last executing test programs: 17m56.197398451s ago: executing program 5 (id=455): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x114, 0x0, 0x2, 0xa50e823f883a8ccb, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xf4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x51}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 17m55.370331192s ago: executing program 5 (id=458): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x200400, 0x187) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6df, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000170900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000007071901021f3a9980f94536ce1de48d4c88519d875729d4022aea4e2e297ad9432e4113094f21267b72cf66428778a74ba9a0e53ab533c5c6d811c6dba57740f289a9140f662162f91c07f41c5"], 0x70}}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[], 0x2f0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) 17m53.738895103s ago: executing program 5 (id=470): r0 = syz_open_dev$media(&(0x7f0000000100), 0xfffffffffffffffe, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x50, 0x0, 0x0}) 17m53.566450171s ago: executing program 5 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 17m52.749006683s ago: executing program 5 (id=479): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x400c0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 17m50.083827515s ago: executing program 5 (id=492): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 17m48.997530574s ago: executing program 32 (id=492): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 14m39.604868712s ago: executing program 4 (id=1471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a7830220", 0x38}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {0x0}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14m39.420260248s ago: executing program 4 (id=1473): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000200)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64], 0x50) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x3e8, 0xf, 0x0, &(0x7f0000000040)="c15fb2b8fc6fa2d476e65c8bdf0700", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 14m39.249933643s ago: executing program 4 (id=1475): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fd", 0x1d) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 14m36.540256046s ago: executing program 4 (id=1479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x40000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_emit_vhci(0x0, 0x15) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x42, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x8865) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x2b, 0x80801, 0x1) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x10000009}) 14m32.968180483s ago: executing program 4 (id=1485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a7830220", 0x38}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {0x0}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14m27.776617434s ago: executing program 4 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)={[{@errors_remount}, {@abort}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000040c0)='net/dev_mcast\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020) pread64(r4, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) getrandom(&(0x7f0000001b40)=""/4096, 0x1000, 0x0) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 14m10.835524065s ago: executing program 33 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)={[{@errors_remount}, {@abort}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000040c0)='net/dev_mcast\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020) pread64(r4, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) getrandom(&(0x7f0000001b40)=""/4096, 0x1000, 0x0) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 7m27.800978802s ago: executing program 1 (id=3179): r0 = socket$inet6(0xa, 0x805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6076b2af00072f0020010000000000000000000000000001ff020000000000000000000000000001000022eb"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005a7"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r1, r2, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001080), 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f00000010c0)) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="d229fa7522038b029078f8212764e0accad8a9785505ade4fdb20e32642ae9112ba9e042f8f6e83cdbe6e870c4b53b32505e883b18b40145e2641d24e5f7e0775a54a9db1e5b08456507f65af3e76a45b9f93d26309770bf50d08d03274bfb56111e7bd4f7f5704586e29ec3849744898d1147334ec9ae35e6d83159de02c64f1d0827c9eeb9c01915b4d13eec3be4ef50fdbb766a646e14061e0e43632c1a10294b9e9aad508c86d57df89fff065e4f2232980372b0fc59e13659700ceaef5ca2eaef3852b7d572", @ANYBLOB="7cad95ed0ee4bb8db0a81072af0e8f49bcdde3017fe9db57cdf7ba49c51d9e0a86ae4a10087c36bb601c5d7dd19564ae012b1a7ffad26aaf2c55381d30a55b490567495200495665eb32a68523e3aa99586b343e20d02a737b76f1790fa87551ab6f0070ec9a7caca6aa33b88263dab45ec3de0eb77fc8aa9d72777705e31839c5aa1eb5"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getpid() 7m20.892699436s ago: executing program 1 (id=3199): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @broadcast}, 0x80, 0x0}, 0x44000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x922bac8556bdad8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x88d0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7m19.438516173s ago: executing program 1 (id=3203): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000040)="c15fb2b8fc6fa2d476e65c8bdf0700", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7m17.907953816s ago: executing program 1 (id=3207): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001200050923bd7000fedbdf25110904014e224e6600000000240900000200000006000000fdffffff0500000000", @ANYRES32=0x0, @ANYBLOB="0a0000000010000006000000010000001000010008"], 0x5c}, 0x1, 0x0, 0x0, 0x26000001}, 0x800) 7m17.229111001s ago: executing program 1 (id=3211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(r0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r5, &(0x7f0000000800)='file *evio.c +', 0xe) 7m14.332995283s ago: executing program 1 (id=3214): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f908, 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x5, 0xcf1d, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 6m58.748983633s ago: executing program 34 (id=3214): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f908, 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x5, 0xcf1d, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 1m16.463535421s ago: executing program 6 (id=4311): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x8b27, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) semtimedop(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m15.025706666s ago: executing program 6 (id=4317): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x0, 0xa, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m11.945381848s ago: executing program 6 (id=4327): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) capget(&(0x7f0000002680)={0x20080522}, &(0x7f00000026c0)={0x3ff, 0x0, 0x4, 0x100, 0x5, 0x2}) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000240)={[{@flock_local}, {@dyn}]}) 1m8.663183467s ago: executing program 6 (id=4330): syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60000000003c3a002001000000000000000000000000000100dfecde722c7e2fd8cf0000000060540978e09b16cf2c891700000000000000000000000104907880000031864c9866d61b2027bc8e6b0060e1f58800e9ffffff0200"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 59.965212243s ago: executing program 6 (id=4352): syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009fef7f2099043910760c010203010902450001000010000904b00002a1e0d800052406000105240006000d24020100000000060091008106241a00002f0424020009050402"], 0x0) 58.433303848s ago: executing program 6 (id=4359): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x2000000, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xdbf, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 21.695997868s ago: executing program 8 (id=4476): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) syz_ublk_setup_io_uring(0x1b1e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x42020054, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) 20.398690031s ago: executing program 8 (id=4478): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, @private2}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 19.960181649s ago: executing program 0 (id=4480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8) recvmmsg$unix(r2, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/188, 0xbc}, {&(0x7f0000001c40)=""/234, 0xea}, {&(0x7f0000001d40)=""/88, 0x58}, {&(0x7f0000001dc0)=""/235, 0xeb}, {&(0x7f0000001ec0)=""/47, 0x2f}, {&(0x7f0000001f40)=""/63, 0x3f}], 0x8, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000002d80), 0x0, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002e80)=""/164, 0xa4}, {&(0x7f0000002f40)=""/88, 0x58}], 0x2}}, {{&(0x7f00000046c0)=@abs, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004740)=""/28, 0x1c}, {&(0x7f0000004780)=""/55, 0x37}, {&(0x7f00000047c0)=""/93, 0x5d}], 0x3, &(0x7f0000004880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004980)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000004a00)=""/142, 0x8e}, {&(0x7f0000004ac0)=""/35, 0x23}, {&(0x7f0000004b00)=""/173, 0xad}, {&(0x7f0000004bc0)=""/33, 0x21}, {&(0x7f0000004c00)=""/51, 0x33}, {&(0x7f0000004c40)}], 0x6, &(0x7f0000004d00)}}, {{&(0x7f0000004e40)=@abs, 0x6e, 0x0}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000005080)}}, {{&(0x7f00000050c0)=@abs, 0x6e, &(0x7f0000005200)=[{&(0x7f0000005140)=""/3, 0x3}, {&(0x7f0000005180)=""/115, 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000005240)=""/116, 0x74}, {&(0x7f00000052c0)=""/240, 0xf0}, {&(0x7f00000053c0)=""/173, 0xad}, {&(0x7f0000005480)=""/69, 0x45}, {&(0x7f0000005500)=""/220, 0xdc}, {&(0x7f0000005600)=""/116, 0x74}, {&(0x7f0000005780)=""/170, 0xaa}, {&(0x7f0000005840)=""/212, 0xd4}], 0x8, &(0x7f0000005a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x9, 0x12042, &(0x7f0000005d00)={0x0, 0x3938700}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xc120c39d78389a34, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) 16.248526425s ago: executing program 0 (id=4483): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100), 0x4) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 16.243779726s ago: executing program 8 (id=4484): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@generic={0x0, 0xfffffffffffffff9, 0x6}) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0xfffff000, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 13.870909425s ago: executing program 2 (id=4491): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) 13.63936782s ago: executing program 7 (id=4492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) write(0xffffffffffffffff, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0x08\n\x00', 0x5) 13.460528919s ago: executing program 0 (id=4493): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 13.44851209s ago: executing program 8 (id=4494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000feffffff090000002000038008000100020000001400020070696d72656700000000f813131c0eb9"], 0x34}, 0x1, 0x0, 0x0, 0x200048c1}, 0x0) 13.403936726s ago: executing program 3 (id=4495): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 12.004741256s ago: executing program 3 (id=4496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.804624471s ago: executing program 7 (id=4497): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3ffffffffffde, {0x0, 0x200000000, 0x8000001, 0x4, 0x6, 0x0, {0xfffffffffffffffc, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10) 11.574503927s ago: executing program 8 (id=4498): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@mcast1, @local, 0x10, 0x16}}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000000)={0x60000015}) epoll_pwait(r4, &(0x7f0000000140)=[{}], 0x1, 0xfe, 0x0, 0x0) close_range(r5, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) 11.504499062s ago: executing program 2 (id=4499): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1b, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 8.782814319s ago: executing program 0 (id=4500): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x3f8, 0x1, 0x32, 0x0, 0x7}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x3, 0x5, 0x0, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000300)) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) close_range(r3, r3, 0x0) 8.779612024s ago: executing program 7 (id=4501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xde, 0x4}, {0x6, 0x0, 0xfd, 0xbf}]}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 8.70839031s ago: executing program 3 (id=4502): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x20088c4) 7.720314976s ago: executing program 7 (id=4503): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="5ee2874f8c94e1263fcf49b699f59f0afc8cce42de5103a2ff155c8bd878572757", 0x21}], 0x2}, 0x24040849) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) 7.71978392s ago: executing program 2 (id=4504): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4085, 0xff5) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) 7.617170687s ago: executing program 8 (id=4505): socket$netlink(0x10, 0x3, 0x15) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 5.910100266s ago: executing program 3 (id=4506): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$netlink(r4, &(0x7f0000000440), &(0x7f0000000500)=0xc) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 3.665641858s ago: executing program 0 (id=4507): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x55, 0xe0, 0x9, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xc0, 0x4, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x4, 0x2, 0x0, 0xff, 0x8}, 0x124, &(0x7f0000000240)={0x5, 0xf, 0x124, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x1, 0x80}, @generic={0xfd, 0x10, 0x4, "61febafcd29cef3eede77490e3f6d314bccf18f99557d5b09f0bd83621d7344450b9012c6886d3216727b56973d1b7a00aee5cd34e501ffa2326155d20a036987ea095bb53b287e3443388c5fa113c9708f99d26cad605ae21bad7ecb996faeb2df2f3f9c195e8596255b3481c6693411d40d8e1ae5948b1cb7d98bdbddf74ceaf63bbc486c15a55ca1181ae6fdc0251356d43d6f854217b03c97aadef7953467aa493cc4189ce3b2e81bb193e5b4c779180fdc3ea6a4cc48bcc556dea3534858ea134e5555928fc3967abc5861da5c4bb2d3b5a7a4cdde63816c9084395274ae663e7799ac14fd32699bc7a0660ac5be87f561b90be3b22bfe0"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x0, 0x2e6f}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "3a2c72f1540d59ad993bfa3b92ea21ed"}]}, 0x3, [{0x0, 0x0}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x38, &(0x7f0000000580)=@string={0x38, 0x3, "4b02b6cb06e238f5f6ae42815452b3eaf92748c27d0cc29438064e093c14b09fa24dc945d61bb1de3b82e9908f0e0ef862031b82ab2f"}}]}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000600), 0x3008804, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0xcb0a) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40000, 0x0) 1.359858231s ago: executing program 7 (id=4508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) 1.191447652s ago: executing program 2 (id=4509): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000100)="4f7fbcb0722870a9a78c0ef0394cedcbc8216f99de0ad5f68eb3887438f60b507d8e5e595d08a0d939c6fd81ff8b9228fd64a2cb6983729eb5eaa70b321e2eaaf573daf745ed9d7ca655bf773adb47cc7e6609084ea6fc9a3c9670b057583aaee628", 0x62, 0x5}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) 1.190914201s ago: executing program 3 (id=4510): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) 701.201802ms ago: executing program 3 (id=4511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) 698.734823ms ago: executing program 0 (id=4512): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 637.721203ms ago: executing program 2 (id=4513): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 131.551232ms ago: executing program 7 (id=4514): mkdirat(0xffffffffffffff9c, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 0s ago: executing program 2 (id=4515): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x10bb41) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x80c01) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) ioctl$USBDEVFS_RESET(r0, 0x5514) kernel console output (not intermixed with test programs): tes in process `syz.1.2844'. [ 763.500872][ T5783] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 764.164203][ T5783] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 765.802417][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.820152][ T5783] usb 3-1: config 0 descriptor?? [ 765.838107][ T5783] cp210x 3-1:0.0: cp210x converter detected [ 766.089106][ T5783] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 766.131637][ T5783] cp210x 3-1:0.0: querying part number failed [ 766.205690][ T5783] usb 