last executing test programs: 16.348716646s ago: executing program 3 (id=456): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgid(0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r2, 0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) 15.399248002s ago: executing program 3 (id=462): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000003c0)="aa7742d1fd451005faed417201883804b19abd7cc919ab4713e3458f4f82db64ec27104aede175f5d48b06721925533b9ebf0c37c1274277718343222856b8498763163dacbde25510", 0x49}], 0x1, &(0x7f0000001d40)=[@assoc={0x10, 0x117, 0x4, 0x9}], 0x10, 0x40014}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80), 0x0, 0x24004850}, {0x0, 0x0, &(0x7f0000002140)=[{0x0}, {&(0x7f0000002100)}], 0x2, 0x0, 0x0, 0x80}], 0x3, 0x10) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/248) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x69) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=""/250, 0x0, 0xfa}, 0x28) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000004c0)={'dt2814\x00', [0xf, 0x80000001, 0x2, 0x1, 0x8, 0x4, 0x5, 0x7ff, 0x5, 0x9, 0x0, 0x7f, 0x3, 0x8, 0x9, 0x8, 0x9dab, 0x45, 0x4, 0x3, 0x7, 0x2, 0x3, 0xe2, 0x140, 0x10000, 0xc, 0x1a88, 0x80000001, 0x2, 0x9, 0x1]}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15.320664986s ago: executing program 3 (id=463): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_notify(r1, &(0x7f0000002b80)={0x0, 0x2c, 0x1, @thr={0x0, 0x0}}) (async, rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (rerun: 32) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x80) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000005c0)={0xd000, 0x20000}) (async, rerun: 32) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x2}) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (rerun: 64) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, 0x0) (async, rerun: 64) r8 = openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x4400, 0x0) (rerun: 64) write$binfmt_misc(r8, &(0x7f0000000100)="345ffc8a23548be430362a0fa810f9e94ef56cbf1eadf73311abccaa6a333cdb0ea5913da48dd3a3497a56de1eb22cebcf48fea73ee3218fa7c5b2bcafba7b5ff308fc43c206cfad307b88491d5206d796754f6baee0", 0x56) (async) ioctl$DRM_IOCTL_FREE_BUFS(r8, 0x4008641a, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') exit(0xf) fsopen(&(0x7f0000000400)='xfs\x00', 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64) 15.180491704s ago: executing program 3 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000120028bb2adf908a5cb20000100000000c000000000000000000000014001d00fc0200"/52], 0x34}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x20) fdatasync(r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffbf, 0x8, 0xfffffffd, 0x80000001, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffc, 0x0, 0x400006, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x20000000, 0x3, 0x7fff, 0x0, 0x800, 0x402, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x408, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f00006e6000/0x1000)=nil, 0x1000, 0xd) 14.181407027s ago: executing program 3 (id=467): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r3, 0x60046, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_team\x00'}]}]}, 0x40}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000005c0)={0x80000000, 0x0, &(0x7f00000003c0)}) socket$unix(0x1, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 13.859589033s ago: executing program 3 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) rename(&(0x7f0000002000)='./file0/file0\x00', &(0x7f00000021c0)='./file0/file0\x00') (async) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x17, "8c08b962fe1ffa25de270a48f2eb9eb683a358fa1bc500"}, &(0x7f0000000140)=0x1f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r4, 0x81}, &(0x7f0000000280)=0x3) r7 = socket(0x2d, 0x2, 0x0) r8 = syz_io_uring_setup(0x6fe3, &(0x7f0000000200)={0x0, 0xa70c, 0x1000, 0x3, 0x28d}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000000440)={0x1, 0x92c6988ecafc088b, 0x0, &(0x7f00000003c0)=[{0x0}], 0x0}, 0x20) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r2}}) 11.344979294s ago: executing program 0 (id=475): socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x182) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}}}, 0xb8}}, 0x0) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(r8, 0x0, 0xee01) (async, rerun: 32) r9 = getuid() (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r8, r9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r11 = fsmount(r10, 0x0, 0x2) (rerun: 32) fchdir(r11) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r12, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000680)=0xe4) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@delpolicy={0x33c, 0x14, 0x100, 0x70bd29, 0x25dfdbfb, {{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x4e21, 0x3, 0x4e21, 0x0, 0xa, 0xc0, 0xa0, 0x3c, r5, r8}}, [@sa={0xe0, 0x6, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x5, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x29, r5, r13}, {@in=@local, 0x494, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x1, 0x7, 0x7, 0x8, 0x80000001, 0x9932, 0x6, 0x9}, {0x8, 0x1, 0x6, 0xfffffffffffffffb}, {0x7, 0xd023, 0x4}, 0x70bd26, 0x0, 0xa, 0x3, 0x8, 0x18}}, @extra_flags={0x8, 0x18, 0x3}, @policy={0xa8, 0x7, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4e22, 0x0, 0x4e22, 0x2, 0xa, 0x20, 0x0, 0x87, r5, r14}, {0x1, 0x6, 0xb3, 0x7, 0x55e, 0x9, 0x4, 0x1f}, {0x9, 0x4, 0x4, 0x9}, 0x300, 0x6e6bb4, 0x1, 0x1, 0x2, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @algo_aead={0x141, 0x12, {{'authencesn(nhpoly1305-neon,cryptd(chacha20-generic))\x00'}, 0x7a8, 0x180, "f9edabcdb09a42fef7f5f2ed61493fdc68d3a04929f8549dd20cf399eefac626b3d609766d3cdf6663d84a4cc0a2b846ada732bdcb982980ae6bbe4765e0bf15b6fe45338cdd0aa0b46a2f17894620d160bda1eb14a15f1fd00ba469b06ed680b455733adf9e5f880c067625afac7fc3c0429965c6fa94661d5353fc84d42db7e7da612e63f40269bf83923d0360ae9af288d7bfaf49030ec95790883c23c2a019d3f31ef7b097df8d7844f66c6ff97419114eaefe3b71d74498244184c0853df5410912f223fb6ccb024d41ef8ea8de019a3bf585aba2ee318ec2e7799ce87d4d298f0b9c28a6718924d72cbd612d77347f9ce1f5"}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2b, 0x4}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.240102994s ago: executing program 0 (id=476): socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0xffffffffffffff92, &(0x7f0000000080)={&(0x7f0000000200)={'crc32-pclmul\x00'}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="1400000003000100ffef0000000000000300000a540000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000050003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x2, 0xb, 0x5}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.522473836s ago: executing program 0 (id=479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='devices.list\x00', 0x26e1, 0x0) syz_io_uring_setup(0x32c7, &(0x7f0000000140)={0x0, 0xf6d, 0x200, 0x2, 0x1f3}, 0x0, 0x0, 0x0) close(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) capset(&(0x7f0000000180)={0x20071026}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) socket(0x2, 0x80805, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x1, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0x2, 0x2, 0x6}}, 0xfffffe00}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x2) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_emit_ethernet(0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001e00669078ffffffff0000bd24f333ded32d1361cc04b852b6f3ec071684d3dea8ca3e0986b84703bda6b75e44e9914b1efa7cfb163f0b0b37ed3b29903b2567513654c7e7131161232c96256631acdeadf5d38a5b38c6830d20e9926638c1eb9a18c7441ca585814c5bdc5ce83f9ebf8f0cc052232f5b0bb5df477dfbb2cd5ef295e02670387d38c1ac28f49d90a176804558014044dfc9fe12381d18aee661c2ccdb165be9c7b838acdcb68cb8989579263ec1775acd062722d36a939ad8718047cb2b8f56f81c3eb8e11bc193c44957075298c3788f727ecdf4"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x9299, 0x10100, 0x7, 0x24f, 0x0, r7}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000002c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x3b, 0x0, 0x100000001}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.233461083s ago: executing program 0 (id=486): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000000010000040001002c000000", @ANYRES32, @ANYBLOB="00000000200000000000001000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={r7, 0xd}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff00000000711093000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 6.900097453s ago: executing program 1 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6ec6b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x103, {0x1000006, 0x2, 0x0, 0xc6, 0x4, 0x3a1b, {0x40, 0x1, 0xffffffffffff826c, 0x40010000, 0x5002, 0x0, 0x800, 0x81, 0x3, 0x2000, 0x75, r2, r3, 0x440, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0x0]) setgroups(0x3, &(0x7f00000000c0)=[r3, r4, 0xffffffffffffffff]) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x20808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 5.799666147s ago: executing program 1 (id=490): setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x1}, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00000000000000000000000000000000000040", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x6, 0x6]}}) 5.510219191s ago: executing program 0 (id=491): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xb8, 0x30, 0x1, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x16000000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4d19}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x6, 0x2, 0x7}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$msr(r1, &(0x7f0000000300)=""/129, 0x81) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbdfd00000000000200000008170900", @ANYRES32=r5, @ANYBLOB="0c0099000000000044000000080002002e000000"], 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.354690736s ago: executing program 2 (id=492): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x7fffffff, 0x3, 0xa, 0x203, 0x1}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x5, 0x301000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000100)={0x7, 0x2, 0x3, 0xfffffff4, '\x00', 0xfffff4ac}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000200)=[{0x28, 0x0, 0x0, 0x6d8d}, {0x20, 0x0, 0x0, 0xf7fdf010}, {0x6, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x800) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000)=0x2, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x189200) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$hiddev(&(0x7f0000000240), 0x7f, 0x620502) io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2}]) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r8, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FICLONERANGE(r11, 0x4020940d, &(0x7f0000000140)={{r0}, 0x9, 0x8, 0x1f86}) 5.354416214s ago: executing program 1 (id=493): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 5.245366124s ago: executing program 1 (id=494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e009500363501db0000000000000000005be7fd"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000440)=0x4000005) 4.330632573s ago: executing program 0 (id=495): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000000010000040001002c000000", @ANYRES32, @ANYBLOB="00000000200000000000001000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={r8, 0xd}, 0x8) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0xa, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff00000000711093000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 4.178635766s ago: executing program 2 (id=496): r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x32000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x2, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x1, 0xa6, &(0x7f00000001c0)=""/166, 0x41000, 0x8, '\x00', r4, @fallback=0xb, r5, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x0, 0x3, 0x86e}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[r1], &(0x7f0000000440)=[{0x1, 0x2, 0x3, 0x4}, {0x1, 0x1, 0x5, 0x2}], 0x10, 0x7fffffff}, 0x94) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) r8 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f00000005c0)={{0x60, 0x7f}, {0x81, 0xe}, 0x10, 0x6, 0x1}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=r6, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000880)={0x0, 0x0}) syz_clone3(&(0x7f0000000900)={0x208000000, &(0x7f0000000680)=0xffffffffffffffff, &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x13}, &(0x7f0000000740)=""/204, 0xcc, &(0x7f0000000840)=""/32, &(0x7f00000008c0)=[r9], 0x1, {r8}}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000980)={r2}) ioctl$sock_SIOCGIFCONF(r12, 0x8912, &(0x7f0000000a00)=@req={0x20, &(0x7f00000009c0)={'pim6reg0\x00', @ifru_names='bond0\x00'}}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000ac0)={0x0, 0x9628, 0x3}, &(0x7f0000000b00)=0x10) copy_file_range(r7, 0x0, r0, &(0x7f0000000b40)=0x9, 0x4, 0x0) fstat64(r0, &(0x7f0000000b80)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000c80)={{r10}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000c00)={0x0, 0x7, 0x80000001, 0x7, {0x25, 0x4, 0x9, 0x79, 0xffffffffffffffff}, [0x6, 0x5, 0x6, 0x4, 0x0, 0x1, 0x5]}}, @name="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"}) read$msr(r3, &(0x7f0000001c80)=""/148, 0x94) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sched_setscheduler(r11, 0x130c697e64fd8755, &(0x7f0000001d40)=0xffff) ptrace$pokeuser(0x6, r9, 0x2, 0x8001) recvfrom$phonet(r12, &(0x7f0000001d80)=""/154, 0x9a, 0x2140, &(0x7f0000001e40)={0x23, 0x2, 0x85, 0x81}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001e80)={r13, 0x4, 0xffffffff, 0x8}, &(0x7f0000001ec0)=0x10) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000001f00)={0x10f2, 0x1, 0x1, 0x99, 0x9}) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 4.060442266s ago: executing program 2 (id=497): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x4040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x4}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x42, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0x80005520, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000140)={0x6}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$mice(0xffffff9c, &(0x7f0000000200), 0x0) write$UHID_DESTROY(r7, &(0x7f0000000240), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x240, 0x940c, 0x3002, 0x0, 0x2c0, 0x318, 0x3d8, 0x3d8, 0x318, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @private1, [0x0, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'wlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x1, 0x0, 0x2}, 0x0, 0x21c, 0x240, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@multicast1, [0xffffffff, 0xff, 0x0, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xff, 0xffffff00, 0xffffffff], 0x100004d6, 0x3501, 0x84, 0x1, 0x4, 0x1}, {@ipv4=@loopback, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv4=@empty, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 0x4d2, 0x3507, 0x2f, 0x0, 0x4}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff0000ff, 0xff000000], @ipv6=@private2, [0xff0000ff, 0xffffff00, 0xff], 0x4d2, 0x3505, 0x32, 0x0, 0x21, 0x18}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xff000000, 0x0, 0xffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x532d44cb633499ef, 0x0, 0xff000000, 0xff], 0x4d3, 0x350a, 0x6c, 0x1, 0x4, 0x19}], 0x7, 0x1}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x3}, {0x2, 0x3, 0x1}, {0x1, 0x4, 0x4}, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x43c) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xd) 3.760271816s ago: executing program 2 