last executing test programs: 4m49.349182526s ago: executing program 3 (id=894): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x1f, 0x0, "80dd2b79d7ddc0a57dc7dc1a59c2b5bf049fdeea9eb1ad4033eb3197681bdbb73dad43d794d9af19fbee50fd7adfd59bd50533981651f7f9907189e9b9d7c05d4b2689b9114c31d6f1be9ed63eea36db"}, 0xd8) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 4m49.183557472s ago: executing program 0 (id=897): prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="9d631f5a58f0fed255aabae6a679c5f0c6539206949a6d1e5124a84e9546fab9c65630ad10d7217160c9ca1e4c49d8e71132f6fa46cfdd976a9b513be34ef7d100a5a78eb968dbd5d6ca1b48a361cdfec934db09650ab1e16328828dcc2debdd7ab7f3eb4539019b0358b40cdf7d9a30c28ded946deb9a406b9b10ae5600dcd1a3", 0x81, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8000, 0x4, 0xff, 0xa30000000, 0xffffffffffffffc0, r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 4m47.693675417s ago: executing program 0 (id=902): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000140)='devpts\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 4m47.100345854s ago: executing program 3 (id=905): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10) 4m46.884797013s ago: executing program 0 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) open(0x0, 0x8060, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="67d8902400aa303e97", 0x9}], 0x1, 0x0, 0x0, 0x400c5}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20140018, 0x0, 0x8}}) r7 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_pidfd_open(r7, 0x0) 4m45.666733539s ago: executing program 3 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x22) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4400000000000000140003006d6163766c616e310000000000000000140012800c0001006d6163766c616e000400028028001a8020000a80050008"], 0x70}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) flock(0xffffffffffffffff, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008014, &(0x7f0000000340)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) socket$inet(0x2, 0x2, 0x7) 4m44.540406837s ago: executing program 0 (id=910): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) 4m42.566693274s ago: executing program 3 (id=913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="9d631f5a58f0fed255aabae6a679c5f0c6539206949a6d1e5124a84e9546fab9c65630ad10d7217160c9ca1e4c49d8e71132f6fa46cfdd976a9b513be34ef7d100a5a78eb968dbd5d6ca1b48a361cdfec934db09650ab1e16328828dcc2debdd7ab7f3eb4539019b0358b40cdf7d9a30c28ded946deb9a406b9b10ae5600dcd1a3", 0x81, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8000, 0x4, 0xff, 0xa30000000, 0xffffffffffffffc0, r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 4m42.182289917s ago: executing program 0 (id=914): prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="9d631f5a58f0fed255aabae6a679c5f0c6539206949a6d1e5124a84e9546fab9c65630ad10d7217160c9ca1e4c49d8e71132f6fa46cfdd976a9b513be34ef7d100a5a78eb968dbd5d6ca1b48a361cdfec934db09650ab1e16328828dcc2debdd7ab7f3eb4539019b0358b40cdf7d9a30c28ded946deb9a406b9b10ae5600dcd1a3", 0x81, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8000, 0x4, 0xff, 0xa30000000, 0xffffffffffffffc0, r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 4m38.660868189s ago: executing program 3 (id=920): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10) 4m37.00954987s ago: executing program 3 (id=922): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x20000007d, 0x0) 4m36.987765528s ago: executing program 0 (id=923): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x1f, 0x0, "80dd2b79d7ddc0a57dc7dc1a59c2b5bf049fdeea9eb1ad4033eb3197681bdbb73dad43d794d9af19fbee50fd7adfd59bd50533981651f7f9907189e9b9d7c05d4b2689b9114c31d6f1be9ed63eea36db"}, 0xd8) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 4m21.538889581s ago: executing program 32 (id=923): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x1f, 0x0, "80dd2b79d7ddc0a57dc7dc1a59c2b5bf049fdeea9eb1ad4033eb3197681bdbb73dad43d794d9af19fbee50fd7adfd59bd50533981651f7f9907189e9b9d7c05d4b2689b9114c31d6f1be9ed63eea36db"}, 0xd8) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 4m21.477756164s ago: executing program 33 (id=922): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x20000007d, 0x0) 3m42.283608541s ago: executing program 1 (id=1051): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3m41.353268433s ago: executing program 1 (id=1053): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m39.612123625s ago: executing program 1 (id=1057): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3ff, 0x2, 0x2, 0x2, 0x6, 0xa]}, &(0x7f0000000140)=0x78) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2000}) 3m37.48563372s ago: executing program 1 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x22) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4400000000000000140003006d6163766c616e310000000000000000140012800c0001006d6163766c616e000400028028001a8020000a80050008"], 0x70}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) flock(0xffffffffffffffff, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008014, &(0x7f0000000340)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) socket$inet(0x2, 0x2, 0x7) 3m33.968109551s ago: executing program 1 (id=1066): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getresgid(0x0, 0x0, &(0x7f0000000780)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3m28.843199279s ago: executing program 1 (id=1075): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000080), 0x2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000002c00)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) 3m12.696666217s ago: executing program 34 (id=1075): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000080), 0x2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000002c00)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) 20.582167687s ago: executing program 4 (id=1488): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e060c"], 0x9) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0x7, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x36000000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x8003, 0x4082) sendfile(r3, r3, 0x0, 0x9) 20.519564632s ago: executing program 8 (id=1489): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) open(0x0, 0x8060, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000003580)={&(0x7f0000001fc0)={0xa, 0x2, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000034c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}, 0x2000) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="67d8902400aa303e97", 0x9}], 0x1, 0x0, 0x0, 0x400c5}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20140018, 0x0, 0x8}}) 19.878700615s ago: executing program 4 (id=1495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000080)=0x40) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0xff, 0xff, 0x4}, 0x10) 18.135052433s ago: executing program 4 (id=1500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 12.866152567s ago: executing program 6 (id=1509): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x406e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x10000000, 0x0, 'queue0\x00', 0xfffffffc}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0xf76091c88f27337, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xc040400) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x6, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 11.82061179s ago: executing program 5 (id=1512): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = open(0x0, 0x80140, 0x0) fcntl$setlease(r5, 0x400, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x72) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 10.685953492s ago: executing program 2 (id=1514): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e060c"], 0x9) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0x7, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x36000000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x8003, 0x4082) sendfile(r3, r3, 0x0, 0x9) 10.685138154s ago: executing program 5 (id=1515): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x400c0) 9.827270656s ago: executing program 5 (id=1517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) r4 = dup3(r2, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000080)=0x40) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0xff, 0xff, 0x4}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 9.420894175s ago: executing program 2 (id=1518): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x406e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0xf76091c88f27337, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xc040400) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x6, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 9.3397058s ago: executing program 4 (id=1519): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 9.126154643s ago: executing program 5 (id=1520): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) shmctl$SHM_LOCK(0x0, 0xb) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x1f, 0x0, "80dd2b79d7ddc0a57dc7dc1a59c2b5bf049fdeea9eb1ad4033eb3197681bdbb73dad43d794d9af19fbee50fd7adfd59bd50533981651f7f9907189e9b9d7c05d4b2689b9114c31d6f1be9ed63eea36db"}, 0xd8) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 9.053955419s ago: executing program 7 (id=1521): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000f1ffb3000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff26) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 8.67420537s ago: executing program 8 (id=1522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000080)=0x40) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0xff, 0xff, 0x4}, 0x10) 7.880183896s ago: executing program 7 (id=1523): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 7.512065632s ago: executing program 5 (id=1524): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000780)='contention_end\x00', r6}, 0x18) mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @multicast1}, 0x126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2387, 0x2000000000}) sendfile(r1, r1, 0x0, 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c", @ANYRES16], 0x0) 7.419797148s ago: executing program 2 (id=1525): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x2, [@datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], '\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}, @typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xff, 0x80000000}], "b9"}]}}, 0x0, 0x66, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x24}}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000980)='./file0/file0\x00', 0x8, 0x8c) 7.199139278s ago: executing program 6 (id=1526): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x2, 0x1, 0x3) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000180)=""/236) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sysfs$3(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r6, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000140)='2', 0x1}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000280)={0x2, 'pimreg1\x00', {0x8}, 0x6}) 6.642919091s ago: executing program 8 (id=1527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 6.611670213s ago: executing program 7 (id=1528): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0x7, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) 4.628585211s ago: executing program 6 (id=1529): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x400c0) 4.597604554s ago: executing program 2 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="e7ff25bd7000ffdbdf"], 0x1c}}, 0x80) 4.492368388s ago: executing program 4 (id=1531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 4.46562074s ago: executing program 8 (id=1532): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x200000000000011, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x50, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x50}}, 0x0) 4.413873709s ago: executing program 7 (id=1533): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = open(0x0, 0x80140, 0x0) fcntl$setlease(r5, 0x400, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x72) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 4.301358871s ago: executing program 5 (id=1534): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) open(0x0, 0x8060, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000003580)={&(0x7f0000001fc0)={0xa, 0x2, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000034c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}, 0x2000) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="67d8902400aa303e97", 0x9}], 0x1, 0x0, 0x0, 0x400c5}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20140018, 0x0, 0x8}}) 3.368237847s ago: executing program 7 (id=1535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000080)=0x40) 2.735549042s ago: executing program 8 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="9d631f5a58f0fed255aabae6a679c5f0c6539206949a6d1e5124a84e9546fab9c65630ad10d7217160c9ca1e4c49d8e71132f6fa46cfdd976a9b513be34ef7d100a5a78eb968dbd5d6ca1b48a361cdfec934db09650ab1e16328828dcc2debdd7ab7f3eb4539019b0358b40cdf7d9a30c2", 0x71, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8000, 0x4, 0xff, 0xa30000000, 0xffffffffffffffc0, r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 2.646998409s ago: executing program 4 (id=1537): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x180, 0x14200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2281, 0x8400}}}}}}, @IFLA_ADDRESS={0xa}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, 0x0) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r4, 0x400448e1, &(0x7f0000001240)="53a3f783c0c39b2e43ae4581d6c84e8f023d4441d7a21fbe0dfff581a68870c76229fc9944d0856f411c33f436c3d0ce95aa80cca66d9ebfd351f89b13a663781bb4cbc64e7af1f9561ef5d6f578bb38e172e2edc91bfa5b91a557840589c78faa58000000000000753704ab34fd49f25d32dcb1e5f633ea688317ed28cecb4595b0b900a643ffdf8db456006ef375031867977a40cc0d694db530f285a0494a55d5d4104432aac9974aa10850612bc9ad02004f543f4f03853e6a8e02a8aaa20000000000f46da6507bada984383d948e3528dc3b5485482a161d4a7a09ce183cdc48f81ae3f9") syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xfad2, 0x0, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 2.301620802s ago: executing program 6 (id=1538): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xf, 0x30041) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000180)={{0x7, 0x5, 0x200000, 0xa, 'syz0\x00', 0x8001}, 0x1, [0xffffffffffffffff, 0xfffffffffffffffa, 0x1, 0xffffffff, 0x4fa, 0xffffffff, 0x8000000000000000, 0x8, 0xd9, 0x0, 0xffc00000, 0x8, 0x8000, 0x4, 0x3, 0x6, 0xffffffffffff7fff, 0x7, 0x4, 0x8, 0xeb, 0xfff, 0x5, 0x8, 0x8, 0x6, 0x8, 0x7, 0x8, 0x0, 0x0, 0xffffffff, 0x1, 0xfffffffffffffffb, 0x2, 0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0xe, 0xfffffffffffffffa, 0xa, 0x3, 0x3, 0x9, 0xb, 0xa00, 0x0, 0x1, 0xfffffffffffffffe, 0x1, 0x9, 0x306e, 0xb, 0x64, 0x8e, 0x7, 0xff, 0x7fcd, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x7fffffff, 0x0, 0x1, 0x81, 0xffff, 0xc50c, 0x81, 0x80000000, 0x1, 0x5, 0x9, 0xc470, 0xc769, 0x80000000, 0x2, 0x1, 0x9, 0xffffffff, 0x4, 0xcdcd, 0xffc, 0x4, 0x3, 0xfffffffffffffffb, 0x8000000, 0x9, 0x8001, 0x2, 0x8000000000000000, 0x6, 0x8, 0xffffffffffffffed, 