.437430][T11983] hub 8-0:1.0: USB hub found [ 746.443106][T11983] hub 8-0:1.0: 1 port detected [ 747.169952][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.221399][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 747.338313][T11977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.123643][ T4347] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 750.230788][T12025] device syzkaller0 entered promiscuous mode [ 750.323608][ T4347] usb 10-1: Using ep0 maxpacket: 32 [ 750.335784][ T4347] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 750.366212][ T4347] usb 10-1: config 0 has no interface number 0 [ 750.395226][ T4347] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 750.425074][ T4347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.433326][ T4347] usb 10-1: Product: syz [ 750.459940][ T4347] usb 10-1: Manufacturer: syz [ 750.482943][ T4347] usb 10-1: SerialNumber: syz [ 750.504285][ T4347] usb 10-1: config 0 descriptor?? [ 750.537530][ T4347] smsc95xx v2.0.0 [ 750.922350][ T4347] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 750.958785][ T4347] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 752.109180][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1786'. [ 752.131018][T12048] device erspan0 entered promiscuous mode [ 752.143781][T12048] device macvtap2 entered promiscuous mode [ 753.677463][ T4347] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 753.733696][ T4347] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 753.811800][ T4347] usb 10-1: USB disconnect, device number 5 [ 753.986469][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 754.033751][T12082] 8021q: VLANs not supported on caif0 [ 754.382480][ T4281] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 754.475950][T12092] device gtp0 entered promiscuous mode [ 754.502043][ T4281] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 760.421194][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1824'. [ 761.378210][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1826'. [ 762.941382][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1836'. [ 763.311058][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1839'. [ 764.315999][T12216] netlink: 'syz.7.1841': attribute type 1 has an invalid length. [ 764.408239][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1844'. [ 764.421075][T12222] 8021q: VLANs not supported on caif0 [ 765.238481][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1851'. [ 765.513771][T12248] block device autoloading is deprecated and will be removed. [ 765.918513][T12254] loop8: detected capacity change from 0 to 4096 [ 766.323181][T12254] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 766.491811][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 766.491904][ T26] audit: type=1800 audit(1774050560.420:33): pid=12254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1854" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 767.068081][T12263] program syz.9.1856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.047633][ T7923] EXT4-fs (loop8): unmounting filesystem. [ 768.362132][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1865'. [ 769.500839][T12299] device syzkaller0 entered promiscuous mode [ 769.537062][T12301] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1869'. [ 769.688517][T12301] lo speed is unknown, defaulting to 1000 [ 769.713390][T12301] lo speed is unknown, defaulting to 1000 [ 769.813222][T12301] lo speed is unknown, defaulting to 1000 [ 769.854739][T12301] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 769.915888][T12301] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 770.060750][T12301] lo speed is unknown, defaulting to 1000 [ 770.103508][T12306] bridge0: port 3(syz_tun) entered blocking state [ 770.111982][T12306] bridge0: port 3(syz_tun) entered disabled state [ 770.148487][T12306] device syz_tun entered promiscuous mode [ 770.186117][T12306] bridge0: port 3(syz_tun) entered blocking state [ 770.193181][T12306] bridge0: port 3(syz_tun) entered forwarding state [ 770.275454][T12301] lo speed is unknown, defaulting to 1000 [ 770.295128][T12301] lo speed is unknown, defaulting to 1000 [ 770.355652][T12301] lo speed is unknown, defaulting to 1000 [ 770.373071][T12301] lo speed is unknown, defaulting to 1000 [ 773.683549][ T4316] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 773.966872][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 774.019372][ T4316] usb 4-1: config 8 has an invalid interface number: 203 but max is 1 [ 774.275280][ T4316] usb 4-1: config 8 has an invalid interface number: 201 but max is 1 [ 774.452362][ T4316] usb 4-1: config 8 has no interface number 0 [ 774.518874][ T4316] usb 4-1: config 8 has no interface number 1 [ 774.558903][ T4316] usb 4-1: config 8 interface 201 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 774.641988][ T4316] usb 4-1: config 8 interface 201 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 774.701156][ T4316] usb 4-1: config 8 interface 203 has no altsetting 0 [ 774.728904][ T4316] usb 4-1: config 8 interface 201 has no altsetting 0 [ 774.779036][ T4316] usb 4-1: string descriptor 0 read error: -22 [ 774.816475][ T4316] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=1f.29 [ 774.879616][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.974955][ T4316] snd-usb-audio: probe of 4-1:8.203 failed with error -2 [ 775.119753][ T4316] snd-usb-audio: probe of 4-1:8.201 failed with error -2 [ 775.172547][T12249] udevd[12249]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.201/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.199322][ T4316] usb 4-1: USB disconnect, device number 40 [ 775.424974][T12366] loop8: detected capacity change from 0 to 1024 [ 775.432280][T12366] EXT4-fs: quotafile must be on filesystem root [ 775.468228][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1891'. [ 775.479587][T12368] 8021q: VLANs not supported on caif0 [ 775.491001][T12249] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.109612][T12389] loop8: detected capacity change from 0 to 256 [ 777.170655][T12389] exfat: Deprecated parameter 'namecase' [ 777.274620][T12389] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 778.355646][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 778.373691][T12412] 8021q: VLANs not supported on caif0 [ 778.833635][ T4350] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 779.067271][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 779.079287][ T4350] usb 5-1: config 8 has an invalid interface number: 203 but max is 1 [ 779.106926][ T4350] usb 5-1: config 8 has an invalid interface number: 201 but max is 1 [ 779.135955][ T4350] usb 5-1: config 8 has no interface number 0 [ 779.156156][ T4350] usb 5-1: config 8 has no interface number 1 [ 779.172446][ T4350] usb 5-1: config 8 interface 201 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 779.198141][ T4350] usb 5-1: config 8 interface 203 has no altsetting 0 [ 779.218516][ T4350] usb 5-1: config 8 interface 201 has no altsetting 0 [ 779.258899][ T4350] usb 5-1: string descriptor 0 read error: -22 [ 779.277492][ T4350] usb 5-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=1f.29 [ 779.306849][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.356845][ T4350] snd-usb-audio: probe of 5-1:8.203 failed with error -2 [ 779.438858][ T4350] snd-usb-audio: probe of 5-1:8.201 failed with error -2 [ 779.475908][ T9454] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 779.509383][ T9454] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.596101][ T4350] usb 5-1: USB disconnect, device number 40 [ 779.813788][T12439] tipc: Enabled bearer , priority 0 [ 779.824339][T12430] udevd[12430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.201/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.854198][T12439] device syzkaller0 entered promiscuous mode [ 779.956057][T12438] tipc: Resetting bearer [ 780.055736][T12438] tipc: Disabling bearer [ 781.418771][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 781.445974][T12455] 8021q: VLANs not supported on caif0 [ 781.446204][T12456] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 782.323989][T12471] tipc: Enabled bearer , priority 0 [ 782.354170][T12471] device syzkaller0 entered promiscuous mode [ 782.505847][T12474] tipc: Enabled bearer , priority 0 [ 782.525550][T12470] tipc: Resetting bearer [ 782.632767][T12470] tipc: Disabling bearer [ 782.656005][T12474] device syzkaller0 entered promiscuous mode [ 782.764721][T12478] tipc: Resetting bearer [ 782.844075][T12473] tipc: Resetting bearer [ 782.924823][T12473] tipc: Disabling bearer [ 783.266041][ T4350] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 783.311114][ T4350] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 783.468768][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1930'. [ 783.508155][T12492] 8021q: VLANs not supported on caif0 [ 784.174619][T12506] loop8: detected capacity change from 0 to 1024 [ 784.181873][T12506] EXT4-fs: quotafile must be on filesystem root [ 784.248065][T12435] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 784.468611][T12509] tipc: Started in network mode [ 784.513635][T12509] tipc: Node identity 32c34506f796, cluster identity 4711 [ 784.573292][T12509] tipc: Enabled bearer , priority 0 [ 784.622236][T12510] device syzkaller0 entered promiscuous mode [ 784.737022][T12509] tipc: Resetting bearer [ 784.839314][T12508] tipc: Resetting bearer [ 785.014508][T12508] tipc: Disabling bearer [ 785.245026][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1942'. [ 785.284005][T12528] 8021q: VLANs not supported on caif0 [ 786.377520][ T4316] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 786.406594][ T4316] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.778456][T12546] overlayfs: failed to resolve './file0': -2 [ 787.786926][T12560] device syzkaller0 entered promiscuous mode [ 787.949876][T12563] tipc: Started in network mode [ 787.972673][T12563] tipc: Node identity 46542bd5338e, cluster identity 4711 [ 787.992679][T12563] tipc: Enabled bearer , priority 0 [ 788.076810][T12565] device syzkaller0 entered promiscuous mode [ 788.109732][T12563] tipc: Resetting bearer [ 788.118918][T12562] tipc: Resetting bearer [ 788.241149][T12562] tipc: Disabling bearer [ 788.687178][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1955'. [ 788.755098][T12571] 8021q: VLANs not supported on nlmon0 [ 789.398516][T12590] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 789.407439][T12590] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 789.532098][T12580] sctp: failed to load transform for md5: -2 [ 789.858157][T12606] device syzkaller0 entered promiscuous mode [ 789.914647][T12608] tipc: Enabled bearer , priority 0 [ 789.942879][T12608] device syzkaller0 entered promiscuous mode [ 789.975532][T12608] tipc: Resetting bearer [ 790.058344][T12607] tipc: Resetting bearer [ 790.134466][T12607] tipc: Disabling bearer [ 790.348248][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1967'. [ 792.150616][T12636] device syzkaller0 entered promiscuous mode [ 792.210072][T12641] tipc: Enabled bearer , priority 0 [ 792.227846][T12641] device syzkaller0 entered promiscuous mode [ 792.331357][T12641] tipc: Resetting bearer [ 792.349009][T12637] tipc: Resetting bearer [ 792.407747][T12637] tipc: Disabling bearer [ 792.490444][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'. [ 792.526761][T12647] device team_slave_0 entered promiscuous mode [ 792.533123][T12647] device team_slave_1 entered promiscuous mode [ 792.568441][T12647] device macvtap1 entered promiscuous mode [ 792.579942][T12647] device team0 entered promiscuous mode [ 792.587298][T12647] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 793.124480][T12659] loop8: detected capacity change from 0 to 128 [ 794.238616][T12672] block device autoloading is deprecated and will be removed. [ 794.765401][T12685] tipc: Enabled bearer , priority 0 [ 794.784516][T12685] device syzkaller0 entered promiscuous mode [ 794.848580][T12685] tipc: Resetting bearer [ 794.864186][T12684] tipc: Resetting bearer [ 794.939136][T12684] tipc: Disabling bearer [ 794.950513][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1993'. [ 794.977532][T12687] device team_slave_0 entered promiscuous mode [ 794.983844][T12687] device team_slave_1 entered promiscuous mode [ 795.006876][T12687] device macvtap1 entered promiscuous mode [ 795.019317][T12687] device team0 entered promiscuous mode [ 795.131429][T12687] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 796.846101][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2001'. [ 798.399285][T12727] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 799.723930][T12743] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 799.733294][T12743] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 808.999251][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.596672][ T26] audit: type=1326 audit(1774050603.650:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 809.668815][ T26] audit: type=1326 audit(1774050603.690:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 809.750225][ T26] audit: type=1326 audit(1774050603.690:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 809.810095][ T26] audit: type=1326 audit(1774050603.690:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 809.863076][ T26] audit: type=1326 audit(1774050603.690:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 809.902641][ T26] audit: type=1326 audit(1774050603.690:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 809.939905][ T26] audit: type=1326 audit(1774050603.690:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 809.990007][ T26] audit: type=1326 audit(1774050603.690:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12846 comm="syz.8.