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000840000000810500010006000000050005000200000005008400020000000900020073798c3f0e0d5f2ec37a31000000000d0003006c6973743a73657400000000"], 0x54}}, 0x0) 1.78709002s ago: executing program 1 (id=499): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) mkdir(0x0, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trAns=o,\x00'/20, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x3b3ca000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x54000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6, 0x80}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x2, 0x0, 0x4}, {0x2, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xb001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 926.868616ms ago: executing program 2 (id=500): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trAns=o,\x00'/20, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x3b3ca000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x54000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6, 0x80}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x2, 0x0, 0x4}, {0x2, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xb001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 672.442366ms ago: executing program 1 (id=501): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x40015b19, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000b80)) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r6) r10 = fcntl$dupfd(r5, 0x406, r8) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xd9, 0x51, 0x6, 0x10, 0x2294, 0x425a, 0xcf10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000080)={0x0, r9}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000009400)=@newchain={0x24, 0x64, 0x8, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff1, 0xffe0}, {0x1, 0x7}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) 0s ago: executing program 2 (id=502): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000b02000/0x4000)=nil) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000008000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x0, 0x2, 0x80, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0xfe, 0xfd, 0x0, 0x0, 0xff}, {0x70000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0xa, 0x3, 0x40, 0x5}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x0, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x73, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x80a0000, 0x0, 0x1, 0x2, 0x1, 0x2, 0x80, 0x0, 0xf7, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x3, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000, 0x1ff}, 0xddf8ffd3, 0x0, 0xffffffff, 0x110, 0xe, 0xf801, 0x3000, [0x200080000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x1f, 0x4, 0x404) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r9}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) kernel console output (not intermixed with test programs): 0:50:50 [ 54.374422][ T5735] veth0_macvtap: entered promiscuous mode [ 54.386199][ T5742] veth0_macvtap: entered promiscuous mode [ 54.393998][ T5735] veth1_macvtap: entered promiscuous mode [ 54.399759][ T5742] veth1_macvtap: entered promiscuous mode [ 54.407828][ T5736] veth1_vlan: entered promiscuous mode [ 54.417441][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.420882][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.430423][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.439724][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.444220][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.455526][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.467820][ T5736] veth0_macvtap: entered promiscuous mode [ 54.468621][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.472879][ T5736] veth1_macvtap: entered promiscuous mode [ 54.481742][ T217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.489980][ T217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.492909][ T217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.500994][ T217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.507510][ T217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.519582][ T217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.523363][ T217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.539900][ T217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.545897][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.555764][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.587433][ T217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.592274][ T217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.601900][ T217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.604832][ T217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.656287][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.663899][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.724545][ T5893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 54.753944][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.757191][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.970506][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.971523][ T5893] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.972741][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.972759][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.978929][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.019027][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.030880][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.053866][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.063441][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x17b000) [ 55.807019][ T5901] lo speed is unknown, defaulting to 1000 [ 55.810823][ T5901] lo speed is unknown, defaulting to 1000 [ 55.826488][ T5901] lo speed is unknown, defaulting to 1000 [ 55.834377][ T5901] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 55.839421][ T5901] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 55.845560][ T5901] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 55.924302][ T62] Bluetooth: hci2: command tx timeout [ 55.927116][ T62] Bluetooth: hci3: command tx timeout [ 55.929757][ T62] Bluetooth: hci0: command tx timeout [ 55.931909][ T62] Bluetooth: hci1: command tx timeout [ 55.972055][ T5902] 9pnet_virtio: no channels available for device syz [ 55.999878][ T5902] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.030624][ T5901] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.108660][ T1127] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 56.111544][ T1127] ata1: failed to read log page 10h (errno=-5) [ 56.113664][ T1127] ata1.00: NCQ disabled due to excessive errors [ 56.116523][ T1127] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 56.119794][ T1127] ata1.00: irq_stat 0x41000000 [ 56.121911][ T1127] ata1.00: failed command: READ FPDMA QUEUED [ 56.124514][ T1127] ata1.00: cmd 60/d8:70:0e:99:03/0b:00:00:00:00/40 tag 14 ncq dma 1552384 in [ 56.124514][ T1127] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 56.132453][ T1127] ata1.00: status: { DRDY } [ 56.134532][ T1127] ata1.00: error: { ABRT } [ 56.136580][ T1127] ata1.00: failed command: READ FPDMA QUEUED [ 56.140240][ T1127] ata1.00: cmd 60/38:78:26:af:02/02:00:00:00:00/40 tag 15 ncq dma 290816 in [ 56.140240][ T1127] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 56.151477][ T5901] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.183288][ T1127] ata1.00: status: { DRDY } [ 56.185082][ T1127] ata1.00: error: { ABRT } [ 56.187409][ T1127] ata1.00: configured for UDMA/100 [ 56.189462][ T1127] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 56.192661][ T1127] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 56.195292][ T1127] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 56.198191][ T1127] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 99 0e 00 0b d8 00 [ 56.200905][ T1127] I/O error, dev sda, sector 235790 op 0x0:(READ) flags 0x80700 phys_seg 84 prio class 2 [ 56.211274][ T1127] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 56.214535][ T1127] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 56.217070][ T1127] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 56.219904][ T1127] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 02 af 26 00 02 38 00 [ 56.222667][ T1127] I/O error, dev sda, sector 175910 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 56.225954][ T1127] ata1: EH complete [ 56.333448][ T5901] lo speed is unknown, defaulting to 1000 [ 57.753538][ T5909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.812323][ T5901] lo speed is unknown, defaulting to 1000 [ 57.823217][ T5901] lo speed is unknown, defaulting to 1000 [ 57.830859][ T5901] lo speed is unknown, defaulting to 1000 [ 57.998924][ T5738] Bluetooth: hci1: command tx timeout [ 57.999124][ T62] Bluetooth: hci0: command tx timeout [ 57.999513][ T5744] Bluetooth: hci2: command tx timeout [ 57.999556][ T5740] Bluetooth: hci3: command tx timeout [ 58.047011][ T5918] ubi16: attaching mtd0 [ 58.069366][ T5918] ubi16: scanning is finished [ 58.072202][ T5918] ubi16: empty MTD device detected [ 58.117631][ T5920] overlayfs: missing 'lowerdir' [ 58.220258][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 58.250084][ T5923] smbdirect: ib_dev[syz2] removed [ 58.379027][ T5924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.400484][ T5918] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 58.403820][ T5918] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 58.406177][ T5918] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 58.409051][ T5918] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 58.411966][ T5918] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 58.414504][ T5918] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 58.418412][ T5918] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2162074635 [ 58.421952][ T5918] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 58.426338][ T5926] ubi16: background thread "ubi_bgt16d" started, PID 5926 [ 59.009468][ T5930] ptrace attach of "/syz-executor exec"[5747] was attempted by " [ 59.197023][ T5937] lo speed is unknown, defaulting to 1000 [ 59.232066][ T5937] lo speed is unknown, defaulting to 1000 [ 59.238698][ T5937] lo speed is unknown, defaulting to 1000 [ 59.244889][ T5937] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 59.249519][ T5937] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 59.255115][ T5937] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 59.279065][ T5937] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.326567][ T5937] lo speed is unknown, defaulting to 1000 [ 59.387234][ T5937] lo speed is unknown, defaulting to 1000 [ 59.392217][ T5937] lo speed is unknown, defaulting to 1000 [ 59.409064][ T5937] lo speed is unknown, defaulting to 1000 [ 59.521453][ T5937] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.553819][ T5909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.625252][ T5909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.882258][ T5909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.073871][ T217] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.078232][ T62] Bluetooth: hci0: command tx timeout [ 60.080346][ T62] Bluetooth: hci1: command tx timeout [ 60.082555][ T5738] Bluetooth: hci3: command tx timeout [ 60.084408][ T5738] Bluetooth: hci2: command tx timeout [ 60.108041][ T217] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.111123][ T217] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.114098][ T217] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.442204][ T5949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.545865][ T5945] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 60.548184][ T5945] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 60.608577][ T5945] vhci_hcd vhci_hcd.0: Device attached [ 60.662924][ T5952] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 60.866649][ T5956] process 'syz.0.12' launched '/dev/fd/12' with NULL argv: empty string added [ 60.900251][ T57] usb 40-1: SetAddress Request (2) to port 0 [ 60.902656][ T57] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 61.464464][ T5954] vhci_hcd: connection reset by peer [ 61.471868][ T1157] vhci_hcd vhci_hcd.1: stop threads [ 61.478640][ T1157] vhci_hcd vhci_hcd.1: release socket [ 61.483559][ T1157] vhci_hcd vhci_hcd.1: disconnect device [ 62.799941][ T5971] tipc: Started in network mode [ 62.802702][ T5971] tipc: Node identity 66500502c3e9, cluster identity 4711 [ 62.805735][ T5971] tipc: Enabled bearer , priority 0 [ 62.811499][ T5971] syzkaller0: entered promiscuous mode [ 62.813787][ T5971] syzkaller0: entered allmulticast mode [ 62.829163][ T5971] tipc: Resetting bearer [ 63.250850][ T5969] siw: device registration error -23 [ 63.331049][ T5983] 9pnet_virtio: no channels available for device syz [ 63.341643][ T5983] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.366275][ T5969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.649536][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 63.751058][ T5988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.779133][ T5970] tipc: Resetting bearer [ 63.822258][ T5970] tipc: Disabling bearer [ 64.569240][ T5997] 9pnet_virtio: no channels available for device syz [ 64.583240][ T5997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.009608][ T57] usb 40-1: device descriptor read/8, error -110 [ 66.101910][ T5998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.284604][ T5998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.452662][ T57] usb usb40-port1: attempt power cycle [ 67.250638][ T57] usb usb40-port1: unable to enumerate USB device [ 67.548186][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 67.835381][ T5998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.864303][ T6006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.940054][ T5998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.996717][ T6006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.067638][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.078967][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.092697][ T1165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.105634][ T6006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.119861][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.303088][ T6022] siw: device registration error -23 [ 68.328942][ T6006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.426860][ T1165] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.505643][ T6023] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.552921][ T1165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566982][ T1165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.579352][ T1165] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.641476][ T6026] openvswitch: netlink: Message has 8 unknown bytes. [ 69.601111][ T6030] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.645346][ T6034] overlayfs: failed to resolve './file0': -2 [ 69.673235][ T6030] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.802661][ T6030] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.907976][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.998062][ T6036] loop5: detected capacity change from 0 to 7 [ 70.005063][ T6036] Dev loop5: unable to read RDB block 7 [ 70.007442][ T6036] loop5: unable to read partition table [ 70.010055][ T6036] loop5: partition table beyond EOD, truncated [ 70.012320][ T6036] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.071681][ T6030] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.080993][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.086380][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 70.093663][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.097032][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 70.101892][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 70.110320][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.114173][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.117556][ T34] usb 8-1: Product: syz [ 70.119221][ T34] usb 8-1: Manufacturer: syz [ 70.131634][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 70.135141][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 70.142222][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 70.143485][ T1251] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.144828][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 70.151838][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.167776][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.178176][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.645289][ T6044] loop5: detected capacity change from 0 to 7 [ 70.648840][ T6044] Dev loop5: unable to read RDB block 7 [ 70.650931][ T6044] loop5: unable to read partition table [ 70.652930][ T6044] loop5: partition table beyond EOD, truncated [ 70.654969][ T6044] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.706970][ T6042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.780548][ T6049] siw: device registration error -23 [ 70.875733][ T6049] 9pnet_virtio: no channels available for device syz [ 70.901691][ T6049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.719940][ T39] usb 8-1: USB disconnect, device number 2 [ 72.138205][ T70] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.628393][ T40] audit: type=1326 audit(1777825982.776:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.644073][ T40] audit: type=1326 audit(1777825982.