0x2, 0x0, 0x2, 0xd, 0x7, 0xfffffffffffff801, 0x5, 0xbef, 0x1, 0x1, 0x2, 0x80000001, 0x2, 0x9, 0x75ee, 0x80, 0x8, 0x5b, 0xfffffffffffffff9, 0x9, 0x5000000, 0xf, 0x0, 0x7, 0xffffffffffffffff, 0x33ea, 0x167b, 0x9, 0x101]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000001600)=""/233, 0xe9) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x68a140, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x143142, 0x0) close(0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r2, 0x0, 0x80006) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) 2.208180171s ago: executing program 2 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) open(0x0, 0x8060, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="67d8902400aa303e97", 0x9}], 0x1, 0x0, 0x0, 0x400c5}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20140018, 0x0, 0x8}}) r7 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_pidfd_open(r7, 0x0) 1.829013658s ago: executing program 7 (id=1540): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a102a933f4eb88ce1fa73d72494c059496e0a9c694b86214b95ce71449c291ada7710d883c86299743da9b69845ca63c67d06865913fa39467310bced1f996172af00a5a061b300f8ee20b1f6546639c82d4b4e0b073d456ebebe9d5e26bd7fe0b918a68a8892fc1aeeae35733ba881b0465bd28a6b56acaa8ef74ac482f4b78572527d808b2d17026f98ae2a42c2fa6e00de44eafc621ecc46334a9c21eceae3182b232b39da9dce7d2dec839b228aa55774c40919ac1100af707c1378e9f21", 0xc0}], 0x1, 0x8, 0x7, 0x4) 444.860081ms ago: executing program 6 (id=1541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(0x0, 0x207, 0x161a81) r2 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d71963") 0s ago: executing program 6 (id=1544): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(0x0, 0xea9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x3a, 0x39, 0x0, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x50007a2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.855465][ T54] Bluetooth: hci0: command tx timeout [ 78.861160][ T5846] Bluetooth: hci3: command tx timeout [ 78.866742][ T54] Bluetooth: hci2: command tx timeout [ 78.931363][ T5846] Bluetooth: hci1: command tx timeout [ 78.936961][ T54] Bluetooth: hci5: command tx timeout [ 78.942966][ T5845] Bluetooth: hci4: command tx timeout [ 79.060936][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.069830][ T5955] Zero length message leads to an empty skb [ 79.234888][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.527666][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.541118][ T5943] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.567954][ T5947] syz.4.5 (5947) used greatest stack depth: 19760 bytes left [ 79.627900][ T5958] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 80.028562][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.058258][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.927017][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.997459][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.835991][ T5986] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 81.861045][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.870085][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.905328][ T5985] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 81.950061][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.002354][ T5986] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 82.051638][ T5985] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 82.478203][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 82.742703][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 83.825519][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25'. [ 83.886118][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25'. [ 89.013435][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.39'. [ 89.570856][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 89.579699][ T5845] Bluetooth: hci2: Injecting HCI hardware error event [ 89.591792][ T54] Bluetooth: hci2: hardware error 0x00 [ 89.849173][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.39'. [ 91.487099][ T51] cfg80211: failed to load regulatory.db [ 91.731091][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 92.087910][ T6082] libceph: resolve '0.0' (ret=-3): failed [ 92.308236][ T6091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.468161][ T6099] vlan2: entered allmulticast mode [ 93.804274][ T6113] can0: slcan on ttyS3. [ 94.255361][ T6115] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.266412][ T6115] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.298868][ T6115] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.463630][ T6115] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 94.510962][ T6104] can0 (unregistered): slcan off ttyS3. [ 96.369587][ T6135] libceph: resolve '0.0' (ret=-3): failed [ 97.533268][ T6151] libceph: resolve '0.0' (ret=-3): failed [ 97.690671][ T6160] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.698634][ T6160] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.707451][ T6160] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.715424][ T6160] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 97.802163][ T6160] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 97.964637][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 98.072075][ T6159] overlayfs: failed to resolve './file1': -2 [ 99.017366][ T6181] can0: slcan on ttyS3. [ 101.494744][ T6177] can0 (unregistered): slcan off ttyS3. [ 104.355081][ T6228] libceph: resolve '0.0' (ret=-3): failed [ 104.554653][ T6236] overlayfs: failed to resolve './file1': -2 [ 105.343048][ T6244] netlink: 'syz.4.90': attribute type 10 has an invalid length. [ 105.395706][ T6244] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.539608][ T6251] tipc: Started in network mode [ 105.559203][ T6251] tipc: Node identity ac14140f, cluster identity 4711 [ 105.598341][ T29] audit: type=1326 audit(1737961023.580:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6638cd29 code=0x7ffc0000 [ 105.605729][ T6251] tipc: New replicast peer: 10.1.1.2 [ 105.751263][ T6251] tipc: Enabled bearer , priority 10 [ 105.757639][ T29] audit: type=1326 audit(1737961023.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6638cd29 code=0x7ffc0000 [ 106.292324][ T29] audit: type=1326 audit(1737961023.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda6638cd29 code=0x7ffc0000 [ 106.351072][ T29] audit: type=1326 audit(1737961023.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6638cd29 code=0x7ffc0000 [ 106.546531][ T29] audit: type=1326 audit(1737961023.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda6638ec47 code=0x7ffc0000 [ 106.569267][ T29] audit: type=1326 audit(1737961023.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fda6638ebbc code=0x7ffc0000 [ 106.603961][ T29] audit: type=1326 audit(1737961023.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda6638eaf4 code=0x7ffc0000 [ 107.501273][ T5842] tipc: Node number set to 2886997007 [ 107.508625][ T29] audit: type=1326 audit(1737961023.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda6638eaf4 code=0x7ffc0000 [ 107.531852][ T29] audit: type=1326 audit(1737961023.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fda6638b98a code=0x7ffc0000 [ 108.195926][ T6266] libceph: resolve '0.0' (ret=-3): failed [ 108.231019][ T29] audit: type=1326 audit(1737961023.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6638cd29 code=0x7ffc0000 [ 109.557636][ T6300] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.566135][ T6300] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 109.575490][ T6300] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.583312][ T6300] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 109.711482][ T6303] libceph: resolve '0.0' (ret=-3): failed [ 109.717858][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 110.592893][ T6314] overlayfs: failed to resolve './file0': -2 [ 112.514015][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 112.514054][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 113.775586][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 113.786778][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 115.158147][ T6365] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 115.297198][ T6372] libceph: resolve '0.0' (ret=-3): failed [ 116.128653][ T6384] vlan2: entered allmulticast mode [ 119.069260][ T6419] netlink: 'syz.4.141': attribute type 10 has an invalid length. [ 120.297197][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 120.297219][ T29] audit: type=1326 audit(1737961038.350:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 120.635881][ T29] audit: type=1326 audit(1737961038.350:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 121.020799][ T29] audit: type=1326 audit(1737961038.870:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 121.110783][ T29] audit: type=1326 audit(1737961039.070:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 121.113054][ T6434] libceph: resolve '0.0' (ret=-3): failed [ 121.182611][ T29] audit: type=1326 audit(1737961039.070:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 121.329666][ T29] audit: type=1326 audit(1737961039.120:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 121.459580][ T29] audit: type=1326 audit(1737961039.120:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 122.505722][ T29] audit: type=1326 audit(1737961039.120:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 122.528926][ T29] audit: type=1326 audit(1737961039.140:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 123.530911][ T54] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 123.539297][ T54] Bluetooth: hci5: Injecting HCI hardware error event [ 123.551724][ T54] Bluetooth: hci5: hardware error 0x00 [ 123.610128][ T29] audit: type=1326 audit(1737961039.140:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 123.900453][ T6453] can0: slcan on ttyS3. [ 124.692518][ T6463] overlayfs: failed to resolve './file1': -2 [ 124.722013][ T6449] can0 (unregistered): slcan off ttyS3. [ 126.353239][ T6500] ebtables: ebtables: counters copy to user failed while replacing table [ 126.450815][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 126.687677][ T6498] libceph: resolve '0.0' (ret=-3): failed [ 127.700270][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 131.904045][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 131.918018][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 132.338791][ T6574] ebtables: ebtables: counters copy to user failed while replacing table [ 132.893420][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.893460][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.410905][ T6581] can0: slcan on ttyS3. [ 133.890901][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 134.281998][ T6575] can0 (unregistered): slcan off ttyS3. [ 136.827494][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 136.837980][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 140.193073][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 140.238955][ T6647] overlayfs: failed to resolve './file0': -2 [ 141.840607][ T6662] netlink: 256 bytes leftover after parsing attributes in process `syz.5.205'. [ 142.009000][ T6662] netlink: 256 bytes leftover after parsing attributes in process `syz.5.205'. [ 144.152470][ T6687] libceph: resolve '0.0' (ret=-3): failed [ 144.278705][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 144.722231][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 145.502138][ T54] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 145.534815][ T6700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'. [ 148.292312][ T6725] overlayfs: failed to resolve './file0': -2 [ 150.571275][ T6745] libceph: resolve '0.0' (ret=-3): failed [ 151.023067][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 151.023091][ T29] audit: type=1326 audit(1737961069.070:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 151.061057][ T6752] tipc: Started in network mode [ 151.073231][ T6752] tipc: Node identity ac14140f, cluster identity 4711 [ 151.104082][ T6752] tipc: New replicast peer: 10.1.1.2 [ 151.121040][ T6752] tipc: Enabled bearer , priority 10 [ 151.140939][ T29] audit: type=1326 audit(1737961069.070:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 151.182957][ T29] audit: type=1326 audit(1737961069.070:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 151.262749][ T29] audit: type=1326 audit(1737961069.070:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c8a18ec47 code=0x7ffc0000 [ 151.942786][ T29] audit: type=1326 audit(1737961069.070:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1c8a18ebbc code=0x7ffc0000 [ 151.966559][ T29] audit: type=1326 audit(1737961069.080:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c8a18eaf4 code=0x7ffc0000 [ 151.988856][ T29] audit: type=1326 audit(1737961069.080:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c8a18eaf4 code=0x7ffc0000 [ 152.012743][ T29] audit: type=1326 audit(1737961069.080:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1c8a18b98a code=0x7ffc0000 [ 152.054826][ T29] audit: type=1326 audit(1737961069.080:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 152.120808][ T5929] tipc: Node number set to 2886997007 [ 152.196062][ T29] audit: type=1326 audit(1737961069.120:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 152.611005][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 155.955762][ T6798] libceph: resolve '0.0' (ret=-3): failed [ 157.463527][ T6811] libceph: resolve '0.0' (ret=-3): failed [ 158.801605][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.253'. [ 159.223022][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 159.296502][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 161.911142][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'. [ 162.051185][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 162.188369][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'. [ 162.949511][ T6872] can0: slcan on ttyS3. [ 163.742099][ T6865] can0 (unregistered): slcan off ttyS3. [ 163.831595][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 168.976186][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 169.067452][ T6940] libceph: resolve '0.0' (ret=-3): failed [ 170.446601][ T6953] can0: slcan on ttyS3. [ 171.091460][ T6947] can0 (unregistered): slcan off ttyS3. [ 171.458849][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 172.111461][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 172.378810][ T6975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 172.387946][ T6975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 172.972859][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 172.982203][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 173.567455][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 173.630876][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 175.419235][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 175.729384][ T7022] can0: slcan on ttyS3. [ 176.551791][ T7015] can0 (unregistered): slcan off ttyS3. [ 179.231209][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 181.186767][ T54] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 181.800772][ T7097] libceph: resolve '0.0' (ret=-3): failed [ 