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0954f9c799 code=0x7ffc0000 [ 813.974734][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 813.982850][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 815.224976][T12879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.547216][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2050'. [ 815.579697][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2051'. [ 815.676732][T12890] device bond_slave_0 entered promiscuous mode [ 815.683005][T12890] device bond_slave_1 entered promiscuous mode [ 815.743165][T12890] device macvtap2 entered promiscuous mode [ 815.772459][T12890] device bond0 entered promiscuous mode [ 815.801834][T12890] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 816.121113][T12898] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2053'. [ 816.439249][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2054'. [ 816.516671][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 816.530164][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 816.538813][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 816.557326][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 816.566295][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 816.574202][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 816.643370][T12900] device bond2 entered promiscuous mode [ 816.813945][T12900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 816.884692][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2054'. [ 816.958620][T12901] lo speed is unknown, defaulting to 1000 [ 817.529824][T12901] chnl_net:caif_netlink_parms(): no params data found [ 817.774370][T12901] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.781647][T12901] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.791006][T12901] device bridge_slave_0 entered promiscuous mode [ 817.800497][T12901] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.808457][T12901] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.817473][T12901] device bridge_slave_1 entered promiscuous mode [ 817.907188][T12936] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2061'. [ 817.958095][T12901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.974547][T12936] siw: device registration error -23 [ 818.010196][T12901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.143359][T12901] team0: Port device team_slave_0 added [ 818.152060][T12901] team0: Port device team_slave_1 added [ 818.307995][ T4316] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 818.409044][T12901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.448090][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.605519][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 819.197987][T12901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.208682][ T4316] usb 8-1: Using ep0 maxpacket: 16 [ 819.339606][ T4316] usb 8-1: config 8 has an invalid interface number: 201 but max is 0 [ 819.355948][ T4316] usb 8-1: config 8 has no interface number 0 [ 819.362113][ T4316] usb 8-1: config 8 interface 201 has no altsetting 0 [ 819.375767][T12901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.380553][ T4316] usb 8-1: string descriptor 0 read error: -22 [ 819.393145][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.398487][ T4316] usb 8-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=1f.29 [ 819.456908][ T4316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.480061][T12901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.557381][ T4316] snd-usb-audio: probe of 8-1:8.201 failed with error -2 [ 819.594831][ T4388] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.643398][T12942] udevd[12942]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.201/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.719760][ T4316] usb 8-1: USB disconnect, device number 29 [ 819.759795][T12901] device hsr_slave_0 entered promiscuous mode [ 819.769793][T12901] device hsr_slave_1 entered promiscuous mode [ 819.782853][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2068'. [ 819.807847][T12960] device bond1 entered promiscuous mode [ 819.814645][T12960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.830486][ T4388] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.860180][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2068'. [ 819.906530][ T4388] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.043378][ T4388] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.160282][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 822.158140][T12984] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2075'. [ 822.174189][ T4388] tipc: Disabling bearer [ 822.192289][ T4388] tipc: Disabling bearer [ 822.232155][ T4388] tipc: Left network mode [ 822.576754][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2082'. [ 823.243739][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 825.333925][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 825.994104][T13068] device syzkaller0 entered promiscuous mode [ 827.621858][ T4388] device hsr_slave_0 left promiscuous mode [ 827.628578][ T4388] device hsr_slave_1 left promiscuous mode [ 827.635395][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.643589][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.651046][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.674173][ T4388] device bridge_slave_1 left promiscuous mode [ 827.680484][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.705023][ T4388] device bridge_slave_0 left promiscuous mode [ 827.711324][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.777993][ T4388] device team0 left promiscuous mode [ 827.809293][ T4388] device team_slave_0 left promiscuous mode [ 827.815935][ T4388] device team_slave_1 left promiscuous mode [ 827.829542][ T4388] device veth1_macvtap left promiscuous mode [ 827.837273][ T4388] device veth0_macvtap left promiscuous mode [ 827.843785][ T4388] device veth1_vlan left promiscuous mode [ 827.849759][ T4388] device veth0_vlan left promiscuous mode [ 828.774971][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 828.837010][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 828.890900][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.950411][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.362474][ T4388] bond0 (unregistering): Released all slaves [ 830.017531][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2114'. [ 830.387537][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2116'. [ 830.418104][T13144] 8021q: VLANs not supported on caif0 [ 830.556360][T12901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 830.613736][T12901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 830.646673][T12901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 830.682076][T12901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 830.916813][T12901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.070005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 831.102532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 831.121732][T12901] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.166233][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 831.195950][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 831.224203][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.231415][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.300820][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 831.338908][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 831.376887][ T4450] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.384193][ T4450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.403230][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2120'. [ 831.431822][T13158] device syz_tun entered promiscuous mode [ 831.452743][T13158] device macvtap3 entered promiscuous mode [ 831.501160][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 831.519588][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 831.584969][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 831.629107][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 831.655618][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 831.688677][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 831.739284][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 831.779053][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 831.813786][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 831.834562][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 831.870502][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 831.895033][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 831.932121][T12901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 833.081085][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 833.099710][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 833.144972][T12901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.254378][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 833.289541][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 833.367125][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 833.391089][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 833.416622][T12901] device veth0_vlan entered promiscuous mode [ 833.440402][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 833.462575][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 833.502975][T12901] device veth1_vlan entered promiscuous mode [ 833.585817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 833.622987][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 833.684384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 833.713359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 833.754562][T12901] device veth0_macvtap entered promiscuous mode [ 833.782542][T12901] device veth1_macvtap entered promiscuous mode [ 833.850015][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.881362][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.924569][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.946691][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.966895][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.002746][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.013042][ T4350] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 834.046220][T12901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.065102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 834.083149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 834.110034][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.137093][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.157429][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.178514][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.198938][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.213455][ T4350] usb 5-1: Using ep0 maxpacket: 32 [ 834.234186][ T4350] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 834.264588][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.275099][ T4350] usb 5-1: config 0 has no interface number 0 [ 834.283951][ T4350] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 834.322783][T12901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.343531][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.363889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 834.375832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 834.401687][ T4350] usb 5-1: Product: syz [ 834.419327][ T4350] usb 5-1: Manufacturer: syz [ 834.435761][T12901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.489329][ T4350] usb 5-1: SerialNumber: syz [ 834.510443][T12901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.879301][T12901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.074027][ T4350] usb 5-1: config 0 descriptor?? [ 835.081403][ T4350] smsc95xx v2.0.0 [ 