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.663137][ T40] audit: type=1326 audit(1777825982.786:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.678681][ T40] audit: type=1326 audit(1777825982.786:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.695149][ T40] audit: type=1326 audit(1777825982.786:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.711545][ T40] audit: type=1326 audit(1777825982.786:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.728010][ T40] audit: type=1326 audit(1777825982.786:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.744019][ T40] audit: type=1326 audit(1777825982.786:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.755292][ T40] audit: type=1326 audit(1777825982.786:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 72.768030][ T40] audit: type=1326 audit(1777825982.786:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.37" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 73.331510][ T70] usb 7-1: config index 0 descriptor too short (expected 1572, got 36) [ 73.335388][ T70] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.342284][ T70] usb 7-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 73.346010][ T70] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.349657][ T70] usb 7-1: Product: syz [ 73.351705][ T70] usb 7-1: Manufacturer: syz [ 73.353889][ T70] usb 7-1: SerialNumber: syz [ 73.371434][ T70] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input5 [ 73.572212][ T5132] bcm5974 7-1:1.0: could not read from device [ 73.580219][ T70] bcm5974 7-1:1.0: could not read from device [ 73.585564][ T5132] bcm5974 7-1:1.0: could not read from device [ 73.589430][ T70] input: failed to attach handler mousedev to device input5, error: -5 [ 73.602210][ T5132] bcm5974 7-1:1.0: could not read from device [ 73.604130][ T70] usb 7-1: USB disconnect, device number 2 [ 73.611473][ T5132] bcm5974 7-1:1.0: could not read from device [ 74.586311][ T6079] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.530180][ T6084] siw: device registration error -23 [ 75.577925][ T6084] 9pnet_virtio: no channels available for device syz [ 75.600719][ T6084] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.107257][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.138071][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.577409][ T6089] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.904528][ T6089] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.042506][ T6094] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.273456][ T6089] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.387320][ T6094] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.449913][ T6089] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.540562][ T6094] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.558018][ T70] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.731511][ T70] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 78.734694][ T70] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.737664][ T70] usb 5-1: Product: syz [ 78.739568][ T70] usb 5-1: Manufacturer: syz [ 78.742165][ T70] usb 5-1: SerialNumber: syz [ 78.746614][ T70] usb 5-1: config 0 descriptor?? [ 78.844906][ T6094] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.863306][ T217] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.870439][ T217] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.877061][ T217] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.883770][ T217] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.978119][ T1165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.018043][ T1165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.025930][ T1165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.029393][ T1165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.402513][ T70] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 79.404761][ T70] f81604 5-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 79.407354][ T70] f81604 5-1:0.0: probe with driver f81604 failed with error -121 [ 79.515387][ T6106] siw: device registration error -23 [ 79.632506][ T6106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.716962][ T217] Bluetooth: (null): Invalid header checksum [ 79.787409][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 79.787422][ T40] audit: type=1326 audit(1777825989.936:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.854046][ T13] Bluetooth: (null): Invalid header checksum [ 79.863562][ T40] audit: type=1326 audit(1777825989.956:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.891591][ T40] audit: type=1326 audit(1777825989.956:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.898734][ T40] audit: type=1326 audit(1777825989.956:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.911297][ T40] audit: type=1326 audit(1777825989.956:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.927726][ T40] audit: type=1326 audit(1777825989.956:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.938355][ T40] audit: type=1326 audit(1777825989.956:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.943710][ T217] Bluetooth: (null): Invalid header checksum [ 79.952480][ T40] audit: type=1326 audit(1777825990.006:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 79.964220][ T40] audit: type=1326 audit(1777825990.026:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.0.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 80.051391][ T13] Bluetooth: (null): Invalid header checksum [ 80.168265][ T1165] Bluetooth: (null): Invalid header checksum [ 80.279279][ T13] Bluetooth: (null): Invalid header checksum [ 80.388244][ T217] Bluetooth: (null): Invalid header checksum [ 80.499394][ T13] Bluetooth: (null): Invalid header checksum [ 80.618267][ T217] Bluetooth: (null): Invalid header checksum [ 80.657674][ T6117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.50'. [ 80.733039][ T110] Bluetooth: (null): Invalid header checksum [ 80.848922][ T1165] Bluetooth: (null): Invalid header checksum [ 80.998140][ T1165] Bluetooth: (null): Invalid header checksum [ 81.198241][ T6122] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.006979][ T1165] Bluetooth: (null): Invalid header checksum [ 82.043292][ T1165] Bluetooth: (null): Invalid header checksum [ 82.056939][ T1165] Bluetooth: (null): Invalid header checksum [ 82.063738][ T1165] Bluetooth: (null): Invalid header checksum [ 82.080591][ T1165] Bluetooth: (null): Invalid header checksum [ 82.083413][ T1165] Bluetooth: (null): Invalid header checksum [ 82.086127][ T1165] Bluetooth: (null): Invalid header checksum [ 82.090676][ T6122] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.104447][ T1165] Bluetooth: (null): Invalid header checksum [ 82.109357][ T1165] Bluetooth: (null): Invalid header checksum [ 82.118463][ T1165] Bluetooth: (null): Invalid header checksum [ 82.141191][ T6122] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.201994][ T6122] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.218949][ T1165] Bluetooth: (null): Invalid header checksum [ 82.480559][ T1165] Bluetooth: (null): Invalid header checksum [ 82.485704][ T1165] Bluetooth: (null): Invalid header checksum [ 82.549223][ T217] Bluetooth: (null): Invalid header checksum [ 82.679412][ T39] usb 5-1: USB disconnect, device number 2 [ 83.707153][ T6127] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.774273][ T6127] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.844541][ T6127] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.904161][ T6127] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.262069][ T6131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.308028][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.321147][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.336569][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.348126][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.375267][ T6134] loop5: detected capacity change from 0 to 7 [ 84.524379][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.541429][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.553408][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.563705][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657352][ T6137] siw: device registration error -23 [ 84.723186][ T6137] 9pnet_virtio: no channels available for device syz [ 84.749191][ T6137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.863156][ T6134] Dev loop5: unable to read RDB block 7 [ 84.867177][ T6134] loop5: unable to read partition table [ 84.876129][ T6134] loop5: partition table beyond EOD, truncated [ 84.881538][ T6134] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.690386][ T40] audit: type=1326 audit(1777825995.846:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.700033][ T6145] netlink: 52 bytes leftover after parsing attributes in process `syz.0.56'. [ 85.728396][ T40] audit: type=1326 audit(1777825995.846:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.763285][ T40] audit: type=1326 audit(1777825995.846:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.772262][ T40] audit: type=1326 audit(1777825995.846:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.780997][ T40] audit: type=1326 audit(1777825995.846:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.790039][ T40] audit: type=1326 audit(1777825995.846:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.807987][ T40] audit: type=1326 audit(1777825995.856:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.818961][ T1165] Bluetooth: (null): Invalid header checksum [ 85.826026][ T40] audit: type=1326 audit(1777825995.856:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.835366][ T40] audit: type=1326 audit(1777825995.856:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 85.842286][ T40] audit: type=1326 audit(1777825995.856:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 86.340884][ T9] cfg80211: failed to load regulatory.db [ 86.470760][ T6154] siw: device registration error -23 [ 87.540122][ T6162] siw: device registration error -23 [ 87.645175][ T6162] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.995410][ T6165] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure [ 88.691645][ T6174] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.369967][ T6174] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.102497][ T6176] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.167838][ T6174] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.236516][ T6179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.826075][ T6176] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.860249][ T6174] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.901954][ T6176] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.962513][ T1165] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.973806][ T1165] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.981240][ T1165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.989313][ T1165] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050065][ T6176] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.127448][ T1165] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.138887][ T1165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.159385][ T6183] syzkaller0: entered promiscuous mode [ 91.161469][ T6183] syzkaller0: entered allmulticast mode [ 91.171962][ T1165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.186374][ T1165] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627424][ T6187] 9pnet_virtio: no channels available for device syz [ 91.636100][ T6187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.964622][ T13] Bluetooth: (null): Invalid header checksum [ 92.970345][ T13] Bluetooth: (null): Invalid header checksum [ 93.217803][ T6198] loop5: detected capacity change from 0 to 7 [ 93.229264][ T6198] Dev loop5: unable to read RDB block 7 [ 93.231224][ T6198] loop5: unable to read partition table [ 93.241221][ T6198] loop5: partition table beyond EOD, truncated [ 93.246496][ T6198] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.601992][ T6204] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.919436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 95.959790][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 95.973845][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 96.246451][ T6218] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.358303][ T70] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.599617][ T70] usb 6-1: Using ep0 maxpacket: 8 [ 96.636286][ T70] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.640546][ T70] usb 6-1: config 0 has no interfaces? [ 96.642437][ T70] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 96.646546][ T70] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.721593][ T70] usb 6-1: config 0 descriptor?? [ 96.851030][ T6224] 9pnet_virtio: no channels available for device syz [ 96.881095][ T6224] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.501234][ T6233] siw: device registration error -23 [ 97.651545][ T6233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.673580][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 97.729627][ T6238] siw: device registration error -23 [ 97.780173][ T6238] 9pnet_virtio: no channels available for device syz [ 97.808321][ T6238] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.662458][ T6242] wireguard0: entered promiscuous mode [ 98.664291][ T6242] wireguard0: entered allmulticast mode [ 98.666742][ T6242] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 98.766394][ T6247] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 98.895171][ T6242] loop6: detected capacity change from 0 to 8 [ 99.044231][ T6252] siw: device registration error -23 [ 99.212014][ T6252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.664992][ T5889] usb 6-1: USB disconnect, device number 2 [ 99.701402][ T6260] 9pnet_virtio: no channels available for device syz [ 99.709266][ T5740] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 100.286054][ T6278] input: syz1 as /devices/virtual/input/input6 [ 100.878667][ T6288] siw: device registration error -23 [ 100.965968][ T6288] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.131140][ T6294] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.263809][ T6294] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.342846][ T6294] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.476874][ T6294] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.603101][ T6306] netlink: 'syz.3.95': attribute type 30 has an invalid length. [ 103.880771][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.886430][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.898081][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.901434][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.044606][ T6313] MINIX-fs: unable to read superblock [ 104.227950][ T6323] siw: device registration error -23 [ 104.363037][ T6323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.301610][ T6330] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.699809][ T6333] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.755021][ T6330] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.782849][ T6333] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.851783][ T6333] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.860917][ T6330] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.946202][ T6333] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.958026][ T6330] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.079563][ T6338] nfs: Unknown parameter '¦ð_t:e#ÏõäƒxÌ;ù×ù£¯™4˜þ¶']ÊrM?