3-1: cp210x converter now attached to ttyUSB0 [ 766.670575][T14210] loop7: detected capacity change from 0 to 2048 [ 766.941513][T14210] Alternate GPT is invalid, using primary GPT. [ 766.976861][T14210] loop7: p2 p3 p7 [ 767.219391][ T5783] usb 3-1: USB disconnect, device number 38 [ 767.314684][ T5783] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 767.369213][ T5783] cp210x 3-1:0.0: device disconnected [ 767.685979][T14227] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 768.768114][T14230] sctp_transport_update_pmtu: 48 callbacks suppressed [ 768.768145][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.788145][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.800413][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.813196][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.834574][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.849313][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.860853][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.871939][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.884211][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 768.897135][T14230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 769.552518][T14247] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 770.751466][ T5769] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 771.023448][ T5769] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 771.078674][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.127402][ T5769] usb 3-1: config 0 descriptor?? [ 771.164535][ T5769] cp210x 3-1:0.0: cp210x converter detected [ 771.372270][ T5769] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 771.412797][ T5769] cp210x 3-1:0.0: querying part number failed [ 771.448536][ T5769] usb 3-1: cp210x converter now attached to ttyUSB0 [ 771.594164][T14283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.602958][T14283] IPv6: NLM_F_CREATE should be set when creating new route [ 773.340226][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2882'. [ 773.372971][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2882'. [ 773.560638][ T5628] usb 3-1: USB disconnect, device number 39 [ 773.616769][ T5628] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 773.656983][ T5628] cp210x 3-1:0.0: device disconnected [ 774.211235][T11636] Bluetooth: hci6: command 0x0406 tx timeout [ 775.843645][T14341] sctp_transport_update_pmtu: 48 callbacks suppressed [ 775.843663][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.864140][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.877578][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.896904][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.926172][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.939291][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.955701][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.977104][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.992191][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 776.010303][T14341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 777.302003][ T5628] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 777.439037][T14361] loop2: detected capacity change from 0 to 2048 [ 777.530604][ T5628] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 777.579049][ T5628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.615965][T14361] Alternate GPT is invalid, using primary GPT. [ 777.655183][ T5628] usb 2-1: config 0 descriptor?? [ 777.670257][T14361] loop2: p2 p3 p7 [ 777.732538][ T5628] cp210x 2-1:0.0: cp210x converter detected [ 777.961519][ T5628] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 778.022259][ T5628] cp210x 2-1:0.0: querying part number failed [ 778.076149][ T5628] usb 2-1: cp210x converter now attached to ttyUSB0 [ 778.546543][T14379] input: syz0 as /devices/virtual/input/input23 [ 780.161736][ T5628] usb 2-1: USB disconnect, device number 34 [ 780.213062][ T5628] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 780.275313][ T5628] cp210x 2-1:0.0: device disconnected [ 781.054342][ T5628] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 781.343589][ T5628] usb 8-1: Using ep0 maxpacket: 32 [ 781.366713][ T5628] usb 8-1: config 8 has an invalid interface number: 202 but max is 0 [ 782.101423][ T5628] usb 8-1: config 8 has no interface number 0 [ 782.107612][ T5628] usb 8-1: config 8 interface 202 has no altsetting 0 [ 782.131834][ T5628] usb 8-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=ee.6e [ 782.181425][ T5628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.224071][ T5628] usb 8-1: Product: syz [ 782.839499][T14430] input: syz0 as /devices/virtual/input/input24 [ 783.042356][ T5628] usb 8-1: Manufacturer: syz [ 783.046992][ T5628] usb 8-1: SerialNumber: syz [ 783.492180][ T5790] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 784.309511][ T5790] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 784.359611][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.371116][T14446] loop3: detected capacity change from 0 to 2048 [ 784.415806][ T5790] usb 7-1: config 0 descriptor?? [ 784.459898][ T5790] cp210x 7-1:0.0: cp210x converter detected [ 784.496197][T14446] Alternate GPT is invalid, using primary GPT. [ 784.531062][T14446] loop3: p2 p3 p7 [ 784.674271][ T5790] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 784.728520][ T5628] usb 8-1: No union descriptors [ 784.734200][ T5790] cp210x 7-1:0.0: querying part number failed [ 784.802867][ T5628] gspca_main: spca500-2.14.0 probing 046d:0890 [ 784.844286][ T5790] usb 7-1: cp210x converter now attached to ttyUSB0 [ 785.011388][ T5628] usb 8-1: USB disconnect, device number 11 [ 786.339458][ T5783] usb 7-1: USB disconnect, device number 17 [ 786.404155][ T5783] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 786.454638][ T5783] cp210x 7-1:0.0: device disconnected [ 786.713393][T14479] input: syz0 as /devices/virtual/input/input25 [ 787.968192][T14497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 787.975478][T14497] IPv6: NLM_F_CREATE should be set when creating new route [ 789.637499][ T5790] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 789.820992][ T5790] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 789.859589][ T5790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.908495][ T5790] usb 8-1: config 0 descriptor?? [ 789.943193][ T5790] cp210x 8-1:0.0: cp210x converter detected [ 790.163036][ T5790] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 790.202419][ T5790] cp210x 8-1:0.0: querying part number failed [ 790.256226][ T5790] usb 8-1: cp210x converter now attached to ttyUSB0 [ 791.539387][T14535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.612999][T14535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.657341][T14535] bond0 (unregistering): Released all slaves [ 791.714717][ T5633] usb 8-1: USB disconnect, device number 12 [ 791.857983][ T5633] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 791.918677][ T5633] cp210x 8-1:0.0: device disconnected [ 792.972908][T14551] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2965'. [ 793.028073][T14554] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2965'. [ 794.743934][T14577] netlink: 'syz.7.2973': attribute type 29 has an invalid length. [ 794.805418][T14580] netlink: 'syz.7.2973': attribute type 29 has an invalid length. [ 799.387887][T14626] netlink: 'syz.1.2990': attribute type 29 has an invalid length. [ 799.448149][T14627] netlink: 'syz.1.2990': attribute type 29 has an invalid length. [ 800.498275][T14638] syzkaller0: entered promiscuous mode [ 800.512214][T14638] syzkaller0: entered allmulticast mode [ 800.589159][T14638] tipc: Started in network mode [ 800.610440][T14638] tipc: Node identity da0633bceb49, cluster identity 4711 [ 800.641842][T14638] tipc: Enabled bearer , priority 0 [ 800.669511][T14643] tipc: Resetting bearer [ 800.713284][T14635] tipc: Resetting bearer [ 800.782758][T14635] tipc: Disabling bearer [ 805.162349][T14711] FAT-fs (nbd2): unable to read boot sector [ 805.472738][ T5628] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 806.241300][T14711] bridge_slave_1: left allmulticast mode [ 806.318226][T14711] bridge_slave_1: left promiscuous mode [ 806.445824][T14711] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.520934][T14711] bridge_slave_0: left allmulticast mode [ 806.536180][T14711] bridge_slave_0: left promiscuous mode [ 806.546615][T14711] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.018194][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.086416][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.225155][T14739] sctp_transport_update_pmtu: 48 callbacks suppressed [ 808.225178][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.243748][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.255069][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.268027][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.284791][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.296023][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.307250][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.318513][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.331117][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.342410][T14739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 808.889782][ T5628] usb 3-1: unable to get BOS descriptor or descriptor too short [ 808.914530][ T5628] usb 3-1: no configurations [ 808.929126][ T5628] usb 3-1: can't read configurations, error -22 [ 809.849394][T14757] netlink: 'syz.1.3026': attribute type 29 has an invalid length. [ 810.079869][T14759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3027'. [ 810.116812][T14760] netlink: 'syz.1.3026': attribute type 29 has an invalid length. [ 812.065833][T14764] syzkaller1: entered promiscuous mode [ 812.072086][T14764] syzkaller1: entered allmulticast mode [ 813.850801][ T5633] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 814.102324][ T5633] usb 7-1: device descriptor read/64, error -71 [ 814.441013][ T5633] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 814.600852][ T5633] usb 7-1: device descriptor read/64, error -71 [ 814.781305][ T5633] usb usb7-port1: attempt power cycle [ 815.161518][ T5633] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 815.271299][ T5633] usb 7-1: device descriptor read/8, error -71 [ 815.663079][ T5633] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 815.713367][ T5633] usb 7-1: device descriptor read/8, error -71 [ 815.815921][T14802] netlink: 'syz.1.3044': attribute type 29 has an invalid length. [ 815.835299][ T5633] usb usb7-port1: unable to enumerate USB device [ 815.858672][T14802] netlink: 'syz.1.3044': attribute type 29 has an invalid length. [ 816.033186][ T5783] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 816.252520][ T5783] usb 3-1: Using ep0 maxpacket: 16 [ 816.303432][ T5783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.365623][ T5783] usb 3-1: config 0 has no interfaces? [ 816.481778][ T5783] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 816.569584][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.670527][ T5783] usb 3-1: Product: syz [ 816.733265][ T5783] usb 3-1: Manufacturer: syz [ 816.792061][ T5783] usb 3-1: SerialNumber: syz [ 816.969893][T14811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3048'. [ 816.976444][ T5783] usb 3-1: config 0 descriptor?? [ 817.055741][T14811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3048'. [ 817.226100][T14815] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3049'. [ 817.782589][T14818] syzkaller1: entered promiscuous mode [ 817.798898][T14818] syzkaller1: entered allmulticast mode [ 818.854655][ T5769] usb 3-1: USB disconnect, device number 42 [ 819.864088][T14850] netlink: 'syz.2.3060': attribute type 29 has an invalid length. [ 819.923653][T14850] netlink: 'syz.2.3060': attribute type 29 has an invalid length. [ 820.106486][T14857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3064'. [ 820.482986][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3065'. [ 820.538108][T14863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3064'. [ 820.596766][ T5769] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 820.811397][ T5769] usb 8-1: device descriptor read/64, error -71 [ 821.061470][ T5769] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 821.202262][ T5769] usb 8-1: device descriptor read/64, error -71 [ 821.234200][T14879] syzkaller1: entered promiscuous mode [ 821.239789][T14879] syzkaller1: entered allmulticast mode [ 821.314466][ T5769] usb usb8-port1: attempt power cycle [ 821.694913][ T5769] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 821.742637][ T5633] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 821.752593][ T5769] usb 8-1: device descriptor read/8, error -71 [ 821.756954][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3075'. [ 822.011459][ T5769] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 822.042232][ T5769] usb 8-1: device descriptor read/8, error -71 [ 822.160765][ T5633] usb 2-1: Using ep0 maxpacket: 16 [ 822.168457][ T5633] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.178373][ T5769] usb usb8-port1: unable to enumerate USB device [ 822.214561][ T5633] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 822.243751][ T5633] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 822.267334][ T5633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.285814][ T5633] usb 2-1: Product: syz [ 822.294541][ T5633] usb 2-1: Manufacturer: syz [ 822.306148][ T5633] usb 2-1: SerialNumber: syz [ 822.786985][ T5633] usb 2-1: config 0 descriptor?? [ 822.807075][T14900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3080'. [ 822.889060][T14903] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3081'. [ 822.926116][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3081'. [ 824.559220][T14926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3088'. [ 824.953054][ T5783] usb 2-1: USB disconnect, device number 35 [ 825.405850][ T31] audit: type=1326 audit(1785635274.599:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 825.688616][T14940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 825.939264][ T31] audit: type=1326 audit(1785635274.599:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 826.457796][ T31] audit: type=1326 audit(1785635274.609:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 827.128583][ T31] audit: type=1326 audit(1785635274.609:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 827.877643][ T31] audit: type=1326 audit(1785635274.609:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 828.182627][ T31] audit: type=1326 audit(1785635274.609:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 828.305642][ T31] audit: type=1326 audit(1785635274.609:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 828.311822][ T5769] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 829.517028][ T31] audit: type=1326 audit(1785635274.619:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 829.707586][ T31] audit: type=1326 audit(1785635274.619:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 829.801285][ T31] audit: type=1326 audit(1785635274.619:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.3092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518839e019 code=0x7ffc0000 [ 829.834861][ T5769] usb 4-1: device descriptor read/64, error -71 [ 830.121480][ T5769] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 830.271350][ T5769] usb 4-1: device descriptor read/64, error -71 [ 830.392328][ T5769] usb usb4-port1: attempt power cycle [ 830.471508][ T5790] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 830.643291][ T5790] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 830.681404][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.712953][ T5790] usb 3-1: config 0 descriptor?? [ 830.742007][T14967] syzkaller1: entered promiscuous mode [ 830.747845][ T5790] cp210x 3-1:0.0: cp210x converter detected [ 830.754839][T14967] syzkaller1: entered allmulticast mode [ 830.761574][ T5769] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 830.796353][ T5769] usb 4-1: device descriptor read/8, error -71 [ 830.936722][ T5790] usb 3-1: cp210x converter now attached to ttyUSB0 [ 831.012136][ T5628] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 831.051457][ T5769] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 831.155185][ T5769] usb 4-1: device descriptor read/8, error -71 [ 831.170951][ T5628] usb 2-1: Using ep0 maxpacket: 16 [ 831.183292][ T5628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.217950][ T5628] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.341743][ T5769] usb usb4-port1: unable to enumerate USB device [ 831.407154][ T5628] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 831.488001][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.570642][ T5628] usb 2-1: Product: syz [ 831.588543][ T5628] usb 2-1: Manufacturer: syz [ 831.638647][ T5628] usb 2-1: SerialNumber: syz [ 831.667382][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3109'. [ 831.866456][ T5628] usb 2-1: config 0 descriptor?? [ 833.866962][ T5769] usb 3-1: USB disconnect, device number 43 [ 833.944898][ T5889] usb 2-1: USB disconnect, device number 36 [ 834.029043][ T5769] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 834.334342][ T5769] cp210x 3-1:0.0: device disconnected [ 834.521913][T15008] netlink: 'syz.0.3113': attribute type 3 has an invalid length. [ 835.731429][ T5769] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 835.858800][T15032] syzkaller1: entered promiscuous mode [ 835.882396][T15032] syzkaller1: entered allmulticast mode [ 835.891504][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 835.909374][ T5769] usb 2-1: no configurations [ 835.927231][ T5769] usb 2-1: can't read configurations, error -22 [ 836.095270][ T5769] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 836.295064][T15039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3125'. [ 836.463454][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 836.666148][ T5769] usb 2-1: no configurations [ 836.673311][ T5769] usb 2-1: can't read configurations, error -22 [ 836.689345][ T5769] usb usb2-port1: attempt power cycle [ 837.031920][ T5769] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 837.064978][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 837.128301][ T5769] usb 2-1: no configurations [ 837.144661][ T5769] usb 2-1: can't read configurations, error -22 [ 837.339878][ T5769] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 837.510179][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 837.597465][ T5769] usb 2-1: no configurations [ 837.683630][ T5769] usb 2-1: can't read configurations, error -22 [ 837.792091][ T5769] usb usb2-port1: unable to enumerate USB device [ 838.616273][T15067] netlink: 'syz.3.3135': attribute type 3 has an invalid length. [ 839.831856][ T5769] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 841.316691][ T5769] usb 8-1: Using ep0 maxpacket: 8 [ 841.401490][ T5769] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.462442][ T5769] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 841.515871][ T5769] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.574343][ T5769] usb 8-1: config 0 descriptor?? [ 841.620156][ T5769] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 842.061339][ T5769] gspca_vc032x: reg_r err -71 [ 842.083421][ T5769] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 842.171466][ T5769] usb 8-1: USB disconnect, device number 17 [ 844.951013][T15129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3159'. [ 845.364649][ T5641] Bluetooth: hci4: unexpected event for opcode 0x732f [ 845.507551][T15129] bond1: entered promiscuous mode [ 845.523720][T15129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.531386][T15128] dummy0: entered allmulticast mode [ 845.610561][T15128] dummy0: left allmulticast mode [ 846.404229][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'. [ 847.209384][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3148'. [ 856.051894][ T5628] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 856.261766][ T5628] usb 8-1: Using ep0 maxpacket: 16 [ 856.499175][ T5628] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 856.719749][ T5628] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.128292][ T5628] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 858.202381][ T5628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.359966][ T5628] usb 8-1: can't set config #1, error -71 [ 858.427981][ T5628] usb 8-1: USB disconnect, device number 18 [ 858.833519][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3202'. [ 858.998401][T15270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 865.311110][ T5889] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 865.504109][ T5889] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 865.566603][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.638519][ T5889] usb 7-1: config 0 descriptor?? [ 865.697634][ T5889] cp210x 7-1:0.0: cp210x converter detected [ 866.847262][T15349] netlink: 'syz.7.3226': attribute type 29 has an invalid length. [ 866.868669][ T5889] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 866.914479][T15351] netlink: 'syz.7.3226': attribute type 29 has an invalid length. [ 867.002692][ T5889] usb 7-1: cp210x converter now attached to ttyUSB0 [ 867.135710][ T5628] usb 7-1: USB disconnect, device number 22 [ 867.706564][ T5628] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 867.806064][ T5628] cp210x 7-1:0.0: device disconnected [ 869.102969][ T5628] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 869.334111][ T5628] usb 8-1: Using ep0 maxpacket: 8 [ 869.355398][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.480783][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.743378][ T5628] usb 8-1: unable to get BOS descriptor or descriptor too short [ 869.858500][ T5628] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 869.930343][ T5628] usb 8-1: can't read configurations, error -71 [ 870.321317][T15387] FAT-fs (nbd6): unable to read boot sector [ 870.542471][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3239'. [ 873.820225][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3249'. [ 875.310949][ T5783] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 876.790782][ T5783] usb 7-1: Using ep0 maxpacket: 8 [ 876.837689][ T5783] usb 7-1: unable to get BOS descriptor or descriptor too short [ 876.855760][ T5783] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 876.882287][ T5783] usb 7-1: can't read configurations, error -71 [ 878.862135][T15469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3264'. [ 880.282268][T15480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3271'. [ 880.327172][T15480] netlink: 'syz.0.3271': attribute type 7 has an invalid length. [ 880.366628][T15480] netlink: 'syz.0.3271': attribute type 8 has an invalid length. [ 880.397483][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'. [ 880.716405][T15486] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 880.728659][T15486] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 880.739812][T15486] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 880.753254][T15486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 880.762784][T15486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.906384][T15486] Bluetooth: hci0: command tx timeout [ 883.801796][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3279'. [ 883.853014][T15515] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3278'. [ 883.891736][T15515] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3278'. [ 884.801758][ T5790] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 884.825435][ T37] bridge_slave_1: left allmulticast mode [ 884.831784][ T37] bridge_slave_1: left promiscuous mode [ 884.852332][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.914363][ T37] bridge_slave_0: left allmulticast mode [ 884.922904][ T37] bridge_slave_0: left promiscuous mode [ 884.941617][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.949383][ T5790] usb 8-1: device descriptor read/64, error -71 [ 884.957392][T15486] Bluetooth: hci0: command tx timeout [ 885.082091][T15530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3285'. [ 885.113175][T15530] netlink: 'syz.0.3285': attribute type 7 has an invalid length. [ 885.132357][T15530] netlink: 'syz.0.3285': attribute type 8 has an invalid length. [ 885.153150][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'. [ 885.191972][ T5790] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 885.341504][ T5790] usb 8-1: device descriptor read/64, error -71 [ 885.452712][ T5790] usb usb8-port1: attempt power cycle [ 885.791423][ T5790] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 885.832354][ T5790] usb 8-1: device descriptor read/8, error -71 [ 886.091396][ T5790] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 886.132019][ T5790] usb 8-1: device descriptor read/8, error -71 [ 886.261580][ T5790] usb usb8-port1: unable to enumerate USB device [ 887.031937][T15486] Bluetooth: hci0: command tx timeout [ 889.358402][T15486] Bluetooth: hci0: command tx timeout [ 889.574791][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.603597][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.629815][ T37] bond0 (unregistering): Released all slaves [ 889.696877][T15549] syzkaller1: entered promiscuous mode [ 889.731809][T15549] syzkaller1: entered allmulticast mode [ 890.458871][ T37] tipc: Left network mode [ 890.500321][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3292'. [ 890.951160][T15581] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3296'. [ 890.993696][T15582] netlink: 'syz.6.3294': attribute type 29 has an invalid length. [ 891.447117][T15583] netlink: 'syz.6.3294': attribute type 29 has an invalid length. [ 893.776206][T15609] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3303'. [ 895.015699][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 895.556241][ T37] hsr_slave_0: left promiscuous mode [ 895.594855][ T37] hsr_slave_1: left promiscuous mode [ 895.624361][T15631] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3310'. [ 895.628556][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.708731][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.225843][T15664] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3315'. [ 899.592067][ T37] team0 (unregistering): Port device team_slave_1 removed [ 899.776285][ T37] team0 (unregistering): Port device team_slave_0 removed [ 900.556003][T15675] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3317'. [ 900.638793][T15623] syzkaller1: entered promiscuous mode [ 900.644648][T15623] syzkaller1: entered allmulticast mode [ 900.722510][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 900.773883][T15676] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3317'. [ 901.409228][T15701] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3324'. [ 901.573919][T15485] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.633016][T15485] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.669843][T15485] bridge_slave_0: entered allmulticast mode [ 901.698049][T15485] bridge_slave_0: entered promiscuous mode [ 901.731525][T15485] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.754532][T15485] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.775693][T15485] bridge_slave_1: entered allmulticast mode [ 901.788086][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3327'. [ 901.794055][T15485] bridge_slave_1: entered promiscuous mode [ 901.924248][T15485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.950262][T15485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.004526][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 902.039577][T15485] team0: Port device team_slave_0 added [ 902.054962][T15485] team0: Port device team_slave_1 added [ 902.173686][T15485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.191008][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.244474][T15485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.278587][T15485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.295062][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.349384][T15485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.501505][T15485] hsr_slave_0: entered promiscuous mode [ 902.518438][T15485] hsr_slave_1: entered promiscuous mode [ 902.528376][T15485] debugfs: 'hsr0' already exists in 'hsr' [ 902.548062][T15485] Cannot create hsr debugfs directory [ 902.858403][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 904.554709][T15749] syzkaller1: entered promiscuous mode [ 904.567603][T15749] syzkaller1: entered allmulticast mode [ 906.311848][T15485] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 906.346696][T15485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 906.359224][T15485] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 906.388495][T15485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 906.407559][T15485] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 906.431487][T15485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 906.457309][T15485] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 906.507040][T15485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.975582][T15485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.113851][T15485] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.149530][T15788] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3339'. [ 907.155891][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.165850][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.227958][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.235142][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.515776][T15485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 907.526294][T15485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 907.718809][T15800] 9p: Bad value for 'rfdno' [ 908.178140][T15801] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3342'. [ 908.286315][T15805] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3342'. [ 909.541912][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3348'. [ 910.288989][T15840] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3353'. [ 910.517258][T15850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3357'. [ 911.158352][T15485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.186457][T15868] syzkaller1: entered promiscuous mode [ 911.209195][T15868] syzkaller1: entered allmulticast mode [ 911.641503][T15884] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3369'. [ 911.773612][T15891] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3371'. [ 911.812176][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3371'. [ 915.356210][T15485] veth0_vlan: entered promiscuous mode [ 915.473248][T15485] veth1_vlan: entered promiscuous mode [ 915.777513][T15485] veth0_macvtap: entered promiscuous mode [ 915.867111][T15939] syzkaller1: entered promiscuous mode [ 915.884390][T15939] syzkaller1: entered allmulticast mode [ 917.676785][T15485] veth1_macvtap: entered promiscuous mode [ 917.718553][T15944] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3385'. [ 917.868179][T15485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.994371][T15485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.467739][ T96] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.575480][ T96] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.787723][T15190] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.947740][ T96] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.334339][ T7456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.388987][ T7456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.795293][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.833011][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.453001][ T7456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.886647][ T7456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.172549][ T7456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.616689][ T7456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.764680][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 923.787025][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 923.797052][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 923.810171][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 923.824670][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 924.403224][T16041] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.3409'. [ 924.487712][T16046] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.3409'. [ 925.568056][ T7456] bridge_slave_1: left allmulticast mode [ 925.597824][ T7456] bridge_slave_1: left promiscuous mode [ 925.624790][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.700135][ T7456] bridge_slave_0: left allmulticast mode [ 925.748450][ T7456] bridge_slave_0: left promiscuous mode [ 925.775086][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.911451][ T5641] Bluetooth: hci1: command tx timeout [ 926.042731][ T5783] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 926.453938][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.498897][ T5783] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 926.534603][ T5783] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 926.597160][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.636189][ T5783] usb 1-1: Product: syz [ 926.643444][ T5783] usb 1-1: Manufacturer: syz [ 926.648412][ T5783] usb 1-1: SerialNumber: syz [ 926.681422][ T5783] usb-storage 1-1:1.0: USB Mass Storage device detected [ 926.728557][ T5783] scsi host1: usb-storage 1-1:1.0 [ 926.875311][ T7456] tipc: Disabling bearer [ 926.960781][ T7456] tipc: Left network mode [ 927.169417][T16095] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3424'. [ 927.320266][T16098] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3424'. [ 927.991020][ T5641] Bluetooth: hci1: command tx timeout [ 927.998529][ T5783] usb 1-1: USB disconnect, device number 31 [ 928.983950][ T7456] hsr_slave_0: left promiscuous mode [ 929.024899][ T7456] hsr_slave_1: left promiscuous mode [ 929.055475][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.081218][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.102763][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.115882][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.166490][ T7456] veth1_macvtap: left promiscuous mode [ 929.186165][ T7456] veth0_macvtap: left promiscuous mode [ 929.204987][ T7456] veth1_vlan: left promiscuous mode [ 929.216615][ T7456] veth0_vlan: left promiscuous mode [ 929.776376][T16141] IPVS: set_ctl: invalid protocol: 137 172.30.0.7:20000 [ 930.070884][ T5641] Bluetooth: hci1: command tx timeout [ 930.793032][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.804729][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.160858][ T5641] Bluetooth: hci1: command tx timeout [ 932.213574][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 932.607320][ T7456] team0 (unregistering): Port device team_slave_0 removed [ 933.395952][T16159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3443'. [ 933.942096][T16163] syzkaller1: entered promiscuous mode [ 933.975062][T16163] syzkaller1: entered allmulticast mode [ 934.319863][ T7456] IPVS: stop unused estimator thread 0... [ 934.531989][T16198] IPVS: set_ctl: invalid protocol: 137 172.30.0.1:20000 [ 936.220107][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3457'. [ 936.393650][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.429552][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.449536][T16026] bridge_slave_0: entered allmulticast mode [ 936.470555][T16026] bridge_slave_0: entered promiscuous mode [ 936.503051][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.553397][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.582170][T16026] bridge_slave_1: entered allmulticast mode [ 936.608159][T16026] bridge_slave_1: entered promiscuous mode [ 936.717835][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.759473][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.858434][T16026] team0: Port device team_slave_0 added [ 936.882982][T16026] team0: Port device team_slave_1 added [ 937.129583][T16026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.137499][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.171748][T16026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.188267][T16026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.219208][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.327297][T16026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.451623][T16026] hsr_slave_0: entered promiscuous mode [ 937.468021][T16026] hsr_slave_1: entered promiscuous mode [ 937.506927][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3470'. [ 937.514069][T16026] debugfs: 'hsr0' already exists in 'hsr' [ 937.552268][T16026] Cannot create hsr debugfs directory [ 938.997592][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3484'. [ 939.551497][ T5769] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 939.733323][ T5769] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.002784][ T5769] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 940.027661][ T5769] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 0 [ 940.058899][ T5769] usb 7-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 940.175165][ T5769] usb 7-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 940.199095][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.918194][ T5769] usb 7-1: Product: syz [ 941.923423][ T5769] usb 7-1: Manufacturer: syz [ 941.928051][ T5769] usb 7-1: SerialNumber: syz [ 942.185387][ T5769] usb-storage 7-1:1.0: USB Mass Storage device detected [ 942.208194][T16026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 942.261957][ T5769] scsi host1: usb-storage 7-1:1.0 [ 942.278078][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.296541][T16026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 942.412144][T16354] binder: 16353:16354 ioctl c0306201 0 returned -14 [ 943.326219][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.439480][ T24] usb 7-1: USB disconnect, device number 25 [ 943.571121][T16026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 944.219117][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 944.272468][T16026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 944.367179][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.641936][T16026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.867990][T16026] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.977965][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.985237][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.056339][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.063548][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.129661][T16417] binder: 16416:16417 ioctl c0306201 0 returned -14 [ 947.199180][T16026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 947.230135][T16026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 947.413592][ T5790] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 948.662494][ T5790] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.694168][ T5790] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 948.718018][ T5790] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 0 [ 948.762309][ T5790] usb 8-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 948.863323][ T5790] usb 8-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 948.890140][ T5790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.127982][ T5790] usb 8-1: Product: syz [ 949.133586][ T5790] usb 8-1: Manufacturer: syz [ 949.138183][ T5790] usb 8-1: SerialNumber: syz [ 949.164740][ T5790] usb-storage 8-1:1.0: USB Mass Storage device detected [ 949.584556][ T5790] scsi host1: usb-storage 8-1:1.0 [ 950.875688][ T5790] usb 8-1: USB disconnect, device number 25 [ 950.947379][T16466] netlink: 'syz.8.3528': attribute type 29 has an invalid length. [ 950.958694][T16466] netlink: 'syz.8.3528': attribute type 29 has an invalid length. [ 951.296394][T16480] binder: 16479:16480 ioctl c0306201 0 returned -14 [ 953.377567][T16026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.613398][T16026] veth0_vlan: entered promiscuous mode [ 953.677818][T16026] veth1_vlan: entered promiscuous mode [ 953.803663][T16026] veth0_macvtap: entered promiscuous mode [ 953.836984][T16026] veth1_macvtap: entered promiscuous mode [ 953.913378][T16026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.223690][T16026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.972507][ T5963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.011826][ T5783] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 956.152530][ T7456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.271335][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.854269][ T5783] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.890636][ T5923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.939239][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.946927][ T5783] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 956.961233][ T5783] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 0 [ 956.973342][ T5783] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 956.975339][ T5923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.197111][ T5783] usb 3-1: string descriptor 0 read error: -71 [ 957.229771][ T5783] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 957.294061][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.307741][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.333364][ T5783] usb 3-1: can't set config #1, error -71 [ 957.357498][T16530] binder: 16529:16530 ioctl c0306201 0 returned -14 [ 957.369544][ T5783] usb 3-1: USB disconnect, device number 44 [ 957.591594][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.582061][ T5889] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 958.856989][ T5889] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 958.910201][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.127259][ T5889] usb 3-1: config 0 descriptor?? [ 959.362047][ T5889] cp210x 3-1:0.0: cp210x converter detected [ 959.689238][ T5889] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 959.732037][ T5889] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 959.769159][ T5889] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 959.797764][ T5889] usb 3-1: cp210x converter now attached to ttyUSB0 [ 961.574965][ T5889] usb 3-1: USB disconnect, device number 45 [ 961.671548][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 961.728525][ T5889] cp210x 3-1:0.0: device disconnected [ 962.968733][T16575] netlink: 'syz.8.3543': attribute type 29 has an invalid length. [ 963.007107][T16575] netlink: 'syz.8.3543': attribute type 29 has an invalid length. [ 963.288101][T15486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 963.305330][T15486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 963.315435][T15486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 963.334772][T15486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 963.345720][T15486] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 963.577153][T16587] binder: 16585:16587 ioctl c0306201 0 returned -14 [ 965.430929][T15486] Bluetooth: hci3: command tx timeout [ 966.928534][T16621] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3571'. [ 967.051971][T16622] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3571'. [ 967.356788][T16629] netlink: 'syz.2.3574': attribute type 29 has an invalid length. [ 967.525374][T15486] Bluetooth: hci3: command tx timeout [ 967.681815][ T133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.829455][T16643] binder: 16640:16643 ioctl c0306201 0 returned -14 [ 969.601068][T15486] Bluetooth: hci3: command tx timeout [ 970.053286][ T133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.087896][T16685] fuse: fd is not a fuse device [ 971.671327][T15486] Bluetooth: hci3: command tx timeout [ 973.824508][ T133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.016448][T16713] netlink: 'syz.3.3592': attribute type 29 has an invalid length. [ 975.072553][T16709] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 975.083889][T16705] bond1: option xmit_hash_policy: invalid value (6) [ 975.262074][T16705] bond1 (unregistering): Released all slaves [ 975.360624][T16717] binder: 16716:16717 ioctl c0306201 0 returned -14 [ 977.835457][ T133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.170064][T16763] binder: 16762:16763 ioctl c0306201 0 returned -14 [ 981.846683][T16787] netlink: 'syz.8.3610': attribute type 29 has an invalid length. [ 981.878591][T16778] tipc: Started in network mode [ 981.897629][T16778] tipc: Node identity 4e9902eb71d5, cluster identity 4711 [ 981.926074][T16778] tipc: Enabled bearer , priority 0 [ 981.967971][ T133] bridge_slave_1: left allmulticast mode [ 981.996917][ T133] bridge_slave_1: left promiscuous mode [ 982.019444][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.076712][ T133] bridge_slave_0: left allmulticast mode [ 982.094538][ T133] bridge_slave_0: left promiscuous mode [ 982.106939][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.892754][ T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.955462][ T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.995137][ T133] bond0 (unregistering): Released all slaves [ 984.010274][ T133] bond1 (unregistering): Released all slaves [ 984.040460][T16773] tipc: Disabling bearer [ 984.297427][T15784] tipc: Node number set to 1061946091 [ 985.616835][ T133] tipc: Left network mode [ 985.642273][T16829] binder: 16828:16829 ioctl c0306201 0 returned -14 [ 986.894119][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 987.171456][ T5630] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 987.353073][ T5630] usb 8-1: Using ep0 maxpacket: 8 [ 988.335928][ T5630] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.378019][ T5630] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.483504][ T5630] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 988.533053][T16850] syzkaller0: entered promiscuous mode [ 988.538616][ T5630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.563440][T16850] syzkaller0: entered allmulticast mode [ 988.606589][T16851] tipc: Enabled bearer , priority 0 [ 988.617088][ T5630] usb 8-1: config 0 descriptor?? [ 988.664126][T16837] tipc: Resetting bearer [ 988.759760][T16837] tipc: Disabling bearer [ 988.832712][T16578] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.868969][T16578] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.903175][T16578] bridge_slave_0: entered allmulticast mode [ 988.933662][T16578] bridge_slave_0: entered promiscuous mode [ 989.212165][T16578] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.036802][T16578] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.046458][T16578] bridge_slave_1: entered allmulticast mode [ 990.057045][T16578] bridge_slave_1: entered promiscuous mode [ 990.291110][ T24] usb 8-1: USB disconnect, device number 26 [ 991.146290][T16876] netlink: 'syz.7.3631': attribute type 29 has an invalid length. [ 992.010623][T16578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.067447][T16880] netlink: 'syz.7.3631': attribute type 29 has an invalid length. [ 992.146835][T16578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.233455][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.246387][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.543341][T16888] binder: 16886:16888 ioctl c0306201 0 returned -14 [ 993.962911][T16578] team0: Port device team_slave_0 added [ 993.977953][T16578] team0: Port device team_slave_1 added [ 994.181332][T16578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.202206][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.305677][T16578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.580772][T15784] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 994.860756][T16908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3638'. [ 994.960766][T15784] usb 3-1: Using ep0 maxpacket: 8 [ 994.968234][T15784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.978617][T15784] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 994.987885][T15784] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 994.997203][T15784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.074611][T15784] usb 3-1: config 0 descriptor?? [ 996.007752][T16578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.019294][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.049671][T16578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.068539][T16929] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 996.078617][T16929] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 996.088292][T16929] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 996.114246][T16908] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 996.146410][T16919] dummy0: entered allmulticast mode [ 996.160514][T16919] dummy0: left allmulticast mode [ 996.235828][T16940] netlink: 'syz.7.3645': attribute type 29 has an invalid length. [ 996.297788][T16940] netlink: 'syz.7.3645': attribute type 29 has an invalid length. [ 996.512823][T16950] binder: 16948:16950 ioctl c0306201 0 returned -14 [ 996.910954][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 997.508648][T16578] hsr_slave_0: entered promiscuous mode [ 997.558974][T16578] hsr_slave_1: entered promiscuous mode [ 997.565503][T16578] debugfs: 'hsr0' already exists in 'hsr' [ 997.575505][T16578] Cannot create hsr debugfs directory [ 997.695316][ T5889] usb 3-1: USB disconnect, device number 46 [ 999.663599][T16992] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3660'. [ 1000.462362][ T133] hsr_slave_0: left promiscuous mode [ 1000.561435][ T133] hsr_slave_1: left promiscuous mode [ 1000.697118][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.759214][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.808851][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.856085][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.896786][T17001] netlink: 'syz.7.3664': attribute type 29 has an invalid length. [ 1000.934006][ T133] veth0_macvtap: left promiscuous mode [ 1000.958439][ T133] veth1_vlan: left promiscuous mode [ 1000.967999][ T133] veth0_vlan: left promiscuous mode [ 1001.120957][T15784] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1001.306641][T15784] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1001.319063][T15784] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1001.342285][T15784] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1001.352966][T15784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.376485][T16997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1001.409426][T15784] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1001.737592][ T133] team0 (unregistering): Port