835.112223][T12901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.149198][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2138'. [ 835.172642][T13244] device gtp0 entered promiscuous mode [ 835.426483][T13251] netlink: 'syz.7.2140': attribute type 1 has an invalid length. [ 835.522087][ T4350] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 835.548149][ T4350] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 835.603002][ T9210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.631491][ T9210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.700614][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 835.796551][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.805290][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.814227][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 837.203040][ T4350] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 837.229892][ T4350] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 837.249704][ T4350] usb 5-1: USB disconnect, device number 41 [ 839.619233][T13303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2150'. [ 839.667966][T13303] device gtp0 entered promiscuous mode [ 841.113479][T13321] x_tables: duplicate underflow at hook 2 [ 843.372912][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2164'. [ 848.362350][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2178'. [ 848.611629][T13435] netlink: 'syz.0.2180': attribute type 10 has an invalid length. [ 848.633129][T13435] team0: Port device netdevsim0 added [ 849.134365][ T9454] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 849.955738][ T9454] usb 5-1: Using ep0 maxpacket: 32 [ 849.971416][ T9454] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 849.993474][ T9454] usb 5-1: config 0 has no interface number 0 [ 850.001701][ T9454] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 850.196833][ T9454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.350222][ T9454] usb 5-1: Product: syz [ 851.392363][ T9454] usb 5-1: Manufacturer: syz [ 851.421718][ T9454] usb 5-1: SerialNumber: syz [ 851.483850][ T9454] usb 5-1: config 0 descriptor?? [ 851.529472][ T9454] smsc95xx v2.0.0 [ 851.610005][T13475] device syzkaller0 entered promiscuous mode [ 851.796676][ T9454] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 851.842851][ T9454] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 852.069273][ T9454] usb 5-1: USB disconnect, device number 42 [ 852.086244][T13484] tipc: Enabling of bearer rejected, failed to enable media [ 853.754048][T13521] overlayfs: failed to resolve './file0': -2 [ 854.471866][T13524] device gretap0 left promiscuous mode [ 854.597247][T13524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 854.605390][T13524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 854.618794][T13524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.639122][T13524] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.063996][T13524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 856.769157][T13558] device syzkaller0 entered promiscuous mode [ 856.811451][ T4347] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 857.003941][ T4347] usb 5-1: Using ep0 maxpacket: 32 [ 857.594974][ T4347] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 857.603139][ T4347] usb 5-1: config 0 has no interface number 0 [ 857.676098][ T4347] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 857.802939][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.820945][ T4347] usb 5-1: Product: syz [ 857.829626][ T4347] usb 5-1: Manufacturer: syz [ 857.834608][ T4347] usb 5-1: SerialNumber: syz [ 857.882138][ T4347] usb 5-1: config 0 descriptor?? [ 857.906507][ T4347] smsc95xx v2.0.0 [ 858.362076][T13577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 858.370404][T13577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 858.860480][T13577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.027402][ T4347] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 859.043468][ T4347] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.041566][T13606] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 861.321593][ T4347] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 861.343580][ T4347] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 861.363611][ T4347] usb 5-1: USB disconnect, device number 43 [ 861.590181][T13627] usb usb8: usbfs: process 13627 (syz.4.2224) did not claim interface 0 before use [ 861.726453][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2227'. [ 861.782606][T13633] 8021q: VLANs not supported on caif0 [ 862.366133][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2230'. [ 867.038571][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2243'. [ 867.151484][T13701] usb usb8: usbfs: process 13701 (syz.7.2239) did not claim interface 0 before use [ 868.053953][T13690] sctp: failed to load transform for md5: -2 [ 870.060056][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.102384][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2255'. [ 873.933495][ T4500] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 874.161370][T13795] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 875.267559][ T4500] usb 1-1: Using ep0 maxpacket: 32 [ 875.295509][ T4500] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 875.344852][ T4500] usb 1-1: config 0 has no interface number 0 [ 875.384094][ T4500] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 875.443563][ T4500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.494109][ T4500] usb 1-1: Product: syz [ 875.498328][ T4500] usb 1-1: Manufacturer: syz [ 875.553439][ T4500] usb 1-1: SerialNumber: syz [ 875.629559][ T4500] usb 1-1: config 0 descriptor?? [ 875.641555][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2271'. [ 875.667852][ T4500] smsc95xx v2.0.0 [ 875.742129][T13802] device macvtap4 entered promiscuous mode [ 876.137778][T13814] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 876.382514][ T4500] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 876.483002][ T4500] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 878.826178][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2282'. [ 878.842760][ T4500] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 878.864184][T13845] 8021q: VLANs not supported on nlmon0 [ 878.898152][ T4500] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 878.948853][ T4500] usb 1-1: USB disconnect, device number 2 [ 879.240230][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2285'. [ 879.297241][T13855] device macvtap5 entered promiscuous mode [ 879.716882][T13868] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 881.038051][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2296'. [ 881.111184][T13889] overlayfs: failed to resolve './file0': -2 [ 881.234790][T13887] 8021q: VLANs not supported on caif0 [ 882.037733][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2299'. [ 882.104599][T13902] device macvtap6 entered promiscuous mode [ 883.583506][ T4350] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 883.687088][T13945] overlayfs: failed to resolve './file0': -2 [ 884.603580][ T4350] usb 1-1: Using ep0 maxpacket: 32 [ 884.610822][ T4350] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 884.630300][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2311'. [ 884.669344][ T4350] usb 1-1: config 0 has no interface number 0 [ 884.699878][T13948] 8021q: VLANs not supported on nlmon0 [ 884.721598][ T4350] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 884.761594][ T4350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.810634][ T4350] usb 1-1: Product: syz [ 884.817921][ T4350] usb 1-1: Manufacturer: syz [ 884.838412][ T4350] usb 1-1: SerialNumber: syz [ 884.931365][ T4350] usb 1-1: config 0 descriptor?? [ 884.941736][ T4350] smsc95xx v2.0.0 [ 884.998345][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 885.294516][T13921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 886.503674][ T4350] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 886.514566][ T4350] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 886.863225][ T4350] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 886.911988][ T4350] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 886.964065][ T4350] usb 1-1: USB disconnect, device number 3 [ 887.203306][T13989] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 888.543872][T14009] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2327'. [ 888.646519][T14007] lo speed is unknown, defaulting to 1000 [ 888.681284][T14007] lo speed is unknown, defaulting to 1000 [ 888.736056][T14007] lo speed is unknown, defaulting to 1000 [ 888.897697][T14007] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 889.048456][T14007] lo speed is unknown, defaulting to 1000 [ 889.064489][T14007] lo speed is unknown, defaulting to 1000 [ 889.072839][T14007] lo speed is unknown, defaulting to 1000 [ 889.085904][T14007] lo speed is unknown, defaulting to 1000 [ 889.092849][T14007] lo speed is unknown, defaulting to 1000 [ 892.485885][T14074] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2342'. [ 892.570413][T14074] siw: device registration error -23 [ 893.555442][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2347'. [ 902.549798][T14205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2369'. [ 902.567821][T14204] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 902.597340][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2369'. [ 903.699146][T14217] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 908.062868][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 908.100916][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'. [ 913.869765][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2400'. [ 913.920561][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2400'. [ 919.322419][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2415'. [ 919.426084][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2415'. [ 920.313833][T14414] overlayfs: failed to resolve './file0': -2 [ 921.155965][T14423] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2421'. [ 921.772611][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2428'. [ 921.878296][T14438] device macvtap1 entered promiscuous mode [ 921.893513][T14438] device bond0 entered promiscuous mode [ 921.899201][T14438] device bond_slave_0 entered promiscuous mode [ 923.704204][T14438] device bond_slave_1 entered promiscuous mode [ 923.712238][T14438] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 923.835097][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2431'. [ 923.918483][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2431'. [ 924.171671][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2433'. [ 924.216732][T14473] 8021q: VLANs not supported on caif0 [ 927.552540][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2449'. [ 927.608310][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'. [ 927.643897][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2451'. [ 927.662696][T14531] 8021q: VLANs not supported on caif0 [ 927.754014][T14539] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2452'. [ 927.814549][T14539] siw: device registration error -23 [ 927.889868][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2453'. [ 930.360746][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2467'. [ 930.436446][T14586] device bond3 entered promiscuous mode [ 930.463641][T14586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 930.478469][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2467'. [ 930.493506][T14588] device macsec1 entered promiscuous mode [ 930.541404][T14591] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2468'. [ 930.551986][T14591] siw: device registration error -23 [ 932.126370][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.469110][T14630] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2482'. [ 932.482684][T14630] siw: device registration error -23 [ 932.853862][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 933.285293][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 933.717680][T14659] tipc: Enabling of bearer rejected, failed to enable media [ 933.955569][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2491'. [ 935.472392][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2498'. [ 935.529251][T14685] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2495'. [ 935.568527][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2498'. [ 935.582345][T14685] siw: device registration error -23 [ 936.827875][T14705] netlink: 'syz.0.2501': attribute type 3 has an invalid length. [ 936.885807][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2501'. [ 936.937660][T14706] device vti0 entered promiscuous mode [ 938.518510][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2507'. [ 