#Æâ`˜Å-ƒ(šghίä!×ø [ 108.079563][ T6338] y’™c¿5l_Õ O [ 108.079563][ T6338] øDŠîPĤjfr0õt61ÍS€œæ·Íb›4Üí0¬Pâwc¾+ô˜5ŠSدhÞ…¨\]FŠ9 õ 8¬‘Øÿž£”»íßAM“칚¬°‡¥Ú' [ 108.128794][ T6032] Bluetooth: (null): Invalid header checksum [ 108.168481][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172144][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.190773][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.210192][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.271717][ T6341] loop5: detected capacity change from 0 to 7 [ 108.279387][ T6341] Dev loop5: unable to read RDB block 7 [ 108.281930][ T6341] loop5: unable to read partition table [ 108.284654][ T6341] loop5: partition table beyond EOD, truncated [ 108.288348][ T6341] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.448040][ T5912] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.598067][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 108.602292][ T5912] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 108.606203][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.619960][ T5912] pvrusb2: Hardware description: Terratec Grabster AV400 [ 108.623117][ T5912] pvrusb2: ********** [ 108.624900][ T5912] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 108.629799][ T5912] pvrusb2: Important functionality might not be entirely working. [ 108.633839][ T5912] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 108.639427][ T5912] pvrusb2: ********** [ 108.821306][ T2508] pvrusb2: Invalid write control endpoint [ 108.850591][ T2508] pvrusb2: Invalid write control endpoint [ 108.853128][ T2508] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 108.857028][ T2508] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 108.860293][ T2508] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 108.864434][ T2508] pvrusb2: Device being rendered inoperable [ 108.869514][ T2508] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 108.873347][ T2508] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 108.880654][ T2508] pvrusb2: Attached sub-driver cx25840 [ 108.883426][ T2508] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 108.886742][ T2508] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 108.988039][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.021928][ T6338] pvrusb2: Killing an I2C write to 2 that is too large (desired=62 limit=61) [ 109.027298][ T5912] usb 5-1: USB disconnect, device number 3 [ 109.148025][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 109.151358][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 109.155082][ T5889] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 109.158771][ T5889] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 109.163100][ T5889] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 109.166561][ T5889] usb 6-1: config 128 has no interface number 0 [ 109.169378][ T5889] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 109.173660][ T5889] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.177070][ T5889] usb 6-1: config 128 interface 127 has no altsetting 0 [ 109.181106][ T5889] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 109.184217][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.186891][ T5889] usb 6-1: Product: syz [ 109.188391][ T5889] usb 6-1: Manufacturer: syz [ 109.190157][ T5889] usb 6-1: SerialNumber: syz [ 109.426767][ T6361] bond1: entered allmulticast mode [ 109.502298][ T5889] usb 6-1: USB disconnect, device number 3 [ 109.505868][ T1165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.510742][ T1165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.552286][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.561490][ T1165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.579238][ T1251] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.646999][ T6377] siw: device registration error -23 [ 109.696786][ T6377] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.827594][ T6380] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 110.012473][ T6386] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 110.044927][ T6386] bond1: entered promiscuous mode [ 110.047697][ T6386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.058853][ T6384] lo speed is unknown, defaulting to 1000 [ 110.065858][ T6386] macvtap1: entered allmulticast mode [ 110.084453][ T6386] bond1: (slave bridge1): making interface the new active one [ 110.087834][ T6386] bridge1: entered promiscuous mode [ 110.091792][ T6386] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 110.193040][ T6398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 110.200819][ T6392] random: crng reseeded on system resumption [ 110.436809][ T6407] veth1_to_bond: entered promiscuous mode [ 110.439345][ T6407] veth1_to_bond: entered allmulticast mode [ 110.828012][ T1339] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 110.977944][ T1339] usb 6-1: Using ep0 maxpacket: 8 [ 110.981449][ T1339] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.985807][ T1339] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.989291][ T1339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 110.991659][ T1339] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.994712][ T1339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.999131][ T1339] usb 6-1: config 0 descriptor?? [ 111.414294][ T1339] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.422404][ T1339] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.426633][ T1339] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.440586][ T1339] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.446365][ T1339] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.454735][ T1339] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 111.570521][ T1339] usb 6-1: USB disconnect, device number 4 [ 111.896591][ T6433] loop5: detected capacity change from 0 to 7 [ 111.901076][ T6433] Dev loop5: unable to read RDB block 7 [ 111.903562][ T6433] loop5: unable to read partition table [ 111.906252][ T6433] loop5: partition table beyond EOD, truncated [ 111.911799][ T6433] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.924272][ T6435] Zero length message leads to an empty skb [ 112.179527][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 112.179544][ T40] audit: type=1800 audit(1777826022.336:76): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.129" name="file1" dev="overlay" ino=210 res=0 errno=0 [ 112.398733][ T5738] Bluetooth: hci4: command 0x1003 tx timeout [ 112.402598][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.421064][ T6452] bond0: entered promiscuous mode [ 112.423337][ T6452] bond_slave_0: entered promiscuous mode [ 112.426067][ T6452] bond_slave_1: entered promiscuous mode [ 112.593762][ T6449] bond2 (unregistering): Released all slaves [ 112.620766][ T6451] bond0: left promiscuous mode [ 112.623578][ T6451] bond_slave_0: left promiscuous mode [ 112.626147][ T6451] bond_slave_1: left promiscuous mode [ 112.712347][ T6458] Cannot find del_set index 0 as target [ 112.927611][ T6466] Bluetooth: MGMT ver 1.23 [ 112.946688][ T40] audit: type=1326 audit(1777826023.096:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 112.955030][ T40] audit: type=1326 audit(1777826023.096:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 112.963076][ T40] audit: type=1326 audit(1777826023.106:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 112.987381][ T40] audit: type=1326 audit(1777826023.106:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 113.000174][ T40] audit: type=1326 audit(1777826023.106:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 113.012185][ T40] audit: type=1326 audit(1777826023.116:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 113.020940][ T40] audit: type=1326 audit(1777826023.116:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 113.028301][ T40] audit: type=1326 audit(1777826023.116:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 113.035686][ T40] audit: type=1326 audit(1777826023.126:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.0.135" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 113.109819][ T6471] loop5: detected capacity change from 0 to 7 [ 113.119877][ T6471] Dev loop5: unable to read RDB block 7 [ 113.128499][ T6471] loop5: unable to read partition table [ 113.134115][ T6471] loop5: partition table beyond EOD, truncated [ 113.136873][ T6471] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.212334][ T6475] pimreg: entered allmulticast mode [ 113.214445][ T6476] random: crng reseeded on system resumption [ 113.290761][ T6476] wireguard0: entered promiscuous mode [ 113.293563][ T6476] wireguard0: entered allmulticast mode [ 113.302112][ T6476] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 113.324661][ T6475] pimreg: left allmulticast mode [ 120.134296][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.136743][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.139568][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.142322][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.145326][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.148671][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.151125][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.153518][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.156376][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.160650][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.163697][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.166403][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.171272][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.174240][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.176974][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.180317][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.182645][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 120.182733][ T40] audit: type=1326 audit(1777826030.336:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.183076][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.190864][ T40] audit: type=1326 audit(1777826030.336:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.193318][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.207053][ T40] audit: type=1326 audit(1777826030.336:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.216147][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.219191][ T6487] 9pnet_virtio: no channels available for device nfc [ 120.250809][ T40] audit: type=1326 audit(1777826030.336:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.288544][ T40] audit: type=1326 audit(1777826030.336:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.300729][ T40] audit: type=1326 audit(1777826030.346:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.308917][ T40] audit: type=1326 audit(1777826030.346:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.318588][ T40] audit: type=1326 audit(1777826030.346:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.328331][ T40] audit: type=1326 audit(1777826030.346:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.339826][ T40] audit: type=1326 audit(1777826030.346:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.145" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 120.392262][ T6502] Cannot find set identified by id 0 to match [ 120.571728][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'. [ 120.960615][ T6494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.334028][ T6517] overlayfs: failed to resolve './file0/file1': -2 [ 121.522938][ T6533] loop5: detected capacity change from 0 to 7 [ 121.551298][ T6533] Dev loop5: unable to read RDB block 7 [ 121.553008][ T6533] loop5: unable to read partition table [ 121.557406][ T6533] loop5: partition table beyond EOD, truncated [ 121.562293][ T6533] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.049757][ T6554] netlink: 'syz.0.160': attribute type 3 has an invalid length. [ 122.296027][ T6561] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.528287][ T6561] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.728301][ T6561] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.801554][ T6561] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.962076][ T1251] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.982858][ T1251] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.018260][ T1251] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.028972][ T1251] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.201779][ T1339] IPVS: starting estimator thread 0... [ 123.288050][ T6567] IPVS: using max 43 ests per chain, 103200 per kthread [ 124.470191][ T6586] ntfs3(nullb0): Primary boot signature is not NTFS. [ 124.473773][ T6586] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 124.563142][ T6616] ======================================================= [ 124.563142][ T6616] WARNING: The mand mount option has been deprecated and [ 124.563142][ T6616] and is ignored by this kernel. Remove the mand [ 124.563142][ T6616] option from the mount to silence this warning. [ 124.563142][ T6616] ======================================================= [ 125.044176][ T6616] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 125.932742][ T6621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.936869][ T6621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.938985][ T6621] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.946953][ T6621] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.951486][ T6621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.954194][ T6621] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.960295][ T6621] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.965418][ T6621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.967478][ T6621] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.972962][ T6621] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.227733][ T5740] block nbd3: Receive control failed (result -32) [ 126.229115][ T6634] block nbd3: shutting down sockets [ 126.239360][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 126.239370][ T40] audit: type=1326 audit(1777826036.396:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.173" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x0 [ 127.633651][ T6646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.850800][ T6628] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.907589][ T6646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.923476][ T6628] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.998070][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.008035][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.008398][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.065750][ T6628] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.115922][ T6646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.144285][ T6628] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.229272][ T6646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.281610][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.285411][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.289316][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.305753][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.409811][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.419638][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.431331][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.445884][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.481195][ T6661] xt_bpf: check failed: parse error [ 128.519853][ T6670] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.897455][ T6673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.841450][ T6686] syz.1.186 uses obsolete (PF_INET,SOCK_PACKET) [ 129.848916][ T6686] unsupported nla_type 16384 [ 130.034033][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.187'. [ 130.038789][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 130.078049][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.078071][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.080707][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.131723][ T6691] ntfs3(nullb0): Primary boot signature is not NTFS. [ 130.135137][ T6691] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 130.356374][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 130.440806][ T6692] 8021q: adding VLAN 0 to HW filter on device eth0 [ 130.444334][ T6692] 8021q: adding VLAN 0 to HW filter on device eth1 [ 130.463403][ T6692] 8021q: adding VLAN 0 to HW filter on device eth2 [ 130.467731][ T6692] 8021q: adding VLAN 0 to HW filter on device eth3 [ 130.474143][ T6692] bond1: left promiscuous mode [ 130.475859][ T6692] bridge1: left promiscuous mode [ 130.479466][ T6692] bond1: entered allmulticast mode [ 130.482084][ T6692] bridge1: entered allmulticast mode [ 130.484061][ T6692] macvtap1: left allmulticast mode [ 130.485859][ T6692] bond1: left allmulticast mode [ 130.487558][ T6692] bridge1: left allmulticast mode [ 130.498072][ T6692] bridge1: entered promiscuous mode [ 130.502341][ T6692] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.744052][ T6689] syz.0.187 (6689): drop_caches: 2 [ 130.747269][ T6689] syz.0.187 (6689): drop_caches: 2 [ 130.896079][ T6700] siw: device registration error -23 [ 131.092829][ T6700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.143684][ T6699] /dev/sr0: Can't open blockdev [ 132.053960][ T6707] xt_bpf: check failed: parse error [ 132.157988][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.158039][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.158059][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.233262][ T6723] loop5: detected capacity change from 0 to 7 [ 132.236454][ T6723] Dev loop5: unable to read RDB block 7 [ 132.238972][ T6723] loop5: unable to read partition table [ 132.241143][ T6723] loop5: partition table beyond EOD, truncated [ 132.244003][ T6723] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.522070][ T6729] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.575150][ T6729] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.641704][ T6729] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.724679][ T6729] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.814943][ T6609] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.829452][ T110] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.839250][ T6609] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.848735][ T6609] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.099663][ T6735] loop6: detected capacity change from 0 to 2640 [ 133.108587][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.124674][ T6676] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.132116][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.137002][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.141884][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.147288][ T6676] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.150292][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.204504][ T6742] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 133.216789][ T6742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.222341][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'. [ 133.261337][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.269079][ T6736] loop6: detected capacity change from 2640 to 524288000 [ 133.272466][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.276436][ T6735] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.281244][ T6735] ldm_validate_partition_table(): Disk read failed. [ 133.284669][ T6735] Dev loop6: unable to read RDB block 0 [ 133.287571][ T6735] loop6: unable to read partition table [ 133.290562][ T6735] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 133.351443][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.396256][ T6742] bond1: (slave batadv1): making interface the new active one [ 133.422422][ T6742] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 133.464816][ T6748] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.480428][ T6745] bond1 (unregistering): (slave batadv1): Releasing active interface [ 133.504374][ T9] IPVS: starting estimator thread 0... [ 133.521564][ T6745] bond1 (unregistering): Released all slaves [ 133.618902][ T6750] IPVS: using max 27 ests per chain, 64800 per kthread [ 133.900617][ T6755] loop5: detected capacity change from 0 to 7 [ 133.922950][ T6755] Dev loop5: unable to read RDB block 7 [ 133.926899][ T6755] loop5: unable to read partition table [ 133.930928][ T6755] loop5: partition table beyond EOD, truncated [ 133.933937][ T6755] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.238434][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.241160][ T6772] warning: `syz.2.210' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.246226][ T6772] netlink: 'syz.2.210': attribute type 2 has an invalid length. [ 134.270729][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 134.317092][ T6775] netlink: 'syz.0.211': attribute type 39 has an invalid length. [ 134.364825][ T6769] lo speed is unknown, defaulting to 1000 [ 134.858011][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 135.007937][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 135.025005][ T24] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 135.028848][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.041570][ T24] usb 7-1: config 0 descriptor?? [ 135.057826][ T24] as10x_usb: device has been detected [ 135.060282][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 135.085019][ T24] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 135.105377][ T24] as10x_usb: error during firmware upload part1 [ 135.107701][ T24] Registered device nBox DVB-T Dongle [ 135.255900][ T24] usb 7-1: USB disconnect, device number 3 [ 135.276642][ T24] Unregistered device nBox DVB-T Dongle [ 135.278306][ T24] as10x_usb: device has been disconnected [ 135.557750][ T6796] NILFS (nbd3): device size too small [ 135.613470][ T6798] loop5: detected capacity change from 0 to 7 [ 135.619638][ T6798] Dev loop5: unable to read RDB block 7 [ 135.622400][ T6798] loop5: unable to read partition table [ 135.625239][ T6798] loop5: partition table beyond EOD, truncated [ 135.629405][ T6798] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.789944][ T6816] dlm: non-version read from control device 36 [ 136.850226][ T6819] siw: device registration error -23 [ 137.039393][ T6821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.149410][ T6825] xt_policy: output policy not valid in PREROUTING and INPUT [ 137.452104][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.457155][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.531324][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 138.534887][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 138.592830][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 138.596176][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 138.609712][ T1157] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.617979][ T1157] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.621714][ T1157] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.625393][ T1157] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.956594][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 138.963017][ T6857] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 139.377047][ T6870] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 139.386456][ T6871] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 140.034969][ T6899] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.087223][ T6902] syzkaller0: entered promiscuous mode [ 140.090215][ T6902] syzkaller0: entered allmulticast mode [ 140.174658][ T6899] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.316573][ T6899] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.694621][ T6899] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.003277][ T6609] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.094972][ T6609] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.148602][ T6609] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.162569][ T6943] lo speed is unknown, defaulting to 1000 [ 142.210535][ T6609] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.664121][ T6947] siw: device registration error -23 [ 142.837652][ T6947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.027429][ T6951] siw: device registration error -23 [ 144.157020][ T6951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.640224][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 144.650172][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 144.897974][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 145.057980][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 145.068807][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.077972][ T9] usb 7-1: config 0 has no interfaces? [ 145.085491][ T9] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 145.097938][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.105181][ T9] usb 7-1: config 0 descriptor?? [ 145.446578][ T6969] Bluetooth: hci0: load_link_keys: too big key_count value 53767 [ 145.794802][ T6974] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 145.797170][ T6974] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.888083][ T6974] vhci_hcd vhci_hcd.0: Device attached [ 146.032129][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 146.297995][ T5833] usb 40-1: SetAddress Request (6) to port 0 [ 146.450860][ T5833] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 146.526803][ T6972] ./bus: Can't lookup blockdev [ 146.663428][ T6975] vhci_hcd: connection reset by peer [ 146.678712][ T6611] vhci_hcd vhci_hcd.1: stop threads [ 146.680688][ T6611] vhci_hcd vhci_hcd.1: release socket [ 146.683870][ T6611] vhci_hcd vhci_hcd.1: disconnect device [ 146.967984][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 147.097972][ T6983] lo speed is unknown, defaulting to 1000 [ 147.119276][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.122354][ T24] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 147.125910][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.129137][ T24] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.133022][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 147.137554][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.145083][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.148284][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.153678][ T24] usb 8-1: Product: syz [ 147.155979][ T24] usb 8-1: Manufacturer: syz [ 147.173655][ T6981] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.183422][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 147.187406][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 147.191477][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 147.194031][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 147.382330][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.384643][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.386906][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.389067][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.391247][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.393374][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.395580][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.397712][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.400181][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.402335][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.404434][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.406618][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.408929][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.411049][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.416452][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.418573][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.421486][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.423598][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.425841][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.427967][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.468036][ T6998] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 147.525120][ T57] usb 8-1: USB disconnect, device number 3 [ 147.525970][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 147.634979][ T34] usb 7-1: USB disconnect, device number 4 [ 147.743685][ T7009] siw: device registration error -23 [ 147.809900][ T7009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.986824][ T7014] overlayfs: missing 'workdir' [ 151.027677][ T7047] /dev/nullb0: Can't open blockdev [ 151.678584][ T5833] usb 40-1: device descriptor read/8, error -110 [ 151.945285][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 151.960137][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 152.068446][ T5833] usb usb40-port1: attempt power cycle [ 152.425901][ T7066] siw: device registration error -23 [ 152.475733][ T7055] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 152.480758][ T7055] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 152.486689][ T7055] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 152.540471][ T7055] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.547616][ T7066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.569453][ T7067] 9pnet_virtio: no channels available for device syz [ 152.582935][ T7067] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.824564][ T7071] tipc: Started in network mode [ 152.827229][ T7071] tipc: Node identity 32d115aa7aa1, cluster identity 4711 [ 152.831564][ T7071] tipc: Enabled bearer , priority 0 [ 152.841893][ T7071] syzkaller0: entered promiscuous mode [ 152.845501][ T7071] syzkaller0: entered allmulticast mode [ 152.898468][ T5833] usb usb40-port1: unable to enumerate USB device [ 152.983713][ T7073] MINIX-fs: blocksize too small for device [ 153.158283][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 153.164625][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 153.408178][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 153.708138][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 