184.580926][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.339'. [ 185.255522][ T7145] overlayfs: missing 'lowerdir' [ 185.798774][ T7150] libceph: resolve '0.0' (ret=-3): failed [ 185.977525][ T7163] libceph: resolve '0.0' (ret=-3): failed [ 187.311700][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 187.311755][ T29] audit: type=1326 audit(1737961105.030:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 187.400969][ T29] audit: type=1326 audit(1737961105.090:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 187.959188][ T29] audit: type=1326 audit(1737961105.090:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 188.368018][ T29] audit: type=1326 audit(1737961105.180:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 188.556348][ T29] audit: type=1326 audit(1737961105.180:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 188.686371][ T29] audit: type=1326 audit(1737961105.370:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 188.708534][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.030902][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 189.266534][ T29] audit: type=1326 audit(1737961105.370:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 189.448438][ T7205] libceph: resolve '0.0' (ret=-3): failed [ 189.660906][ T29] audit: type=1326 audit(1737961105.420:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 189.661760][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 189.789548][ T29] audit: type=1326 audit(1737961105.420:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 190.001105][ T29] audit: type=1326 audit(1737961105.420:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 190.768685][ T7233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 190.788253][ T7233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 191.662064][ T7245] libceph: resolve '0.0' (ret=-3): failed [ 192.369900][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 192.881727][ T7258] overlayfs: missing 'lowerdir' [ 193.815348][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.822775][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.141198][ T7291] libceph: resolve '0.0' (ret=-3): failed [ 196.290042][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 196.297103][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 196.303417][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 196.309697][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 198.334727][ T7329] can0: slcan on ttyS3. [ 198.501416][ T7327] can0 (unregistered): slcan off ttyS3. [ 198.829396][ T7342] libceph: resolve '0.0' (ret=-3): failed [ 201.385573][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.423'. [ 201.801007][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.423'. [ 205.430641][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 205.430663][ T29] audit: type=1326 audit(1737961123.480:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 205.526946][ T29] audit: type=1326 audit(1737961123.480:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 205.607005][ T29] audit: type=1326 audit(1737961123.490:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 205.651358][ T7421] libceph: resolve '0.0' (ret=-3): failed [ 205.714263][ T29] audit: type=1326 audit(1737961123.490:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 205.777218][ T29] audit: type=1326 audit(1737961123.490:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 205.980774][ T29] audit: type=1326 audit(1737961123.490:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 206.219792][ T7441] overlayfs: missing 'lowerdir' [ 206.710774][ T29] audit: type=1326 audit(1737961123.490:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 206.768417][ T29] audit: type=1326 audit(1737961123.490:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 207.880812][ T29] audit: type=1326 audit(1737961123.490:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 208.180991][ T29] audit: type=1326 audit(1737961123.530:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 209.276507][ T7475] libceph: resolve '0.0' (ret=-3): failed [ 210.635367][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 213.372075][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 214.100318][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 214.642072][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 214.659899][ T7536] libceph: resolve '0.0' (ret=-3): failed [ 215.786096][ T7555] vlan2: entered allmulticast mode [ 216.074456][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 216.479713][ T7564] netlink: 256 bytes leftover after parsing attributes in process `syz.1.487'. [ 217.877777][ T7579] libceph: resolve '0.0' (ret=-3): failed [ 219.189341][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 219.321552][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 219.330759][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 220.223982][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 220.654821][ T7617] overlayfs: missing 'workdir' [ 220.659821][ T7615] netlink: 256 bytes leftover after parsing attributes in process `syz.1.505'. [ 220.812227][ T7622] libceph: resolve '0.0' (ret=-3): failed [ 222.953811][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 224.242995][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'. [ 224.498757][ T5845] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 224.724772][ T7671] netlink: 256 bytes leftover after parsing attributes in process `syz.0.525'. [ 224.744536][ T7668] overlayfs: missing 'workdir' [ 224.850632][ T7672] libceph: resolve '0.0' (ret=-3): failed [ 227.154238][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.531'. [ 230.232419][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 230.463979][ T7721] netlink: 256 bytes leftover after parsing attributes in process `syz.1.541'. [ 230.719001][ T7723] libceph: resolve '0.0' (ret=-3): failed [ 230.753726][ T7725] overlayfs: missing 'lowerdir' [ 233.322359][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 234.010835][ T5845] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 234.429859][ T7770] netlink: 256 bytes leftover after parsing attributes in process `syz.0.558'. [ 235.362980][ T7778] libceph: resolve '0.0' (ret=-3): failed [ 236.718614][ T7790] overlayfs: missing 'lowerdir' [ 238.055070][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 238.064263][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 238.948156][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 239.186694][ T7822] netlink: 256 bytes leftover after parsing attributes in process `syz.3.573'. [ 241.751673][ T7851] overlayfs: missing 'lowerdir' [ 242.564548][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 245.741887][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 248.376960][ T7914] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.411707][ T7914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 248.426740][ T7914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 249.469775][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 253.319511][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 253.675033][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'. [ 253.684296][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'. [ 253.912936][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 253.984441][ T7975] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 254.083469][ T7975] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 254.518415][ T7975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.966944][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 255.252723][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.259281][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.793443][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 257.793466][ T29] audit: type=1326 audit(1737961175.850:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 258.475173][ T29] audit: type=1326 audit(1737961175.850:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 258.533581][ T29] audit: type=1326 audit(1737961175.850:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 258.981111][ T29] audit: type=1326 audit(1737961175.850:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 259.296532][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 259.306109][ T29] audit: type=1326 audit(1737961175.850:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 259.328710][ T29] audit: type=1326 audit(1737961175.850:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 259.351449][ T29] audit: type=1326 audit(1737961175.850:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 259.383224][ T29] audit: type=1326 audit(1737961175.850:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 259.415915][ T29] audit: type=1326 audit(1737961175.850:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 259.829388][ T29] audit: type=1326 audit(1737961175.850:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 260.741804][ T8037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 261.088941][ T8037] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 261.150828][ T8037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 261.195756][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 261.831083][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'. [ 261.840360][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'. [ 263.500805][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 263.500827][ T29] audit: type=1326 audit(1737961181.550:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 263.504427][ T8062] tipc: Enabling of bearer rejected, already enabled [ 263.506948][ T29] audit: type=1326 audit(1737961181.550:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 263.662041][ T29] audit: type=1326 audit(1737961181.550:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 263.684906][ T29] audit: type=1326 audit(1737961181.550:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c8a18ec47 code=0x7ffc0000 [ 263.707304][ T29] audit: type=1326 audit(1737961181.550:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1c8a18ebbc code=0x7ffc0000 [ 264.236072][ T29] audit: type=1326 audit(1737961181.550:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c8a18eaf4 code=0x7ffc0000 [ 264.260104][ T29] audit: type=1326 audit(1737961181.550:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c8a18eaf4 code=0x7ffc0000 [ 264.311021][ T29] audit: type=1326 audit(1737961181.550:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1c8a18b98a code=0x7ffc0000 [ 264.515960][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 264.588020][ T29] audit: type=1326 audit(1737961181.550:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 264.801915][ T29] audit: type=1326 audit(1737961181.560:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c8a18cd29 code=0x7ffc0000 [ 264.961081][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 265.270691][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 266.589116][ T8099] can0: slcan on ttyS3. [ 267.170981][ T8093] can0 (unregistered): slcan off ttyS3. [ 269.269845][ T8127] vivid-000: disconnect [ 269.297613][ T8127] vivid-000: reconnect [ 269.933500][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 270.109230][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 270.109252][ T29] audit: type=1326 audit(1737961188.160:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 270.304157][ T29] audit: type=1326 audit(1737961188.160:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 272.491047][ T29] audit: type=1326 audit(1737961188.160:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 272.900573][ T29] audit: type=1326 audit(1737961188.160:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 273.204908][ T5845] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 273.218304][ T29] audit: type=1326 audit(1737961188.160:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 273.240942][ T29] audit: type=1326 audit(1737961188.160:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 273.263676][ T29] audit: type=1326 audit(1737961188.160:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 273.291263][ T29] audit: type=1326 audit(1737961188.160:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 273.314272][ T29] audit: type=1326 audit(1737961188.160:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 273.337903][ T29] audit: type=1326 audit(1737961188.160:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 273.553597][ T8168] libceph: resolve '0.0' (ret=-3): failed [ 273.870839][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 274.122854][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 276.545548][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 276.953138][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 278.239899][ T8213] overlayfs: missing 'lowerdir' [ 279.051307][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.694'. [ 279.187020][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.694'. [ 281.482398][ T8243] vivid-000: disconnect [ 281.503761][ T8243] vivid-000: reconnect [ 282.444892][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'. [ 284.183429][ T8265] can0: slcan on ttyS3. [ 284.271393][ T8264] can0 (unregistered): slcan off ttyS3. [ 286.586056][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 289.092138][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 289.092163][ T29] audit: type=1326 audit(1737961207.120:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 289.250956][ T29] audit: type=1326 audit(1737961207.120:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 289.273736][ T29] audit: type=1326 audit(1737961207.120:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 289.306286][ T29] audit: type=1326 audit(1737961207.120:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 289.330537][ T29] audit: type=1326 audit(1737961207.120:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 289.353023][ T29] audit: type=1326 audit(1737961207.120:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 289.817057][ T29] audit: type=1326 audit(1737961207.120:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 290.828100][ T29] audit: type=1326 audit(1737961207.120:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 290.850389][ T29] audit: type=1326 audit(1737961207.120:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 291.132809][ T29] audit: type=1326 audit(1737961207.120:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728a98cd29 code=0x7ffc0000 [ 294.557847][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 294.902720][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 295.950885][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 296.836379][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 298.372050][ T8398] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 298.718117][ T8398] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 298.806335][ T8398] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 299.452820][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 299.462266][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 299.883505][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.750'. [ 299.892907][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.750'. [ 301.011269][ T5834] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 304.521332][ T8455] ebtables: ebtables: counters copy to user failed while replacing table [ 305.013933][ T8459] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.129965][ T8459] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 305.801426][ T8459] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.832695][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 305.850877][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 308.548587][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 308.558038][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 308.961007][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 309.297459][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 309.737105][ T8525] ebtables: ebtables: counters copy to user failed while replacing table [ 310.693674][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 311.899276][ T8541] libceph: resolve '0.0' (ret=-3): failed [ 313.674975][ T8561] ebtables: ebtables: counters copy to user failed while replacing table [ 314.460963][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 314.543645][ T8571] ebtables: ebtables: counters copy to user failed while replacing table [ 315.124094][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 315.140987][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 315.381500][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 315.403817][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 315.564723][ T25] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 315.574435][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.582969][ T25] usb 4-1: Product: syz [ 315.590755][ T25] usb 4-1: Manufacturer: syz [ 315.595390][ T25] usb 4-1: SerialNumber: syz [ 315.627456][ T25] usb 4-1: config 0 descriptor?? [ 315.699234][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.794'. [ 315.709016][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.794'. [ 316.070993][ T25] usb 4-1: can't set config #0, error -71 [ 316.121470][ T25] usb 4-1: USB disconnect, device number 2 [ 316.701332][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 316.762957][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.769333][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.012969][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 317.459672][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 318.797611][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 318.878268][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 320.292538][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 320.451404][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 320.458214][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 320.503089][ T5889] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 320.538305][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.578163][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.807'. [ 320.598862][ T5889] usb 1-1: Product: syz [ 320.615501][ T5889] usb 1-1: Manufacturer: syz [ 320.639907][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.807'. [ 320.653958][ T5889] usb 1-1: SerialNumber: syz [ 320.955459][ T5889] usb 1-1: config 0 descriptor?? [ 320.991280][ T5889] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 321.050353][ T5889] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 321.395407][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 321.404526][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 322.301211][ T6011] usb 1-1: USB disconnect, device number 2 [ 323.343178][ T6011] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 323.672803][ T6011] kobil_sct 1-1:0.0: device disconnected [ 324.211069][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 324.370964][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 324.379889][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 324.443523][ T5889] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 324.550864][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.814'. [ 324.788049][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.837180][ T5889] usb 5-1: Product: syz [ 324.851440][ T5889] usb 5-1: Manufacturer: syz [ 324.882537][ T5889] usb 5-1: SerialNumber: syz [ 324.900437][ T5889] usb 5-1: config 0 descriptor?? [ 325.187623][ T5889] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 325.216242][ T5889] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 326.831826][ T5891] usb 5-1: USB disconnect, device number 2 [ 326.953215][ T5891] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 327.059391][ T5891] kobil_sct 5-1:0.0: device disconnected [ 328.598121][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 328.610966][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 329.770741][ T8721] ebtables: ebtables: counters copy to user failed while replacing table [ 330.277272][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 330.589229][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 330.880559][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 331.221400][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 332.752110][ T8744] vlan2: entered allmulticast mode [ 334.324178][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 334.324201][ T29] audit: type=1326 audit(1737961252.370:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 334.331775][ T8751] tipc: Started in network mode [ 334.734256][ T29] audit: type=1326 audit(1737961252.380:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 334.820975][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 334.866145][ T29] audit: type=1326 audit(1737961252.380:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 334.938640][ T8751] tipc: Node identity ac14140f, cluster identity 4711 [ 335.090952][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 335.100334][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 335.453317][ T29] audit: type=1326 audit(1737961252.380:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 335.481208][ T29] audit: type=1326 audit(1737961252.380:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7ad98ec47 code=0x7ffc0000 [ 335.520428][ T29] audit: type=1326 audit(1737961252.380:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc7ad98ebbc code=0x7ffc0000 [ 335.653032][ T8751] tipc: New replicast peer: 10.1.1.2 [ 335.658478][ T8751] tipc: Enabled bearer , priority 10 [ 335.671934][ T29] audit: type=1326 audit(1737961252.380:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc7ad98eaf4 code=0x7ffc0000 [ 335.695316][ T25] usb 4-1: string descriptor 0 read error: -71 [ 335.725134][ T25] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 335.756362][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.790569][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'. [ 335.814702][ T29] audit: type=1326 audit(1737961252.380:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc7ad98eaf4 code=0x7ffc0000 [ 335.840854][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'. [ 336.011731][ T29] audit: type=1326 audit(1737961252.380:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc7ad98b98a code=0x7ffc0000 [ 336.040923][ T29] audit: type=1326 audit(1737961252.380:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.2.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad98cd29 code=0x7ffc0000 [ 336.044219][ T25] usb 4-1: config 0 descriptor?? [ 336.845236][ T9] tipc: Node number set to 2886997007 [ 336.909852][ T25] usb 4-1: can't set config #0, error -71 [ 336.962318][ T25] usb 4-1: USB disconnect, device number 3 [ 337.255330][ T8789] evm: overlay not supported [ 338.371811][ T8798] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 342.562920][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 343.002596][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 343.099318][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 349.810607][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 352.229493][ T8940] tipc: Started in network mode [ 352.280899][ T8940] tipc: Node identity ac14140f, cluster identity 4711 [ 352.297954][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 352.297977][ T29] audit: type=1326 audit(1737961270.280:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 352.392141][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 352.471808][ T8940] tipc: New replicast peer: 10.1.1.2 [ 352.477205][ T8940] tipc: Enabled bearer , priority 10 [ 352.509207][ T29] audit: type=1326 audit(1737961270.280:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 352.565620][ T29] audit: type=1326 audit(1737961270.280:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 352.922010][ T29] audit: type=1326 audit(1737961270.280:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6b9f8ec47 code=0x7ffc0000 [ 352.944982][ T29] audit: type=1326 audit(1737961270.280:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe6b9f8ebbc code=0x7ffc0000 [ 353.321076][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 353.475768][ T29] audit: type=1326 audit(1737961270.280:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe6b9f8eaf4 code=0x7ffc0000 [ 353.497960][ T29] audit: type=1326 audit(1737961270.280:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe6b9f8eaf4 code=0x7ffc0000 [ 353.580095][ T29] audit: type=1326 audit(1737961270.280:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe6b9f8b98a code=0x7ffc0000 [ 353.643632][ T29] audit: type=1326 audit(1737961270.280:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 353.714624][ T6011] tipc: Node number set to 2886997007 [ 353.740902][ T29] audit: type=1326 audit(1737961270.280:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.5.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe6b9f8cd29 code=0x7ffc0000 [ 353.820903][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 353.828797][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 353.940406][ T5894] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 354.566091][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.961299][ T5894] usb 5-1: Product: syz [ 354.965524][ T5894] usb 5-1: Manufacturer: syz [ 354.971072][ T5894] usb 5-1: SerialNumber: syz [ 354.971453][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 354.977604][ T5894] usb 5-1: config 0 descriptor?? [ 355.027021][ T5894] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 355.128862][ T5894] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 356.064696][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 356.073943][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 356.294111][ T5894] usb 5-1: USB disconnect, device number 3 [ 356.338452][ T5894] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 356.639743][ T5894] kobil_sct 5-1:0.0: device disconnected [ 357.821272][ T8992] vlan2: entered allmulticast mode [ 360.345140][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 360.431259][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 361.267338][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 365.300873][ T5946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 365.460820][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 365.471646][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 365.586654][ T5946] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 365.618216][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.637333][ T5946] usb 5-1: Product: syz [ 365.645599][ T5946] usb 5-1: Manufacturer: syz [ 365.655968][ T5946] usb 5-1: SerialNumber: syz [ 365.783768][ T5946] usb 5-1: config 0 descriptor?? [ 365.814360][ T9061] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 365.825762][ T9061] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 366.854977][ T5946] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 366.934497][ T5946] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 367.127623][ T5946] usb 5-1: USB disconnect, device number 4 [ 367.162639][ T5946] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 367.692652][ T5946] kobil_sct 5-1:0.0: device disconnected [ 369.600883][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 371.357222][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 371.371452][ T5889] usb 2-1: device descriptor read/all, error -71 [ 372.156412][ T9100] can0: slcan on ttyS3. [ 372.662590][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 372.931652][ T9097] can0 (unregistered): slcan off ttyS3. [ 373.851191][ T9110] can0: slcan on ttyS3. [ 374.391609][ T9104] can0 (unregistered): slcan off ttyS3. [ 378.151368][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.157909][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.520402][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 379.529988][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 381.018326][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.041019][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.048801][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.056541][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.067295][ T5845] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 381.074962][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.233522][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.245612][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.311220][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.319056][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.384394][ T5834] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 381.393039][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.243396][ T9178] can0: slcan on ttyS3. [ 382.381491][ T9177] can0 (unregistered): slcan off ttyS3. [ 383.190966][ T5834] Bluetooth: hci6: command tx timeout [ 383.490904][ T5834] Bluetooth: hci7: command tx timeout [ 384.198102][ T9166] chnl_net:caif_netlink_parms(): no params data found [ 384.259463][ T3493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.278740][ T5834] Bluetooth: hci6: command tx timeout [ 385.528292][ T3493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.693326][ T5845] Bluetooth: hci7: command tx timeout [ 385.750788][ T6011] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 385.785875][ T3493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.157493][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.171168][ T6011] usb 5-1: Using ep0 maxpacket: 16 [ 386.177852][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 386.192560][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.203566][ T6011] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 386.233379][ T9166] bridge_slave_0: entered allmulticast mode [ 386.255332][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.264632][ T9166] bridge_slave_0: entered promiscuous mode [ 386.275696][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.967'. [ 386.289125][ T6011] usb 5-1: Product: syz [ 386.293765][ T6011] usb 5-1: Manufacturer: syz [ 386.298452][ T6011] usb 5-1: SerialNumber: syz [ 386.309818][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.967'. [ 386.319905][ T6011] usb 5-1: config 0 descriptor?? [ 386.328030][ T6011] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 386.338661][ T6011] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 386.381670][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.388808][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.413994][ T9166] bridge_slave_1: entered allmulticast mode [ 386.486350][ T9166] bridge_slave_1: entered promiscuous mode [ 386.729709][ T3493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.340130][ T5845] Bluetooth: hci6: command tx timeout [ 387.477587][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.587974][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.640021][ T6011] usb 5-1: USB disconnect, device number 5 [ 387.756038][ T5845] Bluetooth: hci7: command tx timeout [ 387.767637][ T6011] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 387.783799][ T6011] kobil_sct 5-1:0.0: device disconnected [ 388.072908][ T9238] siw: device registration error -23 [ 388.112368][ T9172] chnl_net:caif_netlink_parms(): no params data found [ 388.130861][ T9166] team0: Port device team_slave_0 added [ 388.501420][ T9166] team0: Port device team_slave_1 added [ 388.619183][ T9245] overlayfs: failed to resolve './file1': -2 [ 389.570957][ T5845] Bluetooth: hci6: command tx timeout [ 389.870921][ T5845] Bluetooth: hci7: command tx timeout [ 390.392731][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.977'. [ 390.524089][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.977'. [ 390.749292][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.771442][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.201612][ T9166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.227026][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.230176][ T9268] libceph: resolve '0.0' (ret=-3): failed [ 391.620936][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.687469][ T9166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.891208][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.898403][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.906035][ T9172] bridge_slave_0: entered allmulticast mode [ 391.913070][ T9172] bridge_slave_0: entered promiscuous mode [ 391.959742][ T3493] bridge_slave_1: left allmulticast mode [ 392.530141][ T3493] bridge_slave_1: left promiscuous mode [ 392.536544][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.731147][ T3493] bridge_slave_0: left allmulticast mode [ 392.793887][ T3493] bridge_slave_0: left promiscuous mode [ 392.800862][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.480752][ T5890] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 393.761156][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 393.784571][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 393.798726][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.826031][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.833496][ T5890] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 393.861117][ T9172] bridge_slave_1: entered allmulticast mode [ 393.874200][ T9172] bridge_slave_1: entered promiscuous mode [ 393.900769][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.023968][ T5890] usb 5-1: Product: syz [ 394.030927][ T5890] usb 5-1: Manufacturer: syz [ 394.035562][ T5890] usb 5-1: SerialNumber: syz [ 394.062088][ T5890] usb 5-1: config 0 descriptor?? [ 394.082411][ T5890] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 394.244285][ T5890] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 395.826755][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.907127][ T9] usb 5-1: USB disconnect, device number 6 [ 395.938245][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 395.971188][ T9] kobil_sct 5-1:0.0: device disconnected [ 396.027344][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.135084][ T3493] bond0 (unregistering): Released all slaves [ 396.215414][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 396.535126][ T9166] hsr_slave_0: entered promiscuous mode [ 396.550117][ T9166] hsr_slave_1: entered promiscuous mode [ 396.572748][ T9166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.603724][ T9166] Cannot create hsr debugfs directory [ 396.819900][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 397.370806][ T3493] tipc: Disabling bearer [ 397.450937][ T3493] tipc: Left network mode [ 397.453093][ T9172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.726275][ T9172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.227819][ T9172] team0: Port device team_slave_0 added [ 398.405273][ T9172] team0: Port device team_slave_1 added [ 398.514792][ T9357] ebtables: ebtables: counters copy to user failed while replacing table [ 399.028272][ T9172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.222152][ T9172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.782031][ T9172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.858121][ T9172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.876787][ T9172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.134041][ T9372] ebtables: ebtables: counters copy to user failed while replacing table [ 400.581372][ T9172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.761974][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 400.966263][ T9166] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 401.022247][ T9166] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 401.343036][ T9166] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 401.374941][ T9166] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 401.714177][ T9172] hsr_slave_0: entered promiscuous mode [ 401.756087][ T9172] hsr_slave_1: entered promiscuous mode [ 401.779553][ T9172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.922556][ T9172] Cannot create hsr debugfs directory [ 402.011396][ T3493] hsr_slave_0: left promiscuous mode [ 402.030988][ T3493] hsr_slave_1: left promiscuous mode [ 402.054960][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.068424][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.102980][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.178046][ T9396] libceph: resolve '0.0' (ret=-3): failed [ 402.243187][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.560977][ T3493] veth1_macvtap: left promiscuous mode [ 402.574350][ T3493] veth0_macvtap: left promiscuous mode [ 402.579898][ T3493] veth1_vlan: left promiscuous mode [ 402.600859][ T3493] veth0_vlan: left promiscuous mode [ 405.086967][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 405.142842][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 405.212408][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 406.112501][ T9421] vlan2: entered allmulticast mode [ 406.129900][ T9437] can0: slcan on ttyS3. [ 407.420819][ T9431] can0 (unregistered): slcan off ttyS3. [ 407.780953][ T5845] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 408.110840][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1028'. [ 408.188693][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1028'. [ 408.748931][ T9172] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 408.798762][ T9172] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 409.009193][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 409.370615][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.386524][ T9172] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.502737][ T9172] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 409.573692][ T9166] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.616465][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.623591][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.768495][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.775642][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.932134][ T3493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.009554][ T3493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.656802][ T9166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.818156][ T3493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.948951][ T9172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.042721][ T3493] bond0: (slave netdevsim0): Releasing backup interface [ 411.085505][ T3493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.944058][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.097912][ T9172] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.212278][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.219440][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.275924][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.283079][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.776602][ T3493] bridge_slave_1: left allmulticast mode [ 412.875493][ T3493] bridge_slave_1: left promiscuous mode [ 413.000665][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.132674][ T3493] bridge_slave_0: left allmulticast mode [ 413.962326][ T3493] bridge_slave_0: left promiscuous mode [ 413.969306][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.566424][ T9538] xt_l2tp: wrong L2TP version: 0 [ 414.944211][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.134250][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.183840][ T3493] bond0 (unregistering): Released all slaves [ 415.335572][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 416.226299][ T9166] veth0_vlan: entered promiscuous mode [ 416.263354][ T9166] veth1_vlan: entered promiscuous mode [ 416.700960][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 416.850029][ T9166] veth0_macvtap: entered promiscuous mode [ 416.864341][ T9166] veth1_macvtap: entered promiscuous mode [ 416.887320][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 416.903699][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 416.915009][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.113160][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.125870][ T9] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 417.148907][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.160880][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.770635][ T9] usb 5-1: Product: syz [ 417.775243][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.785355][ T9] usb 5-1: Manufacturer: syz [ 417.789982][ T9] usb 5-1: SerialNumber: syz [ 417.890936][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.908635][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.931464][ T9] usb 5-1: config 0 descriptor?? [ 417.961809][ T9] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 417.970895][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.000958][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.007931][ T9] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 418.049619][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.100825][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.219430][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.239191][ T3493] tipc: Disabling bearer [ 418.301984][ T3493] tipc: Left network mode [ 418.312348][ T9172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.337684][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.401359][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.442034][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.487607][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.657592][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.694658][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.715465][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.080503][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.108382][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.123494][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.138585][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.267134][ T25] usb 5-1: USB disconnect, device number 7 [ 419.280900][ T25] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 419.301091][ T25] kobil_sct 5-1:0.0: device disconnected [ 419.417497][ T9166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.480497][ T9166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.503788][ T9166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.532212][ T9166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.267478][ T9172] veth0_vlan: entered promiscuous mode [ 422.288503][ T9172] veth1_vlan: entered promiscuous mode [ 423.141886][ T9172] veth0_macvtap: entered promiscuous mode [ 423.149843][ T9172] veth1_macvtap: entered promiscuous mode [ 423.435342][ T9555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.451271][ T9555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.351202][ T3493] hsr_slave_0: left promiscuous mode [ 425.540874][ T3493] hsr_slave_1: left promiscuous mode [ 425.673405][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.681091][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.689307][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.707068][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.749148][ T3493] veth1_macvtap: left promiscuous mode [ 425.754781][ T3493] veth0_macvtap: left promiscuous mode [ 425.780826][ T3493] veth1_vlan: left promiscuous mode [ 425.796534][ T3493] veth0_vlan: left promiscuous mode [ 426.164121][ T9650] libceph: resolve '0.0' (ret=-3): failed [ 426.546629][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1059'. [ 426.590414][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1059'. [ 428.970876][ T6011] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 429.108367][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 429.247961][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 429.267744][ T6011] usb 3-1: Using ep0 maxpacket: 16 [ 429.849169][ T6011] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 429.869018][ T6011] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 430.220838][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.249223][ T6011] usb 3-1: Product: syz [ 430.294054][ T6011] usb 3-1: Manufacturer: syz [ 430.300407][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.305369][ T6011] usb 3-1: SerialNumber: syz [ 430.334914][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.449232][ T6011] usb 3-1: config 0 descriptor?? [ 430.474557][ T6011] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 430.484393][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.495141][ T6011] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 430.766472][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.825933][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.912640][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.245041][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.350451][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.366382][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.377212][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.389582][ T9172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.403593][ T9669] vlan2: entered allmulticast mode [ 431.423392][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.446918][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.474246][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.578567][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.586744][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.597267][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.607171][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.617667][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.627541][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.638033][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.647912][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.803461][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.814878][ T9172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.838123][ T9172] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.081337][ T9172] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.729308][ T6011] usb 3-1: USB disconnect, device number 2 [ 432.753874][ T6011] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 432.771301][ T6011] kobil_sct 3-1:0.0: device disconnected [ 432.820909][ T9172] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.839830][ T9172] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.250738][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 435.062377][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.185011][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.287953][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.312325][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.790866][ T5946] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 435.950925][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 435.961845][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 436.014825][ T5946] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 436.030903][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.049553][ T5946] usb 3-1: Product: syz [ 436.060934][ T5946] usb 3-1: Manufacturer: syz [ 436.065865][ T5946] usb 3-1: SerialNumber: syz [ 436.078942][ T5946] usb 3-1: config 0 descriptor?? [ 436.098945][ T5946] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 436.131545][ T5946] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 437.513443][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.953'. [ 438.344781][ T5946] usb 3-1: USB disconnect, device number 3 [ 438.361446][ T5946] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 438.399308][ T5946] kobil_sct 3-1:0.0: device disconnected [ 439.583025][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.589443][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.485551][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 441.495153][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 442.355512][ T9810] libceph: resolve '0.0' (ret=-3): failed [ 443.167810][ T5845] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 443.615072][ T9827] vlan2: entered allmulticast mode [ 444.575542][ T9838] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1101'. [ 444.970885][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 445.705750][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 445.714833][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 445.854234][ T9] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 445.869960][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.879308][ T9] usb 5-1: Product: syz [ 445.883739][ T9] usb 5-1: Manufacturer: syz [ 445.888358][ T9] usb 5-1: SerialNumber: syz [ 446.407166][ T9] usb 5-1: config 0 descriptor?? [ 446.437513][ T9] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 446.474586][ T9] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 448.764675][ T9] usb 5-1: USB disconnect, device number 8 [ 449.147749][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 449.239544][ T9] kobil_sct 5-1:0.0: device disconnected [ 450.480339][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.487919][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.495890][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.511665][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.519387][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 450.527641][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.803174][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'. [ 452.611225][ T54] Bluetooth: hci0: command tx timeout [ 452.722880][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1119'. [ 453.775271][ T9893] chnl_net:caif_netlink_parms(): no params data found [ 454.691078][ T54] Bluetooth: hci0: command tx timeout [ 456.161973][ T9555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.170797][ T54] Bluetooth: hci0: command tx timeout [ 457.191940][ T9555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.214190][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.221926][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.229379][ T9893] bridge_slave_0: entered allmulticast mode [ 457.435192][ T9893] bridge_slave_0: entered promiscuous mode [ 457.626637][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.898585][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.019882][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 459.250847][ T54] Bluetooth: hci0: command tx timeout [ 459.387709][ T9893] bridge_slave_1: entered allmulticast mode [ 459.398760][ T9893] bridge_slave_1: entered promiscuous mode [ 459.860985][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 459.902904][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.012465][ T9555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.141334][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 460.150126][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 460.271696][ T25] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 460.463639][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.492280][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.509696][ T25] usb 6-1: Product: syz [ 460.519148][ T25] usb 6-1: Manufacturer: syz [ 460.532290][ T25] usb 6-1: SerialNumber: syz [ 460.558906][ T25] usb 6-1: config 0 descriptor?? [ 460.734931][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 461.708677][ T25] usb 6-1: can't set config #0, error -32 [ 462.461457][ T25] usb 6-1: USB disconnect, device number 2 [ 462.936976][ T9893] team0: Port device team_slave_0 added [ 462.979184][ T9893] team0: Port device team_slave_1 added [ 463.444256][ T9555] bond0: (slave netdevsim0): Releasing backup interface [ 463.567245][ T9555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.172525][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.180165][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.230490][T10040] ebtables: ebtables: counters copy to user failed while replacing table [ 464.722874][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.306280][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.315559][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.341654][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.603979][ T9893] hsr_slave_0: entered promiscuous mode [ 465.610089][ T9893] hsr_slave_1: entered promiscuous mode [ 466.336981][ T9893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.482162][ T9893] Cannot create hsr debugfs directory [ 466.593801][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1149'. [ 466.983753][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1148'. [ 466.996359][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1148'. [ 469.343418][ T9555] bridge_slave_1: left allmulticast mode [ 469.349550][ T9555] bridge_slave_1: left promiscuous mode [ 469.375361][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.467305][ T9555] bridge_slave_0: left allmulticast mode [ 469.557874][ T9555] bridge_slave_0: left promiscuous mode [ 469.714821][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.341548][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 473.898991][ T9555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.935952][ T9555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.012979][ T9555] bond0 (unregistering): Released all slaves [ 474.389634][ T9893] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 474.561152][ T9893] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 475.305751][ T9893] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 475.739636][ T9893] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 476.621264][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 478.683832][ T5889] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 479.710281][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1179'. [ 479.965540][ T5889] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 479.980894][ T5889] usb 5-1: config 0 has no interface number 0 [ 480.014523][ T5889] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 480.049131][ T9555] hsr_slave_0: left promiscuous mode [ 480.055179][ T5889] usb 5-1: config 0 interface 11 has no altsetting 0 [ 480.072269][ T9555] hsr_slave_1: left promiscuous mode [ 480.073194][ T5889] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 480.078271][ T9555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.150875][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.152602][ T9555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.327264][ T9555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.337054][ T5889] usb 5-1: config 0 descriptor?? [ 480.346821][ T9555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.885087][T10167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.898990][ T5889] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 480.940292][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 480.964249][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 480.982100][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 481.061433][ T9555] veth1_macvtap: left promiscuous mode [ 481.075456][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 481.099032][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 481.114603][ T9555] veth0_macvtap: left promiscuous mode [ 481.127887][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 481.140254][ T9555] veth1_vlan: left promiscuous mode [ 481.155959][ T5889] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 481.165273][ T9555] veth0_vlan: left promiscuous mode [ 481.187082][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 481.343473][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 481.397057][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 481.442088][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 481.473704][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 481.508667][ T5889] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 481.532307][ T5889] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 481.582512][ T5889] usb 5-1: USB disconnect, device number 9 [ 481.731516][ T5889] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 482.887587][ T5889] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 483.274572][ T5889] keyspan 5-1:0.11: device disconnected [ 485.039654][ T9555] team0 (unregistering): Port device team_slave_1 removed [ 485.063772][ T9555] team0 (unregistering): Port device team_slave_0 removed [ 485.864382][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.009792][ T9893] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.561800][ T9893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.572485][ T9893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.638811][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.645985][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.791427][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.798596][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.171186][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.543592][ T9893] veth0_vlan: entered promiscuous mode [ 490.587726][ T9893] veth1_vlan: entered promiscuous mode [ 490.768724][ T9893] veth0_macvtap: entered promiscuous mode [ 490.799332][ T9893] veth1_macvtap: entered promiscuous mode [ 490.875261][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.919634][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.947025][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.050940][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.061739][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.072672][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.083423][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.100427][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.118824][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.184796][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.297686][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.307731][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.318668][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.338486][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.350399][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.370016][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.388008][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.410418][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.490624][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.596173][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.624991][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.690611][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.150319][ T9893] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.164271][ T9893] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.176297][ T9893] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.187924][ T9893] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.758320][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.776339][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.927419][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.938787][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.370005][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 495.401250][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 496.840965][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 497.054389][ T8] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 497.077032][ T8] usb 9-1: config 0 has no interface number 0 [ 497.113321][ T8] usb 9-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 497.160428][ T8] usb 9-1: config 0 interface 11 has no altsetting 0 [ 497.197682][ T8] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 497.234770][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.280539][ T8] usb 9-1: config 0 descriptor?? [ 497.299750][T10392] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 497.358025][ T8] keyspan 9-1:0.11: Keyspan 2 port adapter converter detected [ 497.404688][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 81 [ 497.453802][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 82 [ 497.497837][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 1 [ 497.537858][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 2 [ 497.566310][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 85 [ 497.612881][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 5 [ 497.695043][ T8] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 497.725768][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 83 [ 497.783524][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 84 [ 497.839310][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3 [ 497.889289][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4 [ 497.909109][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 86 [ 498.063306][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 6 [ 498.518314][ T8] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 498.543802][ T8] usb 9-1: USB disconnect, device number 2 [ 498.555046][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 499.243967][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 499.276127][ T8] keyspan 9-1:0.11: device disconnected [ 501.013412][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.019748][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.828287][T10446] ebtables: ebtables: counters copy to user failed while replacing table [ 502.979329][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 503.499916][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 508.370870][ T5845] Bluetooth: hci6: command 0x0406 tx timeout [ 508.377019][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 511.582677][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1252'. [ 513.041987][T10583] vlan2: entered allmulticast mode [ 513.794557][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 514.426877][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 514.440905][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1257'. [ 518.221444][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 520.616958][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1272'. [ 520.685751][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 522.379416][T10687] vlan2: entered allmulticast mode [ 525.530815][ T5894] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 525.791006][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 525.955563][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 526.169328][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 527.262233][ T5894] usb 9-1: string descriptor 0 read error: -71 [ 527.268995][ T5894] usb 9-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 527.411085][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 527.479611][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 527.594218][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.678983][ T5894] usb 9-1: config 0 descriptor?? [ 527.690427][ T5890] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 527.709309][ T5894] usb 9-1: can't set config #0, error -71 [ 527.725817][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.781148][ T5894] usb 9-1: USB disconnect, device number 3 [ 527.837007][ T5890] usb 5-1: Product: syz [ 527.844762][ T5890] usb 5-1: Manufacturer: syz [ 527.849389][ T5890] usb 5-1: SerialNumber: syz [ 527.856540][ T5890] usb 5-1: config 0 descriptor?? [ 528.047579][ T5890] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 528.173620][ T5890] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 528.586558][T10739] overlayfs: failed to resolve './file1': -2 [ 529.341537][ T5887] usb 5-1: USB disconnect, device number 10 [ 529.356257][ T5887] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 529.366508][ T5887] kobil_sct 5-1:0.0: device disconnected [ 529.979281][T10753] vlan2: entered allmulticast mode [ 532.047505][T10773] siw: device registration error -23 [ 536.026586][T10815] overlayfs: failed to resolve './file1': -2 [ 539.082499][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 540.215996][ T8] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 540.236308][ T8] usb 7-1: config 0 has no interface number 0 [ 540.256485][ T8] usb 7-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 540.330857][T10849] overlayfs: failed to resolve './file1': -2 [ 540.816383][ T8] usb 7-1: config 0 interface 11 has no altsetting 0 [ 540.823529][ T8] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 540.834576][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.866186][ T8] usb 7-1: config 0 descriptor?? [ 541.229817][T10831] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 541.258424][ T8] keyspan 7-1:0.11: Keyspan 2 port adapter converter detected [ 541.308153][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81 [ 541.459325][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82 [ 541.467307][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1 [ 541.476259][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2 [ 541.489253][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 85 [ 541.498749][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 5 [ 541.790448][ T8] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 542.373772][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83 [ 542.391102][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84 [ 542.398911][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3 [ 542.410283][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4 [ 542.418335][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 86 [ 542.429249][ T8] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 6 [ 542.561091][ T8] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 542.731380][ T8] usb 7-1: USB disconnect, device number 2 [ 543.736519][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 544.190927][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 544.972419][ T8] keyspan 7-1:0.11: device disconnected [ 545.451032][T10883] overlayfs: failed to resolve './file1': -2 [ 546.426777][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 546.640177][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 547.326544][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 547.391470][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 549.507407][T10918] ipvlan2: entered promiscuous mode [ 549.629937][ T5946] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 549.801811][T10931] vlan2: entered allmulticast mode [ 549.870884][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 550.149989][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 550.615830][ T5946] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 550.629717][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.643504][ T5946] usb 5-1: Product: syz [ 550.665413][ T5946] usb 5-1: Manufacturer: syz [ 550.757728][ T5946] usb 5-1: SerialNumber: syz [ 550.786665][ T5946] usb 5-1: config 0 descriptor?? [ 550.806268][ T5946] usb 5-1: can't set config #0, error -71 [ 551.528288][ T5946] usb 5-1: USB disconnect, device number 11 [ 552.551225][T10962] overlayfs: failed to resolve './file1': -2 [ 558.670780][ T5889] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 558.850762][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 558.868226][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 559.032492][ T5889] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 559.042060][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.050063][ T5889] usb 5-1: Product: syz [ 559.061171][ T5889] usb 5-1: Manufacturer: syz [ 559.065782][ T5889] usb 5-1: SerialNumber: syz [ 559.085642][ T5889] usb 5-1: config 0 descriptor?? [ 559.111897][ T5889] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 559.199188][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1348'. [ 559.218198][ T5889] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 560.737895][ T5946] usb 5-1: USB disconnect, device number 12 [ 561.161330][ T5946] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 561.302003][ T5946] kobil_sct 5-1:0.0: device disconnected [ 562.545709][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.560569][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.042891][ T5890] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 565.330806][ T5890] usb 9-1: Using ep0 maxpacket: 16 [ 565.338979][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 565.613307][ T5890] usb 9-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 565.711672][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.720841][ T5890] usb 9-1: Product: syz [ 565.725053][ T5890] usb 9-1: Manufacturer: syz [ 565.730738][ T5890] usb 9-1: SerialNumber: syz [ 565.907689][ T5890] usb 9-1: config 0 descriptor?? [ 566.105913][ T5890] kobil_sct 9-1:0.0: KOBIL USB smart card terminal converter detected [ 566.139898][ T5890] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 567.430507][ T5890] usb 9-1: USB disconnect, device number 4 [ 567.447538][ T5890] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 567.464044][ T5890] kobil_sct 9-1:0.0: device disconnected [ 570.036968][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 570.477231][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 574.791156][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 574.845355][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 575.021547][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 575.082759][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 575.129825][ T25] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 575.295761][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.143963][ T25] usb 3-1: Product: syz [ 576.148282][ T25] usb 3-1: Manufacturer: syz [ 576.155209][ T25] usb 3-1: SerialNumber: syz [ 576.166833][ T25] usb 3-1: config 0 descriptor?? [ 576.387975][ T25] usb 3-1: can't set config #0, error -71 [ 576.528309][ T25] usb 3-1: USB disconnect, device number 5 [ 578.258670][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1392'. [ 578.500956][ T5894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 583.840825][ T5887] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 585.361926][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 585.399009][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 585.448230][ T5887] usb 9-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 585.474565][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.500955][ T5887] usb 9-1: Product: syz [ 585.519196][ T5887] usb 9-1: Manufacturer: syz [ 585.653388][ T5887] usb 9-1: SerialNumber: syz [ 585.661548][ T5887] usb 9-1: config 0 descriptor?? [ 585.681798][ T5887] kobil_sct 9-1:0.0: KOBIL USB smart card terminal converter detected [ 585.696767][ T5887] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 586.123733][ T5887] usb 9-1: USB disconnect, device number 5 [ 586.188725][ T5887] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 586.620314][ T5887] kobil_sct 9-1:0.0: device disconnected [ 586.807798][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1409'. [ 587.506742][T11313] overlayfs: failed to resolve './file1': -2 [ 593.110791][ T5946] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 593.124698][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 593.731055][T10215] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 593.760794][ T5946] usb 9-1: Using ep0 maxpacket: 16 [ 593.768379][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 594.184077][T10215] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 594.222741][ T5946] usb 9-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 594.237069][T10215] usb 7-1: config 0 has no interface number 0 [ 594.267051][T10215] usb 7-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 594.277996][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.313177][ T5946] usb 9-1: Product: syz [ 594.317566][ T5946] usb 9-1: Manufacturer: syz [ 594.322923][T10215] usb 7-1: config 0 interface 11 has no altsetting 0 [ 594.329657][T10215] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 594.352823][ T5946] usb 9-1: SerialNumber: syz [ 595.069631][ T5946] usb 9-1: config 0 descriptor?? [ 595.080744][T10215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.094398][ T5946] kobil_sct 9-1:0.0: KOBIL USB smart card terminal converter detected [ 595.607458][T10215] usb 7-1: config 0 descriptor?? [ 595.615365][ T5946] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 595.676192][ T5946] usb 9-1: USB disconnect, device number 6 [ 595.703927][ T5946] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 595.857149][ T5946] kobil_sct 9-1:0.0: device disconnected [ 596.181074][T10215] usb 7-1: can't set config #0, error -71 [ 596.189087][T10215] usb 7-1: USB disconnect, device number 3 [ 598.140794][T10215] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 598.580952][ T5894] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 598.851572][T10215] usb 6-1: Using ep0 maxpacket: 16 [ 598.865703][T10215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 598.880976][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 598.902226][T10215] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 598.910940][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 599.012062][T10215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.033667][T10215] usb 6-1: Product: syz [ 599.037873][T10215] usb 6-1: Manufacturer: syz [ 599.053722][T10215] usb 6-1: SerialNumber: syz [ 599.077415][ T5894] usb 9-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 599.087134][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.107398][T10215] usb 6-1: config 0 descriptor?? [ 599.111035][ T5894] usb 9-1: Product: syz [ 599.116522][ T5894] usb 9-1: Manufacturer: syz [ 599.133065][T10215] usb 6-1: can't set config #0, error -71 [ 599.152932][ T5894] usb 9-1: SerialNumber: syz [ 599.184593][ T5894] usb 9-1: config 0 descriptor?? [ 599.220223][ T5894] kobil_sct 9-1:0.0: KOBIL USB smart card terminal converter detected [ 599.279709][ T5894] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 599.291014][T10215] usb 6-1: USB disconnect, device number 3 [ 601.238710][ T8] usb 9-1: USB disconnect, device number 7 [ 601.262514][ T8] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 601.281023][ T8] kobil_sct 9-1:0.0: device disconnected [ 602.053861][ T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 602.223541][ T8] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 602.223578][ T8] usb 9-1: config 0 has no interface number 0 [ 602.223612][ T8] usb 9-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 602.223653][ T8] usb 9-1: config 0 interface 11 has no altsetting 0 [ 602.223685][ T8] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 602.223714][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.225374][ T8] usb 9-1: config 0 descriptor?? [ 602.226033][T11463] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 602.244428][ T8] keyspan 9-1:0.11: Keyspan 2 port adapter converter detected [ 602.256994][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 81 [ 602.257077][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 82 [ 602.257124][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 1 [ 602.257217][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 2 [ 602.257263][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 85 [ 602.257308][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 5 [ 602.268428][ T8] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 602.269539][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 83 [ 602.269587][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 84 [ 602.269656][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3 [ 602.269701][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4 [ 602.269747][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 86 [ 602.269812][ T8] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 6 [ 602.282223][ T8] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 602.580359][ T8] usb 9-1: USB disconnect, device number 8 [ 602.591310][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 602.599345][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 602.599804][ T8] keyspan 9-1:0.11: device disconnected [ 603.806195][T11474] tty tty25: ldisc open failed (-12), clearing slot 24 [ 605.462054][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1452'. [ 605.583284][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1452'. [ 