938.647838][T14732] tipc: Enabling of bearer rejected, failed to enable media [ 938.683931][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 938.985097][T14745] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2509'. [ 939.081744][T14745] siw: device registration error -23 [ 941.214171][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'. [ 941.303700][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 941.369613][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2516'. [ 941.399908][T14770] 8021q: VLANs not supported on caif0 [ 941.702682][T14775] device syzkaller0 entered promiscuous mode [ 942.775141][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 943.233874][T14798] tipc: Enabling of bearer rejected, failed to enable media [ 944.995427][T14823] program syz.0.2529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 945.113893][T14827] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2530'. [ 945.153640][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2530'. [ 945.196301][ T26] audit: type=1326 audit(1774050739.250:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 945.277631][ T26] audit: type=1326 audit(1774050739.280:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 945.347971][ T26] audit: type=1326 audit(1774050739.280:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 945.482720][ T26] audit: type=1326 audit(1774050739.290:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 945.513522][ T26] audit: type=1326 audit(1774050739.290:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 945.614676][ T26] audit: type=1326 audit(1774050739.290:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 946.178564][T14839] device syzkaller0 entered promiscuous mode [ 946.254545][ T26] audit: type=1326 audit(1774050739.290:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 946.406515][ T26] audit: type=1326 audit(1774050739.290:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.9.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 947.364974][T14838] bridge0: port 3(ipvlan2) entered blocking state [ 947.407880][T14838] bridge0: port 3(ipvlan2) entered disabled state [ 947.956077][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2544'. [ 947.984847][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2544'. [ 948.344653][T14889] device syzkaller0 entered promiscuous mode [ 948.996413][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 949.016559][T14903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 951.293876][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2559'. [ 951.350078][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 951.769772][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 951.781915][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 951.792709][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 951.800693][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 951.808433][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 951.816884][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 951.873983][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 951.883137][T14940] 8021q: VLANs not supported on caif0 [ 952.008109][T14937] lo speed is unknown, defaulting to 1000 [ 953.537856][T14964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 953.970955][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 954.083838][T14964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 954.366384][T14937] chnl_net:caif_netlink_parms(): no params data found [ 954.402868][T14978] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2573'. [ 955.481687][T14937] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.536533][T14937] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.581895][T14937] device bridge_slave_0 entered promiscuous mode [ 955.689574][ T8258] bridge0: port 3(syz_tun) entered disabled state [ 955.901150][ T8258] device syz_tun left promiscuous mode [ 955.929905][ T8258] bridge0: port 3(syz_tun) entered disabled state [ 956.063742][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 956.567554][T14937] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.596232][T14937] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.663284][T14937] device bridge_slave_1 entered promiscuous mode [ 957.031355][ T8514] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.682449][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'. [ 957.713966][T15033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 957.896760][ T8514] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.976174][T14937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.068763][T14937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.124292][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 959.032736][ T8514] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.083581][T14937] team0: Port device team_slave_0 added [ 959.131625][T14937] team0: Port device team_slave_1 added [ 959.215825][ T8514] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.576936][T14937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.604769][ T26] audit: type=1326 audit(1774050753.660:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 959.653450][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.689609][ T26] audit: type=1326 audit(1774050753.740:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 959.689798][T14937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.735166][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 959.773008][ T26] audit: type=1326 audit(1774050753.740:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 959.816011][T14937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.823011][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.867768][ T26] audit: type=1326 audit(1774050753.740:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 959.932456][ T26] audit: type=1326 audit(1774050753.740:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 959.943720][T14937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.090912][ T26] audit: type=1326 audit(1774050753.740:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 960.203486][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 960.309324][T14937] device hsr_slave_0 entered promiscuous mode [ 960.508763][T14937] device hsr_slave_1 entered promiscuous mode [ 960.627123][ T26] audit: type=1326 audit(1774050753.740:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 960.649541][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.874123][T14937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.926095][T14937] Cannot create hsr debugfs directory [ 960.959666][ T26] audit: type=1326 audit(1774050753.740:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2fb95cfce code=0x7ffc0000 [ 960.983000][ T26] audit: type=1326 audit(1774050753.740:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2fb95cfce code=0x7ffc0000 [ 961.063098][ T26] audit: type=1326 audit(1774050753.740:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fb99c799 code=0x7ffc0000 [ 961.104259][T15090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 961.173903][T15089] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 961.297278][ T8514] tipc: Left network mode [ 962.723838][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 962.748490][T15116] 8021q: VLANs not supported on caif0 [ 967.709630][T15208] siw: device registration error -23 [ 968.763586][T15205] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2627'. [ 971.257276][T15265] siw: device registration error -23 [ 971.414793][T14937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 971.453169][T14937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 971.501283][T15262] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2641'. [ 971.531983][T14937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 971.580390][T14937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 971.639740][ T8514] device hsr_slave_0 left promiscuous mode [ 971.654324][ T8514] device hsr_slave_1 left promiscuous mode [ 971.686965][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.714204][ T8514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.727941][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.751369][ T8514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.765786][T15278] usb usb8: usbfs: process 15278 (syz.0.2645) did not claim interface 0 before use [ 971.782513][ T8514] device bridge_slave_1 left promiscuous mode [ 971.792356][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.807226][ T8514] device bridge_slave_0 left promiscuous mode [ 971.815795][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.905586][ T8514] device bond0 left promiscuous mode [ 971.924041][ T8514] device bond_slave_0 left promiscuous mode [ 971.930466][ T8514] device bond_slave_1 left promiscuous mode [ 971.958723][ T8514] device team0 left promiscuous mode [ 971.972741][ T8514] device team_slave_0 left promiscuous mode [ 971.978965][ T8514] device team_slave_1 left promiscuous mode [ 971.994162][ T8514] device veth1_macvtap left promiscuous mode [ 972.012760][ T8514] device veth0_macvtap left promiscuous mode [ 972.022578][ T8514] device veth1_vlan left promiscuous mode [ 972.039197][ T8514] device veth0_vlan left promiscuous mode [ 972.622808][ T8514] bond3 (unregistering): Released all slaves [ 972.933846][ T8514] bond2 (unregistering): Released all slaves [ 973.271617][ T8514] bond1 (unregistering): Released all slaves [ 974.016467][ T8514] team0 (unregistering): Port device team_slave_1 removed [ 974.118197][ T8514] team0 (unregistering): Port device team_slave_0 removed [ 974.188594][ T8514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.359394][ T8514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.872507][ T8514] bond0 (unregistering): Released all slaves [ 974.992487][ T4347] lo speed is unknown, defaulting to 1000 [ 975.254041][T15318] device syzkaller0 entered promiscuous mode [ 975.453074][T14937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.542038][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 975.595955][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 975.651588][T14937] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.682837][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 975.711806][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 975.790543][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.797763][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.807176][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 975.815343][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.839053][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 975.854004][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 975.902449][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.909695][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.975980][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 976.045584][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 976.065590][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 976.130468][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 976.163515][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 976.197106][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 976.238692][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 976.277870][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 976.310212][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 976.347038][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 976.400694][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 976.434809][T14937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 977.160134][T15363] program syz.4.2666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.205038][T15375] device syzkaller0 entered promiscuous mode [ 978.379296][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 978.397372][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 978.434189][T14937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.681990][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2677'. [ 979.732996][T15406] program syz.4.2678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 979.762686][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2677'. [ 981.245347][T15433] device syzkaller0 entered promiscuous mode [ 982.340401][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 982.384654][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 982.472011][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 982.516469][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 982.547416][T14937] device veth0_vlan entered promiscuous mode [ 982.564522][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 982.590387][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 982.640182][T14937] device veth1_vlan