153.717044][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.720457][ T9] usb 8-1: config 0 has no interfaces? [ 153.722326][ T9] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 153.725821][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.732520][ T9] usb 8-1: config 0 descriptor?? [ 153.768233][ T7079] Unsupported ieee802154 address type: 0 [ 153.794552][ T7056] tipc: Resetting bearer [ 153.809579][ T7056] tipc: Disabling bearer [ 154.283509][ T7102] siw: device registration error -23 [ 154.394854][ T7102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.565299][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 154.769680][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 154.869266][ T7126] /dev/nullb0: Can't open blockdev [ 154.932122][ T7128] syzkaller0: entered promiscuous mode [ 154.934607][ T7128] syzkaller0: entered allmulticast mode [ 156.024452][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 156.173842][ T5846] usb 8-1: USB disconnect, device number 4 [ 156.226317][ T7139] netlink: 'syz.2.310': attribute type 4 has an invalid length. [ 156.255520][ T7144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'. [ 156.267200][ T7135] lo speed is unknown, defaulting to 1000 [ 156.334742][ T40] audit: type=1804 audit(1777826066.486:295): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.310" name="/newroot/73/file0" dev="fuse" ino=1 res=1 errno=0 [ 156.348018][ T7140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.350230][ T7140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.352561][ T7140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.357700][ T7140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.476065][ T7158] siw: device registration error -23 [ 156.531837][ T7158] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.567791][ T7159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.638147][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 156.800082][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 156.807760][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 156.815098][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 156.822929][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 156.841169][ T24] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 156.848390][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.854038][ T24] usb 7-1: Product: syz [ 156.857005][ T24] usb 7-1: Manufacturer: syz [ 156.860554][ T24] usb 7-1: SerialNumber: syz [ 156.866589][ T24] usb 7-1: config 0 descriptor?? [ 156.888165][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 156.999104][ T7163] netlink: 'syz.1.316': attribute type 3 has an invalid length. [ 157.153832][ C0] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 157.156796][ T9] usb 7-1: USB disconnect, device number 5 [ 157.221105][ T7166] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.317'. [ 157.227973][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 157.822436][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 157.827565][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 157.858710][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.941132][ T7176] overlayfs: failed to resolve './bus': -2 [ 158.028119][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 158.032084][ T24] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 158.035706][ T24] usb 5-1: config 2 has no interface number 0 [ 158.038773][ T24] usb 5-1: config 2 interface 88 has no altsetting 0 [ 158.043754][ T24] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 158.047789][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.051418][ T24] usb 5-1: Product: syz [ 158.053397][ T24] usb 5-1: Manufacturer: syz [ 158.055539][ T24] usb 5-1: SerialNumber: syz [ 158.121546][ T5833] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 158.236652][ T7189] 9pnet_virtio: no channels available for device syz [ 158.268017][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 158.272248][ T5833] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.273966][ T7189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.276683][ T5833] usb 7-1: config 0 has no interfaces? [ 158.283100][ T5833] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 158.286904][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.293256][ T5833] usb 7-1: config 0 descriptor?? [ 158.398098][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.400668][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.402862][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.416402][ T24] asix 5-1:2.88: probe with driver asix failed with error -71 [ 158.509896][ T24] usb 5-1: USB disconnect, device number 4 [ 158.876081][ T7184] syz.1.324 (7184) used greatest stack depth: 18968 bytes left [ 158.990483][ T7197] binder: 7196:7197 ioctl c0306201 80000640 returned -22 [ 159.009610][ T7198] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.105654][ T7199] 9p: Bad value for 'rfdno' [ 159.147733][ T7198] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.201677][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 159.228727][ T7203] netlink: 'syz.1.329': attribute type 21 has an invalid length. [ 159.231479][ T7203] netlink: 'syz.1.329': attribute type 20 has an invalid length. [ 159.262916][ T7198] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.355918][ T7198] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.559581][ T6609] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.572058][ T6609] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.596345][ T6609] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.633234][ T6609] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.716690][ T7211] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 159.719581][ T7211] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 159.723770][ T7211] vhci_hcd vhci_hcd.0: Device attached [ 159.988065][ T5833] usb 40-1: SetAddress Request (10) to port 0 [ 159.990941][ T5833] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 160.119903][ T7212] vhci_hcd: connection reset by peer [ 160.122148][ T12] vhci_hcd vhci_hcd.1: stop threads [ 160.124036][ T12] vhci_hcd vhci_hcd.1: release socket [ 160.126557][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 160.661421][ T40] audit: type=1326 audit(1777826070.816:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.1.332" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fcc code=0x0 [ 160.673292][ T40] audit: type=1326 audit(1777826070.816:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.1.332" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fcc code=0x0 [ 160.829949][ T5846] usb 7-1: USB disconnect, device number 6 [ 160.992630][ T7230] netlink: 'syz.2.334': attribute type 8 has an invalid length. [ 161.028651][ T5812] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.188321][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 161.200754][ T5812] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 161.214223][ T5812] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 161.254993][ T5812] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.259259][ T5812] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 161.269424][ T5812] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 161.273121][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.278218][ T5812] usb 6-1: Product: syz [ 161.279972][ T5812] usb 6-1: Manufacturer: syz [ 161.283184][ T5812] usb 6-1: SerialNumber: syz [ 161.350363][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 161.420448][ T7236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.459657][ T5812] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input9 [ 161.747989][ T5812] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 161.751924][ T5812] (id 0x00) [ 161.989630][ T5812] rc_core: IR keymap rc-imon-pad not found [ 161.991629][ T5812] Registered IR keymap rc-empty [ 161.996208][ T5812] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 162.000083][ T5812] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 162.021320][ T5812] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 162.025924][ T5812] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input10 [ 162.034035][ T5812] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:5> initialized [ 162.206119][ T5812] usb 6-1: USB disconnect, device number 5 [ 162.433104][ T40] audit: type=1804 audit(1777826072.586:298): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.336" name="/newroot/78/bus/bus" dev="overlay" ino=465 res=1 errno=0 [ 162.456459][ T40] audit: type=1804 audit(1777826072.606:299): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.336" name="/newroot/78/bus/bus" dev="overlay" ino=465 res=1 errno=0 [ 163.154888][ T7253] /dev/nullb0: Can't open blockdev [ 163.481492][ T7262] program syz.1.340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.548769][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 163.636337][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.338'. [ 163.789535][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.338'. [ 164.556467][ T7287] siw: device registration error -23 [ 164.632736][ T7287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.705661][ T7290] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.833656][ T7290] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.045901][ T5833] usb 40-1: device descriptor read/8, error -110 [ 165.082887][ T7290] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.367145][ T7290] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.439083][ T5833] usb usb40-port1: attempt power cycle [ 165.582295][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.585900][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.589432][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.593767][ T1157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.131999][ T5833] usb usb40-port1: unable to enumerate USB device [ 166.147764][ T7315] syz.3.353 (7315): drop_caches: 2 [ 166.345383][ T7329] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 166.371611][ T7329] loop7: detected capacity change from 0 to 16384 [ 166.728016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 167.317567][ T7328] lo speed is unknown, defaulting to 1000 [ 167.453268][ T7334] program syz.2.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.109738][ T7357] loop5: detected capacity change from 0 to 7 [ 168.115112][ T7357] Dev loop5: unable to read RDB block 7 [ 168.119218][ T7357] loop5: unable to read partition table [ 168.122007][ T7357] loop5: partition table beyond EOD, truncated [ 168.125700][ T7357] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.423280][ T7366] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.426731][ T7366] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.704514][ T7366] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.709400][ T7366] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.873901][ T7366] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.877687][ T7366] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.929261][ T7366] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.932575][ T7366] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.086308][ T1157] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.090060][ T1157] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.143845][ T6609] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.153475][ T6609] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.187234][ T6609] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.199891][ T6609] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.212431][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 169.216469][ T6609] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.220589][ T6609] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.766863][ T40] audit: type=1800 audit(1777826079.916:300): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.375" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 169.845066][ T7391] 9p: Bad value for 'rfdno' [ 170.290535][ T7398] 9pnet_fd: Insufficient options for proto=fd [ 170.318104][ T5833] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 170.343750][ T7393] comedi comedi3: 8255: I/O base address not correctly aligned [ 170.468013][ T5833] usb 7-1: Using ep0 maxpacket: 32 [ 170.478593][ T5833] usb 7-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.500997][ T5833] usb 7-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0 [ 170.525619][ T5833] usb 7-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64 [ 170.548729][ T5833] usb 7-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.568811][ T5833] usb 7-1: config 1 interface 0 has no altsetting 0 [ 170.587656][ T5833] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.603156][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.621776][ T5833] usb 7-1: Product: syz [ 170.623743][ T5833] usb 7-1: Manufacturer: syz [ 170.633776][ T5833] usb 7-1: SerialNumber: syz [ 170.685777][ T7375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.753985][ T7403] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.823107][ T7403] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.881580][ T7403] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.044259][ T7403] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.145581][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.163848][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.183122][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.192593][ T1157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.252620][ T5833] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 171.265718][ T5833] usb 7-1: USB disconnect, device number 7 [ 171.391937][ T7421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.784556][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 171.901291][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'. [ 172.024679][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'. [ 173.570373][ T7461] bridge_slave_0: left allmulticast mode [ 173.573145][ T7461] bridge_slave_0: left promiscuous mode [ 173.577166][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.593176][ T7461] bridge_slave_1: left allmulticast mode [ 173.595918][ T7461] bridge_slave_1: left promiscuous mode [ 173.600490][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.612831][ T7461] bond0: (slave bond_slave_0): Releasing backup interface [ 173.630937][ T7461] bond0: (slave bond_slave_1): Releasing backup interface [ 173.645561][ T7461] team0: Port device team_slave_0 removed [ 173.655310][ T7461] team0: Port device team_slave_1 removed [ 173.659057][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.661930][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.665698][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.668545][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.672226][ T7461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.145784][ T7466] x_tables: duplicate underflow at hook 1 [ 175.678355][ T7485] pim6reg: entered allmulticast mode [ 176.611329][ T7499] sctp: [Deprecated]: syz.2.401 (pid 7499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.611329][ T7499] Use struct sctp_sack_info instead [ 177.138463][ T7502] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 177.141241][ T7502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.144820][ T7502] vhci_hcd vhci_hcd.0: Device attached [ 177.468001][ T5812] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 177.607991][ T5812] usb 7-1: device descriptor read/64, error -71 [ 177.618009][ T855] usb 44-1: SetAddress Request (2) to port 0 [ 177.717006][ T855] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 177.818314][ T7504] vhci_hcd: connection reset by peer [ 177.823766][ T1157] vhci_hcd vhci_hcd.3: stop threads [ 177.826075][ T1157] vhci_hcd vhci_hcd.3: release socket [ 177.829388][ T1157] vhci_hcd vhci_hcd.3: disconnect device [ 177.868609][ T5812] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 177.998039][ T5812] usb 7-1: device descriptor read/64, error -71 [ 178.090886][ T7513] x_tables: duplicate underflow at hook 2 [ 178.109441][ T5812] usb usb7-port1: attempt power cycle [ 178.151504][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 178.467970][ T5812] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 178.500113][ T5812] usb 7-1: device descriptor read/8, error -71 [ 178.549957][ T7531] sg_write: data in/out 196864/100 bytes for SCSI command 0x0-- guessing data in; [ 178.549957][ T7531] program syz.0.412 not setting count and/or reply_len properly [ 178.597931][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 178.758066][ T5812] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 178.765568][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 178.770623][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.777707][ T9] usb 6-1: Product: syz [ 178.779244][ T9] usb 6-1: Manufacturer: syz [ 178.781457][ T5812] usb 7-1: device descriptor read/8, error -71 [ 178.784739][ T9] usb 6-1: SerialNumber: syz [ 178.888790][ T5812] usb usb7-port1: unable to enumerate USB device [ 178.898274][ T7546] bond2: entered allmulticast mode [ 178.901134][ T7546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.966086][ T7535] block nbd0: server does not support multiple connections per device. [ 178.975168][ T7535] block nbd0: shutting down sockets [ 179.396652][ T7552] can0: slcan on ttyS3. [ 179.531481][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.541676][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.791926][ T7555] can0 (unregistered): slcan off ttyS3. [ 179.824443][ T9] rtl8150 6-1:1.0: couldn't reset the device [ 179.826602][ T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 179.860994][ T9] usb 6-1: USB disconnect, device number 6 [ 179.888907][ T7572] netlink: 'syz.3.416': attribute type 5 has an invalid length. [ 180.337941][ T7586] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 180.732052][ T7594] No buffer was provided with the request [ 181.659129][ T7602] Bluetooth: MGMT ver 1.23 [ 182.368075][ T39] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 182.553617][ T39] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 182.567956][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.570611][ T39] usb 8-1: Product: syz [ 182.572016][ T39] usb 8-1: Manufacturer: syz [ 182.573664][ T39] usb 8-1: SerialNumber: syz [ 183.165795][ T855] usb 44-1: device descriptor read/8, error -110 [ 183.312189][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.332144][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.395557][ T39] rtl8150 8-1:1.0: couldn't reset the device [ 183.402299][ T39] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 183.420295][ T39] usb 8-1: USB disconnect, device number 5 [ 183.561305][ T855] usb usb44-port1: attempt power cycle [ 184.872305][ T855] usb usb44-port1: unable to enumerate USB device [ 184.950934][ T7623] team0: Device gtp0 is up. Set it down before adding it as a team port [ 185.138386][ T855] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 185.288206][ T855] usb 6-1: Using ep0 maxpacket: 8 [ 185.293728][ T855] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 185.298031][ T855] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 185.304647][ T855] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.318690][ T855] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.324293][ T855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.378710][ T855] usbtmc 6-1:16.0: bulk endpoints not found [ 186.038546][ T7629] random: crng reseeded on system resumption [ 186.201417][ T7630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.160373][ T855] usb 6-1: USB disconnect, device number 7 [ 187.482459][ T7648] comedi: valid board names for 8255 driver are: [ 187.486928][ T7648] 8255 [ 187.489694][ T7648] comedi: valid board names for vmk80xx driver are: [ 187.494386][ T7648] vmk80xx [ 187.496629][ T7648] comedi: valid board names for usbduxsigma driver are: [ 187.502026][ T7648] usbduxsigma [ 187.505115][ T7648] comedi: valid board names for usbduxfast driver are: [ 187.510765][ T7648] usbduxfast [ 187.513556][ T7648] comedi: valid board names for usbdux driver are: [ 187.518823][ T7648] usbdux [ 187.521922][ T7648] comedi: valid board names for ni6501 driver are: [ 187.526994][ T7648] ni6501 [ 187.528114][ T7648] comedi: valid board names for dt9812 driver are: [ 187.531452][ T7648] dt9812 [ 187.533979][ T7648] comedi: valid board names for ni_labpc_cs driver are: [ 187.538995][ T7648] ni_labpc_cs [ 187.541872][ T7648] comedi: valid board names for ni_daq_700 driver are: [ 187.546863][ T7648] ni_daq_700 [ 187.548825][ T7648] comedi: valid board names for labpc_pci driver are: [ 187.551082][ T7648] labpc_pci [ 187.552121][ T7648] comedi: valid board names for adl_pci9118 driver are: [ 187.555814][ T7648] pci9118dg [ 187.558316][ T7648] pci9118hg [ 187.562068][ T7648] pci9118hr [ 187.565147][ T7648] comedi: valid board names for 8255_pci driver are: [ 187.571086][ T7648] 8255_pci [ 187.574218][ T7648] comedi: valid board names for s526 driver are: [ 187.581401][ T7648] s526 [ 187.584319][ T7648] comedi: valid board names for multiq3 driver are: [ 187.591646][ T7648] multiq3 [ 187.594521][ T7648] comedi: valid board names for pcmuio driver are: [ 187.601311][ T7648] pcmuio48 [ 187.604631][ T7648] pcmuio96 [ 187.608706][ T7648] comedi: valid board names for pcmmio driver are: [ 187.612261][ T7648] pcmmio [ 187.614280][ T7648] comedi: valid board names for pcmda12 driver are: [ 187.618620][ T7648] pcmda12 [ 187.622257][ T7648] comedi: valid board names for pcmad driver are: [ 187.626769][ T7648] pcmad12 [ 187.630106][ T7648] pcmad16 [ 187.633103][ T7648] comedi: valid board names for ni_labpc driver are: [ 187.639393][ T7648] lab-pc-1200 [ 187.640199][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 187.642343][ T7648] lab-pc-1200ai [ 187.645399][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 187.647163][ T7648] lab-pc+ [ 187.654344][ T7648] comedi: valid board names for atmio16 driver are: [ 187.658072][ T7648] atmio16 [ 187.659485][ T7648] atmio16d [ 187.661764][ T7648] comedi: valid board names for ni_at_ao driver are: [ 187.666579][ T7648] at-ao-6 [ 187.670002][ T7648] at-ao-10 [ 187.672911][ T7648] comedi: valid board names for ni_at_a2150 driver are: [ 187.677149][ T7648] ni_at_a2150 [ 187.678654][ T7648] comedi: valid board names for adq12b driver are: [ 187.683359][ T7648] adq12b [ 187.686271][ T7648] comedi: valid board names for mpc624 driver are: [ 187.690132][ T7648] mpc624 [ 187.693005][ T7648] comedi: valid board names for c6xdigio driver are: [ 187.697138][ T7648] c6xdigio [ 187.699897][ T7648] comedi: valid board names for aio_iiro_16 driver are: [ 187.703957][ T7648] aio_iiro_16 [ 187.706641][ T7648] comedi: valid board names for aio_aio12_8 driver are: [ 187.709559][ T7648] aio_aio12_8 [ 187.710811][ T7648] aio_ai12_8 [ 187.714416][ T7648] aio_ao12_4 [ 187.717418][ T7648] comedi: valid board names for fl512 driver are: [ 187.720938][ T7648] fl512 [ 187.722059][ T7648] comedi: valid board names for dmm32at driver are: [ 187.725840][ T7648] dmm32at [ 187.727041][ T7648] comedi: valid board names for dt282x driver are: [ 187.731201][ T7648] dt2821 [ 187.733935][ T7648] dt2821-f [ 187.735085][ T7648] dt2821-g [ 187.738095][ T7648] dt2823 [ 187.740222][ T7648] dt2824-pgh [ 187.742460][ T7648] dt2824-pgl [ 187.744796][ T7648] dt2825 [ 187.746983][ T7648] dt2827 [ 187.748913][ T7648] dt2828 [ 187.750876][ T7648] dt2829 [ 187.753203][ T7648] dt21-ez [ 187.755427][ T7648] dt23-ez [ 187.757624][ T7648] dt24-ez [ 187.759905][ T7648] dt24-ez-pgl [ 187.762291][ T7648] comedi: valid board names for dt2817 driver are: [ 187.766807][ T7648] dt2817 [ 187.769114][ T7648] comedi: valid board names for dt2815 driver are: [ 187.773422][ T7648] dt2815 [ 187.775591][ T7648] comedi: valid board names for dt2814 driver are: [ 187.780766][ T7648] dt2814 [ 187.783133][ T7648] comedi: valid board names for dt2811 driver are: [ 187.787974][ T7648] dt2811-pgh [ 187.789628][ T7648] dt2811-pgl [ 187.791299][ T7648] comedi: valid board names for dt2801 driver are: [ 187.794219][ T7648] dt2801 [ 187.795613][ T7648] comedi: valid board names for das6402 driver are: [ 187.798682][ T7648] das6402-12 [ 187.800341][ T7648] das6402-16 [ 187.801606][ T7648] comedi: valid board names for das1800 driver are: [ 187.804215][ T7648] das-1701st [ 187.805619][ T7648] das-1701st-da [ 187.806878][ T7648] das-1702st [ 187.808836][ T7648] das-1702st-da [ 187.810083][ T7648] das-1702hr [ 187.811196][ T7648] das-1702hr-da [ 187.812446][ T7648] das-1701ao [ 187.813745][ T7648] das-1702ao [ 187.815017][ T7648] das-1801st [ 187.816149][ T7648] das-1801st-da [ 187.817382][ T7648] das-1802st [ 187.818550][ T7648] das-1802st-da [ 187.819820][ T7648] das-1802hr [ 187.820945][ T7648] das-1802hr-da [ 187.822177][ T7648] das-1801hc [ 187.823440][ T7648] das-1802hc [ 187.824584][ T7648] das-1801ao [ 187.825810][ T7648] das-1802ao [ 187.826975][ T7648] comedi: valid board names for das800 driver are: [ 187.829198][ T7648] das-800 [ 187.830284][ T7648] cio-das800 [ 187.831498][ T7648] das-801 [ 187.832562][ T7648] cio-das801 [ 187.833737][ T7648] das-802 [ 187.834777][ T7648] cio-das802 [ 187.835983][ T7648] cio-das802/16 [ 187.837196][ T7648] comedi: valid board names for isa-das08 driver are: [ 187.839832][ T7648] isa-das08 [ 187.840951][ T7648] das08-pgm [ 187.842137][ T7648] das08-pgh [ 187.843346][ T7648] das08-pgl [ 187.844540][ T7648] das08-aoh [ 187.845649][ T7648] das08-aol [ 187.846842][ T7648] das08-aom [ 187.850532][ T7648] das08/jr-ao [ 187.851714][ T7648] das08jr-16-ao [ 187.853069][ T7648] pc104-das08 [ 187.854214][ T7648] das08jr/16 [ 187.855371][ T7648] comedi: valid board names for das16m1 driver are: [ 187.857625][ T7648] das16m1 [ 187.858744][ T7648] comedi: valid board names for dac02 driver are: [ 187.860887][ T7648] dac02 [ 187.861856][ T7648] comedi: valid board names for rti802 driver are: [ 187.864103][ T7648] rti802 [ 187.865107][ T7648] comedi: valid board names for rti800 driver are: [ 187.867193][ T7648] rti800 [ 187.868294][ T7648] rti815 [ 187.869291][ T7648] comedi: valid board names for pcm3724 driver are: [ 187.871918][ T7648] pcm3724 [ 187.873312][ T7648] comedi: valid board names for pcl818 driver are: [ 187.876221][ T7648] pcl818l [ 187.877284][ T7648] pcl818h [ 187.878456][ T7648] pcl818hd [ 187.879526][ T7648] pcl818hg [ 187.880640][ T7648] pcl818 [ 187.881656][ T7648] pcl718 [ 187.882605][ T7648] pcm3718 [ 187.883662][ T7648] comedi: valid board names for pcl816 driver are: [ 187.886471][ T7648] pcl816 [ 187.887818][ T7648] pcl814b [ 187.891085][ T7648] comedi: valid board names for pcl812 driver are: [ 187.893322][ T7648] pcl812 [ 187.894311][ T7648] pcl812pg [ 187.895370][ T7648] acl8112pg [ 187.896468][ T7648] acl8112dg [ 187.897589][ T7648] acl8112hg [ 187.898772][ T5846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.901279][ T7648] a821pgl [ 187.902321][ T7648] a821pglnda [ 187.903620][ T7648] a821pgh [ 187.904836][ T7648] a822pgl [ 187.906244][ T7648] a822pgh [ 187.907335][ T7648] a823pgl [ 187.908496][ T7648] a823pgh [ 187.909547][ T7648] pcl813 [ 187.910698][ T7648] pcl813b [ 187.911775][ T7648] acl8113 [ 187.912872][ T7648] iso813 [ 187.914052][ T7648] acl8216 [ 187.915084][ T7648] a826pg [ 187.916076][ T7648] comedi: valid board names for pcl730 driver are: [ 187.918464][ T7648] pcl730 [ 187.919799][ T7648] iso730 [ 187.921202][ T7648] acl7130 [ 187.922325][ T7648] pcm3730 [ 187.923420][ T7648] pcl725 [ 187.924422][ T7648] p8r8dio [ 187.925470][ T7648] acl7225b [ 187.926537][ T7648] p16r16dio [ 187.927832][ T7648] pcl733 [ 187.929255][ T7648] pcl734 [ 187.930568][ T7648] opmm-1616-xt [ 187.931757][ T7648] pearl-mm-p [ 187.932806][ T7648] ir104-pbf [ 187.934078][ T7648] comedi: valid board names for pcl726 driver are: [ 187.936345][ T7648] pcl726 [ 187.937380][ T7648] pcl727 [ 187.938593][ T7648] pcl728 [ 187.939922][ T7648] acl6126 [ 187.941278][ T7648] acl6128 [ 187.942411][ T7648] comedi: valid board names for pcl724 driver are: [ 187.944747][ T7648] pcl724 [ 187.945776][ T7648] pcl722 [ 187.946792][ T7648] pcl731 [ 187.947788][ T7648] acl7122 [ 187.948891][ T7648] acl7124 [ 187.949932][ T7648] pet48dio [ 187.950996][ T7648] pcmio48 [ 187.952035][ T7648] onyx-mm-dio [ 187.953286][ T7648] comedi: valid board names for pcl711 driver are: [ 187.955709][ T7648] pcl711 [ 187.956975][ T7648] pcl711b [ 187.962571][ T7648] acl8112hg [ 187.964741][ T7648] acl8112dg [ 187.965802][ T7648] comedi: valid board names for amplc_pc263 driver are: [ 187.968388][ T7648] pc263 [ 187.969337][ T7648] comedi: valid board names for amplc_pc236 driver are: [ 187.971616][ T7648] pc36at [ 187.972673][ T7648] comedi: valid board names for amplc_dio200 driver are: [ 187.975629][ T7648] pc212e [ 187.976681][ T7648] pc214e [ 187.977695][ T7648] pc215e [ 187.978755][ T7648] pc218e [ 187.979746][ T7648] pc272e [ 187.980760][ T7648] comedi: valid board names for comedi_parport driver are: [ 187.983134][ T7648] comedi_parport [ 187.984450][ T7648] comedi: valid board names for comedi_test driver are: [ 187.986812][ T7648] comedi_test [ 187.987988][ T7648] comedi: valid board names for comedi_bond driver are: [ 187.992006][ T7648] comedi_bond [ 188.057952][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 188.062081][ T5846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.066871][ T5846] usb 5-1: config 0 has no interfaces? [ 188.069094][ T5846] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 188.072506][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.078961][ T5846] usb 5-1: config 0 descriptor?? [ 188.148390][ T7656] faux_driver vgem: [drm] Unknown color mode 65545; guessing buffer size. [ 189.029607][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 189.069146][ T7664] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.123210][ T7664] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.171835][ T7664] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.223237][ T7664] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.323445][ T1157] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.328990][ T1157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.334868][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.343704][ T1157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.928100][ T1339] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 190.078456][ T1339] usb 7-1: Using ep0 maxpacket: 16 [ 190.082580][ T1339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.089158][ T1339] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.093338][ T1339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.096931][ T1339] usb 7-1: Product: syz [ 190.099141][ T1339] usb 7-1: Manufacturer: syz [ 190.101566][ T1339] usb 7-1: SerialNumber: syz [ 190.105969][ T1339] usb 7-1: config 0 descriptor?? [ 190.111622][ T1339] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.115758][ T1339] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 190.369869][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 190.588306][ T6611] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.590666][ T6611] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.592953][ T6611] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.668462][ T39] usb 5-1: USB disconnect, device number 5 [ 190.729491][ T1339] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 190.937397][ T7696] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.047981][ T7696] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.157784][ T7696] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.313564][ T7696] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.410395][ T1339] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 191.418503][ T1339] em28xx 7-1:0.0: board has no eeprom [ 191.480908][ T1157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.506660][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.621009][ T7673] em28xx 7-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 191.626729][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.779469][ T1157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.878087][ T1339] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 191.881009][ T1339] em28xx 7-1:0.0: dvb set to bulk mode. [ 191.884183][ T5846] em28xx 7-1:0.0: Binding DVB extension [ 191.896152][ T1339] usb 7-1: USB disconnect, device number 12 [ 191.905821][ T1339] em28xx 7-1:0.0: Disconnecting em28xx [ 191.930113][ T5846] em28xx 7-1:0.0: Registering input extension [ 191.933953][ T1339] em28xx 7-1:0.0: Closing input extension [ 192.023499][ T1339] em28xx 7-1:0.0: Freeing device [ 192.648097][ T5740] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 192.651487][ T62] Bluetooth: hci4: command 0xfc11 tx timeout [ 192.655046][ T6611] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.675425][ T7702] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 192.829391][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 192.838030][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 192.841112][ T7712] netlink: 'syz.3.456': attribute type 13 has an invalid length. [ 192.843665][ T7712] netlink: 'syz.3.456': attribute type 11 has an invalid length. [ 193.078964][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 193.139948][ T7715] fuse: Unknown parameter 'fd0x0000000000000009' [ 193.422839][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 193.427719][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 193.698369][ T5833] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 193.953909][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 193.959051][ T5833] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.962486][ T5833] usb 7-1: config 0 has no interfaces? [ 193.964582][ T5833] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 193.967628][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.972284][ T5833] usb 7-1: config 0 descriptor?? [ 194.066216][ T7745] overlayfs: failed to resolve './file2': -2 [ 194.079097][ T7745] random: crng reseeded on system resumption [ 194.718079][ T5738] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.880919][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 194.918225][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 195.055725][ T7756] siw: device registration error -23 [ 195.125451][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 195.136989][ T39] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 195.144929][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.157989][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.164540][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.171450][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.172937][ T7756] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.177535][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 195.185350][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.190564][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 195.402722][ T39] usb 5-1: usb_control_msg returned -32 [ 195.403966][ T7748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.465'. [ 195.405384][ T39] usbtmc 5-1:16.0: can't read capabilities [ 195.412949][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.417540][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.044137][ T7764] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 196.047057][ T7764] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 196.049880][ T7764] netlink: 224 bytes leftover after parsing attributes in process `syz.1.469'. [ 196.053264][ T7764] NCSI netlink: No device for ifindex 0 [ 196.431600][ T24] usb 7-1: USB disconnect, device number 13 [ 196.517924][ T7774] mmap: syz.2.472 (7774) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.777968][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 196.918024][ T39] usb 6-1: device descriptor read/64, error -71 [ 197.158021][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 197.288043][ T39] usb 6-1: device descriptor read/64, error -71 [ 197.398219][ T39] usb usb6-port1: attempt power cycle [ 197.680253][ T5892] usb 5-1: USB disconnect, device number 6 [ 197.735575][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 197.748829][ T39] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 197.768748][ T39] usb 6-1: device descriptor read/8, error -71 [ 198.008645][ T39] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 198.029138][ T39] usb 6-1: device descriptor read/8, error -71 [ 198.141336][ T39] usb usb6-port1: unable to enumerate USB device [ 198.483969][ T7797] __nla_validate_parse: 2 callbacks suppressed [ 198.484022][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 198.881467][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.883668][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.601039][ T7805] kvm: user requested TSC rate below hardware speed [ 199.766011][ T7809] /dev/nullb0: Can't open blockdev [ 199.988099][ T855] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 200.228014][ T855] usb 5-1: Using ep0 maxpacket: 32 [ 200.238721][ T855] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.243255][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 200.248318][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.254077][ T855] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 200.257827][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.270347][ T855] usb 5-1: config 0 descriptor?? [ 200.278401][ T7807] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.290995][ T855] hub 5-1:0.0: USB hub found [ 200.509172][ T7817] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 200.513094][ T7817] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 200.516562][ T7817] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.483'. [ 201.501884][ T855] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 201.506912][ T855] usbhid 5-1:0.0: can't add hid device: -71 [ 201.509335][ T855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 201.540673][ T855] usb 5-1: USB disconnect, device number 7 [ 202.115463][ T7830] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.266126][ T7830] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.311238][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 202.317308][ T7835] bond2 (unregistering): Released all slaves [ 202.367325][ T7830] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.482901][ T7830] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.675512][ T7845] siw: device registration error -23 [ 202.711332][ T7845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.750213][ T46] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.760101][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.781805][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.792095][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.645301][ T7850] loop5: detected capacity change from 0 to 7 [ 203.648028][ T7850] Dev loop5: unable to read RDB block 7 [ 203.649851][ T7850] loop5: unable to read partition table [ 203.652026][ T7850] loop5: partition table beyond EOD, truncated [ 203.664224][ T7850] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.712265][ T7854] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 203.720324][ T7853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.727440][ T7854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.754367][ T7854] bond2: (slave gretap1): making interface the new active one [ 203.757462][ T7854] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 203.804938][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.491'. [ 207.236696][ T7868] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.312423][ T7868] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.345258][ T7881] siw: device registration error -23 [ 207.379522][ T7868] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.404738][ T7881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.580762][ T7868] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.124489][ T7885] siw: device registration error -23 [ 208.173442][ T7885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.648004][ T39] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 208.808068][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 208.812233][ T39] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 208.816002][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 208.822815][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 208.827336][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 208.832260][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 208.836618][ T39] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.842333][ T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.846271][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.073225][ T39] usb 6-1: usb_control_msg returned -32 [ 209.075948][ T39] usbtmc 6-1:16.0: can't read capabilities [ 209.104343][ T7890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.113277][ T7890] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000bc: 0000 [#1] SMP KASAN NOPTI [ 209.118499][ T7890] KASAN: null-ptr-deref in range [0x00000000000005e0-0x00000000000005e7] [ 209.122357][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.2.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.126924][ T7890] Tainted: [L]=SOFTLOCKUP [ 209.128522][ T7890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.132408][ T7890] RIP: 0010:rt6_insert_exception+0x9eb/0x10a0 [ 209.134698][ T7890] Code: 3b 14 cf f7 45 85 f6 0f 85 1d 02 00 00 e8 7d 19 cf f7 48 8d bb e0 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 89 [ 209.142621][ T7890] RSP: 0000:ffffc9000610f120 EFLAGS: 00010202 [ 209.144794][ T7890] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 209.147924][ T7890] RDX: 00000000000000bc RSI: ffffffff8a38bc83 RDI: 00000000000005e0 [ 209.150881][ T7890] RBP: ffff888052f06000 R08: 0000000000000005 R09: 0000000000000000 [ 209.153845][ T7890] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888042d16c00 [ 209.157020][ T7890] R13: ffff888042d16cc8 R14: 0000000000000001 R15: 0000000000000500 [ 209.159901][ T7890] FS: 0000000000000000(0000) GS:ffff88809717d000(0063) knlGS:00000000f540db40 [ 209.163462][ T7890] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 209.165947][ T7890] CR2: 00000000f73c6d50 CR3: 000000006eff0000 CR4: 0000000000352ef0 [ 209.169036][ T7890] Call Trace: [ 209.170399][ T7890] [ 209.171399][ T7890] ? find_held_lock+0x2b/0x80 [ 209.173308][ T7890] ? rt6_do_update_pmtu+0x3da/0x660 [ 209.175039][ T7890] ? __pfx_rt6_insert_exception+0x10/0x10 [ 209.177504][ T7890] __ip6_rt_update_pmtu+0x555/0xd60 [ 209.179599][ T7890] ? __pfx___ip6_rt_update_pmtu+0x10/0x10 [ 209.182086][ T7890] ? lock_acquire+0x1b1/0x370 [ 209.184281][ T7890] ? find_held_lock+0x2b/0x80 [ 209.186467][ T7890] ? ip6_route_output_flags+0x234/0x650 [ 209.188808][ T7890] ? ip6_route_output_flags+0x234/0x650 [ 209.191355][ T7890] ? ip6_route_output_flags+0x23e/0x650 [ 209.193875][ T7890] ip6_update_pmtu+0x34f/0x3b0 [ 209.196046][ T7890] ? __pfx_ip6_update_pmtu+0x10/0x10 [ 209.198458][ T7890] icmpv6_err+0x2a2/0x3f0 [ 209.200394][ T7890] ? __pfx_icmpv6_err+0x10/0x10 [ 209.202209][ T7890] icmpv6_notify+0x35e/0x820 [ 209.204305][ T7890] ? __pfx_icmpv6_notify+0x10/0x10 [ 209.206649][ T7890] icmpv6_rcv+0x10bf/0x1ae0 [ 209.208534][ T7890] ? __pfx_icmpv6_rcv+0x10/0x10 [ 209.210275][ T7890] ip6_protocol_deliver_rcu+0xf97/0x1500 [ 209.212874][ T7890] ip6_input_finish+0x1e4/0x4a0 [ 209.215105][ T7890] ip6_input+0x105/0x2f0 [ 209.216978][ T7890] ip6_mc_input+0x513/0xf50 [ 209.218895][ T7890] ? __pfx_ip6_mc_input+0x10/0x10 [ 209.221199][ T7890] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 209.223948][ T7890] ? __pfx_ip6_mc_input+0x10/0x10 [ 209.226192][ T7890] ipv6_rcv+0x34c/0x3d0 [ 209.227729][ T7890] ? __pfx_ipv6_rcv+0x10/0x10 [ 209.229569][ T7890] __netif_receive_skb_one_core+0x12d/0x1e0 [ 209.231755][ T7890] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 209.234622][ T7890] ? lock_acquire+0x1b1/0x370 [ 209.236642][ T7890] __netif_receive_skb+0x1f/0x120 [ 209.238371][ T7890] netif_receive_skb+0x13b/0x7f0 [ 209.240207][ T7890] ? __pfx_netif_receive_skb+0x10/0x10 [ 209.242575][ T7890] tun_rx_batched.isra.0+0x3f6/0x750 [ 209.245001][ T7890] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 209.247264][ T7890] ? rcu_is_watching+0x12/0xc0 [ 209.249123][ T7890] ? tun_get_user+0x1cc8/0x3c20 [ 209.250957][ T7890] tun_get_user+0x1e31/0x3c20 [ 209.252880][ T7890] ? __pfx_tun_get_user+0x10/0x10 [ 209.255141][ T7890] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 209.257092][ T7890] ? find_held_lock+0x2b/0x80 [ 209.259122][ T7890] ? tun_get+0x191/0x370 [ 209.261070][ T7890] ? tun_get+0x191/0x370 [ 209.263015][ T7890] tun_chr_write_iter+0xdc/0x200 [ 209.265345][ T7890] vfs_write+0x6ac/0x1070 [ 209.267325][ T7890] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 209.269561][ T7890] ? __pfx_vfs_write+0x10/0x10 [ 209.271427][ T7890] ? find_held_lock+0x2b/0x80 [ 209.273589][ T7890] ksys_write+0x12a/0x250 [ 209.275557][ T7890] ? __pfx_ksys_write+0x10/0x10 [ 209.277803][ T7890] ? rcu_is_watching+0x12/0xc0 [ 209.280098][ T7890] ? rcu_is_watching+0x12/0xc0 [ 209.282278][ T7890] do_int80_emulation+0x141/0x700 [ 209.284566][ T7890] asm_int80_emulation+0x1a/0x20 [ 209.286504][ T7890] RIP: 0023:0xf715616b [ 209.288275][ T7890] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 209.296250][ T7890] RSP: 002b:00000000f540d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 209.299656][ T7890] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000640 [ 209.303061][ T7890] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 209.306620][ T7890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.310175][ T7890] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.313700][ T7890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.316610][ T7890] [ 209.318018][ T7890] Modules linked in: [ 209.319947][ T7890] ---[ end trace 0000000000000000 ]--- [ 209.322492][ T7890] RIP: 0010:rt6_insert_exception+0x9eb/0x10a0 [ 209.325303][ T7890] Code: 3b 14 cf f7 45 85 f6 0f 85 1d 02 00 00 e8 7d 19 cf f7 48 8d bb e0 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 89 [ 209.333865][ T7890] RSP: 0000:ffffc9000610f120 EFLAGS: 00010202 [ 209.336814][ T7890] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 209.340561][ T7890] RDX: 00000000000000bc RSI: ffffffff8a38bc83 RDI: 00000000000005e0 [ 209.343601][ T7890] RBP: ffff888052f06000 R08: 0000000000000005 R09: 0000000000000000 [ 209.347370][ T7890] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888042d16c00 [ 209.351181][ T7890] R13: ffff888042d16cc8 R14: 0000000000000001 R15: 0000000000000500 [ 209.354217][ T7892] geneve2: entered promiscuous mode [ 209.354976][ T7890] FS: 0000000000000000(0000) GS:ffff88809717d000(0063) knlGS:00000000f540db40 [ 209.357541][ T7892] geneve2: entered allmulticast mode [ 209.361462][ T7890] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 209.361480][ T7890] CR2: 00000000f73c6d50 CR3: 000000006eff0000 CR4: 0000000000352ef0 [ 209.370706][ T7890] Kernel panic - not syncing: Fatal exception in interrupt [ 209.374905][ T7890] Kernel Offset: disabled [ 209.376931][ T7890] Rebooting in 86400 seconds..