device team_slave_1 removed [ 1001.770062][ T133] team0 (unregistering): Port device team_slave_0 removed [ 1001.858892][T14975] usb 3-1: USB disconnect, device number 47 [ 1002.059305][T16992] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1002.061434][T16987] dummy0: entered allmulticast mode [ 1002.108799][T16987] dummy0: left allmulticast mode [ 1002.335714][T17016] binder: 17015:17016 ioctl c0306201 0 returned -14 [ 1003.384113][T15784] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1003.564135][T17029] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1003.585973][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3669'. [ 1003.702363][T15784] usb 8-1: Using ep0 maxpacket: 8 [ 1003.718002][T15784] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.764266][T15784] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1003.881202][T15784] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1004.243870][T15784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.432741][T15784] usb 8-1: config 0 descriptor?? [ 1004.561509][T15486] Bluetooth: hci0: command 0x0406 tx timeout [ 1006.319283][T14975] usb 8-1: USB disconnect, device number 27 [ 1007.866086][T17064] tipc: Enabling of bearer rejected, failed to enable media [ 1007.887283][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1008.008550][T17075] netlink: 'syz.2.3679': attribute type 29 has an invalid length. [ 1008.429742][T17084] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3680'. [ 1009.430283][T17084] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1009.446858][T17086] dummy0: entered allmulticast mode [ 1009.532116][T17091] binder: 17090:17091 ioctl c0306201 0 returned -14 [ 1009.591761][T14975] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1009.713633][T17086] dummy0: left allmulticast mode [ 1009.921737][T14975] usb 7-1: Using ep0 maxpacket: 16 [ 1010.542905][T14975] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1010.557729][T14975] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1010.568535][T14975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.597878][T14975] usb 7-1: Product: syz [ 1010.629091][T14975] usb 7-1: Manufacturer: syz [ 1010.666006][T14975] usb 7-1: SerialNumber: syz [ 1011.781929][T17105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1011.965207][ T5641] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 1012.216224][T14975] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1012.394999][T14975] r8152-cfgselector 7-1: config 0 descriptor?? [ 1012.405965][T14975] r8152-cfgselector 7-1: can't set config #0, error -71 [ 1012.414750][T17105] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1012.417014][T14975] r8152-cfgselector 7-1: USB disconnect, device number 26 [ 1012.455074][T17109] dummy0: entered allmulticast mode [ 1013.219045][T17109] dummy0: left allmulticast mode [ 1015.016703][T17143] binder: 17142:17143 ioctl c0306201 0 returned -14 [ 1016.075195][T17148] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3698'. [ 1016.164759][T14975] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1016.387830][T14975] usb 8-1: Using ep0 maxpacket: 16 [ 1016.403093][T17148] bond1: entered promiscuous mode [ 1016.409983][T17148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1016.419406][T17155] dummy0: entered allmulticast mode [ 1016.425897][T17155] dummy0: left allmulticast mode [ 1016.598498][T14975] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 1016.784500][T14975] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1016.857873][T14975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.865322][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3699'. [ 1017.081919][T14975] usb 8-1: Product: syz [ 1017.120877][T14975] usb 8-1: Manufacturer: syz [ 1017.125601][T14975] usb 8-1: SerialNumber: syz [ 1017.915886][T14975] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1017.952765][T14975] r8152-cfgselector 8-1: config 0 descriptor?? [ 1018.420761][T17177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1018.428107][T17177] IPv6: NLM_F_CREATE should be set when creating new route [ 1018.681463][T17176] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3705'. [ 1018.721313][T17176] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3705'. [ 1018.733577][T14975] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1018.742671][T14975] r8152-cfgselector 8-1: No union descriptors [ 1018.814166][T14975] r8152-cfgselector 8-1: USB disconnect, device number 28 [ 1019.157501][T17183] syzkaller0: entered promiscuous mode [ 1019.193910][T17183] syzkaller0: entered allmulticast mode [ 1020.427297][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3713'. [ 1020.617897][T16578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1021.836375][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.914838][T16578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1021.945919][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.053965][T16578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1022.155848][T17227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1022.438928][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.827537][T16578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1022.854401][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1022.863673][T17227] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1022.864143][T17228] dummy0: entered allmulticast mode [ 1022.899528][T17228] dummy0: left allmulticast mode [ 1023.523440][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3720'. [ 1023.564053][T17247] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3720'. [ 1024.139745][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3725'. [ 1024.304759][T15486] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1024.317532][T15486] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1024.326206][T15486] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1024.338242][T15486] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1024.347037][T15486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1024.633155][T17275] syzkaller0: entered promiscuous mode [ 1024.772512][T17275] syzkaller0: entered allmulticast mode [ 1026.403360][ T5641] Bluetooth: hci4: command tx timeout [ 1027.712053][T17314] netlink: 'syz.6.3735': attribute type 2 has an invalid length. [ 1028.073929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1028.316138][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1028.485808][ T5641] Bluetooth: hci4: command tx timeout [ 1030.572054][ T5641] Bluetooth: hci4: command tx timeout [ 1031.248007][T17369] syzkaller0: entered promiscuous mode [ 1031.260854][T17369] syzkaller0: entered allmulticast mode [ 1031.530803][T15784] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1031.656857][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1031.721678][T15784] usb 3-1: Using ep0 maxpacket: 16 [ 1031.738476][T15784] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1031.747259][ T5889] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1031.787870][T15784] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1031.810753][T15784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.830722][T15784] usb 3-1: Product: syz [ 1031.840936][T15784] usb 3-1: Manufacturer: syz [ 1031.850712][T15784] usb 3-1: SerialNumber: syz [ 1031.888882][T15784] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1031.897325][T15784] r8152-cfgselector 3-1: config 0 descriptor?? [ 1031.920903][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 1031.934632][ T5889] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.960951][ T5889] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1031.982483][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.011082][ T5889] usb 9-1: config 0 descriptor?? [ 1032.041911][ T5889] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1032.159356][T15784] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1032.246608][T15784] r8152-cfgselector 3-1: No union descriptors [ 1032.258837][ T5889] gspca_vc032x: reg_r err -32 [ 1032.309006][ T5889] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 1032.334635][ T1052] bridge_slave_1: left allmulticast mode [ 1032.340776][T15784] r8152-cfgselector 3-1: USB disconnect, device number 48 [ 1032.363361][ T1052] bridge_slave_1: left promiscuous mode [ 1032.389840][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.415588][ T1052] bridge_slave_0: left allmulticast mode [ 1032.438510][ T1052] bridge_slave_0: left promiscuous mode [ 1032.454883][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.631501][ T5641] Bluetooth: hci4: command tx timeout [ 1032.668661][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.689359][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.705344][ T1052] bond0 (unregistering): Released all slaves [ 1032.985644][ T1052] hsr_slave_0: left promiscuous mode [ 1032.993734][ T1052] hsr_slave_1: left promiscuous mode [ 1032.999792][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.008452][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.071491][T14975] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1033.242191][T14975] usb 4-1: Using ep0 maxpacket: 16 [ 1035.037213][T14975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.071342][T14975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.086483][T14975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1035.375607][ T24] usb 9-1: USB disconnect, device number 2 [ 1035.383730][T14975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1035.467192][T14975] usb 4-1: SerialNumber: syz [ 1035.647742][T14975] usb 4-1: can't set config #1, error -71 [ 1035.724575][T14975] usb 4-1: USB disconnect, device number 36 [ 1035.905118][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 1036.045766][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 1039.121911][T17455] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1039.122287][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.215688][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.240611][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.281864][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.336673][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.589470][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.666713][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.748266][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.938719][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1039.965093][T17455] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1040.617741][T17474] bond0: option xmit_hash_policy: invalid value (6) [ 1040.675205][T17474] bond0 (unregistering): Released all slaves [ 1042.013630][T17266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.055028][T17266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.191816][T17266] bridge_slave_0: entered allmulticast mode [ 1043.226546][T17266] bridge_slave_0: entered promiscuous mode [ 1043.724779][T17266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.778903][T17266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.790775][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1043.822758][T17266] bridge_slave_1: entered allmulticast mode [ 1043.849195][T17266] bridge_slave_1: entered promiscuous mode [ 1043.978868][T17266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.994293][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1044.011438][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.012953][T17266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.058931][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1044.106274][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.140356][ T24] usb 3-1: config 0 descriptor?? [ 1044.183156][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1044.254194][T17266] team0: Port device team_slave_0 added [ 1044.289776][T17266] team0: Port device team_slave_1 added [ 1044.380885][ T24] gspca_vc032x: reg_r err -32 [ 1044.402507][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1044.495037][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1044.524705][T17266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.571775][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.642539][T17266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.665146][T17266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.894392][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.594642][T17266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.788044][ T5889] usb 3-1: USB disconnect, device number 49 [ 1047.165473][T17266] hsr_slave_0: entered promiscuous mode [ 1047.217261][T17266] hsr_slave_1: entered promiscuous mode [ 1047.254026][T17266] debugfs: 'hsr0' already exists in 'hsr' [ 1047.297909][T17266] Cannot create hsr debugfs directory [ 1050.620870][T15784] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1051.426951][T15486] Bluetooth: hci1: command 0x0406 tx timeout [ 1051.451065][T15784] usb 9-1: Using ep0 maxpacket: 8 [ 1052.177885][T15784] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1052.197303][T15784] usb 9-1: config 0 has no interface number 0 [ 1052.229564][T15784] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.376499][T17595] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1052.485507][T15784] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1052.504426][T15784] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.505896][T17596] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1052.566427][T15784] usb 9-1: config 0 descriptor?? [ 1052.628455][T15784] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1052.699132][T17551] syz.2.3790 (17551): drop_caches: 2 [ 1053.222917][T17266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1053.264680][T15784] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1053.275212][T17266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.299819][T17266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1053.331400][T17266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.347987][T17266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1053.398539][T17266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.416041][T17266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.470201][T15784] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1053.648804][T15784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1053.709194][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.715426][T17266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.723899][ T5889] usb 9-1: USB disconnect, device number 3 [ 1053.769212][T15784] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1053.900024][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.903732][T15784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.172964][T15784] usb 4-1: config 0 descriptor?? [ 1054.586011][T17635] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3811'. [ 1054.910461][T15784] ath6kl: Failed to submit usb control message: -71 [ 1055.071334][T15784] ath6kl: unable to send the bmi data to the device: -71 [ 1055.132653][T15784] ath6kl: Unable to send get target info: -71 [ 1055.158735][T15784] ath6kl: Failed to init ath6kl core: -71 [ 1055.184575][T15784] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1055.364687][T15784] usb 4-1: USB disconnect, device number 37 [ 1057.566588][T17661] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1057.706318][T17662] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1058.762796][T17266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.869889][T17266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.949033][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.956254][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.039235][T16697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.046467][T16697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.063087][ T5890] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1059.173575][T17686] tipc: Started in network mode [ 1059.179112][T17686] tipc: Node identity ee55d557ab8e, cluster identity 4711 [ 1059.187879][T17686] tipc: Enabled bearer , priority 0 [ 1059.362684][T17685] tipc: Disabling bearer [ 1059.468114][ T5890] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1059.583084][ T5890] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1059.703896][ T5890] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1059.811856][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.145131][T17676] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1060.173164][ T5890] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.648358][ T5890] usb 7-1: USB disconnect, device number 27 [ 1062.196227][T17735] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1062.253374][T17735] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1065.916807][T17749] tipc: Enabled bearer , priority 0 [ 1066.056198][T17747] tipc: Disabling bearer [ 