609.579359][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 611.705723][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 612.331045][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 612.382755][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 613.018743][ T5889] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 613.038025][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.095868][ T5889] usb 3-1: config 0 descriptor?? [ 613.107533][ T5889] usb 3-1: can't set config #0, error -71 [ 613.123721][ T5889] usb 3-1: USB disconnect, device number 6 [ 613.935433][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1468'. [ 614.064876][T11602] binder: 11601:11602 ioctl c0306201 0 returned -14 [ 614.178872][ T5889] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 614.230425][T11602] binder: 11601:11602 ioctl c0306201 200002c0 returned -22 [ 614.381254][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 614.411985][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 614.442130][ T5889] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 614.452938][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 614.472983][ T5889] usb 3-1: Product: syz [ 614.484140][ T5889] usb 3-1: Manufacturer: syz [ 614.495320][ T5889] usb 3-1: SerialNumber: syz [ 614.639613][ T5889] usb 3-1: config 0 descriptor?? [ 614.646934][T11591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.498594][ T5890] usb 3-1: USB disconnect, device number 7 [ 616.911855][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 616.922238][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 617.738434][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 618.682694][ T5890] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 618.736574][ T5890] usb 6-1: config 0 has no interface number 0 [ 618.787750][ T5890] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 618.817358][ T5890] usb 6-1: config 0 interface 11 has no altsetting 0 [ 618.894082][ T5890] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 619.100606][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.544887][ T5890] usb 6-1: config 0 descriptor?? [ 620.590630][ T5890] usb 6-1: can't set config #0, error -71 [ 620.637116][ T5890] usb 6-1: USB disconnect, device number 4 [ 623.947247][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.953642][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.002033][T11715] syz.2.1497 (11715) used greatest stack depth: 18672 bytes left [ 628.222765][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 632.330799][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 632.798259][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.167799][ T5894] usb 5-1: config 0 has no interfaces? [ 633.200804][ T5894] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 633.284307][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.464689][ T5894] usb 5-1: config 0 descriptor?? [ 633.826323][T10215] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 634.221392][T10215] usb 6-1: Using ep0 maxpacket: 16 [ 634.244696][T10215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 636.051908][T10215] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 636.065600][T10215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.076806][T10215] usb 6-1: Product: syz [ 636.081339][T10215] usb 6-1: Manufacturer: syz [ 636.085951][T10215] usb 6-1: SerialNumber: syz [ 636.096598][T10215] usb 6-1: config 0 descriptor?? [ 636.121270][T10215] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 636.147411][ T5889] usb 5-1: USB disconnect, device number 14 [ 636.198353][T10215] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 636.372490][ T5889] usb 6-1: USB disconnect, device number 5 [ 636.406752][ T5889] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 636.427425][ T5889] kobil_sct 6-1:0.0: device disconnected [ 638.573547][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1536'. [ 638.717437][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1536'. [ 641.327849][ T3528] ================================================================== [ 641.336026][ T3528] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x1c1/0x590 [ 641.343690][ T3528] Read of size 4 at addr ffff8880282f0058 by task kworker/u8:11/3528 [ 641.351747][ T3528] [ 641.354064][ T3528] CPU: 1 UID: 0 PID: 3528 Comm: kworker/u8:11 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 641.354085][ T3528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 641.354098][ T3528] Workqueue: events_unbound netfs_write_collection_worker [ 641.354129][ T3528] Call Trace: [ 641.354138][ T3528] [ 641.354146][ T3528] dump_stack_lvl+0x241/0x360 [ 641.354169][ T3528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.354187][ T3528] ? __pfx__printk+0x10/0x10 [ 641.354217][ T3528] ? _printk+0xd5/0x120 [ 641.354245][ T3528] ? __virt_addr_valid+0x183/0x530 [ 641.354273][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.354304][ T3528] print_report+0x169/0x550 [ 641.354332][ T3528] ? __virt_addr_valid+0x183/0x530 [ 641.354359][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.354393][ T3528] ? __virt_addr_valid+0x45f/0x530 [ 641.354420][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.354448][ T3528] ? __phys_addr+0xba/0x170 [ 641.354476][ T3528] ? iov_iter_revert+0x1c1/0x590 [ 641.354503][ T3528] kasan_report+0x143/0x180 [ 641.354532][ T3528] ? iov_iter_revert+0x1c1/0x590 [ 641.354563][ T3528] iov_iter_revert+0x1c1/0x590 [ 641.354593][ T3528] netfs_retry_writes+0x17db/0x19b0 [ 641.354631][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.354673][ T3528] ? __pfx_lock_release+0x10/0x10 [ 641.354704][ T3528] ? do_raw_spin_unlock+0x13c/0x8b0 [ 641.354727][ T3528] ? __pfx_netfs_retry_writes+0x10/0x10 [ 641.354759][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.354787][ T3528] ? rcu_is_watching+0x15/0xb0 [ 641.354804][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.354834][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.354865][ T3528] netfs_write_collection_worker+0x2f90/0x3bb0 [ 641.354913][ T3528] ? process_scheduled_works+0x976/0x1840 [ 641.354936][ T3528] process_scheduled_works+0xa68/0x1840 [ 641.354969][ T3528] ? __pfx_process_scheduled_works+0x10/0x10 [ 641.354992][ T3528] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 641.355013][ T3528] ? assign_work+0x364/0x3d0 [ 641.355036][ T3528] worker_thread+0x870/0xd30 [ 641.355064][ T3528] ? __kthread_parkme+0x169/0x1d0 [ 641.355089][ T3528] ? __pfx_worker_thread+0x10/0x10 [ 641.355112][ T3528] kthread+0x7ab/0x920 [ 641.355137][ T3528] ? __pfx_kthread+0x10/0x10 [ 641.355164][ T3528] ? __pfx_worker_thread+0x10/0x10 [ 641.355187][ T3528] ? __pfx_kthread+0x10/0x10 [ 641.355212][ T3528] ? __pfx_kthread+0x10/0x10 [ 641.355239][ T3528] ? __pfx_kthread+0x10/0x10 [ 641.355264][ T3528] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.355281][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.355309][ T3528] ? lockdep_hardirqs_on+0x99/0x150 [ 641.355330][ T3528] ? __pfx_kthread+0x10/0x10 [ 641.355356][ T3528] ret_from_fork+0x4d/0x80 [ 641.355386][ T3528] ? __pfx_kthread+0x10/0x10 [ 641.355413][ T3528] ret_from_fork_asm+0x1a/0x30 [ 641.355441][ T3528] [ 641.355447][ T3528] [ 641.630926][ T3528] Allocated by task 11915: [ 641.635334][ T3528] kasan_save_track+0x3f/0x80 [ 641.640020][ T3528] __kasan_kmalloc+0x98/0xb0 [ 641.644615][ T3528] __kmalloc_noprof+0x285/0x4c0 [ 641.649465][ T3528] tomoyo_encode+0x26f/0x540 [ 641.654062][ T3528] tomoyo_realpath_from_path+0x59e/0x5e0 [ 641.659700][ T3528] tomoyo_check_open_permission+0x258/0x4f0 [ 641.665596][ T3528] security_file_open+0xac/0x250 [ 641.670534][ T3528] do_dentry_open+0x320/0x1960 [ 641.675312][ T3528] vfs_open+0x3b/0x370 [ 641.679374][ T3528] path_openat+0x2c74/0x3580 [ 641.683966][ T3528] do_filp_open+0x27f/0x4e0 [ 641.688480][ T3528] do_sys_openat2+0x13e/0x1d0 [ 641.693161][ T3528] __x64_sys_creat+0x123/0x170 [ 641.697922][ T3528] do_syscall_64+0xf3/0x230 [ 641.702624][ T3528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.708541][ T3528] [ 641.710857][ T3528] Freed by task 11915: [ 641.714914][ T3528] kasan_save_track+0x3f/0x80 [ 641.719596][ T3528] kasan_save_free_info+0x40/0x50 [ 641.724621][ T3528] __kasan_slab_free+0x59/0x70 [ 641.729398][ T3528] kfree+0x196/0x430 [ 641.733293][ T3528] tomoyo_check_open_permission+0x35f/0x4f0 [ 641.739189][ T3528] security_file_open+0xac/0x250 [ 641.744126][ T3528] do_dentry_open+0x320/0x1960 [ 641.748900][ T3528] vfs_open+0x3b/0x370 [ 641.752964][ T3528] path_openat+0x2c74/0x3580 [ 641.757559][ T3528] do_filp_open+0x27f/0x4e0 [ 641.762064][ T3528] do_sys_openat2+0x13e/0x1d0 [ 641.766738][ T3528] __x64_sys_creat+0x123/0x170 [ 641.771500][ T3528] do_syscall_64+0xf3/0x230 [ 641.776006][ T3528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.781905][ T3528] [ 641.784219][ T3528] The buggy address belongs to the object at ffff8880282f0040 [ 641.784219][ T3528] which belongs to the cache kmalloc-16 of size 16 [ 641.798097][ T3528] The buggy address is located 8 bytes to the right of [ 641.798097][ T3528] allocated 16-byte region [ffff8880282f0040, ffff8880282f0050) [ 641.812509][ T3528] [ 641.814826][ T3528] The buggy address belongs to the physical page: [ 641.821222][ T3528] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880282f0000 pfn:0x282f0 [ 641.831302][ T3528] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 641.839371][ T3528] page_type: f5(slab) [ 641.843355][ T3528] raw: 00fff00000000200 ffff88801ac41640 ffffea0000bd5250 ffffea0000be3890 [ 641.851945][ T3528] raw: ffff8880282f0000 0000000000800074 00000001f5000000 0000000000000000 [ 641.860521][ T3528] page dumped because: kasan: bad access detected [ 641.866932][ T3528] page_owner tracks the page as allocated [ 641.872638][ T3528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5837, tgid 5837 (syz-executor), ts 235349783919, free_ts 235303621451 [ 641.892356][ T3528] post_alloc_hook+0x1f3/0x230 [ 641.897139][ T3528] get_page_from_freelist+0x365c/0x37a0 [ 641.902702][ T3528] __alloc_pages_noprof+0x292/0x710 [ 641.907912][ T3528] alloc_slab_page+0x59/0x110 [ 641.912600][ T3528] allocate_slab+0x5a/0x2b0 [ 641.917109][ T3528] ___slab_alloc+0xc27/0x14a0 [ 641.921788][ T3528] __slab_alloc+0x58/0xa0 [ 641.926120][ T3528] __kmalloc_node_noprof+0x2ee/0x4d0 [ 641.931411][ T3528] __kvmalloc_node_noprof+0x72/0x190 [ 641.936706][ T3528] xt_replace_table+0x1a2/0x780 [ 641.941569][ T3528] __do_replace+0x1ae/0xa50 [ 641.946083][ T3528] do_ip6t_set_ctl+0xf11/0x1270 [ 641.950944][ T3528] nf_setsockopt+0x297/0x2c0 [ 641.955544][ T3528] do_sock_setsockopt+0x3b1/0x720 [ 641.960577][ T3528] __x64_sys_setsockopt+0x1ee/0x280 [ 641.965782][ T3528] do_syscall_64+0xf3/0x230 [ 641.970290][ T3528] page last free pid 7771 tgid 7771 stack trace: [ 641.976613][ T3528] free_unref_page+0xd3f/0x1010 [ 641.981479][ T3528] tlb_finish_mmu+0x11f/0x200 [ 641.986176][ T3528] exit_mmap+0x4d5/0xca0 [ 641.990425][ T3528] __mmput+0x115/0x420 [ 641.994498][ T3528] exit_mm+0x220/0x310 [ 641.998577][ T3528] do_exit+0x9ad/0x28e0 [ 642.002746][ T3528] do_group_exit+0x207/0x2c0 [ 642.007342][ T3528] __x64_sys_exit_group+0x3f/0x40 [ 642.012375][ T3528] x64_sys_call+0x26a8/0x26b0 [ 642.017057][ T3528] do_syscall_64+0xf3/0x230 [ 642.021566][ T3528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.027473][ T3528] [ 642.029787][ T3528] Memory state around the buggy address: [ 642.035411][ T3528] ffff8880282eff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 642.043476][ T3528] ffff8880282eff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 642.051534][ T3528] >ffff8880282f0000: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 642.059679][ T3528] ^ [ 642.066640][ T3528] ffff8880282f0080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 642.074710][ T3528] ffff8880282f0100: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 642.082770][ T3528] ================================================================== [ 642.140040][ T3528] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 642.147292][ T3528] CPU: 0 UID: 0 PID: 3528 Comm: kworker/u8:11 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 642.157897][ T3528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 642.168042][ T3528] Workqueue: events_unbound netfs_write_collection_worker [ 642.175168][ T3528] Call Trace: [ 642.178556][ T3528] [ 642.181495][ T3528] dump_stack_lvl+0x241/0x360 [ 642.186208][ T3528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.191438][ T3528] ? __pfx__printk+0x10/0x10 [ 642.196064][ T3528] ? rcu_is_watching+0x15/0xb0 [ 642.200941][ T3528] ? preempt_schedule+0xe1/0xf0 [ 642.205819][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.211498][ T3528] ? vscnprintf+0x5d/0x90 [ 642.215874][ T3528] panic+0x349/0x880 [ 642.219814][ T3528] ? check_panic_on_warn+0x21/0xb0 [ 642.224964][ T3528] ? __pfx_panic+0x10/0x10 [ 642.229391][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.235049][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.240737][ T3528] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 642.246837][ T3528] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 642.253195][ T3528] ? print_report+0x502/0x550 [ 642.257924][ T3528] check_panic_on_warn+0x86/0xb0 [ 642.262905][ T3528] ? iov_iter_revert+0x1c1/0x590 [ 642.267877][ T3528] end_report+0x77/0x160 [ 642.272139][ T3528] kasan_report+0x154/0x180 [ 642.276833][ T3528] ? iov_iter_revert+0x1c1/0x590 [ 642.281791][ T3528] iov_iter_revert+0x1c1/0x590 [ 642.286574][ T3528] netfs_retry_writes+0x17db/0x19b0 [ 642.291785][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.297433][ T3528] ? __pfx_lock_release+0x10/0x10 [ 642.302480][ T3528] ? do_raw_spin_unlock+0x13c/0x8b0 [ 642.307698][ T3528] ? __pfx_netfs_retry_writes+0x10/0x10 [ 642.313274][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.318922][ T3528] ? rcu_is_watching+0x15/0xb0 [ 642.323775][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.329423][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.335078][ T3528] netfs_write_collection_worker+0x2f90/0x3bb0 [ 642.341276][ T3528] ? process_scheduled_works+0x976/0x1840 [ 642.347002][ T3528] process_scheduled_works+0xa68/0x1840 [ 642.352569][ T3528] ? __pfx_process_scheduled_works+0x10/0x10 [ 642.358583][ T3528] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 642.364223][ T3528] ? assign_work+0x364/0x3d0 [ 642.368822][ T3528] worker_thread+0x870/0xd30 [ 642.373426][ T3528] ? __kthread_parkme+0x169/0x1d0 [ 642.378550][ T3528] ? __pfx_worker_thread+0x10/0x10 [ 642.383679][ T3528] kthread+0x7ab/0x920 [ 642.387779][ T3528] ? __pfx_kthread+0x10/0x10 [ 642.392386][ T3528] ? __pfx_worker_thread+0x10/0x10 [ 642.397512][ T3528] ? __pfx_kthread+0x10/0x10 [ 642.402113][ T3528] ? __pfx_kthread+0x10/0x10 [ 642.406725][ T3528] ? __pfx_kthread+0x10/0x10 [ 642.411332][ T3528] ? _raw_spin_unlock_irq+0x23/0x50 [ 642.416534][ T3528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.422186][ T3528] ? lockdep_hardirqs_on+0x99/0x150 [ 642.427393][ T3528] ? __pfx_kthread+0x10/0x10 [ 642.431996][ T3528] ret_from_fork+0x4d/0x80 [ 642.436426][ T3528] ? __pfx_kthread+0x10/0x10 [ 642.441033][ T3528] ret_from_fork_asm+0x1a/0x30 [ 642.445817][ T3528] [ 642.449070][ T3528] Kernel Offset: disabled [ 642.453385][ T3528] Rebooting in 86400 seconds..