entered promiscuous mode [ 982.659821][T15457] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2690'. [ 982.723633][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2690'. [ 982.760570][T14937] device veth0_macvtap entered promiscuous mode [ 982.788763][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 982.803307][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 982.850738][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 982.884344][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 982.903774][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 982.941051][T14937] device veth1_macvtap entered promiscuous mode [ 983.012347][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.046013][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.065344][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.102774][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.152519][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.176801][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.245002][T14937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.316877][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 983.501752][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 983.751214][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 984.105451][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.163934][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.194249][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.205192][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.215238][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.230675][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.249758][T14937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.260875][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 984.299138][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 984.343276][T14937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.395240][T14937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.446536][T14937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.488667][T14937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.753267][T15492] device syzkaller0 entered promiscuous mode [ 985.451873][T15503] device syzkaller0 entered promiscuous mode [ 985.479242][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.503870][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.522762][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 985.683305][T15515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2701'. [ 985.722079][T15515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2701'. [ 985.745541][T15516] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2701'. [ 985.755222][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.770106][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.794859][T15515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2701'. [ 985.817012][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 986.052328][T15522] netlink: 'syz.4.2703': attribute type 3 has an invalid length. [ 986.095652][T15522] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 986.131443][T15522] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2703'. [ 988.077901][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2712'. [ 991.957694][T15631] netlink: 'syz.4.2731': attribute type 2 has an invalid length. [ 992.016576][T15631] netlink: 'syz.4.2731': attribute type 1 has an invalid length. [ 992.068544][T15631] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2731'. [ 992.937170][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.694342][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2732'. [ 994.922725][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2735'. [ 994.950650][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2735'. [ 994.977957][T15664] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2735'. [ 995.018992][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2735'. [ 996.889503][T15676] device syzkaller0 entered promiscuous mode [ 996.962446][T15688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.970628][T15688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.987381][T15688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 998.550478][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 999.436980][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2753'. [ 999.560339][T15744] 8021q: VLANs not supported on caif0 [ 1000.583441][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1000.785376][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.831984][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.674739][ T7] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1001.684459][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.709847][ T7] usb 6-1: config 0 descriptor?? [ 1001.816815][T15784] netlink: 'syz.8.2765': attribute type 4 has an invalid length. [ 1001.863456][T15784] netlink: 'syz.8.2765': attribute type 5 has an invalid length. [ 1001.882512][T15784] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2765'. [ 1003.259951][ T7] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x2 [ 1003.273847][ T7] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1003.445371][T15784] syz.8.2765 (15784) used greatest stack depth: 18096 bytes left [ 1003.539696][ T7] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 1003.548710][ T7] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 1003.569229][ T7] pyra: probe of 0003:1E7D:2CF6.0013 failed with error -71 [ 1003.625360][ T7] usb 6-1: USB disconnect, device number 8 [ 1003.689595][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 1003.733554][T15807] 8021q: VLANs not supported on caif0 [ 1003.924993][T15816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2772'. [ 1003.988927][T15809] fido_id[15809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1005.817983][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2783'. [ 1005.991404][T15845] device bond1 entered promiscuous mode [ 1006.049948][T15845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1006.120049][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2783'. [ 1006.246864][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2786'. [ 1006.297046][T15858] 8021q: VLANs not supported on caif0 [ 1006.385669][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 1006.385684][ T26] audit: type=1326 audit(1774050800.440:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15865 comm="syz.9.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 1006.610695][T15870] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2789'. [ 1006.620332][ T26] audit: type=1326 audit(1774050800.520:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15865 comm="syz.9.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 1006.698904][ T26] audit: type=1326 audit(1774050800.550:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15865 comm="syz.9.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 1006.782746][ T26] audit: type=1326 audit(1774050800.550:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15865 comm="syz.9.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf2d9c799 code=0x7ffc0000 [ 1006.862092][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1008.076896][T15886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1008.295587][T15895] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1008.363853][T15895] overlayfs: missing 'lowerdir' [ 1009.323156][T15909] tipc: Enabling of bearer rejected, failed to enable media [ 1009.500714][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 1009.624138][T15918] device bond2 entered promiscuous mode [ 1009.704122][T15918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1009.744445][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'. [ 1009.763207][T15925] 8021q: VLANs not supported on caif0 [ 1009.789662][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2800'. [ 1011.648458][T15967] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1012.797434][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2814'. [ 1012.813522][T15982] 8021q: VLANs not supported on caif0 [ 1012.934339][T15990] tipc: Enabling of bearer rejected, failed to enable media [ 1013.010788][T15992] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1016.439447][T16033] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2823'. [ 1016.541332][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1016.553269][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1016.562119][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1016.571051][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1016.583622][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1016.590990][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1016.596080][T16033] lo speed is unknown, defaulting to 1000 [ 1016.792930][T16033] lo speed is unknown, defaulting to 1000 [ 1016.848520][T16033] lo speed is unknown, defaulting to 1000 [ 1016.925670][T16033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1017.072399][T16033] lo speed is unknown, defaulting to 1000 [ 1017.144775][T16034] chnl_net:caif_netlink_parms(): no params data found [ 1017.218745][T16033] lo speed is unknown, defaulting to 1000 [ 1017.283416][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1017.365051][T16033] lo speed is unknown, defaulting to 1000 [ 1017.371118][T16034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.402834][T16034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.441943][T16034] device bridge_slave_0 entered promiscuous mode [ 1017.473828][T16033] lo speed is unknown, defaulting to 1000 [ 1017.483224][T16034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.495203][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 1017.501895][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.516447][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1017.539914][T16034] device bridge_slave_1 entered promiscuous mode [ 1017.557754][T16033] lo speed is unknown, defaulting to 1000 [ 1017.567615][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1017.613614][T16033] lo speed is unknown, defaulting to 1000 [ 1017.642393][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1017.654604][T16034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.673390][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1017.696745][T16034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.713398][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1017.753410][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1017.763165][ T22] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x75, skipping [ 1017.844536][T16067] netlink: 'syz.9.2830': attribute type 3 has an invalid length. [ 1017.847122][ T22] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1017.893889][T16067] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.2830'. [ 1017.913238][T16034] team0: Port device team_slave_0 added [ 1017.925311][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.938881][T16034] team0: Port device team_slave_1 added [ 1017.958791][ T22] usb 1-1: Product: syz [ 1017.988014][ T22] usb 1-1: Manufacturer: syz [ 1017.992713][ T22] usb 1-1: SerialNumber: syz [ 1018.046232][ T22] usb 1-1: config 0 descriptor?? [ 1018.052712][T16049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1018.107773][T16034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.140795][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.222397][ T22] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 1018.243639][T16034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.275811][T16034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.296981][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.407308][ T7] usb 1-1: USB disconnect, device number 4 [ 1018.479479][T16034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.659700][T16078] udevd[16078]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.683906][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 1018.744190][T16034] device hsr_slave_0 entered promiscuous mode [ 1018.752801][T16034] device hsr_slave_1 entered promiscuous mode [ 1018.781393][T16034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.791380][T16034] Cannot create hsr debugfs directory [ 1019.109876][ T9454] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1019.323664][ T9454] usb 10-1: Using ep0 maxpacket: 16 [ 1019.330876][ T9454] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.373550][ T9454] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1019.415954][ T9454] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1019.453426][ T9454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.641399][ T9454] usb 10-1: Product: syz [ 1019.645785][ T9454] usb 10-1: Manufacturer: syz [ 1019.650727][ T9454] usb 10-1: SerialNumber: syz [ 1019.984195][ T9454] usb 10-1: 0:2 : does not exist [ 1020.006927][ T9454] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1020.045287][ T9454] usb 10-1: USB disconnect, device number 7 [ 1020.334597][T16079] udevd[16079]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.447596][T16118] siw: device registration error -23 [ 1020.459016][T16114] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2840'. [ 1020.484814][ T4581] tipc: Left network mode [ 1020.770636][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 1021.496648][T16132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1021.517060][ T4500] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1021.763482][ T4500] usb 1-1: Using ep0 maxpacket: 16 [ 1021.770676][ T4500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.964491][ T4500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.974826][ T4500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1021.987944][ T4500] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1021.999226][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.012288][ T4500] usb 1-1: config 0 descriptor?? [ 1022.428749][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.450067][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.461167][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.476634][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.496540][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.517455][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.536735][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.544939][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.553735][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.561212][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.569992][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.593497][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.620762][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.636680][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.652351][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.660606][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.668415][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.677566][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.686048][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.703432][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.711452][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.725009][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.732640][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.747888][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.759874][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.772139][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.816571][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.836748][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.844365][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 1022.877787][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.908208][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.923592][ T4283] Bluetooth: hci3: command 0x1003 tx timeout [ 1022.926242][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.938069][ T4277] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1022.959518][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.977079][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1022.992548][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1023.018487][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1023.036758][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1023.053268][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1023.087014][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1023.111548][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1023.129939][ T4500] hid-generic 0003:0458:5012.0014: unknown main item tag 0x0 [ 1023.187274][ T4500] hid-generic 0003:0458:5012.0014: hidraw0: USB HID v0.00 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 1023.258989][ T4500] usb 1-1: USB disconnect, device number 5 [ 1023.472003][ T4581] device hsr_slave_0 left promiscuous mode [ 1023.499666][ T4581] device hsr_slave_1 left promiscuous mode [ 1023.605169][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.634754][ T4581] device bridge_slave_1 left promiscuous mode [ 1023.686789][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.976649][ T4581] device bridge_slave_0 left promiscuous mode [ 1024.361622][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.465682][T16167] fido_id[16167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1024.512303][ T4581] device bond0 left promiscuous mode [ 1024.532876][ T4581] device bond_slave_0 left promiscuous mode [ 1024.563547][ T4581] device bond_slave_1 left promiscuous mode [ 1024.943685][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 1025.309144][ T4581] bond2 (unregistering): Released all slaves [ 1025.585981][ T4581] bond1 (unregistering): Released all slaves [ 1026.177199][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 1026.236130][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 1026.298226][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.360577][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.814130][ T4581] bond0 (unregistering): Released all slaves [ 1026.927443][T16173] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2852'. [ 1027.092678][T16192] tipc: Enabling of bearer rejected, failed to enable media [ 1027.135750][T16194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1027.297114][T16034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1027.412136][T16034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1027.467473][T16034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1027.488027][T16034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1027.611767][T16219] device syzkaller0 entered promiscuous mode [ 1027.961025][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.003449][ T4347] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1028.031549][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1028.042435][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1028.069330][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.080001][T16228] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2863'. [ 1028.103031][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1028.210242][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1028.238161][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.245417][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.381228][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1028.441877][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1028.505975][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1028.560040][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.567293][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.626864][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1028.653180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1028.661466][ T4347] usb 6-1: Using ep0 maxpacket: 32 [ 1028.669177][ T4347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.681311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1028.689983][ T4347] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.709153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1028.717434][ T4347] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.733823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1028.741450][ T4347] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1028.761964][ T4347] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1028.779186][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1028.794386][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1028.809254][ T4347] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1028.827411][T16034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1028.839792][ T4347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.851346][T16034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.870736][ T4347] usb 6-1: config 0 descriptor?? [ 1028.883130][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1028.894181][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1028.905435][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1028.914953][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1028.942549][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1029.206195][T16247] netlink: 'syz.0.2868': attribute type 2 has an invalid length. [ 1029.224180][T16247] netlink: 'syz.0.2868': attribute type 1 has an invalid length. [ 1029.232153][T16247] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2868'. [ 1029.288487][ T4347] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0 [ 1029.308273][T16249] tipc: Enabled bearer , priority 0 [ 1029.317064][ T4347] hid-thrustmaster 0003:044F:B65D.0015: item fetching failed at offset 1/5 [ 1029.343938][ T4347] hid-thrustmaster 0003:044F:B65D.0015: parse failed with error -22 [ 1029.352030][ T4347] hid-thrustmaster: probe of 0003:044F:B65D.0015 failed with error -22 [ 1029.416825][T16249] tipc: Resetting bearer [ 1029.500983][ T4347] usb 6-1: USB disconnect, device number 9 [ 1029.565007][T16248] tipc: Disabling bearer [ 1029.822095][T16259] device syzkaller0 entered promiscuous mode [ 1029.858139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1029.876141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1030.007501][T16034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.613807][ T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1030.835517][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.872521][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.917064][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.946919][ T7] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1030.970158][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.028029][ T7] usb 6-1: config 0 descriptor?? [ 1031.471651][ T7] hid-rmi 0003:0461:4E72.0016: item fetching failed at offset 10/11 [ 1031.490933][ T7] hid-rmi 0003:0461:4E72.0016: parse failed [ 1031.510686][ T7] hid-rmi: probe of 0003:0461:4E72.0016 failed with error -22 [ 1031.583961][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1031.623828][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1031.667613][T16034] device veth0_vlan entered promiscuous mode [ 1031.694698][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1031.698134][ T7] usb 6-1: USB disconnect, device number 10 [ 1031.709096][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1031.741765][T16034] device veth1_vlan entered promiscuous mode [ 1031.750405][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1031.759610][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1031.804283][ T9454] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1031.849091][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1031.864686][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1031.897945][T16034] device veth0_macvtap entered promiscuous mode [ 1031.921097][T16034] device veth1_macvtap entered promiscuous mode [ 1031.962866][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.981663][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.992112][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.002949][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.013199][ T9454] usb 10-1: Using ep0 maxpacket: 16 [ 1032.025761][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.049747][ T9454] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.061229][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.075439][ T9454] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.099687][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.116619][ T9454] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.133227][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.163490][ T9454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.227295][T16034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.237151][ T9454] usb 10-1: Product: syz [ 1032.276729][ T9454] usb 10-1: Manufacturer: syz [ 1032.302032][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1032.353176][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1032.361117][ T9454] usb 10-1: SerialNumber: syz [ 1032.415014][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1032.491118][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1032.561165][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.634176][ T9454] usb 10-1: 0:2 : does not exist [ 1032.635249][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.660043][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.674039][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.676583][ T9454] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1032.695821][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.706899][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.719312][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.733967][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.775123][T16034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.791839][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1032.815435][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1032.868471][ T9454] usb 10-1: USB disconnect, device number 8 [ 1032.895728][T16034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.923777][T16034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.945605][T16034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.963446][T16034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.153195][T16079] udevd[16079]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.274880][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.296808][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.334894][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1033.385942][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.407766][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.439660][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1033.480903][T16333] netlink: 'syz.5.2887': attribute type 2 has an invalid length. [ 1033.515342][T16333] netlink: 'syz.5.2887': attribute type 1 has an invalid length. [ 1033.541388][T16333] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1033.734378][T16339] siw: device registration error -23 [ 1034.990535][T16361] binder: 16359:16361 ioctl c018620c 200000000040 returned -22 [ 1035.301772][T16375] device syzkaller0 entered promiscuous mode [ 1035.317311][T16377] netlink: 'syz.0.2902': attribute type 2 has an invalid length. [ 1035.358037][T16377] netlink: 'syz.0.2902': attribute type 1 has an invalid length. [ 1035.386491][T16377] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1035.503577][ T4347] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1035.693545][ T4347] usb 10-1: Using ep0 maxpacket: 8 [ 1035.701749][ T4347] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1035.727307][ T4347] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1035.761563][ T4347] usb 10-1: config 0 has no interface number 0 [ 1035.788291][ T4347] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1035.840259][ T4347] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1035.861662][ T4347] usb 10-1: string descriptor 0 read error: -22 [ 1035.880835][ T4347] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1035.900991][ T4347] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1035.939851][ T4347] usb 10-1: config 0 descriptor?? [ 1035.981637][ T4347] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input32 [ 1036.230133][ T4347] usb 10-1: USB disconnect, device number 9 [ 1037.318320][T16075] udevd[16075]: Error opening device "/dev/input/event4": No such file or directory [ 1037.363089][T16411] qfq: no options [ 1037.372434][T16075] udevd[16075]: Unable to EVIOCGABS device "/dev/input/event4" [ 1037.380290][ T4500] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1037.402442][T16075] udevd[16075]: Unable to EVIOCGABS device "/dev/input/event4" [ 1037.583833][ T4500] usb 1-1: Using ep0 maxpacket: 16 [ 1037.590883][ T4500] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.673577][ T4347] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1037.796727][ T4500] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.807682][ T4500] usb 1-1: config 0 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1037.820737][ T4500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1037.830116][ T4500] usb 1-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 1037.849551][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.863434][ T4347] usb 6-1: Using ep0 maxpacket: 8 [ 1037.874255][ T4500] usb 1-1: config 0 descriptor?? [ 1038.638978][ T4347] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1038.647349][ T4347] usb 6-1: config 0 has no interface number 0 [ 1038.665810][ T4347] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1038.676399][ T4347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.715047][ T4347] usb 6-1: Product: syz [ 1038.719281][ T4347] usb 6-1: Manufacturer: syz [ 1038.727575][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.768020][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.779361][ T4347] usb 6-1: SerialNumber: syz [ 1038.805167][ T4347] usb 6-1: config 0 descriptor?? [ 1038.809884][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.843891][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.873425][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.880363][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.942863][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.968052][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.989936][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1038.997493][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.028229][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.041378][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.053187][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.061998][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.073247][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.081064][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.088729][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.096095][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.103088][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.110413][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.121059][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.129268][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.139360][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.146736][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.156726][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.164233][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.171239][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.183360][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.190289][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.202923][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.210143][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.222920][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.230187][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.246300][ T4347] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1039.253062][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.253919][ T7] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1039.268094][ T4347] usb 6-1: No valid video chain found. [ 1039.270001][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.282244][ T4347] usb 6-1: USB disconnect, device number 11 [ 1039.303530][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.323479][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.330513][ T4500] wacom 0003:056A:002A.0017: unknown main item tag 0x0 [ 1039.338956][ T4500] wacom 0003:056A:002A.0017: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 1039.364037][ T4500] wacom 0003:056A:002A.0017: hidraw0: USB HID v0.0b Device [HID 056a:002a] on usb-dummy_hcd.0-1/input0 [ 1039.386572][ T4500] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:002A.0017/input/input33 [ 1039.455232][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.475076][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.499543][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1039.507043][ T4500] usb 1-1: USB disconnect, device number 6 [ 1039.552884][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.600362][ T7] usb 5-1: config 0 descriptor?? [ 1039.644016][ T3597] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1039.738339][T16448] fido_id[16448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1039.853405][ T3597] usb 10-1: Using ep0 maxpacket: 16 [ 1039.861338][ T3597] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.907327][ T3597] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.939343][ T3597] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.973489][ T3597] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.981706][ T3597] usb 10-1: Product: syz [ 1040.009200][ T3597] usb 10-1: Manufacturer: syz [ 1040.014126][ T3597] usb 10-1: SerialNumber: syz [ 1040.022564][ T7] logitech-djreceiver 0003:046D:C71F.0018: unbalanced delimiter at end of report description [ 1040.047763][ T7] logitech-djreceiver 0003:046D:C71F.0018: logi_dj_probe: parse failed [ 1040.066287][ T7] logitech-djreceiver: probe of 0003:046D:C71F.0018 failed with error -22 [ 1040.223112][ T4347] usb 5-1: USB disconnect, device number 44 [ 1040.271113][ T3597] usb 10-1: 0:2 : does not exist [ 1040.296051][ T3597] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1040.353567][ T3597] usb 10-1: USB disconnect, device number 10 [ 1040.443650][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1040.452139][T16472] device syzkaller0 entered promiscuous mode [ 1040.635988][T16079] udevd[16079]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.657492][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.676028][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.732562][ T7] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1040.777197][ T7] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1040.790099][ T7] usb 6-1: Manufacturer: syz [ 1040.811701][ T7] usb 6-1: config 0 descriptor?? [ 1041.163736][ T8993] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1041.363442][ T8993] usb 5-1: Using ep0 maxpacket: 16 [ 1041.391063][ T8993] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1041.416891][ T8993] usb 5-1: config 0 has no interface number 0 [ 1041.430534][ T8993] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1041.449982][ T8993] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1041.478497][ T8993] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1041.505634][ T8993] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1041.524892][ T8993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.543012][ T8993] usb 5-1: Product: syz [ 1041.553049][ T8993] usb 5-1: Manufacturer: syz [ 1041.565327][ T8993] usb 5-1: SerialNumber: syz [ 1041.592358][ T8993] usb 5-1: config 0 descriptor?? [ 1041.610220][T16485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1041.634689][T16485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1041.848238][ T7] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0019/input/input36 [ 1041.892999][T16485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1041.913621][T16485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1041.957005][ T7] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0019/input/input37 [ 1042.005882][ T7] uclogic 0003:256C:006D.0019: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 1042.097033][ T7] usb 6-1: USB disconnect, device number 12 [ 1042.374252][T16513] fido_id[16513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1042.546836][ T8993] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1042.653471][T15332] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1042.855873][T15332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1042.884686][T15332] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1042.909457][T16529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2940'. [ 1042.912523][T15332] usb 10-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1042.929554][T15332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.964322][T15332] usb 10-1: config 0 descriptor?? [ 1042.988076][T16529] device bond2 entered promiscuous mode [ 1042.996416][T16529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1043.395352][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1043.419489][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1043.452478][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1043.470636][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1043.492160][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1044.292920][ T8993] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1044.303704][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1044.310803][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1044.317976][ T8993] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1044.327814][T15332] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 1044.335954][ T8993] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1044.363563][T15332] uclogic 0003:5543:0781.001A: unexpected long global item [ 1044.371374][T15332] uclogic 0003:5543:0781.001A: parse failed [ 1044.392133][ T8993] usb 5-1: USB disconnect, device number 45 [ 1044.424236][T15332] uclogic: probe of 0003:5543:0781.001A failed with error -22 [ 1044.479411][T15332] usb 10-1: USB disconnect, device number 11 [ 1044.890617][T16573] netlink: 'syz.0.2951': attribute type 2 has an invalid length. [ 1044.918756][T16573] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 1044.946401][T16573] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1044.968130][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2953'. [ 1045.098494][T16577] device bond2 entered promiscuous mode [ 1045.104607][T16577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1047.420844][T16629] bridge0: port 3(ipvlan2) entered blocking state [ 1047.440939][T16629] bridge0: port 3(ipvlan2) entered disabled state [ 1048.943622][T15332] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1049.163538][T15332] usb 10-1: Using ep0 maxpacket: 16 [ 1049.187060][T15332] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.423039][T15332] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1049.615637][T15332] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1049.655711][T15332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.730009][T15332] usb 10-1: config 0 descriptor?? [ 1049.737131][T16693] netlink: 'syz.0.2984': attribute type 3 has an invalid length. [ 1049.792296][T16693] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1050.062464][T16701] device syzkaller1 entered promiscuous mode [ 1050.377134][T16696] bridge0: port 3(ipvlan2) entered blocking state [ 1050.388602][T16696] bridge0: port 3(ipvlan2) entered disabled state [ 1050.513432][ T8993] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1050.638189][ T9454] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1050.702072][T16724] kvm [16670]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1050.715260][ T8993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.742598][T16724] kvm [16670]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1050.744698][ T8993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.785427][ T8993] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1050.817880][ T8993] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1050.845622][ T9454] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1050.854263][ T8993] usb 6-1: Manufacturer: syz [ 1050.882571][ T8993] usb 6-1: config 0 descriptor?? [ 1050.883749][ T9454] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1050.913043][ T9454] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1050.951562][ T9454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.142419][ T9454] usb 1-1: Product: syz [ 1051.146696][ T9454] usb 1-1: Manufacturer: syz [ 1051.151318][ T9454] usb 1-1: SerialNumber: syz [ 1051.164674][T16711] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1051.395298][ T9454] usbhid 1-1:1.0: can't add hid device: -71 [ 1051.401632][ T9454] usbhid: probe of 1-1:1.0 failed with error -71 [ 1051.416170][ T9454] usb 1-1: USB disconnect, device number 7 [ 1051.455686][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1051.514820][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1051.690988][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1051.709333][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1051.722758][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1051.745212][ T8993] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input38 [ 1051.859575][ T8993] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input39 [ 1051.882907][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1051.904235][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1051.939080][ T8993] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input40 [ 1051.941798][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1052.003147][ T8993] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input41 [ 1052.055749][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1052.080483][ T8993] uclogic 0003:256C:006D.001B: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 1052.102809][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1052.177449][ T8993] usb 6-1: USB disconnect, device number 13 [ 1053.029551][ T9454] usb 10-1: USB disconnect, device number 12 [ 1053.127614][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1053.329727][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1053.361390][T16743] fido_id[16743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1053.438614][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1053.498480][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1053.533530][T16721] 9pnet_fd: p9_fd_create_tcp (16721): problem connecting socket to 127.0.0.1 [ 1053.724619][T16770] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3002'. [ 1053.774538][T16770] siw: device registration error -23 [ 1054.086094][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3004'. [ 1054.394825][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.311928][T16803] device syzkaller0 entered promiscuous mode [ 1055.324241][ T8993] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 1055.534388][ T8993] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1055.551738][ T8993] usb 10-1: config 0 has no interface number 0 [ 1055.578753][ T8993] usb 10-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1055.630217][ T8993] usb 10-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.681183][ T8993] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1055.711628][ T8993] usb 10-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1055.762067][ T8993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.806815][ T8993] usb 10-1: config 0 descriptor?? [ 1055.870336][T16826] netlink: 'syz.4.3016': attribute type 16 has an invalid length. [ 1055.893148][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1055.919173][T16826] device veth1_virt_wifi entered promiscuous mode [ 1055.976966][T16831] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3018'. [ 1055.987780][T16831] siw: device registration error -23 [ 1056.131365][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3019'. [ 1056.148989][T16836] 8021q: VLANs not supported on nlmon0 [ 1056.253871][T16776] mmap: syz.9.3004 (16776) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1056.273834][T16776] [ 1056.276214][T16776] ====================================================== [ 1056.283295][T16776] WARNING: possible circular locking dependency detected [ 1056.290455][T16776] syzkaller #0 Not tainted [ 1056.294898][T16776] ------------------------------------------------------ [ 1056.301950][T16776] syz.9.3004/16776 is trying to acquire lock: [ 1056.308051][T16776] ffff888024df4800 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 1056.318904][T16776] [ 1056.318904][T16776] but task is already holding lock: [ 1056.326329][T16776] ffff88801d7571d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 1056.336469][T16776] [ 1056.336469][T16776] which lock already depends on the new lock. [ 1056.336469][T16776] [ 1056.346913][T16776] [ 1056.346913][T16776] the existing dependency chain (in reverse order) is: [ 1056.355958][T16776] [ 1056.355958][T16776] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1056.363578][T16776] down_read_killable+0x4c/0x340 [ 1056.369178][T16776] mmap_read_lock_killable+0x1d/0x60 [ 1056.375025][T16776] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1056.380790][T16776] do_user_addr_fault+0x2db/0xb10 [ 1056.386409][T16776] exc_page_fault+0x60/0x100 [ 1056.391626][T16776] asm_exc_page_fault+0x22/0x30 [ 1056.397050][T16776] fault_in_readable+0x13e/0x1f0 [ 1056.402605][T16776] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1056.408870][T16776] generic_perform_write+0x1f1/0x5c0 [ 1056.414788][T16776] __generic_file_write_iter+0x148/0x2a0 [ 1056.421046][T16776] generic_file_write_iter+0xab/0x2e0 [ 1056.426991][T16776] vfs_write+0x4b1/0xa30 [ 1056.431868][T16776] ksys_write+0x14c/0x250 [ 1056.436769][T16776] do_syscall_64+0x4c/0xa0 [ 1056.441773][T16776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.448320][T16776] [ 1056.448320][T16776] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1056.457068][T16776] __lock_acquire+0x2d07/0x7d10 [ 1056.462530][T16776] lock_acquire+0x1bb/0x4a0 [ 1056.467605][T16776] down_write+0x36/0x60 [ 1056.472328][T16776] process_measurement+0x3a2/0x1c30 [ 1056.478107][T16776] ima_file_mmap+0x102/0x150 [ 1056.483252][T16776] __se_sys_remap_file_pages+0x559/0x7b0 [ 1056.489457][T16776] do_syscall_64+0x4c/0xa0 [ 1056.494443][T16776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.500900][T16776] [ 1056.500900][T16776] other info that might help us debug this: [ 1056.500900][T16776] [ 1056.511174][T16776] Possible unsafe locking scenario: [ 1056.511174][T16776] [ 1056.518656][T16776] CPU0 CPU1 [ 1056.524055][T16776] ---- ---- [ 1056.529446][T16776] lock(&mm->mmap_lock); [ 1056.533818][T16776] lock(&sb->s_type->i_mutex_key#13); [ 1056.541853][T16776] lock(&mm->mmap_lock); [ 1056.548846][T16776] lock(&sb->s_type->i_mutex_key#13); [ 1056.554705][T16776] [ 1056.554705][T16776] *** DEADLOCK *** [ 1056.554705][T16776] [ 1056.563784][T16776] 1 lock held by syz.9.3004/16776: [ 1056.569064][T16776] #0: ffff88801d7571d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 1056.580291][T16776] [ 1056.580291][T16776] stack backtrace: [ 1056.586243][T16776] CPU: 1 PID: 16776 Comm: syz.9.3004 Not tainted syzkaller #0 [ 1056.593749][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1056.603893][T16776] Call Trace: [ 1056.607208][T16776] [ 1056.610175][T16776] dump_stack_lvl+0x188/0x24e [ 1056.614905][T16776] ? load_image+0x400/0x400 [ 1056.619492][T16776] ? show_regs_print_info+0x12/0x12 [ 1056.624757][T16776] ? print_circular_bug+0x12b/0x1a0 [ 1056.630123][T16776] check_noncircular+0x296/0x330 [ 1056.635300][T16776] ? look_up_lock_class+0x75/0x140 [ 1056.640489][T16776] ? add_chain_block+0x940/0x940 [ 1056.645482][T16776] ? lockdep_lock+0xf1/0x1f0 [ 1056.650132][T16776] ? _find_first_zero_bit+0xcf/0x100 [ 1056.655477][T16776] __lock_acquire+0x2d07/0x7d10 [ 1056.660397][T16776] ? ima_match_policy+0x107/0x2120 [ 1056.665563][T16776] ? __lock_acquire+0x7d10/0x7d10 [ 1056.670670][T16776] ? verify_lock_unused+0x140/0x140 [ 1056.675928][T16776] ? ima_match_policy+0x107/0x2120 [ 1056.681081][T16776] ? ima_match_policy+0x2093/0x2120 [ 1056.686334][T16776] lock_acquire+0x1bb/0x4a0 [ 1056.690894][T16776] ? process_measurement+0x3a2/0x1c30 [ 1056.696319][T16776] ? __might_sleep+0xd0/0xd0 [ 1056.701031][T16776] ? read_lock_is_recursive+0x10/0x10 [ 1056.706466][T16776] ? ima_get_action+0x71/0xa0 [ 1056.711206][T16776] down_write+0x36/0x60 [ 1056.715454][T16776] ? process_measurement+0x3a2/0x1c30 [ 1056.720871][T16776] process_measurement+0x3a2/0x1c30 [ 1056.726129][T16776] ? ima_file_mmap+0x150/0x150 [ 1056.730939][T16776] ? aa_file_perm+0x112/0xf00 [ 1056.735737][T16776] ? aa_file_perm+0x112/0xf00 [ 1056.740453][T16776] ? mtree_load+0x100/0xa70 [ 1056.745027][T16776] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1056.751226][T16776] ima_file_mmap+0x102/0x150 [ 1056.755857][T16776] ? end_current_label_crit_section+0x14b/0x170 [ 1056.762144][T16776] ? ima_file_free+0x3e0/0x3e0 [ 1056.766953][T16776] ? common_file_perm+0x171/0x1c0 [ 1056.772028][T16776] ? bpf_lsm_mmap_file+0x5/0x10 [ 1056.777015][T16776] ? security_mmap_file+0x11b/0x180 [ 1056.782341][T16776] __se_sys_remap_file_pages+0x559/0x7b0 [ 1056.788030][T16776] ? up_write+0x1bb/0x420 [ 1056.792418][T16776] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1056.798186][T16776] ? lock_chain_count+0x20/0x20 [ 1056.803102][T16776] ? lockdep_hardirqs_on+0x94/0x140 [ 1056.808334][T16776] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1056.814115][T16776] do_syscall_64+0x4c/0xa0 [ 1056.818584][T16776] ? clear_bhb_loop+0x60/0xb0 [ 1056.823306][T16776] ? clear_bhb_loop+0x60/0xb0 [ 1056.828033][T16776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.833976][T16776] RIP: 0033:0x7f5cf2d9c799 [ 1056.838440][T16776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.858089][T16776] RSP: 002b:00007f5cf3c71028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1056.866550][T16776] RAX: ffffffffffffffda RBX: 00007f5cf3015fa0 RCX: 00007f5cf2d9c799 [ 1056.874569][T16776] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000d94000 [ 1056.882579][T16776] RBP: 00007f5cf2e32c99 R08: 0000000000002000 R09: 0000000000000000 [ 1056.890608][T16776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.898615][T16776] R13: 00007f5cf3016038 R14: 00007f5cf3015fa0 R15: 00007ffc92cf6118 [ 1056.906631][T16776] [ 1056.928934][T16848] netlink: 'syz.8.3022': attribute type 2 has an invalid length. [ 1056.952774][T16848] netlink: 199848 bytes leftover after parsing attributes in process `syz.8.3022'. [ 1057.086498][ T8993] usbhid 10-1:0.1: can't add hid device: -71 [ 1057.094706][ T8993] usbhid: probe of 10-1:0.1 failed with error -71 [ 1057.126331][ T8993] usb 10-1: USB disconnect, device number 13