1066.556052][T17266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.701534][T14975] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1066.712584][T17782] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.3850'. [ 1066.745164][T17266] veth0_vlan: entered promiscuous mode [ 1066.757333][T17785] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.3850'. [ 1066.788412][T17266] veth1_vlan: entered promiscuous mode [ 1066.893060][T14975] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1066.956695][T14975] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1066.971622][T17266] veth0_macvtap: entered promiscuous mode [ 1066.994894][T14975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1067.006631][T17266] veth1_macvtap: entered promiscuous mode [ 1067.018429][T14975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.088531][T17266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.106121][T17775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1067.147096][T14975] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1067.174618][T17266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.403991][T15191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.427877][T14975] usb 3-1: USB disconnect, device number 50 [ 1068.747436][ T7456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.992401][ T96] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.261881][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.996156][T17810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1071.017515][T17828] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1071.043913][T17810] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1071.076660][T17829] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1072.327576][T17810] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1072.364147][T17810] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1072.562910][T17810] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1072.584053][T17810] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1072.668264][T17810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1072.694568][T17810] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1072.784869][T17810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1072.795006][T17810] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1072.925765][T17810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1072.936227][T17810] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1075.516545][T17873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1078.028689][T17888] fuse: Unknown parameter 'grou00000000000000000000' [ 1078.200788][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1078.268962][ T5923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.410871][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1078.434609][ T24] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1078.479752][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1078.517687][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.556569][ T24] usb 3-1: Product: syz [ 1078.575069][ T24] usb 3-1: Manufacturer: syz [ 1078.593869][ T24] usb 3-1: SerialNumber: syz [ 1078.642248][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1078.667425][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 1078.717635][ T5923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.944522][ T5923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.108903][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1079.148855][ T24] r8152-cfgselector 3-1: No union descriptors [ 1079.216381][ T24] r8152-cfgselector 3-1: USB disconnect, device number 51 [ 1079.299277][ T5923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.556250][T17592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1079.575832][T17592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1079.584914][T17592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1079.597284][T17592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1079.606485][T17592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1079.651682][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1079.660620][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1079.668407][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1079.676781][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1079.687979][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1082.668292][T17592] Bluetooth: hci3: command tx timeout [ 1082.971625][ T5923] bridge_slave_1: left allmulticast mode [ 1082.985856][T17955] fuse: Unknown parameter 'grou00000000000000000000' [ 1083.025855][ T5923] bridge_slave_1: left promiscuous mode [ 1083.060709][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.116295][ T5923] bridge_slave_0: left allmulticast mode [ 1083.145093][ T5923] bridge_slave_0: left promiscuous mode [ 1083.169681][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.581896][ T5769] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1083.753737][ T5769] usb 9-1: Using ep0 maxpacket: 16 [ 1083.793056][ T5769] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 1083.997530][ T5769] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1084.097474][ T5769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.188213][ T5769] usb 9-1: Product: syz [ 1084.243215][ T5769] usb 9-1: Manufacturer: syz [ 1084.298633][ T5769] usb 9-1: SerialNumber: syz [ 1084.583136][ T5769] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1084.592219][ T5769] r8152-cfgselector 9-1: config 0 descriptor?? [ 1084.711144][ T5641] Bluetooth: hci3: command tx timeout [ 1084.942105][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.966714][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.677892][ T5769] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1085.683915][T17991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1085.691440][T17991] IPv6: NLM_F_CREATE should be set when creating new route [ 1085.719693][ T5769] r8152-cfgselector 9-1: No union descriptors [ 1085.738825][ T5769] r8152-cfgselector 9-1: USB disconnect, device number 4 [ 1085.753960][ T5923] bond0 (unregistering): Released all slaves [ 1086.936639][T17592] Bluetooth: hci3: command tx timeout [ 1087.715159][T18017] fuse: Unknown parameter 'grou00000000000000000000' [ 1087.725814][ T5923] hsr_slave_0: left promiscuous mode [ 1087.773657][ T5923] hsr_slave_1: left promiscuous mode [ 1087.798946][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.818885][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.842518][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.870322][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.962123][T15784] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1087.996203][ T5923] veth1_macvtap: left promiscuous mode [ 1088.014285][ T5923] veth0_macvtap: left promiscuous mode [ 1088.031554][ T5923] veth1_vlan: left promiscuous mode [ 1088.049514][ T5923] veth0_vlan: left promiscuous mode [ 1088.163562][T15784] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.212868][T15784] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1088.259671][T15784] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1088.293784][T15784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.321165][T15784] usb 7-1: Product: syz [ 1088.331480][T15784] usb 7-1: Manufacturer: syz [ 1088.345490][T15784] usb 7-1: SerialNumber: syz [ 1088.639929][T15784] usb 7-1: USB disconnect, device number 28 [ 1088.978526][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 1089.030175][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 1089.041227][T17592] Bluetooth: hci3: command tx timeout [ 1089.459625][T18054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3922'. [ 1089.956509][T18064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1090.011868][T18064] bond1: entered promiscuous mode [ 1090.017174][T18064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1090.419300][T18076] overlayfs: failed to clone upperpath [ 1093.314433][T18101] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3936'. [ 1094.016968][T18125] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3941'. [ 1094.394716][T18125] bond2: entered promiscuous mode [ 1094.404371][T18125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1095.223541][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3947'. [ 1097.813840][T17906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.872296][T17906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.907137][T18162] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3953'. [ 1097.933686][T17906] bridge_slave_0: entered allmulticast mode [ 1097.992361][T17906] bridge_slave_0: entered promiscuous mode [ 1098.052573][T17906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.132872][T17906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.197467][T17906] bridge_slave_1: entered allmulticast mode [ 1098.272278][T17906] bridge_slave_1: entered promiscuous mode [ 1098.642479][T17906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.739160][T17906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.323620][T17906] team0: Port device team_slave_0 added [ 1099.521132][T17906] team0: Port device team_slave_1 added [ 1100.842127][T17906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.894580][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.084156][T17906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.233905][T17906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.327223][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.676843][T17906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.182444][T17906] hsr_slave_0: entered promiscuous mode [ 1104.425304][T17906] hsr_slave_1: entered promiscuous mode [ 1104.514048][T17906] debugfs: 'hsr0' already exists in 'hsr' [ 1104.583809][T17906] Cannot create hsr debugfs directory [ 1111.522554][T15784] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1112.266400][T15784] usb 3-1: Using ep0 maxpacket: 16 [ 1112.331429][T15784] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1112.390524][T15784] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1112.471587][T15784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.543428][T15784] usb 3-1: Product: syz [ 1112.586826][T15784] usb 3-1: Manufacturer: syz [ 1112.613307][T17906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1112.624560][T15784] usb 3-1: SerialNumber: syz [ 1112.693230][T15784] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1112.711121][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.740331][T15784] r8152-cfgselector 3-1: config 0 descriptor?? [ 1112.756443][T17906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1112.836714][T18292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3985'. [ 1112.894493][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.950251][T17906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1113.138103][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1113.190273][T17906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1113.235003][T15784] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1113.278331][T15784] r8152-cfgselector 3-1: No union descriptors [ 1113.353601][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1113.369112][T15784] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 1113.837620][T18310] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1114.300124][T17906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.566895][T17906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.718106][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.725236][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.908481][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.915807][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.112819][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.127827][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.942904][ T5790] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1123.225584][ T5790] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.302839][ T5790] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1123.363584][ T5790] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1123.522261][ T5790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.566443][ T5790] usb 9-1: Product: syz [ 1123.605997][ T5790] usb 9-1: Manufacturer: syz [ 1123.636953][ T5790] usb 9-1: SerialNumber: syz [ 1123.938934][ T5790] usb 9-1: USB disconnect, device number 5 [ 1125.212758][T17906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.704237][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 1125.704257][ T31] audit: type=1326 audit(1785635574.959:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.8.4024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0e3f9e019 code=0x0 [ 1125.741393][T17906] veth0_vlan: entered promiscuous mode [ 1125.780225][T17906] veth1_vlan: entered promiscuous mode [ 1125.797531][ T31] audit: type=1326 audit(1785635575.029:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.8.4024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0e3f9e019 code=0x0 [ 1125.881520][T17906] veth0_macvtap: entered promiscuous mode [ 1125.961765][T17906] veth1_macvtap: entered promiscuous mode [ 1127.779515][T17906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.857028][T17906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.905047][T18443] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 1127.919226][T15190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.171627][ T6227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.158117][ T96] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.282716][ T96] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.807064][T16679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.845468][T16679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.126016][T16679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.149906][T16679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.034891][T18504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4042'. [ 1139.110325][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1139.174856][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1139.185878][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1139.198962][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1139.207665][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1139.991863][ T5923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.535503][ T5923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.712298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1140.892482][ T5923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.140281][ T5641] Bluetooth: hci2: command tx timeout [ 1142.413021][T18585] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1142.543737][ T5923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.154076][ T5641] Bluetooth: hci2: command tx timeout [ 1144.506766][T18620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4074'. [ 1146.166222][ T5923] tipc: Left network mode [ 1146.231493][ T5641] Bluetooth: hci2: command tx timeout [ 1146.323198][T18637] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1147.699017][T18650] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4084'. [ 1148.311430][ T5641] Bluetooth: hci2: command tx timeout [ 1150.959108][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4090'. [ 1152.108326][T18546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.144054][T18546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.161748][T18693] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4093'. [ 1152.185825][T18546] bridge_slave_0: entered allmulticast mode [ 1152.225241][T18546] bridge_slave_0: entered promiscuous mode [ 1152.305100][T18546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.340166][T18546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.369541][T18546] bridge_slave_1: entered allmulticast mode [ 1152.399337][T18546] bridge_slave_1: entered promiscuous mode [ 1152.636466][T18546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.676447][T18546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.860127][T18710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1152.867445][T18710] IPv6: NLM_F_CREATE should be set when creating new route [ 1154.032176][T18546] team0: Port device team_slave_0 added [ 1154.197919][T18718] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4100'. [ 1154.419535][T18546] team0: Port device team_slave_1 added [ 1158.072608][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1158.099057][T18546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.129126][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.194763][T18546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.246986][T18546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.282570][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.386518][T18546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.548016][T18739] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4106'. [ 1158.605297][T18739] bond1: entered promiscuous mode [ 1158.611863][T18739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1161.652023][T18758] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4108'. [ 1162.198984][T18768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1162.206953][T18768] IPv6: NLM_F_CREATE should be set when creating new route [ 1162.387513][T18546] hsr_slave_0: entered promiscuous mode [ 1162.422905][T18546] hsr_slave_1: entered promiscuous mode [ 1162.466367][T18546] debugfs: 'hsr0' already exists in 'hsr' [ 1162.493136][T18546] Cannot create hsr debugfs directory [ 1162.531470][ T31] audit: type=1326 audit(1785635611.789:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.4110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1669d9e019 code=0x0 [ 1162.905003][ T5923] hsr_slave_0: left promiscuous mode [ 1162.964511][ T5923] hsr_slave_1: left promiscuous mode [ 1162.996313][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.075119][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.147331][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.205403][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.675966][ T5923] veth1_macvtap: left promiscuous mode [ 1164.588887][ T5923] veth0_macvtap: left promiscuous mode [ 1164.622539][ T5923] veth1_vlan: left promiscuous mode [ 1164.637199][ T5923] veth0_vlan: left promiscuous mode [ 1166.305835][T18816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1166.643810][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 1166.690190][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 1167.090447][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1167.234010][T18820] bond1 (unregistering): Released all slaves [ 1172.600288][T18857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1172.608360][T18857] IPv6: NLM_F_CREATE should be set when creating new route [ 1172.725940][ T5923] IPVS: stop unused estimator thread 0... [ 1173.745717][T18875] xt_hashlimit: size too large, truncated to 1048576 [ 1174.582919][T18883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1174.642582][T18876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.659475][T18876] bridge_slave_0 (unregistering): left allmulticast mode [ 1174.669216][T18876] bridge_slave_0 (unregistering): left promiscuous mode [ 1174.676967][T18876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.549111][T18894] syzkaller1: entered promiscuous mode [ 1176.003789][T18894] syzkaller1: entered allmulticast mode [ 1176.279140][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1176.556315][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.568183][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.612037][ C0] sctp_transport_update_pmtu: 46 callbacks suppressed [ 1177.612061][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1177.642082][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1177.752193][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1180.684381][T18546] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1180.769903][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.846389][T18546] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1180.920467][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1180.983649][T18546] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1181.356377][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 1181.699602][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1182.717302][T18546] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1183.135999][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1184.027695][T18546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.207753][T18546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.234390][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.241582][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.278297][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.285481][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.016631][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4182'. [ 1191.756296][T18546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.796653][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4199'. [ 1192.027728][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4201'. [ 1192.413224][T18546] veth0_vlan: entered promiscuous mode [ 1192.515603][T18546] veth1_vlan: entered promiscuous mode [ 1192.816430][T18546] veth0_macvtap: entered promiscuous mode [ 1192.898198][T18546] veth1_macvtap: entered promiscuous mode [ 1193.085271][T18546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.163653][T18546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.258115][ T133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.433048][T16697] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.317813][T15191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.441917][T15191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.796154][T18997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.854480][T18997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.607229][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.672694][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.863552][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1198.570987][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1202.594653][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1204.120114][T19293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1204.231490][T17592] Bluetooth: hci3: command 0x0406 tx timeout [ 1205.662983][ T5790] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1206.152666][ T5790] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1206.184922][ T5790] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1206.228542][ T5790] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1206.308255][ T5790] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1206.358988][ T5790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.369438][T19336] fuse: fd is not a fuse device [ 1206.406065][ T5790] usb 9-1: Product: syz [ 1206.431378][ T5790] usb 9-1: Manufacturer: syz [ 1206.445948][ T5790] usb 9-1: SerialNumber: syz [ 1206.496344][ T5790] usb 9-1: config 0 descriptor?? [ 1206.535685][T19338] misc userio: Invalid payload size [ 1206.793941][ T5790] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1206.858428][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4257'. [ 1207.158042][ T5790] usb 9-1: USB disconnect, device number 6 [ 1207.358155][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.369629][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.381684][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.392893][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.405233][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.416438][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.427748][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.438432][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.449914][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1207.461919][T19357] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1213.346886][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4275'. [ 1213.843197][T19417] mmap: syz.3.4277 (19417) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1213.963463][T19429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1216.454744][T19457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1216.818168][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1217.490307][T19457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1217.563524][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1218.116145][T19457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1218.317176][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4296'. [ 1218.485023][T19475] sctp: [Deprecated]: syz.0.4297 (pid 19475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1218.485023][T19475] Use struct sctp_sack_info instead [ 1220.669451][T19503] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1220.776176][T19506] trusted_key: encrypted_key: insufficient parameters specified [ 1223.177978][T19527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4313'. [ 1223.259273][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4313'. [ 1223.314058][T19527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4313'. [ 1223.388866][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4313'. [ 1223.434694][T19527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4313'. [ 1223.543017][T19536] fuse: Unknown parameter 'group_i00000000000000000000' [ 1224.895914][T19555] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4323'. [ 1225.056953][T19550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1225.064020][T19550] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1227.298498][T19550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1227.338084][T19550] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1229.380256][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout [ 1231.608413][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1231.645248][T19588] fuse: Bad value for 'group_id' [ 1231.654374][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1231.680077][T19588] fuse: Bad value for 'group_id' [ 1231.695917][T19586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1231.754314][T19589] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4332'. [ 1232.066039][T19594] fuse: Unknown parameter 'group_id00000000000000000000' [ 1237.846897][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4349'. [ 1237.878552][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4349'. [ 1237.918488][T19638] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1237.925135][T19634] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4349'. [ 1237.995773][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.002977][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.751332][T19657] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4358'. [ 1240.188695][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4363'. [ 1240.264013][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4363'. [ 1240.388746][T19668] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4363'. [ 1242.207098][T19686] overlayfs: overlapping lowerdir path [ 1243.638764][T17592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1243.656832][T17592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1243.667760][T17592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1243.682665][ T133] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.695573][T17592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1243.709089][T17592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1243.807278][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1243.824770][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1243.833286][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1243.855511][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1243.865898][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1244.285356][ T133] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.378018][T19749] overlayfs: overlapping lowerdir path [ 1245.911306][ T5641] Bluetooth: hci4: command tx timeout [ 1246.056115][T19763] overlayfs: failed to clone lowerpath [ 1247.991581][ T5641] Bluetooth: hci4: command tx timeout [ 1248.398488][ T133] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.893259][T19791] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4393'. [ 1249.029271][ T133] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.531729][T19798] overlayfs: failed to clone upperpath [ 1249.886586][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 1250.098735][T19805] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4399'. [ 1250.815766][ T5641] Bluetooth: hci4: command tx timeout [ 1252.872041][ T5641] Bluetooth: hci4: command tx timeout [ 1254.782322][ T133] bridge_slave_1: left allmulticast mode [ 1254.848784][ T133] bridge_slave_1: left promiscuous mode [ 1255.243935][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.343119][ T133] bridge_slave_0: left allmulticast mode [ 1255.396737][ T133] bridge_slave_0: left promiscuous mode [ 1255.435690][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.483430][T19850] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4410'. [ 1255.584723][ T31] audit: type=1326 audit(1785635704.829:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1255.749134][ T31] audit: type=1326 audit(1785635704.849:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1255.968349][ T31] audit: type=1326 audit(1785635704.899:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1256.121499][ T31] audit: type=1326 audit(1785635704.899:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1256.403329][ T31] audit: type=1326 audit(1785635704.899:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1256.959157][ T31] audit: type=1326 audit(1785635704.899:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1257.424802][ T31] audit: type=1326 audit(1785635704.899:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1257.588214][ T31] audit: type=1326 audit(1785635704.919:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1257.716015][ T31] audit: type=1326 audit(1785635704.969:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1257.803266][T19874] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4416'. [ 1258.630288][ T31] audit: type=1326 audit(1785635704.969:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.3.4411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1669d9e019 code=0x7ffc0000 [ 1258.889471][T19878] fuse: fd is not a fuse device [ 1259.323174][ T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.337969][ T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.362928][ T133] bond0 (unregistering): Released all slaves [ 1259.417845][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'. [ 1259.487039][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1259.597357][ T133] tipc: Disabling bearer [ 1259.620882][ T133] tipc: Left network mode [ 1260.199844][T19898] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4424'. [ 1260.907774][T19718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.966144][T19718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.990420][T19718] bridge_slave_0: entered allmulticast mode [ 1261.009510][T19718] bridge_slave_0: entered promiscuous mode [ 1261.026612][T19718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.055669][T19718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.071035][T19718] bridge_slave_1: entered allmulticast mode [ 1261.091960][T19718] bridge_slave_1: entered promiscuous mode [ 1261.118440][T19921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1261.243162][T19718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.292044][T19718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.118216][T19718] team0: Port device team_slave_0 added [ 1263.182551][T19718] team0: Port device team_slave_1 added [ 1265.153696][T19944] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4438'. [ 1265.828106][T19718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.867301][T19718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.001949][T19718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.066472][T19718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.112448][T19718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.301975][T19718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.014619][ T133] hsr_slave_0: left promiscuous mode [ 1267.798827][ T133] hsr_slave_1: left promiscuous mode [ 1267.805147][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.813369][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.843841][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.852856][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.944719][ T133] veth1_macvtap: left promiscuous mode [ 1267.963511][ T133] veth0_macvtap: left promiscuous mode [ 1267.989721][ T133] veth1_vlan: left promiscuous mode [ 1268.004738][ T133] veth0_vlan: left promiscuous mode [ 1268.205943][T19980] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4447'. [ 1269.442140][ T133] team0 (unregistering): Port device team_slave_1 removed [ 1269.476178][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1269.503436][ T133] team0 (unregistering): Port device team_slave_0 removed [ 1269.948454][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1270.221174][T19718] hsr_slave_0: entered promiscuous mode [ 1270.289709][T19718] hsr_slave_1: entered promiscuous mode [ 1270.368372][T19718] debugfs: 'hsr0' already exists in 'hsr' [ 1270.417821][T19718] Cannot create hsr debugfs directory [ 1271.481057][T20034] fuse: Bad value for 'fd' [ 1274.327105][T20069] fuse: fd is not a fuse device [ 1276.861798][T20107] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1277.795816][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1277.803634][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1277.812186][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1277.821505][T20102] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1277.837577][T20102] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1277.858134][T20102] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1277.875504][T20102] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1277.901876][T20102] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1277.954213][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1277.963719][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1277.973382][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1277.982691][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1277.992020][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1278.001337][T20102] wlan0 speed is unknown, defaulting to 1000 [ 1278.224511][T20115] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4478'. [ 1281.890970][T20129] fuse: fd is not a fuse device [ 1284.395993][T19718] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1284.428189][T19718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1284.439869][T19718] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1284.499775][T19718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1284.554727][T19718] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1284.677844][T19718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1284.756330][T19718] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1285.975343][T19718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1286.608237][T20187] fuse: fd is not a fuse device [ 1291.598475][T19718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.239785][T19718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.808937][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.816180][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.920550][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.927839][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.276109][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1296.304505][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1296.314150][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1296.325934][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1297.716974][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 1298.416878][T20269] [ 1298.419233][T20269] ====================================================== [ 1298.426236][T20269] WARNING: possible circular locking dependency detected [ 1298.433243][T20269] syzkaller #0 Tainted: G L [ 1298.439212][T20269] ------------------------------------------------------ [ 1298.446209][T20269] syz.2.4515/20269 is trying to acquire lock: [ 1298.452249][T20269] ffff888076730570 (&p->frag_sem){++++}-{4:4}, at: configfs_rmdir+0x3b0/0x950 [ 1298.461142][T20269] [ 1298.461142][T20269] but task is already holding lock: [ 1298.468490][T20269] ffff88807a854600 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 1298.478145][T20269] [ 1298.478145][T20269] which lock already depends on the new lock. [ 1298.478145][T20269] [ 1298.488522][T20269] [ 1298.488522][T20269] the existing dependency chain (in reverse order) is: [ 1298.497510][T20269] [ 1298.497510][T20269] -> #3 (&sb->s_type->i_mutex_key#29){++++}-{4:4}: [ 1298.506212][T20269] down_write+0x96/0x200 [ 1298.511053][T20269] configfs_depend_item_unlocked+0x153/0x420 [ 1298.517534][T20269] usbg_make_tpg+0x1f6/0x590 [ 1298.522630][T20269] target_fabric_make_tpg+0xa8/0x6d0 [ 1298.528425][T20269] configfs_mkdir+0x4f6/0x9e0 [ 1298.533601][T20269] vfs_mkdir+0x406/0x620 [ 1298.538346][T20269] filename_mkdirat+0x285/0x510 [ 1298.543696][T20269] __se_sys_mkdir+0x34/0x150 [ 1298.548788][T20269] do_syscall_64+0x174/0x580 [ 1298.553893][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.560286][T20269] [ 1298.560286][T20269] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 1298.567917][T20269] __mutex_lock+0x19d/0x1550 [ 1298.573015][T20269] tcm_set_name+0x2b/0xd0 [ 1298.577851][T20269] function_make+0x1a8/0x360 [ 1298.582962][T20269] configfs_mkdir+0x4f6/0x9e0 [ 1298.588137][T20269] vfs_mkdir+0x406/0x620 [ 1298.592880][T20269] filename_mkdirat+0x285/0x510 [ 1298.598228][T20269] __se_sys_mkdir+0x34/0x150 [ 1298.603316][T20269] do_syscall_64+0x174/0x580 [ 1298.608496][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.614889][T20269] [ 1298.614889][T20269] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1298.623127][T20269] __mutex_lock+0x19d/0x1550 [ 1298.628220][T20269] uvcg_frame_w_width_store+0x113/0x370 [ 1298.634269][T20269] configfs_write_iter+0x337/0x430 [ 1298.639891][T20269] vfs_write+0x612/0xba0 [ 1298.644641][T20269] ksys_write+0x150/0x270 [ 1298.649466][T20269] do_syscall_64+0x174/0x580 [ 1298.654557][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.660950][T20269] [ 1298.660950][T20269] -> #0 (&p->frag_sem){++++}-{4:4}: [ 1298.668328][T20269] __lock_acquire+0x1520/0x2cf0 [ 1298.673688][T20269] lock_acquire+0x106/0x350 [ 1298.678698][T20269] down_write_killable+0xa6/0x240 [ 1298.684226][T20269] configfs_rmdir+0x3b0/0x950 [ 1298.689401][T20269] vfs_rmdir+0x3e6/0x6a0 [ 1298.694155][T20269] filename_rmdir+0x292/0x520 [ 1298.699330][T20269] __se_sys_rmdir+0x2e/0x140 [ 1298.704418][T20269] do_syscall_64+0x174/0x580 [ 1298.709523][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.715914][T20269] [ 1298.715914][T20269] other info that might help us debug this: [ 1298.715914][T20269] [ 1298.726115][T20269] Chain exists of: [ 1298.726115][T20269] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#29 [ 1298.726115][T20269] [ 1298.739927][T20269] Possible unsafe locking scenario: [ 1298.739927][T20269] [ 1298.747347][T20269] CPU0 CPU1 [ 1298.752685][T20269] ---- ---- [ 1298.758019][T20269] lock(&sb->s_type->i_mutex_key#29); [ 1298.763466][T20269] lock(&opts->dep_lock); [ 1298.770379][T20269] lock(&sb->s_type->i_mutex_key#29); [ 1298.778348][T20269] lock(&p->frag_sem); [ 1298.782485][T20269] [ 1298.782485][T20269] *** DEADLOCK *** [ 1298.782485][T20269] [ 1298.790612][T20269] 3 locks held by syz.2.4515/20269: [ 1298.795781][T20269] #0: ffff88801d372450 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1298.805005][T20269] #1: ffff88807a855900 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 1298.815710][T20269] #2: ffff88807a854600 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 1298.825804][T20269] [ 1298.825804][T20269] stack backtrace: [ 1298.831671][T20269] CPU: 1 UID: 0 PID: 20269 Comm: syz.2.4515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.831696][T20269] Tainted: [L]=SOFTLOCKUP [ 1298.831703][T20269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1298.831714][T20269] Call Trace: [ 1298.831721][T20269] [ 1298.831728][T20269] dump_stack_lvl+0xe8/0x150 [ 1298.831757][T20269] print_circular_bug+0x2e1/0x300 [ 1298.831783][T20269] check_noncircular+0x12e/0x150 [ 1298.831805][T20269] __lock_acquire+0x1520/0x2cf0 [ 1298.831835][T20269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1298.831857][T20269] ? lockdep_hardirqs_on+0x7a/0x110 [ 1298.831881][T20269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1298.831901][T20269] ? irqentry_exit+0x218/0x8f0 [ 1298.831923][T20269] ? trace_irq_disable+0x3b/0x140 [ 1298.831952][T20269] ? configfs_rmdir+0x3b0/0x950 [ 1298.831970][T20269] lock_acquire+0x106/0x350 [ 1298.831995][T20269] ? configfs_rmdir+0x3b0/0x950 [ 1298.832014][T20269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1298.832038][T20269] ? configfs_rmdir+0x3b0/0x950 [ 1298.832055][T20269] down_write_killable+0xa6/0x240 [ 1298.832081][T20269] ? configfs_rmdir+0x3b0/0x950 [ 1298.832098][T20269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1298.832123][T20269] ? __pfx_down_write_killable+0x10/0x10 [ 1298.832151][T20269] ? do_raw_spin_unlock+0xf5/0x210 [ 1298.832174][T20269] configfs_rmdir+0x3b0/0x950 [ 1298.832198][T20269] vfs_rmdir+0x3e6/0x6a0 [ 1298.832217][T20269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1298.832240][T20269] filename_rmdir+0x292/0x520 [ 1298.832263][T20269] ? __pfx_filename_rmdir+0x10/0x10 [ 1298.832286][T20269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1298.832307][T20269] ? do_getname+0x151/0x250 [ 1298.832329][T20269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.832348][T20269] __se_sys_rmdir+0x2e/0x140 [ 1298.832368][T20269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.832387][T20269] do_syscall_64+0x174/0x580 [ 1298.832414][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.832433][T20269] RIP: 0033:0x7f0e9bb9e019 [ 1298.832450][T20269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.832464][T20269] RSP: 002b:00007f0e9c98f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1298.832482][T20269] RAX: ffffffffffffffda RBX: 00007f0e9be25fa0 RCX: 00007f0e9bb9e019 [ 1298.832496][T20269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1298.832508][T20269] RBP: 00007f0e9bc3500c R08: 0000000000000000 R09: 0000000000000000 [ 1298.832519][T20269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.832530][T20269] R13: 00007f0e9be26038 R14: 00007f0e9be25fa0 R15: 00007ffedb196b78 [ 1298.832551][T20269] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1299.537277][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.547645][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.287454][ T5963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.396419][ T5963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.598303][ T5963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.700468][ T5963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.877511][ T5963] bridge_slave_1: left allmulticast mode [ 1301.890126][ T5963] bridge_slave_1: left promiscuous mode [ 1301.899315][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.908502][ T5963] bridge_slave_0: left allmulticast mode [ 1301.920757][ T5963] bridge_slave_0: left promiscuous mode [ 1301.932594][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.113921][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.134219][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.162870][ T5963] bond0 (unregistering): Released all slaves [ 1302.422892][ T5963] hsr_slave_0: left promiscuous mode [ 1302.448311][ T5963] hsr_slave_1: left promiscuous mode [ 1302.456782][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.465982][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.474946][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.482312][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.493261][ T5963] veth1_macvtap: left promiscuous mode [ 1302.498742][ T5963] veth0_macvtap: left promiscuous mode [ 1302.504256][ T5963] veth1_vlan: left promiscuous mode [ 1302.509526][ T5963] veth0_vlan: left promiscuous mode [ 1302.631526][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 1302.644435][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 1303.039418][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1303.409901][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1303.709852][ T5963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.772934][ T5963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.864006][ T5963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.887487][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1303.917806][ T5963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.107373][ T5963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.172092][ T5963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.272383][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1304.300639][ T5963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.426312][ T5963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.601133][ T5963] bridge_slave_1: left allmulticast mode [ 1304.618377][ T5963] bridge_slave_1: left promiscuous mode [ 1304.626868][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.641541][ T5963] bridge_slave_0: left allmulticast mode [ 1304.647647][ T5963] bridge_slave_0: left promiscuous mode [ 1304.654138][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.667204][ T5963] bridge_slave_1: left allmulticast mode [ 1304.674446][ T5963] bridge_slave_1: left promiscuous mode [ 1304.680124][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.690409][ T5963] bridge_slave_0: left allmulticast mode [ 1304.696801][ T5963] bridge_slave_0: left promiscuous mode [ 1304.702589][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.715164][ T5963] bridge_slave_1: left allmulticast mode [ 1304.720830][ T5963] bridge_slave_1: left promiscuous mode [ 1304.727223][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.833616][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.848709][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.859492][ T5963] bond0 (unregistering): Released all slaves [ 1304.913034][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.923332][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.936275][ T5963] bond0 (unregistering): Released all slaves [ 1304.949447][ T5963] bond1 (unregistering): Released all slaves [ 1305.020460][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.030790][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.040375][ T5963] bond0 (unregistering): Released all slaves [ 1305.050289][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1305.411359][ T5963] hsr_slave_0: left promiscuous mode [ 1305.418146][ T5963] hsr_slave_1: left promiscuous mode [ 1305.425182][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.434232][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.458736][ T5963] hsr_slave_0: left promiscuous mode [ 1305.467589][ T5963] hsr_slave_1: left promiscuous mode [ 1305.474627][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.482918][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.494560][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.503376][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.521630][ T5963] hsr_slave_0: left promiscuous mode [ 1305.527424][ T5963] hsr_slave_1: left promiscuous mode [ 1305.533163][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.540529][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.548224][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.555621][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.571556][ T5963] veth1_macvtap: left promiscuous mode [ 1305.577018][ T5963] veth0_macvtap: left promiscuous mode [ 1305.582553][ T5963] veth1_vlan: left promiscuous mode [ 1305.587765][ T5963] veth0_vlan: left promiscuous mode [ 1305.593811][ T5963] veth1_macvtap: left promiscuous mode [ 1305.599256][ T5963] veth0_macvtap: left promiscuous mode [ 1305.604814][ T5963] veth1_vlan: left promiscuous mode [ 1305.610030][ T5963] veth0_vlan: left promiscuous mode [ 1305.817147][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 1305.829927][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 1306.007886][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 1306.023142][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 1306.187381][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 1306.200429][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 1306.267490][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1306.724164][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1307.038122][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1307.257081][ T5963] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.319661][ T5963] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.420056][ T5963] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.483922][ T5963] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.499319][ T5282] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1307.601578][ T5963] bridge_slave_1: left allmulticast mode [ 1307.611686][ T5963] bridge_slave_1: left promiscuous mode [ 1307.617429][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.632015][ T5963] bridge_slave_0: left allmulticast mode [ 1307.638305][ T5963] bridge_slave_0: left promiscuous mode [ 1307.645126][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.796253][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.829377][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.841240][ T5963] bond0 (unregistering): Released all slaves [ 1307.854112][ T5963] bond1 (unregistering): Released all slaves [ 1307.874762][ T5963] bond2 (unregistering): Released all slaves [ 1307.936645][ T5963] tipc: Left network mode [ 1307.996722][ T5282] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1308.113218][ T5963] hsr_slave_0: left promiscuous mode [ 1308.120044][ T5963] hsr_slave_1: left promiscuous mode [ 1308.126891][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.137250][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.149792][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.159630][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.174836][ T5963] veth1_macvtap: left promiscuous mode [ 1308.182043][ T5963] veth0_macvtap: left promiscuous mode [ 1308.188124][ T5963] veth1_vlan: left promiscuous mode [ 1308.210280][ T5963] veth0_vlan: left promiscuous mode